Edit tour

Windows Analysis Report
https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00

Overview

General Information

Sample URL:	https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00
Analysis ID:	1430579
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1936,i,16160523055122430416,7819649957933225674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICIxOGYwY2E0YmUyYzExOC0wOTNkMGRiY2RmYWYwNS0yNjAzMWU1MS0xNDAwMDAtMThmMGNhNGJlMmQxNzEiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjogIiRkaXJlY3QiLCJtcF9wYWdlIjogIm5hMi5kb2N1c2lnbi5uZXQiLCJtcF9icm93c2VyIjogIkNocm9tZSIsIm1wX3BsYXRmb3JtIjogIldpbmRvd3MiLCJ0b2tlbiI6ICIzMDRjY2JkZTI0ZDNiMTVmZmUyZDVkZTMwYzEwZGFiMiJ9fQ%3D%3D&ip=1&_=1713904074295 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D&ip=1&_=1713904074298 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713904074295 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D&ip=1&_=1713904074298 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713904082133 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua:
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713904082133 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent:
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/home HTTP/1.1Host: www.osler.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c
Source: global traffic	HTTP traffic detected: GET /Osler/fonts/font-awesome/css/font-awesome.min.css HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/css/bootstrap-accessibility-plugin.min.css HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/css/styles.min.css?v=11.0.4 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Osler/js/bower_components/modernizr/modernizr.js HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZMakmllNIbNVJUHTDPpvzmJhtQwH6GTOa46RoBltd7k6KymeJGxkWxehYM52nU-nmQ2&t=638399175142847209 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25c02da3-4d83-47e6-b080-f533c2d99f75.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yND2uNShhTUBAP5n7Xu_4VEl-p2v7XApT3Wzf25zNj8jfHNT4wEsGAA2Kw1gCxln6iOKKZKXd_VfM8hBCSVnU9G4mkKk8MEcUDtNc08T0CzJigFOUXvGgrseIpqSzLM-sUZdqwGIcIt8aEKbHu1vqV81&t=722fe453 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadJaKr3VMEUCzTcVUg3yR_61yWBgJoleXt-5Wzlb_DbMqUsLvg1hc9B9Cbq075jVgMxR2b_4e3El0QfSbhYiSO0Zck-SkUtK5a0ahJ4I80fD0ivUmZ29GXEQmkrFUXLiggKgpiZLo68rZ0QbCQ6QY_s81&t=722fe453 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/images/logos/logo.png HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25c02da3-4d83-47e6-b080-f533c2d99f75.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Osler/fonts/celeste-sans/CelesteSansWeb.woff HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.osler.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/fonts/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.osler.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.osler.com/Osler/fonts/font-awesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/fonts/celeste/CelesteWeb.woff? HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.osler.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Osler/images/logos/logo.png HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/fonts/celeste-sans/bold/celestesanscomp-bold-webfont.woff2 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.osler.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/js/dist/rem.min.js HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
Source: global traffic	HTTP traffic detected: GET /Osler/js/dist/Osler.min.js HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
Source: global traffic	HTTP traffic detected: GET /c/hotjar-139501.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Email/Email-Icon.svg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
Source: global traffic	HTTP traffic detected: GET /Osler/images/logos/white-logo.png HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
Source: global traffic	HTTP traffic detected: GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otFloatingRounded.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.588629dd3c10b20ab52d.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Email/Email-Icon.svg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _ga=GA1.2.1593841297.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome
Source: global traffic	HTTP traffic detected: GET /Osler/images/logos/white-logo.png HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _ga=GA1.2.1593841297.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome; _ga_2XYX2S797K=deleted
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-2XYX2S797K&gacid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=701014799 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/134024834 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otFloatingRounded.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/d3be8f9e-1328-4432-981a-700d22c98729/af8b8ffa-721b-4a44-b983-b8844991da31/logo-small.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.32/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/d3be8f9e-1328-4432-981a-700d22c98729/af8b8ffa-721b-4a44-b983-b8844991da31/logo-small.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmsapi/webanalytics/LogHit HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
Source: global traffic	HTTP traffic detected: GET /en/home HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0; _clsk=1me437r%7C1713904107231%7C1%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/134024834 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /s/0.7.31/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmsapi/webanalytics/LogHit HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _clsk=1me437r%7C1713904107231%7C1%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904118.45.0.0; _ga=GA1.1.1593841297.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/about-us HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvug_UjKcAMuKcGN8K2MSXvgT8udzBVsAGOX4k6Oho8RiVMLgg2hTvzAoKKNsGU3y41Pm0SAg0I5SZXrYqLVEQaekg7Cme_6oN-lmYvn2GmxCA-qA1Y07nny7f5N0qGzmfL9ohu_66SpKXL72MfWHq8I1&t=722fe453 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/about-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OIraOhbH8dYmWuMx72NLg2J7X3NEA8pv5VQtFEWqTHEExepx7TUwZUeh0E-QDGbdH3gkHL4W7gJp3pm-xvAmoJCGu3YZyrY-30LLifE0byyBTuPNqmgSURntMKtPYO44DzjA-DbwqKN9rbzZh4zDZLA1&t=722fe453 HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/en/about-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/about-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-red-blue-Optical-Fibers.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/about-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/en/about-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-red-blue-Optical-Fibers.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A44+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/134024834 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A44+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; __utmb=48214201.3.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904125.38.0.0; _ga=GA1.1.1593841297.1713904103
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmsapi/webanalytics/LogHit HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904125.38.0.0; _ga=GA1.1.1593841297.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/contact-us HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904126.37.0.0
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Osler/js/dist/datepicker/wet/css/event-cal-style.css HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.osler.com/en/contact-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904126.37.0.0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/134024834 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmsapi/webanalytics/LogHit HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904134.29.0.0; _ga=GA1.1.1593841297.1713904103; __utmb=48214201.4.10.1713904103
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904137554&i=gtm&dwt=614&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904137554&i=gtm&dwt=614&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/offices HTTP/1.1Host: www.osler.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.4.10.1713904103; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904136.27.0.0; _clsk=1me437r%7C1713904137534%7C4%7C1%7Cn.clarity.ms%2Fcollect; __utmli=two-column-main
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.osler.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/134024834 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /cmsapi/webanalytics/LogHit HTTP/1.1Host: www.osler.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904136.27.0.0; _clsk=1me437r%7C1713904137534%7C4%7C1%7Cn.clarity.ms%2Fcollect; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; VisitorStatus=11064158109; CMSUserPage={"TimeStamp":"2024-04-23T16:29:02.9769474-04:00","LastPageDocumentID":1182,"LastPageNodeID":1110,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; __utmb=48214201.5.10.1713904103
Source: global traffic	HTTP traffic detected: GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp" aria-label="Osler on LinkedIn" class="offcanvas--social mobile-nav-linkedin" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: <a class="social-media-icon" id="dropdown-linkedin-icon" aria-label="Osler on LinkedIn" href="https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: <a class="social-media-icon" id="dropdown-youtube-icon" aria-label="Osler on YouTube" href="https://www.youtube.com/c/osler" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp" aria-label="Osler on LinkedIn" class="linkedin-footer" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: </a><a href="https://www.youtube.com/c/osler" aria-label="Osler on YouTube" class="offcanvas--social mobile-nav-youtube" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: </a><a href="https://www.youtube.com/c/osler" aria-label="Osler on YouTube" class="youtube-footer" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_276.2.dr	String found in binary or memory: c(S[ka],E.xe)){mI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):ww(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=jA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},mA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_216.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_211.2.dr, chromecache_276.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Kz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!p.length)return!0;var q=Gz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!rI(q, equals www.facebook.com (Facebook)
Source: chromecache_216.2.dr	String found in binary or memory: var KB=function(a,b,c,d,e){var f=Kz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!g.length)return!0;var h=Gz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!vy(h,wy(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: na2.docusign.net

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904101416&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713904103&sct=1&seg=0&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&en=page_view&_fv=1&_ss=1&tfd=4918 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.osler.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.osler.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_228.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_228.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_228.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_266.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_266.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_228.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_228.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_227.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_227.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: http://stackoverflow.com/questions/11191746/should-role-contentinfo-be-always-added-on-footer-elemen
Source: chromecache_228.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_349.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_330.2.dr	String found in binary or memory: http://www.osler.com/en/about-us
Source: chromecache_280.2.dr	String found in binary or memory: http://www.osler.com/en/offices
Source: chromecache_211.2.dr, chromecache_276.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Source: chromecache_188.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_228.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_243.2.dr, chromecache_185.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_322.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_228.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_228.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_322.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_237.2.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_315.2.dr, chromecache_224.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_322.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_257.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_257.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE
Source: chromecache_276.2.dr	String found in binary or memory: https://google.com
Source: chromecache_276.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.js
Source: chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_276.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_349.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_349.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_211.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_216.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_216.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_188.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_349.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_188.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_330.2.dr	String found in binary or memory: https://twitter.com/osler_law
Source: chromecache_279.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_217.2.dr, chromecache_265.2.dr, chromecache_312.2.dr, chromecache_274.2.dr, chromecache_194.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl8BIM
Source: chromecache_211.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_188.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_188.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_188.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_349.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_188.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_349.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_276.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_188.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-T6XW3V
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-TWPZT6Z
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T6XW3V
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TWPZT6Z
Source: chromecache_330.2.dr	String found in binary or memory: https://www.instagram.com/osler_law/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp
Source: chromecache_216.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_330.2.dr	String found in binary or memory: https://www.osler.com/en/about-us
Source: chromecache_280.2.dr	String found in binary or memory: https://www.osler.com/en/offices
Source: chromecache_183.2.dr	String found in binary or memory: https://www.osler.com/en/privacy
Source: chromecache_330.2.dr	String found in binary or memory: https://www.osler.com/fr/a-propos-de-nous
Source: chromecache_280.2.dr	String found in binary or memory: https://www.osler.com/fr/bureaux
Source: chromecache_280.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.osler.com/osler/media/Osler/Content/Images/logo-200x200.jpg?ext=.jpg
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/c/osler
Source: chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/301@60/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1936,i,16160523055122430416,7819649957933225674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1936,i,16160523055122430416,7819649957933225674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://dbj.org/dbj/?p=286	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
http://dean.edwards.name/weblog/2005/10/add-event/	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	0%	URL Reputation	safe
https://www.clarity.ms/tag/uet/	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://www.clarity.ms/tag/uet/134024834	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
arya-1323461286.us-west-2.elb.amazonaws.com	54.186.38.246	true	false	high
stats.g.doubleclick.net	74.125.138.157	true	false	high
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
script.hotjar.com	99.84.191.81	true	false	high
www.google.com	74.125.136.106	true	false	high
analytics.google.com	142.251.15.138	true	false	high
td.doubleclick.net	172.217.215.156	true	false	high
part-0023.t-0009.t-msedge.net	13.107.213.51	true	false	unknown
api.mixpanel.com	35.190.25.25	true	false	high
cdn.cookielaw.org	104.19.177.52	true	false	high
geolocation.onetrust.com	104.18.32.137	true	false	high
q.quora.com	52.45.52.13	true	false	high
static-cdn.hotjar.com	52.85.132.14	true	false	high
a.quora.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	unknown
cdn.optimizely.com	unknown	unknown	false	high
n.clarity.ms	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	high
www.osler.com	unknown	unknown	false	high
a.docusign.com	unknown	unknown	false	high
docucdn-a.akamaihd.net	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	unknown
na2.docusign.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.cookielaw.org/consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json	false		high
https://analytics.google.com/g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904101416&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713904103&sct=1&seg=0&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&en=page_view&_fv=1&_ss=1&tfd=4918	false		high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-2XYX2S797K&cid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
https://www.osler.com/cmsapi/webanalytics/LogHit	false		high
https://www.osler.com/favicon.ico	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome	false		high
https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/v2/otPcCenter.json	false		high
about:blank	false	Avira URL Cloud: safe	low
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg	false		high
https://www.osler.com/Osler/fonts/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices	false		high
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg	false		high
https://www.osler.com/en/home	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden	false		high
https://static.hotjar.com/c/hotjar-139501.js?sv=7	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg	false		high
https://analytics.google.com/g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904124141&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&dt=About%20Osler%20%7C%20Canadian%20Business%20Law%20Firm&_s=1&tfd=8351	false		high
https://www.osler.com/Osler/fonts/font-awesome/css/font-awesome.min.css	false		high
https://www.osler.com/en/offices	false		high
https://www.osler.com/ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadJaKr3VMEUCzTcVUg3yR_61yWBgJoleXt-5Wzlb_DbMqUsLvg1hc9B9Cbq075jVgMxR2b_4e3El0QfSbhYiSO0Zck-SkUtK5a0ahJ4I80fD0ivUmZ29GXEQmkrFUXLiggKgpiZLo68rZ0QbCQ6QY_s81&t=722fe453	false		high
https://www.osler.com/	false		high
https://www.osler.com/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OIraOhbH8dYmWuMx72NLg2J7X3NEA8pv5VQtFEWqTHEExepx7TUwZUeh0E-QDGbdH3gkHL4W7gJp3pm-xvAmoJCGu3YZyrY-30LLifE0byyBTuPNqmgSURntMKtPYO44DzjA-DbwqKN9rbzZh4zDZLA1&t=722fe453	false		high
https://analytics.google.com/g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904141699&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices&dt=Office%20Locations%20-%20Osler%2C%20Hoskin%20%26%20Harcourt%20LLP&_s=1&tfd=7071	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg	false		high
https://analytics.google.com/g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904132806&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&dt=Contact%20Us%20%7C%20Osler%2C%20Hoskin%20%26%20Harcourt%20LLP&_s=1&tfd=10646	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur	false		high
https://www.osler.com/Osler/css/styles.min.css?v=11.0.4	false		high
https://www.osler.com/Osler/js/bower_components/modernizr/modernizr.js	false		high
https://cdn.cookielaw.org/logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main	false		high
https://cdn.cookielaw.org/scripttemplates/202308.1.0/otBannerSdk.js	false		high
https://www.osler.com/Osler/js/dist/Osler.min.js	false		high
https://www.osler.com/Osler/fonts/celeste/CelesteWeb.woff?	false		high
https://script.hotjar.com/modules.588629dd3c10b20ab52d.js	false		high
https://www.osler.com/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js	false		high
https://www.osler.com/ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yND2uNShhTUBAP5n7Xu_4VEl-p2v7XApT3Wzf25zNj8jfHNT4wEsGAA2Kw1gCxln6iOKKZKXd_VfM8hBCSVnU9G4mkKk8MEcUDtNc08T0CzJigFOUXvGgrseIpqSzLM-sUZdqwGIcIt8aEKbHu1vqV81&t=722fe453	false		high
https://www.osler.com/Osler/css/bootstrap-accessibility-plugin.min.css	false		high
https://www.osler.com/Osler/fonts/celeste-sans/bold/celestesanscomp-bold-webfont.woff2	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur	false		high
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur	false		high
https://www.osler.com/Osler/js/dist/datepicker/wet/css/event-cal-style.css	false		high
https://analytics.google.com/g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904101416&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=0&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&_s=2&tfd=12102	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg	false		high
https://www.osler.com/osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur	false		high
https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCommonStyles.css	false		high
https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us	false		high
https://www.clarity.ms/tag/uet/134024834	false	Avira URL Cloud: safe	unknown
https://a.docusign.com/ds_arya_wrapper.min.js?f=1	false		high
https://www.osler.com/osler/media/Osler/Content/Email/Email-Icon.svg	false		high
https://www.osler.com/en/home#main	false		high
https://td.doubleclick.net/td/ga/rul?tid=G-2XYX2S797K&gacid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=701014799	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_266.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_216.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_257.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_188.2.dr	false		high
https://q.quora.com/_/ad/	chromecache_276.2.dr	false		high
https://www.osler.com/en/privacy	chromecache_183.2.dr	false		high
https://www.google.com	chromecache_276.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE	chromecache_257.2.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_237.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_188.2.dr	false		high
http://dbj.org/dbj/?p=286	chromecache_228.2.dr	false	URL Reputation: safe	unknown
https://github.com/microsoft/clarity	chromecache_315.2.dr, chromecache_224.2.dr	false		high
https://www.osler.com/osler/media/Osler/Content/Images/logo-200x200.jpg?ext=.jpg	chromecache_280.2.dr, chromecache_330.2.dr	false		high
https://www.instagram.com/osler_law/	chromecache_330.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	false		high
http://opensource.org/licenses/GPL-2.0	chromecache_227.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_211.2.dr, chromecache_216.2.dr, chromecache_276.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp	chromecache_330.2.dr	false		high
http://dean.edwards.name/weblog/2005/10/add-event/	chromecache_228.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_349.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_188.2.dr	false	URL Reputation: safe	low
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_322.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_216.2.dr	false		high
https://a.quora.com/qevents.js	chromecache_211.2.dr, chromecache_276.2.dr	false		high
https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl8BIM	chromecache_217.2.dr, chromecache_265.2.dr, chromecache_312.2.dr, chromecache_274.2.dr, chromecache_194.2.dr, chromecache_215.2.dr	false		high
http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/	chromecache_228.2.dr	false		high
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	chromecache_243.2.dr, chromecache_185.2.dr	false	URL Reputation: safe	unknown
https://www.osler.com/fr/bureaux	chromecache_280.2.dr	false		high
https://gist.github.com/1930440	chromecache_228.2.dr	false		high
https://www.clarity.ms/tag/uet/	chromecache_279.2.dr	false	URL Reputation: safe	unknown
http://www.osler.com/en/about-us	chromecache_330.2.dr	false		high
http://opensource.org/licenses/BSD-2-Clause	chromecache_227.2.dr	false		high
http://stackoverflow.com/questions/11191746/should-role-contentinfo-be-always-added-on-footer-elemen	chromecache_280.2.dr, chromecache_330.2.dr	false		high
https://www.osler.com/fr/a-propos-de-nous	chromecache_330.2.dr	false		high
https://www.google.%/ads/ga-audiences?	chromecache_349.2.dr	false	URL Reputation: safe	low
http://documentcloud.github.com/underscore/	chromecache_228.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_243.2.dr, chromecache_185.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iabData.json	chromecache_243.2.dr, chromecache_185.2.dr	false		high
https://www.google.com/analytics/web/inpage/pub/inpage.js?	chromecache_349.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_243.2.dr, chromecache_185.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.138.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.186.241.51	unknown	United States	15169	GOOGLEUS	false
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
74.125.136.106	www.google.com	United States	15169	GOOGLEUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
54.186.38.246	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.85.132.14	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
172.217.215.156	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.19.178.52	unknown	United States	13335	CLOUDFLARENETUS	false
52.200.166.19	unknown	United States	14618	AMAZON-AESUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.25.25	api.mixpanel.com	United States	15169	GOOGLEUS	false
52.45.52.13	q.quora.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
99.84.191.81	script.hotjar.com	United States	16509	AMAZON-02US	false
13.107.213.51	part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.15.138	analytics.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430579
Start date and time:	2024-04-23 22:26:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/301@60/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.osler.com/ Browse: https://www.osler.com/en/home#main Browse: https://www.osler.com/en/about-us Browse: https://www.osler.com/en/contact-us Browse: https://www.osler.com/en/offices

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 142.250.105.139, 142.250.105.101, 142.250.105.100, 142.250.105.102, 142.250.105.113, 142.250.105.138, 142.250.105.84, 34.104.35.123, 162.248.185.181, 23.223.31.252, 23.223.31.199, 184.25.164.153, 162.248.185.182, 64.233.177.95, 172.253.124.95, 173.194.219.95, 142.250.105.95, 74.125.136.95, 108.177.122.95, 142.251.15.95, 142.250.9.95, 172.217.215.95, 64.233.176.95, 74.125.138.95, 64.233.185.95, 40.127.169.103, 23.45.13.184, 23.45.13.176, 23.45.13.145, 23.45.13.185, 23.45.13.171, 192.229.211.108, 13.85.23.206, 52.165.164.15, 172.253.124.97, 162.159.153.247, 162.159.152.17, 13.107.21.237, 204.79.197.237, 74.125.136.102, 74.125.136.100, 74.125.136.101, 74.125.136.113, 74.125.136.138, 74.125.136.139, 173.194.219.97, 142.250.9.102, 142.250.9.113, 142.250.9.101, 142.250.9.139, 142.250.9.138, 142.250.9.100, 52.184.204.244, 20.110.205.119, 20.12.23.50, 13.85.23.86
Excluded domains from analysis (whitelisted): na2.docusign.net.akadns.net, bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, a767.dspw65.akamai.net, a.quora.com.cdn.cloudflare.net, vmss-clarity-ingest-eus2-f.eastus2.cloudapp.azure.com, e5048.dsca.akamaiedge.net, a1737.b.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, na2-ch.docusign.net.akadns.net, ctldl.windowsupdate.com, docucdn-a.akamaihd.net.edgesuite.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, fe
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HFjRn:hRn
MD5:	C9785540787087E135E2E3256D4128E6
SHA1:	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4
SHA-256:	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
SHA-512:	6B30566B0D5AEA45E318E7FF711E7BD4873933FB61C438B3F3C1ED46D81BF2AA1AB5EAB72EE3E2577E5785DADB479670157A0332AE9775AFD18DA77FAB0005B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn3qRtDfMoshxIFDaLAi2s=?alt=proto
Preview:	CgkKBw2iwItrGgA=

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10193
Entropy (8bit):	5.330699162330857
Encrypted:	false
SSDEEP:	192:+1mqUjKyWvQJQzQrwqgtNHBIdWZD977ux/i3QO34tTDa/5Yww25G3sXl78B+QlQU:+W6UJROHxR6OIpUhQ/
MD5:	EDA1F3A77082093627D9ED85AEE80D41
SHA1:	2BEB2FCA871965A1A7C7C0EC39EB98407C2A52F8
SHA-256:	EF072B9AE1B3C29F94781C86BCDFDB71C1E06BBC7A2F05BC65DCFA2EEFDDE02C
SHA-512:	A2E191549E0E914462F87E5680F37AE02FA4393D54F8DFC2B7A51AA32159A0AC9AFAAC51DAB707E00758439C083342B187559FACB79E7C1AD579B5E7168A605C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otFloatingRounded.json
Preview:	. {. "name": "otFloatingRounded",. "html": "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

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	136177
Entropy (8bit):	5.178504502403718
Encrypted:	false
SSDEEP:	1536:8prIg2sdtEyE4aoo/Iy4onqRmn4r4B52zqdiq85fhdsbPvLKaSlMaQLp9jU:AtcqoIzqdiqcsRSlMzY
MD5:	45E9F15CED8CBD83BCC82A5944B39B51
SHA1:	3ED7652897552ED89586170F19F38D05182007AA
SHA-256:	6536407B38F198296F45A08A4B01FB42F6F8138F158F4C75289EF10C53F8E3F4
SHA-512:	4C6A75B62BAE35D489E0AB39580D706EF1821A9F922C9BE18B4948DA4A698D9B644371EFC4A134B53E95407D71313A125BF1FED23CEEF9A3FC0C65CAD4563237
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.olive.js?cs=6967951d2ad3b4b0daf8
Preview:	/! For license information please see signing_iframeless_mobile.olive.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3784],{483788:function(e){e.exports=function(e){function t(i){if(n[i])return n[i].exports;var o=n[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="/",t(0)}([function(e,t,n){"use strict";n(1),n(2),n(3);var i=n(76);i.keys().forEach((function(e){i(e)}))},function(e,t,n){"use strict";!function(e,t){e.config={closePopoverOnEsc:!0,closePopoverOnClickAnywhere:!0,debug:!1,isAutoInitEnabled:!0},e.version="17.20.0",e.KEYS={tab:9,enter:13,esc:27,left:37,up:38,right:39,down:40},e.l10n={close:"Close",characterLimit:"{{REMAINING}} (maximum {{MAX}} characters)"},e.init=function(e){var t=[],n={add:function(e){return t.push(e),n},run:function(){var e;for(e=0;e<t.length;e++)t[e]();return n},afterLoad:function(){e.config.isAutoInitEnabled&&e.init.run(),e.util.polyfillFl

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	157684
Entropy (8bit):	7.996439784008411
Encrypted:	true
SSDEEP:	3072:Puger50MIxG6wEeqr3YvOUFK2EAMMEEFJwqnG70YpR:PugeF0MIU6fTr3UF/Tj+0c
MD5:	E639BA3E6DEFA15DF240DEA0BB8E130E
SHA1:	ADE632AD533FE91EEB7FA112BBC7DAE31AC99850
SHA-256:	B81B45671673BD9E7CCACCFCEA951EBA11A93297C4E17766B1118435A55D9771
SHA-512:	7B18B0180B0EA278AB3F4F099B9B6ADF5D1F717483DD83E1B377D503CF897CFE562F39290E79EF4F0A5FB25CCEA56B3F3BBA27865977C6B2751C688630AF7993
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png
Preview:	.PNG........IHDR...,...,........"....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:E8849033FC0111EEA97AFD9CBBCAB39B" xmpMM:DocumentID="xmp.did:E8849034FC0111EEA97AFD9CBBCAB39B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E8849031FC0111EEA97AFD9CBBCAB39B" stRef:documentID="xmp.did:E8849032FC0111EEA97AFD9CBBCAB39B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d.....ddIDATx..i.$Iv....c..m......X.AF....._..A..$3...(~....$.dF.d.i.(. .a0.1.p.....^n....=7"3#2#_.5.=..EFFF..s

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37942), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	168907
Entropy (8bit):	5.471593773106688
Encrypted:	false
SSDEEP:	1536:bW95pUq+jn+pal8Vip1xbpkYzo31lIRjsOM46WXPrcygsuiPyOESV72VQ3tYI:bznlPp/dkz6jJ76e72Vw+I
MD5:	D3CFD27D7C446BB6990F77270FE22618
SHA1:	968A527F295CEF9D789B3C1DC4B7805AFB948D0E
SHA-256:	A79F2067FCDCF733F15CF6773ADCDEBFC3CC7DDC1E86992DF70A4C76D7FAA743
SHA-512:	8C832B46F85A2EA89421C1F1E05F155D79E65FBDD90922E4AE88FAC8C1ADBC00C5849DED43FC2DE7E51486B8A1AEB4E467BCA40F3AF219D288AF670DD4493395
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2492.js?cs=db236daf727ce4deba4a
Preview:	/! For license information please see signing_iframeless_mobile.2492.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2492],{111328:function(t,e,r){var n=r(492784),i=r(582504),a="EN-US";function o(t){return n.currencies[t.toUpperCase()]\|\|""}function s(t,e){return i.formatNumber(t,i.getNumberFormat(e,n.numberFormats))}e.formatNumber=function(t,e){return s(t,e=e?i.unifyLocale(e):a)},e.formatCurrencyNumber=function(t,e,r,u){r=r?i.unifyLocale(r):a,e=e.toUpperCase();var c={num:s(t,r),sym:o(e),iso:e},l=i.getCurrencyFormat(e,r,n.currencyFormats);return l=u?l[1]:l[0],i.replacePlaceholders(l,c)},e.getSymbol=o},582504:function(t,e){e.unifyLocale=function(t){return t.replace("_","-").toUpperCase()},e.getNumberFormat=function t(e,r){var n=r[e]\|\|r.DEFAULT;if(!n)return{LEAD_SEP:"",GROUP_SEP:"",DECIMAL_SEP:".",DECIMAL_NUM:2};var i=n.split("\|");return 4!==i.length?t("DEFAULT",r):{LEAD_SEP:i[0],GROUP_SEP:i[1],DECIMAL_SEP:i[2],DECIMAL_NUM:parseInt(i[3])}},e.getCu

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3237
Entropy (8bit):	5.0247419289830715
Encrypted:	false
SSDEEP:	48:RqTXTiqTXT6CVo+pMMpbYLLlbYCpOqVDcqSgGm0wJGLH0N+IRoh6DQOdFGuES9r4:RqTXTiqTXTg3M4LpVUdm0wGLH0J+OLE
MD5:	82D39E05E3C85A7396329C92C3692DC4
SHA1:	5771C68E32F5C25F274FDAB38C1CAF276578F4D1
SHA-256:	ACE43A0FBBBFDF820ED7B226A6EFF09C8ABB1468C7854595ADC14CBA04D138B0
SHA-512:	7C04043C391CD1B6D9420794D6DA93F9E7AA2F0A27C9D2F9ABC7ECE3166DDE66C7A3BBE23012272B645126432A2309FFB4E652F17A1B45326562DC621F41158B
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/js/dist/datepicker/wet/css/event-cal-style.css
Preview:	@charset "UTF-8";../.. Web Experience Toolkit (WET) / Bo.te . outils de l'exp.rience Web (BOEW).. * wet-boew.github.io/wet-boew/License-en.html / wet-boew.github.io/wet-boew/Licence-fr.html.. /.. @charset "UTF-8";../.. * Web Experience Toolkit (WET) / Bo.te . outils de l'exp.rience Web (BOEW).. * wet-boew.github.io/wet-boew/License-en.html / wet-boew.github.io/wet-boew/Licence-fr.html.. */...cal-cnt .cal-goto-mnth, .cal-cnt .cal-goto-yr, .cal-cnt .cal-goto-btn {.. position: relative;..}.....cal-cnt .cal-goto-mnth, .cal-cnt .cal-goto-yr, .cal-cnt .cal-goto-btn {.. display: inline-block;.. margin: 10px 5px;..}...wb-inv {...clip: rect(1px,1px,1px,1px);.. height: 1px;.. margin: 0;.. overflow: hidden;.. position: absolute;.. width: 1px;..}...cal-cnt .cal-hd, .cal-nxtmnth.active:hover,...cal-nxtmnth.active:focus,...cal-prvmnth.active:hover,...cal-prvmnth.active:focus, .cal-days .cal-currday {.. color: #fff;..}.....cal-cnt .cal-goto-lnk, .cal-days a:hover,...cal-days a

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45689
Entropy (8bit):	5.077432367735251
Encrypted:	false
SSDEEP:	768:Ao9dTOD+dNWZDB6U9msq0Uez1zawlLdiMMAJVe3swcJlYFWuFD6DrctKCB:Ao90C+6Ammf1FdikVCswSlYEM7B
MD5:	C8B514C3EFE7F9CDFAEEB8105FC17239
SHA1:	A8B6E5A995ED3AA67A71555DBE74C1B1A0DDC17E
SHA-256:	96DC4BC8550F9905733380CDE983989EC67B091C6A4678BF1A32EBF14267A000
SHA-512:	6E7197E841C08D562AC485C32AEBF215218525683D80E5ADEF42AB4E91A5A60DE9B93BA11BDF2D902F0DB5AE8FA6004FFB5EEBFE8CAA7B22B64F28B2667CF30E
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Preference Center","MainInfoText":"When you visit our website, we use cookies to enable essential site functionality, improve our website, provide relevant advertising and personalized content, including on third-party websites. Such information might include information about you, your preferences or your device. You have the option of accepting or rejecting the use of cookies on our website other than those that are categorized as Strictly Necessary Cookies. To enable or disable the use of certain cookie categories, select the toggle to the right of the relevant category. Blocking certain categories may impact your experience on our website. Your information may be stored and/or shared with our advertising partners outside of your jurisdictio

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	295068
Entropy (8bit):	5.667345759166351
Encrypted:	false
SSDEEP:	6144:9AcFOqIHmCedWSbjwyNXFbTr7rmA5J2cq:dO31zUdL5bq
MD5:	BE7390BAE52B8717E322A188619DDCCD
SHA1:	085ECAC0DA107DF5BB089E4F041E26A52C524E45
SHA-256:	EE5E5B2A208DFBCBB9606525993D4A36BE191A8E4AD26508E920C56A57D0CD93
SHA-512:	0C27A2517FDB0E8D9BFBAE4A836B6B08F2F43C2BF3EF084CA6E9FE58BF720E7EA5FB7B50EE9F01602C17599F0396803D8F2C88F2DA8F4CB8735085364F08F8BF
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6524.js?cs=1c48f97ab5dd702e48d2
Preview:	/! For license information please see signing_iframeless_mobile.6524.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6524],{453800:function(t,e,n){"use strict";n(952312);var r=n(835536);t.exports=r("Array").includes},368960:function(t,e,n){"use strict";var r=n(509080),o=n(453800),a=n(540400),i=Array.prototype,s=String.prototype;t.exports=function(t){var e=t.includes;return t===i\|\|r(i,t)&&e===i.includes?o:"string"==typeof t\|\|t===s\|\|r(s,t)&&e===s.includes?a:e}},540400:function(t,e,n){"use strict";n(473488);var r=n(835536);t.exports=r("String").includes},641416:function(t,e,n){"use strict";var r=n(233164)("match");t.exports=function(t){var e=/./;try{"/./"[t](e)}catch(n){try{return e[r]=!1,"/./"[t](e)}catch(t){}}return!1}},349879:function(t,e,n){"use strict";var r=n(843028),o=n(856936),a=n(233164)("match");t.exports=function(t){var e;return r(t)&&(void 0!==(e=t[a])?!!e:"RegExp"==o(t))}},80856:function(t,e,n){"use strict";var r=n(349879),o=TypeError

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4128
Entropy (8bit):	4.956981032926482
Encrypted:	false
SSDEEP:	96:npyI7r40wg+SnvpiF5GKxYa6AyXycujW54jXjJjeZ5uf:F7mn+RiFf6vXULzJcy
MD5:	EAF41810F2A8AA2825B4E143AF23C8A0
SHA1:	E5B4FB39986556829A37F416449D600C3ED8ACEF
SHA-256:	890130D8F7D52C85D10349FF5D9208DFE1BBF9CC0F01BE1727AE30EADB31BE05
SHA-512:	571051D8A44B44E72DD847252BCD62A53CFBB8D05E74EAE6B66FE810BDE3ED3038E2762F8D7C3D62EA3EC1B0AE441A73C0DAB1B38287271A30566CBD2FE2E73A
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"25c02da3-4d83-47e6-b080-f533c2d99f75","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"b1bc669c-4a59-448c-8dfd-b66e53e04f4d","Name":"Quebec","Countries":[],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"default":"en","fr":"fr"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Osler Quebec Corporate Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id":"25cdfee2-024b-4a52-a054-a6e05347c926","Name":"Osler Corporate Global Audience","Countries":["pr","ps","pw","py","q

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720), with no line terminators
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.827997351883874
Encrypted:	false
SSDEEP:	12:+m6EZ1jmtlj2ER+2g2D26fCelbFP5sVy1oT:+/wQU4v1a6fCe94
MD5:	959530D433C6F9034022E90C0B088421
SHA1:	0E12DF39D7CFD63436956BB3F2A6B48D6726C1B7
SHA-256:	D1C33345956D091421DB316311107C05D55713C8C9E0C5CC17895ED52D4F2305
SHA-512:	0C5A6E1506207C2E7D91E70F122D5505F0E9595A12DEE11BEC2D53F5B4B5584BF1D823BD9709F28E3D7AF0D58644A1C14BA6AB89F4557591D332CADAF95A579E
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/css/bootstrap-accessibility-plugin.min.css
Preview:	.btn:focus{outline:#000 dotted 2px}.close:focus,.close:hover,.nav>li>a:focus,.nav>li>a:hover,a:focus,div.active:focus{outline:#000 dotted 1px}.carousel-inner>.item{position:absolute;top:-999999em;display:block;-webkit-transition:.6s ease-in-out left;-moz-transition:.6s ease-in-out left;-o-transition:.6s ease-in-out left;transition:.6s ease-in-out left}.carousel-inner>.active{top:0}.carousel-inner>.active,.carousel-inner>.next,.carousel-inner>.prev{position:relative}.carousel-inner>.next,.carousel-inner>.prev{position:absolute;top:0;width:100%}.alert-success{color:#2d4821}.alert-info{color:#214c62}.alert-warning{color:#6c4a00;background-color:#f9f1c6}.alert-danger{color:#d2322d}.alert-danger:hover{color:#a82824}

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24899)
Category:	downloaded
Size (bytes):	25070
Entropy (8bit):	5.317406014272339
Encrypted:	false
SSDEEP:	192:m4V2MvfhCmNtGb0okfQrgP0C8HjF6EE5rZ7s5t0SzM4M1vVAHeGeYk2uNlEs9g0L:m4AMvYV60yHDSPMflGm3/PgLc1cwHDIs
MD5:	DDF6663591E468727C75B88FA21E5376
SHA1:	53AA908ED7A8C4B1010B2D30A9274062F9D46801
SHA-256:	20D3C68FBB41F58733C0B4086F86655315F00D314A958E1985D6ECEBC9DE2A8F
SHA-512:	6DFF031EED5CDCE7B7D62AA6192B834D6F760440B825712F4D25B38C527B08A3296DDC8FEE1D1D9FBEA40E0DD90B58C1B970078E42C3E59E6D57167F4885669F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5956.js?cs=469b8cedb356c5024593
Preview:	/! For license information please see signing_iframeless_mobile.5956.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5956],{807268:function(t,e,o){o(248276);var r=o(716304),n=o(997156);r.JSON\|\|(r.JSON={stringify:JSON.stringify}),t.exports=function(t,e,o){return n(r.JSON.stringify,null,arguments)}},213805:function(t,e,o){var r=o(807268);t.exports=r},150400:function(t,e,o){"use strict";o.d(e,{O:function(){return bt}});var r=o(544864),n=o(577204),a=o(514260),i=o.n(a),l=o(811504),c=o(203268),d=o.n(c),s=o(272116),p=o(953486),b=o(583476),f=o(395132),u=o(146356),x=o(747384),m=o(260296),v=o(459528),h=o(803512),g=o(323e3),w=o(117752),y=o(781352),C=o(718552),k=o(248048),S=(0,l.createContext)({dark:!1});function E(){return(0,l.useContext)(S)}var A=o(542344),I=o(719813),R=o(758320),O=o(823524),z=o(49208),W=o.n(z),B=o(844280),q=o(735716);function T(t){return"small"===t?"320px":"medium"===t?"384px":"large"===t?"480px":"xlarge"===t?"640px":void 0}var F={base:

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	32033
Entropy (8bit):	7.9405127883724855
Encrypted:	false
SSDEEP:	768:4YyUhZ3B1JkRcqEo305gUbpg5i/rWkQMYNQ05XTeRIEt9lQumvueld:4ohpG53sgapg54WkQMU3TOIEt9lGu4
MD5:	8F228E7953FD81ADF1D0DA81E0242D10
SHA1:	01171F1D1FE3AB2AF34B3C0B504A71C2817B75C1
SHA-256:	BBB35A664839C8B5778D6B0AC43F5296E591A6A68BE3F154190EDBA4BDB98C15
SHA-512:	39F91464E9E5C2FB031E9EFB58D15C80A4B6D428EA90B3A8D19C87E1E21C560174A4D27317EA41DD26BCEF54AB10767746954605352BA2684D20D89872968986
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=5304, bps=230, compression=none, PhotometricIntepretation=RGB, description=abstract city lights at night, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 400x350, components 3
Category:	downloaded
Size (bytes):	78968
Entropy (8bit):	7.840408835361954
Encrypted:	false
SSDEEP:	1536:upEp9E90Pmj1t2+KH487QEPFRR4sodZSycmFq2D5Um:oC29/j1lqFBugyqRm
MD5:	1E3E69BBA5353EE825E24A64FDC31C55
SHA1:	41087F29F587A84A83943BBB8730D08274FEE5D1
SHA-256:	6979AFCCAC0C47EAD6C42E13BA605643AFC1931A96188339D96CA3F4206CC561
SHA-512:	17B0FBF911D9C557EA44794798A38F1BD6BD1F64AB5BEBC8D356F3CA6AB40976F2EA12FBBD25320ED1BCD13B7249E97A1714D837415AC2E6DEEF328AB18D22FB
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg
Preview:	....._Exif..II*...................................................................................................................................................!...............(...........1.......)...2.......H...;.......\...i.......d.............abstract city lights at night.SONY.ILCE-7RM3...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:33:22.Nikada..%.........&..............."...........'...........0...........2...................0231........6...........J...........^...........f...........n...........v...........~...................................................................................^.......................................................................................................................#...................................................2...........4...............................2018:10:18 15:12:38.2018:10:18 15:12:38.....@B..f...@B...-......................^.......f7:.....f7:.............^.......^.......................35mm F1.4 DG HSM \| Art

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904137554&i=gtm&dwt=614&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	916
Entropy (8bit):	4.771526849920774
Encrypted:	false
SSDEEP:	24:2dXY1gmNUkRPxw4WEz6wUpMdse2IUpgttLPCCady9K4UpM1:cXwgiozoIitL6HEKg1
MD5:	21E07F08F3C13303B0F6B4FB21F8CDF3
SHA1:	6749A6196E3494E967C89AC99922007BD5F0DF37
SHA-256:	2CCAB17DB55F070343D224D89E3A5E6F7019F7269CF6711CF4B94DEC5747D05F
SHA-512:	1CC5462CE987299B4497A149EB44CEE3C94F8AE2F7878EAB2B897A1AD754C215CF9B1AFAC4B1CC0FE6271FF86446B5DD4EA62ED885899A1144E300EC1842D0DD
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Email/Email-Icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 38"><defs><style>.cls-1{fill:#505056;}</style></defs><g id="Assets"><g><path class="cls-1" d="M38,38H3c-1.65,0-3-1.35-3-3V11c0-1.65,1.35-3,3-3H38c1.65,0,3,1.35,3,3v24c0,1.65-1.35,3-3,3ZM3,10c-.55,0-1,.45-1,1v24c0,.55,.45,1,1,1H38c.55,0,1-.45,1-1V11c0-.55-.45-1-1-1H3Z"/><path class="cls-1" d="M45,30h-2c-.55,0-1-.45-1-1s.45-1,1-1h2c.55,0,1-.45,1-1V3c0-.55-.45-1-1-1H9c-.55,0-1,.45-1,1v2c0,.55-.45,1-1,1s-1-.45-1-1V3c0-1.65,1.35-3,3-3H45c1.65,0,3,1.35,3,3V27c0,1.65-1.35,3-3,3Z"/><path class="cls-1" d="M21.5,27c-.2,0-.4-.06-.57-.18L6.43,16.82c-.45-.31-.57-.94-.26-1.39,.31-.45,.94-.57,1.39-.26l13.89,9.58,11.92-9.54c.43-.34,1.06-.28,1.41,.16,.35,.43,.28,1.06-.16,1.41l-12.5,10c-.18,.15-.4,.22-.62,.22Z"/><path class="cls-1" d="M10,32H6c-.55,0-1-.45-1-1s.45-1,1-1h4c.55,0,1,.45,1,1s-.45,1-1,1Z"/></g></g></svg>

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2879
Entropy (8bit):	7.660950602080433
Encrypted:	false
SSDEEP:	48:D9itNn2VQJ3znK9gJS9mvS4yUhIwYZ7lNodG26472DYf6F/9:DO2knK9gQmbyUhvYZ7lF26Je6V9
MD5:	C87DA3413DAD0BC57D3F6C42C3848657
SHA1:	5F307E843AE7B61DBB541B55CC159386664A40F4
SHA-256:	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
SHA-512:	A5D1E1F35C47264FF5616FBA0409249394B6DC44347C0F4B5536679AA1965B8A69AD3C20E42CAE4D82C44B63D1054C5F985B9FA72A7BE563FE2EC3438AFCFB77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O...O.....%V......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C298895EA7E911E0B1F8FF0264B08A24" xmpMM:DocumentID="xmp.did:C298895FA7E911E0B1F8FF0264B08A24"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C298895CA7E911E0B1F8FF0264B08A24" stRef:documentID="xmp.did:C298895DA7E911E0B1F8FF0264B08A24"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...{....IDATx..\kO.:..!.z[.. $.......(o..s..u....)...U.R..}x.............kQ.xS.G.D+......W._i....v~F.6...7.\..8'.t.eY.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47844)
Category:	downloaded
Size (bytes):	48017
Entropy (8bit):	5.498513095967245
Encrypted:	false
SSDEEP:	768:dwbsNbSfQuvn0rB5kuER4Nt8VqB89l3uugj3T9DcgjbCiI2KwDx:UsNbSouvnN+gVvojDy2bCBJwDx
MD5:	6F2EBD7E343EB220939F9395112B7590
SHA1:	F9FE686621CD0BE2C2920E9D2B19C3D20AFD302F
SHA-256:	E73D30312784C02BEB64EDEDC070279C437A81E5AE24EEAAF071B028B392C01B
SHA-512:	97F7A8C8586BFE61FEF9D403AA4DE2401B801BF22770DF4CE9C81A2615BCE4E948FCB3EB13F3A1087D69A1BAD0AA80BE0C93FDA3849087BE04B8966FD660195C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5186.js?cs=25337ada72d8624b6829
Preview:	/! For license information please see signing_iframeless_mobile.5186.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5186],{995186:function(e,t,n){"use strict";n.d(t,{y:function(){return S}});var r=n(265408),o=n.n(r),i=n(449740),a=n(260448);function u(e){return u="function"==typeof i&&"symbol"==typeof a?function(e){return typeof e}:function(e){return e&&"function"==typeof i&&e.constructor===i&&e!==i.prototype?"symbol":typeof e},u(e)}var s,c=n(128836),f=n.n(c),p=n(93376),l=n.n(p),d=["ar","bg_bg","cs_cz","da_dk","de_de","el_gr","en_au","en_gb","en_us","es_es","es_mx","et_ee","fa_ir","fi_fi","fr_ca","fr_fr","he_il","hi_in","hr_hr","hu_hu","hy_am","id_id","it_it","ja_jp","ko_kr","lt_lt","lv_lv","ms_my","nb_no","nl_nl","pl_pl","pt_br","pt_pt","ro_ro","ru_ru","sk_sk","sl_si","sr","sv_se","th_th","tr_tr","uk_ua","vi_vn","zh_cn","zh_tw","en_ca","en_ie","en_ph","en_in","en_za","en_nz","es_co","es_pr","fr_be","nl_be","es_ar","es_cr","es_cl","es_pe","ar_a

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21425)
Category:	downloaded
Size (bytes):	21608
Entropy (8bit):	5.485668164907437
Encrypted:	false
SSDEEP:	384:24C4ZsuAbLLO0watQv4xAkhIxfjLOmwazYdvfg0rD6jtxujYy8ptBJR:ioub7tQv4xAkaZy9asgq+txujqptB/
MD5:	7472D3EE075CE098436251DD3D84E12D
SHA1:	45403989E8D4CAF9878787A86F91D1408E3AAE23
SHA-256:	6BDCAE018FDA012CA88039227E82351D33E232B756760A8452D0ACAB8075BA4E
SHA-512:	633B1FFC7536B11F3020792ED23B239FF8A0A14BDA9222B78D8C7F091C440577792D4FF0F24EECBC8EE250B6BCC7BFA87E30669CA0D6011513E17792D1F85A05
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.optimizely.js?cs=e86a182c6e0ef285c961
Preview:	/! For license information please see signing_iframeless_mobile.optimizely.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7716],{940480:function(t,e,r){r.d(e,{AB:function(){return o},AJ:function(){return f},CK:function(){return u},CU:function(){return n},ET:function(){return p},GM:function(){return a},G_:function(){return b},If:function(){return C},KM:function(){return d},MD:function(){return y},OO:function(){return _},Ou:function(){return m},UX:function(){return c},Wm:function(){return h},Y9:function(){return w},YR:function(){return E},_m:function(){return g},cL:function(){return v},cr:function(){return S},cz:function(){return i},kx:function(){return s},nT:function(){return l}});var n="POST SIGN - ACCOUNTED - LOGIN",i="POST SIGN - ACCOUNTED - Failed to Load",o="Save A Copy - Close Dialog",a="Save A Copy - Create Account",s="Save A Copy - Create Account Failure",c="Save A Copy - Download - Combined PDF",u="Save A Copy - Download -

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	2.9140163035068447
Encrypted:	false
SSDEEP:	3:fzjS9:fC
MD5:	84100B349395F367D41A8B44D0020355
SHA1:	676BB250F143F6C863C58C79B4CA1ABF7312DF00
SHA-256:	5EAE3F71BE133111621E17FEE9DC04578D885A74EAF4D40AAC9634B7DB4B5459
SHA-512:	ED8456F12F188F50E15D845B240AA62195709005505A59CB5A6033C139D902DF4D504873B80E7156D79358AC901A779DBD3CA6C0010BF16D5FE18C77385081CE
Malicious:	false
Reputation:	low
Preview:	<success>true</success>

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34089)
Category:	downloaded
Size (bytes):	34260
Entropy (8bit):	5.339487486189771
Encrypted:	false
SSDEEP:	768:VCuEUqpCksnHr1C6CC0p4o+LLRU8+3RpJr+L6RUL+Zbh06uCpr6x:MpClGp4vWpJImY
MD5:	BC61DB1F1379E2963CC5627E6F5BADA0
SHA1:	E58AE9F7622C6BBAC9E010BEC9F85C6C726B3354
SHA-256:	47A7A18D799E2FBE195A07137A9750BC095050E468D40F5E47AFABA66C1B4459
SHA-512:	7F32448A7FBB11B9D60F2205A84BEF89B915A966770284CD88512116553A56E586086635972F802B132ED3004620C8112AEA2EDE9C8EE7F2D7F5493C900A59A8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.4464.js?cs=ee0fc2459764d3eac1ea
Preview:	/! For license information please see signing_iframeless_mobile.4464.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4464],{341416:function(e,t,r){r.d(t,{y:function(){return j},Q:function(){return I}}),r(761088),r(326972),r(853224),r(427164),r(174016),r(627632),r(439952);var n=r(811504),o=r(271448),a=r(694070),i=r(386160),c=r(594956),l=(r(417368),r(971088),r(279800),r(454068),r(284204),r(757768),r(409624),r(185179),r(321992),r(394976),r(373656),r(394107),r(49896),r(686832),r(938252),r(147240),r(952288),r(215396),r(282480),r(121952),r(155036),r(954736),r(632520),r(685120),r(737588)),u=r.n(l),s=r(656212),h=r(825796),f=r(357792),p=r(507416),d=r(108328),y=r(749099),v=r(247601);function m(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,a,i,c=[],l=!0,u=!1;try{if(a=(r=r.call(e)).next,0===t){if(Object(r)!==r)return

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31005)
Category:	downloaded
Size (bytes):	31180
Entropy (8bit):	5.242185131314682
Encrypted:	false
SSDEEP:	768:qyo3xcGSQWQ0UGUEQsF8h6m9qW6A4MzK7n8CutA2q0d2KP6LJgRMVUWFgHmbOfvO:qvSQWQ0UGUEQsFy6m9qW6A4MzK7n8CuA
MD5:	F74F1271B67DFB96179C4BA27B20BF0A
SHA1:	DC721E2F34473A538DD87A02139CD17441E97620
SHA-256:	6C6D911A39760F96E3199E42928A3A8E2C1BD6FF1AEE44E8864C51AE5D85DD4A
SHA-512:	8B85F0ACA883F6D9D85E3EE0DD704CA4CB513C65E3C0B5FDE66A4F820707BC7C6521A0AE3EE40FB3CC8FC721FED04A72203360E1190B296D753BADE637E2C10A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.4024.js?cs=0438efdd1ff3cb642e6b
Preview:	/! For license information please see signing_iframeless_mobile.4024.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4024],{893184:function(e,t,n){var i,o;"undefined"!=typeof self&&self,i=function(){"function"!=typeof Promise&&function(t){function n(e,t){return function(){e.apply(t,arguments)}}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=null,this._value=null,this._deferreds=[],c(e,n(r,this),n(a,this))}function o(e){var t=this;return null===this._state?void this._deferreds.push(e):void p((function(){var n=t._state?e.onFulfilled:e.onRejected;if(null!==n){var i;try{i=n(t._value)}catch(t){return void e.reject(t)}e.resolve(i)}else(t._state?e.resolve:e.reject)(t._value)}))}function r(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.273117654663556
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HH4yOE9HEEpGlyRHfHyI:x2pHDIiEltDyI
MD5:	9C96EB3A1A2B6FBD8C9F23363579B2D7
SHA1:	D86A36124C5389D77E44271F231834342A6B7706
SHA-256:	CC794D966E83D0ACB613258C28876A513C4148E6D0A607D97A4B09A9F8C1C6D5
SHA-512:	2C2640B5B09BA2EAB5214D3ADF4563C45236A656E8D9A9A6A9E192D3FD85CE3F1CD01EFF2B00A97E99F0F4022202776AD6106EEAD83A9A33D1AC70F8D5763130
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	4.8436943585630665
Encrypted:	false
SSDEEP:	3:UJXca4MKLFVrWnNCF8YtQRVCL6DlTFPKKKBK1caJC4B/Yp/GCF8YtQRVCL5V:UJXuMKTMS848COFFyKKXaJkZGS848CVV
MD5:	7363E1A92A77C2F6AB0332C9A64CC051
SHA1:	B424892E6298C96B00A63BF7B3244AFC93EFDEAB
SHA-256:	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
SHA-512:	8D2D619DCFD1DB0FDEC275BC59C6627F32C37FF58F46C7E72970591F8CF335D37B7A3E21D1640DD40101511183C82487FE2836763B9FEBDFD60867CFB7511EF6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing-cdn-failure-reporter.js
Preview:	/! For license information please see signing-cdn-failure-reporter.js.LICENSE.txt /.window.cdnReportFailure();.//# sourceMappingURL=signing-cdn-failure-reporter.js.map

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	157684
Entropy (8bit):	7.996439784008411
Encrypted:	true
SSDEEP:	3072:Puger50MIxG6wEeqr3YvOUFK2EAMMEEFJwqnG70YpR:PugeF0MIU6fTr3UF/Tj+0c
MD5:	E639BA3E6DEFA15DF240DEA0BB8E130E
SHA1:	ADE632AD533FE91EEB7FA112BBC7DAE31AC99850
SHA-256:	B81B45671673BD9E7CCACCFCEA951EBA11A93297C4E17766B1118435A55D9771
SHA-512:	7B18B0180B0EA278AB3F4F099B9B6ADF5D1F717483DD83E1B377D503CF897CFE562F39290E79EF4F0A5FB25CCEA56B3F3BBA27865977C6B2751C688630AF7993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,........"....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:E8849033FC0111EEA97AFD9CBBCAB39B" xmpMM:DocumentID="xmp.did:E8849034FC0111EEA97AFD9CBBCAB39B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E8849031FC0111EEA97AFD9CBBCAB39B" stRef:documentID="xmp.did:E8849032FC0111EEA97AFD9CBBCAB39B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d.....ddIDATx..i.$Iv....c..m......X.AF....._..A..$3...(~....$.dF.d.i.(. .a0.1.p.....^n....=7"3#2#_.5.=..EFFF..s

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (506)
Category:	downloaded
Size (bytes):	1169
Entropy (8bit):	5.3696768038945075
Encrypted:	false
SSDEEP:	24:U24JLuftTjzWm8Mu1Zamu3A9j2I4gcelZeXKN9TUBxzeAJ2UheQJr929/V5ArOaD:q6ftTjzWhMuvam8kIK4BgAJ2sr2Orvam
MD5:	AD9E0CC0D07D5E29C98518937749DA78
SHA1:	1ECD839F957700CE5F86BB491F6B2791802381C0
SHA-256:	989A73EB9E9FAA5BCF87EB500BA218549B0B1EF37DC53D9AC948B33010BD78DA
SHA-512:	2140C3C86DA8FD86A6449E1D311D6B4C0D08CE3AEC9D0D10064807523F2F75F2F9BE959A8D137F50A9CFAC3193E0E3B4DBB4199642776766771BDD4E441510AB
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ga/inpage_linkid.js
Preview:	var e=document;window._gaq\|\|eval("var _gaq = [];");_gaq.push(["_provide","inpage_linkid",f]);.function f(c,g){var l=/(?:^__utmli=\|; ?__utmli=)([^;]*)/,d=this,m=function(a,b,d,c){var h="addEventListener",k="attachEvent";if(a[h])a[h](b,d,!!c);else if(a[k])a[k]("on"+b,d)};this.e=function(){return"; path=/"};var n=c._trackPageview;c._trackPageview=function(a){d.a();d.f&&c._setXKey(12,1,d.f);n.call(c,a)};this.g=function(){this.i\|\|(this.i=!0,m(e,"click",function(a){d.h(a)}))};this.h=function(a){try{a=a\|\|window.event;var b=a.target\|\|a.srcElement;for(a=0;3>a&&!b.id&&b!=e.body;a++)b=b.parentNode;var c=.b.id\|\|"";d.d(c)}catch(g){}return!0};this.b=function(a,b){f.prototype[a]=b};this.d=function(a){if(a&&100>a.length){a=a.replace(/[^-0-9a-z_:.]/gi,"");var b=new Date((new Date).getTime()+3E4);e.cookie="__utmli="+a+"; expires="+b.toUTCString()+this.e()}else this.a()};this.b("trackClickId",this.d);this.a=function(){e.cookie="__utmli=; expires=Thu, 01-Jan-1970 00:00:01 GMT"+this.e()};this.b("deleteClic

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 622 x 234
Category:	downloaded
Size (bytes):	10946
Entropy (8bit):	7.876349844907559
Encrypted:	false
SSDEEP:	192:t7yG2FYA1Ok3N8T2mqkhX5N9YWXBFJK2ZlxTIh3LCBQvrPqKHH:1QOkWSTkhdRhKmlV2vOGH
MD5:	C80281884317034392DE3E5DABDB1BAE
SHA1:	884426A3A17603C7D9AB1AB295B77E905D7E3457
SHA-256:	7A45CD07A7C1C9BB975BFC471C831FEDFCF375E7D6493E0F097F69BE81586641
SHA-512:	463B5C936125B2819A40A800F5D1B514CA0F208EBA70CB68F7DA9CDEEB38989D1281792B944025A4A0E84EDAB4F685BC431A5C35EB88C573E8FA9FFBC7D75241
Malicious:	false
Reputation:	low
URL:	https://na2.docusign.net/Signing/image.aspx?ti=2f750cc653904ad582828ac9dfddaf01&i=2942dcaf-4c56-4568-a023-1bf35572f70a&idcard=1
Preview:	GIF89an...........3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,....n..........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h......p.Z...J\...)l...UEp.8\.........S....>.........P.\#.C...9r.....2].`...

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8967)
Category:	downloaded
Size (bytes):	9138
Entropy (8bit):	5.257421412019015
Encrypted:	false
SSDEEP:	192:s4RvN2CpxMEbGTHN6JHJQbfqOf6yMBhVkdD69BQjRHAIYE:s4eCL1eZbCOf6yMBhVIYE
MD5:	720904553B1E146F7027AE0F4E4826E5
SHA1:	E6FA7A61AD077BD11428C1B8F5224336E0E0EFA6
SHA-256:	F3DE92A7263951F2B1E83A83E7CDAD7F15D3213EDC517C98C0295413328A9679
SHA-512:	0E2AE87FFDEDB36DE333978FFD6FF3DF6EA5AEC46CC797056DCF2A8C71A60A9507DEF0D1C6771BDF1630A821D2E89CED240CF589C2E4AFEDF63B21B584E0512C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6615.js?cs=4e7ab17cd1e543471d4b
Preview:	/! For license information please see signing_iframeless_mobile.6615.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6615],{641548:function(e,t,i){i(761088),i(326972),i(853224),i(427164),i(174016),i(627632),i(439952);var s=i(654888),n=i.n(s),a=i(752856);function o(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var i=0,s=new Array(t);i<t;i++)s[i]=e[i];return s}function r(e,t,i){var s,o=(i=i\|\|{})._isSideEffect,r=null===(s=this.computed)\|\|void 0===s?void 0:s[e],d=r&&this.computed[e].set,u={};return r&&(u=a.cp.extend({useTwoWayBinding:!0,useModel:this},this.computedDefaults)),o\|\|!r?n().Model.prototype.set.call(this,e,t,i):d?d.call(this,t,i):u.useTwoWayBinding&&g.call(this,e,t,i),this}function d(e,t){var i,s,n=(t=t\|\|{}).useModel\|\|this,a=t.useAttribute,r=t.useAttributes;return a?e=a:null!=r&&r.length&&(e=(i=r,s=1,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56430)
Category:	downloaded
Size (bytes):	384604
Entropy (8bit):	5.564558299428724
Encrypted:	false
SSDEEP:	3072:uec2YAZVNSNcyzsz4I2s8B9CBPIrTWR6/P/IRMfh6St2nBsLqUP35WeoBoTqQ:W2YAFygz4kko+fh6St+aqUP35W4b
MD5:	D46D2C628A33991A2D71F4082177BA28
SHA1:	E87C9071F03EF37059ED356B66ED3AA2F304E96C
SHA-256:	C2E631BE60BAAFC36708BB9BF844A51C1F4D4E5241EEE57A5850546502406B18
SHA-512:	DD48337E8F1523CF50707041720EC4D267DA203A41ACCA44357F2E13F40F72FB85FF770937E72511F4F573EDA2FEAB457D62E200F64F91D7BA7A4E8737E9886F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T6XW3V
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"293",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"osler.com, conductofanappeal.com, pensionsbenefitslaw.com, canadianclassactiondefence.com, riskandcrisismanagement.com, legalyearinreview.ca, retrospectiveanneejuridique.ca"},{"function":"__v","vtp_name":"userType","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"UA-44058441-1"},{"function":"__c","vtp_value":"UA-3837444-1"},{"function":"__v","vtp_name":"pageName","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"UA-45519423-1"},{"function":"__aev","vtp_varType":"URL","vtp_component":"URL"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vt

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with no line terminators
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	5.13952772778372
Encrypted:	false
SSDEEP:	12:2QSkMnt0YPhgmQNVGIkTLFMdOGn61CCq4jBAHOYZcQP3rSzD1J7dJ8TFA:2QSkammQVGr3F4hCZjiuOhPWNJ7dJ8i
MD5:	9C40CA380DE46A9510A154AC05DDDEAA
SHA1:	6781CE6B841DCEEE632473856667AE03767B77B1
SHA-256:	99FF90F5AACFC574B288026B61AC67707E4AC5352863CFBAFA52066A74D92AC0
SHA-512:	9845F3CC8A8A7AD2C3DF7AF8A856511B64BB364809553FDCC7EA0F213E874D81DA4D4D2B049DC02B2932BAAB1CA5A13C82EA07001096B3C8FF7AAAFC1ECED309
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/ds_arya_wrapper.min.js?f=1
Preview:	(function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(function(){}),s({})),a=s("");function d(n){throw t+"-"+n}function s(n){var t=typeof n;return function(n){return typeof n==t}}function h(n){for(var t in n)u[t]=n[t]}return{i:function(n){i++?d(1):n!==o&&c(n)&&!n[e]?h(n):d(11)},g:function(n,t){return n&&a(n)?t&&t(u[n])\|\|u[n]\|\|!1:t&&t(u)\|\|u\|\|!1}}})}).call(this);;DS_Arya.i({"DS_A":"1d8157cd-e01d-4aa0-9aec-ad2dbb46f761","DS_A_C":""});

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=2685, bps=206, PhotometricIntepretation=RGB, description=Wide angle color image depicting the front view of a young woman walking through a futuristic subway tunnel in central London, , manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=4374], baseline, precision 8, 400x350, components 3
Category:	downloaded
Size (bytes):	63917
Entropy (8bit):	7.772031862814663
Encrypted:	false
SSDEEP:	768:ypd5nwj3C7QenwjM/4+LH4YyxDrodtOx7JJOym1wtq7ZQ5JQGjss74JJMbC1jauz:UmH1d7x7QEFt4nMbCoutZ
MD5:	EE2C39E22BF051BD559CF937765D5F9C
SHA1:	B4A37389B55C7F9D876C24BAABE47F1D1B987D18
SHA-256:	98CB8665ABB1335CB7FF485ED5D644480953D2E75F0201976636E88A0FFFD997
SHA-512:	52EA57D266DE77EF6B0CBEAE59A96F3F22E6C21C68FF4AB463D893052455C7B4168909BABFAB023EEF4DE0D79EDD7651316251F0A27B15358749B4A47FE34444
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg
Preview:	......Exif..II...........................}...............................c...............7...........=...................................J...........R...(...........1.......Z...2.......y...;...........i.....................Wide angle color image depicting the front view of a young woman walking through a futuristic subway tunnel in central London, UK. The tunnel is illuminated with multi colored lights. The woman is in the far distance, and the focus is on the cool science fiction architecture of the subway tunnel that curves round into the distance. Room for copy space..Canon.Canon EOS 6D...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:28:10.coldsnowstorm.. .........".............."...........'.......@...0...........2.......@...........0230........2...........F...........Z...........b...........j...........r...................................z...........96..........96..................................^.....................................................................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8019)
Category:	downloaded
Size (bytes):	318308
Entropy (8bit):	5.565976136037602
Encrypted:	false
SSDEEP:	3072:1I44QSTAZVNSNcMzszFeI8J8QjCBPIrTWRsYESfhmpt2nBsLqnyiXDeltzvsA6o2:24uAFMgzFe4Y0fhmpt+aqnyiXDelJsAG
MD5:	07C7E1407C8AA55812F3C9D5F10EAE8B
SHA1:	19358ADA16D17EBEBF32636780C7D1D21F694B92
SHA-256:	35CBDB8CC8155484E2CA72514ADA75785513684B1129BC9C7DAA36B36780C188
SHA-512:	D38921901B1033C681B9043CC0D19DFF0246B179F2BCD20A6CB2E8EFF7AA3FFE887A37D330FF72AE862FB035F3607E3C167CC2108E1EC5E6969306C56C37A9A9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-2XYX2S797K&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"14",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":25,"vtp_rules":["list","osler\\.com","^legaloutlook\\.ca$"],"tag_id":26},{"function":"__ogt_ga_send","priority":15,"vtp_value":true,"tag_id":28},{"function":"__ogt_ip_mark","priority":15,"vtp_insta

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2832, bps=218, PhotometricIntepretation=RGB, description=Abstract neon colorful background. Creative bokeh. Selective focus. Template for design. Space for text., manufacturer=NIKON CORPORATION, model=NIKON D700, orientation=upper-left, width=4256], baseline, precision 8, 400x350, components 3
Category:	dropped
Size (bytes):	59879
Entropy (8bit):	7.766010675091117
Encrypted:	false
SSDEEP:	1536:C0nVndXQZi4nQhO2C5n/018qaWssK/2vYPMVyR9:C0VFQZzMs5/0Gqah7UVy/
MD5:	7B9F8D3856049A7ABB61CA45281DB695
SHA1:	214B22F0D75FBFDD80EBC1AE36DDBA1687138DB6
SHA-256:	637A3A1A899D1A6A36B1FD85AA7F70B4B7749AC2FECFCDC76DAD84630C3E2F00
SHA-512:	52EED46B7470B3CF76C43A2D6CAFC4D36D74FB485431BF259E701208FE6ACAB056DAD4C96388B8EEC4A3F6E73B01F4620FA3B5685DB567D455FB2A9201618AE3
Malicious:	false
Reputation:	low
Preview:	.....EExif..II*...........................................................i...............I...........[...................................f...........n...(...........1.......v...2...........;.......................i...........\.........Abstract neon colorful background. Creative bokeh. Selective focus. Template for design. Space for text..NIKON CORPORATION.NIKON D700...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:48:29.Polina Shurygina.(c)Shurygina..&........................."...........'.......d...........0230................................................................................................................................07..........07..................................^...........................................................................................................Z...........................................................................1...........2...........4...+...................#.......2019:11:10 16:27:56.2019:11:10 16:27:56...............

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62243
Entropy (8bit):	5.409110995042521
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQrHoQqhF:s/3IgGDzlj18nQrSF
MD5:	8B73B216AC0A0730279EBB5FC109C29C
SHA1:	4D0A7239EE5F70D143300E772DE91B4768A7F4A4
SHA-256:	0A0721D78278F9A6C3DD3F639BAD1B3105D2DF9E97E3D4A74DBEC66D6B92C7EC
SHA-512:	4EFB681C418B2EC3266A5824515155E23F41677B0059D659F3CBED77F144206032B206907745E7E0AE6F4A01E99E7710F848D31B815BA15E4DD7E4A6B9F10F78
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17466)
Category:	downloaded
Size (bytes):	25258
Entropy (8bit):	5.2306452691279555
Encrypted:	false
SSDEEP:	384:drLT6KOrYm9prYMLsKzrYmLEKzrYtbvcyXseSelvzgbrb5JZ:hLeYmfYMLlYmL9YwfehzgbxP
MD5:	6F22059BA0BB7BD483C77E2A70723197
SHA1:	C74841A28AC82969CFE623084F528DE3FACA2E0C
SHA-256:	67D7F93FFA3ABA158604A770B7243ED806ED2038656CA00AF45FA5497F5CE0EC
SHA-512:	A68BA6CB55DA2E4B2F29280893CF0330EF335D8CD14701ABED4ED91BB3A3A39DAD962879205F7F6D613A20AD394D9CCBF0223F4AC362ED2E79599A7550954FA2
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-139501.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":139501,"r":0.08973582300826005,"rec_value":1.9999999989472883e-9,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[{"id":936676,"created_epoch_time":1693586438,"skin":"light","background":"#FFFFFF","effective_show_branding":true,"position":"right","content":{"version":2,"questions":[{"uuid":"df7e6759-2763-47dc-b107-7e5112e1f630","type":"multiple-close-ended","text":"Did you attend the live airing of the session?","required":true,"randomize_answer_order":false,"pin_last_to_bottom":false,"answers"

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62292), with CRLF line terminators
Category:	downloaded
Size (bytes):	62389
Entropy (8bit):	5.353636010965601
Encrypted:	false
SSDEEP:	768:xojOeB7foxMGtJm4UUvBkU4/4uu34xMR/UuSJwfGm0ZlBCmQdrCylwVc:Cjd1foxMGZtCMRsuSJvswVc
MD5:	30B9882CF93F4A9B2FFA96AB351271D8
SHA1:	970340E440846513D7BA29BAF27795A042C96AA8
SHA-256:	D6F3A8301FFA9A9AA6A748CCC535A559242CD73451BB4D236B7E72FF64123703
SHA-512:	D6B4041CD68701C94C876259A947831C677902789AC1C4D13B71CD3F47C8FF96B02240681D372D10A74D102E32DC7837F0C633F0A4B28A560CF5F3C11BF8EECF
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.31/clarity.js
Preview:	/* clarity-js v0.7.31: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Ua},get start(){return qa},get stop(){return Fa},get track(){return Ha}}),e=Object.freeze({__proto__:null,get clone(){return fr},get compute(){return hr},get data(){return rr},get keys(){return ir},get reset(){return pr},get start(){return lr},get stop(){return gr},get trigger(){return dr},get update(){return vr}}),n=Object.freeze({__proto__:null,get check(){return Er},get compute(){return Nr},get data(){return ar},get start(){return kr},get stop(){return Tr},get trigger(){return Or}}),a=Object.freeze({__proto__:null,get compute(){return Cr},get data(){return Sr},get log(){return Ir},get reset(){return Dr},get start(){return Mr},get stop(){return _r},get updates(){return xr}}),r=Object.freeze({__proto__:null,get callbacks(){return jr},get clear(){return Yr},get consent(){return Xr},get data(){return Ar},get electron(){return Rr},

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	903395
Entropy (8bit):	5.333218430022891
Encrypted:	false
SSDEEP:	6144:sezgezZ5VNIkLRt9ZxhquB66/3Po89f3jeRuEN9Z2Cqko8Vo87CINZoo8pD:SezZm83lENPbCD
MD5:	4C89310FD1D20D92E9B97E241528457D
SHA1:	A36EF469EA62D71ED9B14B219DDB42F4973EE08A
SHA-256:	2B3FB028BCBFCA99B0BEBE0535E585F3B8227ADC64E83F1C3522340BD40A90C1
SHA-512:	EFCF86A4B727A4EC9D319E6CCCC122FA4E70BAAEFDC5026FDE69B4D6FD42433EEB037E13DF892F691D9E171F085CA3C6FD0C94FD3DAB57608BD0F609CD35F535
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.backbone-app.js?cs=822a399789fd26ba5f5e
Preview:	/! For license information please see signing_iframeless_mobile.backbone-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7576,284],{683392:function(e,t,n){var a=n(813624);e.exports=(a.default\|\|a).template({compiler:[8,">= 4.3.0"],main:function(e,t,n,a,l){var i,o=null!=t?t:e.nullContext\|\|{},r=e.hooks.helperMissing,s=e.escapeExpression,c="function",u=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div id="simple-verify-dialog" class="modal-wrap dialog" data-qa="simple-dialog"><div class="modal-content" role="dialog" aria-labelledby="simple-verify-dialog-title" aria-describedby="simple-verify-dialog-content"><button type="button" class="icon icon-times x-close close" data-action="canceled"><span class="btn-label">'+s((u(n,"$")\|\|t&&u(t,"$")\|\|r).call(o,"DocuSign_Close",{name:"$",hash:{},data:l,loc:{start:{line:1,column:322},end:{line:1,column:344}}}))+'</span></button><div class="header"><h1 id="

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24605)
Category:	downloaded
Size (bytes):	41679
Entropy (8bit):	5.4936189279113625
Encrypted:	false
SSDEEP:	768:1keY2FL4rhkGfV8Cj7szizyzMzKNSu3eq9zdlN:qe/+hkGfVXFu5XN
MD5:	87B5ECAAFD0E88097CBBB1BBB7695FE9
SHA1:	085D5B2112BB1AFA26B03B94183B6EEDC2F076B4
SHA-256:	5AF5EE0B37B1F0EF31C42932BBF81424E4BB53E95E87A47E058625C1AF2245DB
SHA-512:	C760FA5130EF53C99F4DC88E8843500022E63B2324C1EC8DC6C8F510C31A3CB784F0D38908C6F932E96BD566A0464A11EFD723AD73E72CA99626138A48C73092
Malicious:	false
Reputation:	low
URL:	https://a.quora.com/qevents.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.qevents=e():t.qevents=e()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:n})},e.n=function(t){var r=t&&t.__esModule?function(){return t["default"]}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s="./shared/qevents/main.js")}({"./shared/Class.js":function(t,e){function r(t,e){function r(){if(i\|\|(t.call(c),n(h,e,a),i=!0,e=null),this!==c){var r=this.__init__;r&&r.apply(this,arguments)}}var i,a=s.prototype=t.prototype,h=new s;return r.prototype=h,r.extend=o,h.constructor=r,r}function n(t,e,r){for(var n in e)e.ha

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:	1536:h5nLZxjaZ8x2R3Ud4FqBW92ZgyFqBW9sLBHdyoXwIWc1GO9GwIw6CTq14e7pnvaM:h5LZxjml1GO9xqB7pnva38
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/v/static/mixpanel-2-2-1b.js
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 145 x 60
Category:	dropped
Size (bytes):	5469
Entropy (8bit):	7.404941626697962
Encrypted:	false
SSDEEP:	96:IvklPN/PqPZ8M86x9pOa36SrhE/knsz7BklPN/n:IIFHqPZbx9tKSrhtseFf
MD5:	097D652B65DEC6E954C335739754FC61
SHA1:	83155314927200EC3B9951246D0C1C3B631B088A
SHA-256:	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
SHA-512:	DE13A4A8CCEC57F7AF23143D55A93AF581D04F6066DF5C0D0B910DEC17EA0EA430621ACD88A25422A5180F37EDAC44A6746051BCE942F8D5E07BF8842A3F08EB
Malicious:	false
Reputation:	low
Preview:	GIF89a..<...............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39E8547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39E7547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22335ebf-8a2f-43c0-a35d-602b0ebe7cf3" stRef:documentID="xmp.did:695

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4052
Entropy (8bit):	7.80876326704094
Encrypted:	false
SSDEEP:	48:e/ENn2D44uhJ320fImR4cbY5En0oiOfOduNaXGEPIwOzUvVBA3CwZ4kwTcc4LrND:S820VO0fI3D540GiRXI6XRkwTyrNfb
MD5:	D23209078E0CEF2446F406375E8B3E70
SHA1:	C2411FA5E6BCE214BB930E47EB78A161FB2024DE
SHA-256:	308BAA42437ADD66584459A2B9FBCD1934A42B0185876011AC35E5573F0F1C6B
SHA-512:	28DF503861404813EFC44FC322C7CC3477A39F73CA13952D5BBDCF0153783E6A56FD671D3B4FC0EDC7B7F5423B7F83F846078215F20F81DEEE900E25B4D4A084
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.......){....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B787EEAF34872569"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...Z...IIDATx..]..UU..\A$...uP.'..lT0...G.p......_...iL.X"......N..-AqB#.'...68."\|..2..*H...o.t....9....=..9.........

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadJaKr3VMEUCzTcVUg3yR_61yWBgJoleXt-5Wzlb_DbMqUsLvg1hc9B9Cbq075jVgMxR2b_4e3El0QfSbhYiSO0Zck-SkUtK5a0ahJ4I80fD0ivUmZ29GXEQmkrFUXLiggKgpiZLo68rZ0QbCQ6QY_s81&t=722fe453
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	32033
Entropy (8bit):	7.9405127883724855
Encrypted:	false
SSDEEP:	768:4YyUhZ3B1JkRcqEo305gUbpg5i/rWkQMYNQ05XTeRIEt9lQumvueld:4ohpG53sgapg54WkQMU3TOIEt9lGu4
MD5:	8F228E7953FD81ADF1D0DA81E0242D10
SHA1:	01171F1D1FE3AB2AF34B3C0B504A71C2817B75C1
SHA-256:	BBB35A664839C8B5778D6B0AC43F5296E591A6A68BE3F154190EDBA4BDB98C15
SHA-512:	39F91464E9E5C2FB031E9EFB58D15C80A4B6D428EA90B3A8D19C87E1E21C560174A4D27317EA41DD26BCEF54AB10767746954605352BA2684D20D89872968986
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	downloaded
Size (bytes):	3745
Entropy (8bit):	7.319238994753888
Encrypted:	false
SSDEEP:	48:Hu2/EvnLJnOcLJ3JK/L8GlRq8weMpUVCvoIhy7bEhCcmR687yHxl:Nklla/Jnq8vkNhjolyRl
MD5:	DEBD77E543E64173837073B5751ABB08
SHA1:	71577CA453893F08A57A63953B836E8198D878AF
SHA-256:	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
SHA-512:	0FB269F547FFB69E59448FA4E9E234DC4E9B381D5336947C12113D7A1DEC71A7D9EC4F6B2841C032EA1E3FB6E68328D34C1EE1B94761171E523AFBFA962280F2
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/loader.gif
Preview:	GIF89a,.,..2.+++RRRCCCTTT---LLLiii###SSS777@@@EEE888666KKK&&&NNN333%%%<<<000......>>>QQQ(((bbb......WWW...999,,,.................tttuuu$$$...zzzXXXmmm......UUU"""..........................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39EC547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39EB547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6189959b-1072-4052-a607-820f04aae975" stRef:documentID="xmp.did:695

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2879
Entropy (8bit):	7.660950602080433
Encrypted:	false
SSDEEP:	48:D9itNn2VQJ3znK9gJS9mvS4yUhIwYZ7lNodG26472DYf6F/9:DO2knK9gQmbyUhvYZ7lF26Je6V9
MD5:	C87DA3413DAD0BC57D3F6C42C3848657
SHA1:	5F307E843AE7B61DBB541B55CC159386664A40F4
SHA-256:	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
SHA-512:	A5D1E1F35C47264FF5616FBA0409249394B6DC44347C0F4B5536679AA1965B8A69AD3C20E42CAE4D82C44B63D1054C5F985B9FA72A7BE563FE2EC3438AFCFB77
Malicious:	false
Reputation:	low
URL:	https://na2.docusign.net/Signing/Images/Profile_Default_New.png
Preview:	.PNG........IHDR...O...O.....%V......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C298895EA7E911E0B1F8FF0264B08A24" xmpMM:DocumentID="xmp.did:C298895FA7E911E0B1F8FF0264B08A24"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C298895CA7E911E0B1F8FF0264B08A24" stRef:documentID="xmp.did:C298895DA7E911E0B1F8FF0264B08A24"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...{....IDATx..\kO.:..!.z[.. $.......(o..s..u....)...U.R..}x.............kQ.xS.G.D+......W._i....v~F.6...7.\..8'.t.eY.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:	768:1yzfdQMQzGg04WTWcg8awnHWLEB6B9xN/F7iGDXCt6R9HlDw90XamA4er:1qeAqcgI2gsN7jXfHls90Xab
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-55Roma.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	52757
Entropy (8bit):	4.684559076283869
Encrypted:	false
SSDEEP:	1536:GCfq7u02PmUVdzXjXl4xc5KTPBoMqS7j8frPWgtZPnCUQrNgZnFFQE/0FRIp1dU7:A7hglX6eerjqla7
MD5:	D9F8E10959D791747466DA97E7D348EC
SHA1:	E2EF99D3E4DCF31E34F3551F29BD6D78CB08BA37
SHA-256:	012305FE18175B95942F96C5A5B89EF07E470B166679C6497712EDB2DFB9E59A
SHA-512:	069D8D0F5B570191462B45E302054F93073DD5F934655E4174863C3D131125F4ADFFD5131B5C9CD849D85BB21FABB536CEB21222E12D0863AAD2B2F29300E5AD
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/js/bower_components/modernizr/modernizr.js
Preview:	/!.. Modernizr v2.8.3.. * www.modernizr.com.. .. Copyright (c) Faruk Ates, Paul Irish, Alex Sexton.. * Available under the BSD and MIT licenses: www.modernizr.com/license/.. /..../.. * Modernizr tests which native CSS3 and HTML5 features are available in.. * the current UA and makes the results available to you in two ways:.. * as properties on a global Modernizr object, and as classes on the.. * <html> element. This information allows you to progressively enhance.. * your pages with a granular level of control over the experience... .. Modernizr has an optional (not included) conditional resource loader.. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com)... * To get a build that includes Modernizr.load(), as well as choosing.. * which tests to include, go to www.modernizr.com/download/.. .. Authors Faruk Ates, Paul Irish, Alex Sexton.. * Contributors Ryan Seddon, Ben Alman.. */....window.Modernizr = (function( window, document, undefined ) {....

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x350, components 3
Category:	dropped
Size (bytes):	249722
Entropy (8bit):	7.9824737853253485
Encrypted:	false
SSDEEP:	3072:4Sof0Rv2eWyLAhJmwJ6uxE5ZX0OyeKeNZDwEpwmdHkrVi1gR5gyRh8Z0wpSeKmTz:Fof1FoukTjNFwEp3oKg55RefTtIFxC
MD5:	C3B8E92A86CE1D3BF38B74B85766EFBB
SHA1:	3FB01B8241DC49EF2E8DA92353AE8807E91211DE
SHA-256:	9F1B04E3E5723EF5EFBC3F299E102D9ABB0EC199CAA6D83C14C35DB6F02DCF0B
SHA-512:	0DA278FB60E38AC9C0249E0EB52ED89E883F891CBBD8345997A47F5837B975573B150C72D39D951582DC93E2AF67516BD38EF0182357338A55D1C61B45D15CEF
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	174350
Entropy (8bit):	5.269598618040973
Encrypted:	false
SSDEEP:	3072:ZJ7JDrS7vqzJLM3Bm6a+IGdG3fCk0XqSAcKhJy+w:gNWKeSAcF
MD5:	2648778C10A159F200A675966FEC9AAE
SHA1:	2BCB891D9760564AB49DF105FB30633C71323816
SHA-256:	7A49F25222BBFCB59BD71EF06A083F4BDC77341484FACBBA00C845CD70C07CF0
SHA-512:	AAEE70D103392FB82745FBDF359F8EADF78ECDBB5D32DFDA8A992B559BB71D7E6287971EF2FA3EAE558568EC493B1C1174BD0F915571CCEEB334A74DCAA1DE76
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.preloader.js?cs=ec337f5ef9a9fc8930c9
Preview:	/! For license information please see signing_iframeless_mobile.preloader.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8316,2232],{424664:function(t,e,r){var n=r(737588),o=r.n(n),i=r(247601),a=r(939136),c=!1;function u(t,e,r){c\|\|o().ajax((0,a.Wy)("monitoring"),{timeout:i.cp.getValue("AppMonitoringRequestTimeout",50),type:"POST",contentType:"application/json",responseType:"json",data:JSON.stringify({EventSource:t,MonitoringProperties:e})}).always((function(){r&&r()}))}e.c={post:u,logEvent:function(t,e,r){u(t,e,r)},stopMonitoring:function(t){i.cp.getValue("SIGN_28925_StopMonitoringCallsAfterEnd",!1)&&"boolean"==typeof t&&(c=t)}}},386264:function(t,e,r){r.d(e,{Qx:function(){return n},C6:function(){return l},sf:function(){return y},Kc:function(){return f}});var n="https://a.docusign.com/f",o=(r(761088),r(855331),r(947192),r(853224),r(232048),r(427164),r(625744),r(211056),r(331432),r(819672),r(726456),r(185179),r(321992),r(480168),r(

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:	768:1yzfdQMQzGg04WTWcg8awnHWLEB6B9xN/F7iGDXCt6R9HlDw90XamA4er:1qeAqcgI2gsN7jXfHls90Xab
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/fonts/HelveticaNeueW01-55Roma.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10193
Entropy (8bit):	5.330699162330857
Encrypted:	false
SSDEEP:	192:+1mqUjKyWvQJQzQrwqgtNHBIdWZD977ux/i3QO34tTDa/5Yww25G3sXl78B+QlQU:+W6UJROHxR6OIpUhQ/
MD5:	EDA1F3A77082093627D9ED85AEE80D41
SHA1:	2BEB2FCA871965A1A7C7C0EC39EB98407C2A52F8
SHA-256:	EF072B9AE1B3C29F94781C86BCDFDB71C1E06BBC7A2F05BC65DCFA2EEFDDE02C
SHA-512:	A2E191549E0E914462F87E5680F37AE02FA4393D54F8DFC2B7A51AA32159A0AC9AFAAC51DAB707E00758439C083342B187559FACB79E7C1AD579B5E7168A605C
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFloatingRounded",. "html": "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

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21991)
Category:	downloaded
Size (bytes):	22167
Entropy (8bit):	5.438181299581006
Encrypted:	false
SSDEEP:	384:P4m/+oi/7ADufFzOZOISBmoq2b8l3WOHctYfZcqUW8RXRfX0vv:oHdkTSwoxW/fZcqX8xpEvv
MD5:	4A7F6BE2ADDF88491D421527D91DA4B2
SHA1:	D6349AD3B401EED202B732AFFB50DD8A7C5068B3
SHA-256:	7CAFD0160C369FC5E17EEB51EF5C7EDA55B6A5BE3A6C979F8A624DF9A7F7DB7B
SHA-512:	46DBE7BCC2F8BBA7CC81E814409CB14830FCA7A28929245088CCA94F9429F4CDBDE2148D60F21EDF108769BF965A2E7BE91F2983FB3DE6E95A4E6A5722ABF36B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.9368.js?cs=0eb35d8aa9e3f259fcf0
Preview:	/! For license information please see signing_iframeless_mobile.9368.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9368],{920072:function(e,t,r){var n=r(149924),s=r(810152),i=r(295032),a=Array,o=Math.max;e.exports=function(e,t,r){for(var u=s(e),h=n(t,u),f=n(void 0===r?u:r,u),c=a(o(f-h,0)),l=0;h<f;h++,l++)i(c,l,e[h]);return c.length=l,c}},147972:function(e,t,r){var n=r(920072),s=Math.floor,i=function(e,t){var r=e.length,u=s(r/2);return r<8?a(e,t):o(e,i(n(e,0,u),t),i(n(e,u),t),t)},a=function(e,t){for(var r,n,s=e.length,i=1;i<s;){for(n=i,r=e[i];n&&t(e[n-1],r)>0;)e[n]=e[--n];n!==i++&&(e[n]=r)}return e},o=function(e,t,r,n){for(var s=t.length,i=r.length,a=0,o=0;a<s\|\|o<i;)e[a+o]=a<s&&o<i?n(t[a],r[o])<=0?t[a++]:r[o++]:a<s?t[a++]:r[o++];return e};e.exports=i},299584:function(e,t,r){"use strict";var n=r(800376),s=r(749352),i=r(179132),a=r(540996),o=r(913008),u=r(317928),h=r(930008),f=r(158648),c=r(988048),l=Object.assign,p=Object.defineProperty,g=s([].

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4128
Entropy (8bit):	4.956981032926482
Encrypted:	false
SSDEEP:	96:npyI7r40wg+SnvpiF5GKxYa6AyXycujW54jXjJjeZ5uf:F7mn+RiFf6vXULzJcy
MD5:	EAF41810F2A8AA2825B4E143AF23C8A0
SHA1:	E5B4FB39986556829A37F416449D600C3ED8ACEF
SHA-256:	890130D8F7D52C85D10349FF5D9208DFE1BBF9CC0F01BE1727AE30EADB31BE05
SHA-512:	571051D8A44B44E72DD847252BCD62A53CFBB8D05E74EAE6B66FE810BDE3ED3038E2762F8D7C3D62EA3EC1B0AE441A73C0DAB1B38287271A30566CBD2FE2E73A
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25c02da3-4d83-47e6-b080-f533c2d99f75.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"25c02da3-4d83-47e6-b080-f533c2d99f75","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"b1bc669c-4a59-448c-8dfd-b66e53e04f4d","Name":"Quebec","Countries":[],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"default":"en","fr":"fr"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Osler Quebec Corporate Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id":"25cdfee2-024b-4a52-a054-a6e05347c926","Name":"Osler Corporate Global Audience","Countries":["pr","ps","pw","py","q

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	257
Entropy (8bit):	4.936853809456331
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4sl5RIFnzrnUg3QxUn3voPt0Bd+5IABcL0n:trwdU/i3vqZ/nnGevR2RBcL+
MD5:	6E132855B6DDD5C7A1FA7DAD2C9FE964
SHA1:	0342D3665682749F7C312B8B1EE6A169FA4C68C5
SHA-256:	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
SHA-512:	F3314BB8BFC2D262F98FAE116DC50A38BDB2A6AD2D6950BD42BBA43457A934B68894AD8C0952E7C2286E31433185DA1424CAC3048CE47AB0B2A0338C14210761
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/img/mobile-web/mw-comments-24x24.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M13.36 15H20V4H4v11h5v3.114L13.36 15zM4 2h16c1.105 0 2 .895 2 2v11c0 1.105-.895 2-2 2h-6l-7 5v-5H4c-1.105 0-2-.895-2-2V4c0-1.105.895-2 2-2z" fill="#333"/>.</svg>.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	5.674063352153878
Encrypted:	false
SSDEEP:	48:1iQHB86bRgyftWcdrJSEghkq8KFe75079NnCobfp1VbIOHVb5aCc:ZhRBftWErJehL8mS079NnC43JIEJ5G
MD5:	E6872C90592C095AC4B05FC37CB2F2C0
SHA1:	B71B3312EC6BD7CBAADD947CC95042496E0410F3
SHA-256:	509F2E49500FBAEB5D7E1959071F2922B693D0135080E2871E124EC8BDD08BB2
SHA-512:	0954A67931C7FE8E5918D35B35066C20E7A3ABDF477BA92FA48C3783CBA390C41C8C933C40B2E06E7916D3F3F6F565543EC21BAE822933941F26F3F13C5E6651
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otCookieSettingsButton",. "html": "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

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62585), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	246560
Entropy (8bit):	5.363677245530164
Encrypted:	false
SSDEEP:	3072:MivgpLGrbsYWZSA4boJDEFjek2X+WuVYKySfqgVyDCevgk5J0CVubZYOgHWSAD:L4GrbsY2FLDmu+YKySODCeXJD2SE
MD5:	1B15E5C099FE16B350195BF371DFF43A
SHA1:	FF1E1EE7979DAB7CF219DA0C5105927836A6826E
SHA-256:	64330E8B5F3794CE9F2615BB5B2FC245F5C71848F65B2990F459465F4AED24D4
SHA-512:	91EA46B83D1A0C2EFC009EE1B33CAF17CB6B9EB36306EC69B9A89CBA2F3BD1C53DE23BFF8387B365BDE6BE02950BF735E7E4647E41690E203FE1680109469F44
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2096.js?cs=70f65921e029e60a0b0d
Preview:	/! For license information please see signing_iframeless_mobile.2096.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2096],{407300:function(t,n,e){"use strict";var o=e(80572);t.exports=o},798981:function(t,n,e){"use strict";var o=e(984876);t.exports=o},56928:function(t,n,e){"use strict";var o=e(640416);t.exports=o},698092:function(t,n,e){"use strict";var o=e(717288);t.exports=o},364868:function(t,n,e){"use strict";var o=e(836080);t.exports=o},200008:function(t,n,e){"use strict";e(438256),e(402440);var o=e(843696);t.exports=o.Array.from},871763:function(t,n,e){"use strict";e(653204);var o=e(843696);t.exports=o.Array.isArray},278156:function(t,n,e){"use strict";e(461120);var o=e(835536);t.exports=o("Array").slice},332724:function(t,n,e){"use strict";e(835571),e(438256);var o=e(709184);t.exports=o},121472:function(t,n,e){"use strict";var o=e(509080),a=e(278156),r=Array.prototype;t.exports=function(t){var n=t.slice;return t===r\|\|o(r,t)&&n===r.slice

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47896, version 7.504
Category:	downloaded
Size (bytes):	47896
Entropy (8bit):	7.990982746009342
Encrypted:	true
SSDEEP:	768:9oMz8EuX4YlB68N64eXCzCq/yUo8sW8XM1MbRqPjNnUiyeQi42pEsd7a5ZaC:6fj045CQyUo8s/bRqGKjDiZaC
MD5:	2FD63E87FD86732C2142D85F85F9C133
SHA1:	066132FC5B8A3B67747FD4AE22518480BBBE75F2
SHA-256:	3AFC7843808C11784A03F2A12DCC3384290EBA79A270F1D10904402D92A55099
SHA-512:	A4D7DF2E14C111C39C6B4D864A5F746C22A59B2325B11582466EBE551EEF3802876A439E82BFEA811367A8D9AD79E6198FB64AC35F617D7FFDAF998AE6269CF1
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/fonts/celeste/CelesteWeb.woff?
Preview:	wOFF..............q........p............... DSIG...........DC+.GPOS.......q..$..n8GSUB...`...<........LTSH.............t.POS/2...$...\...`..X.cmap...............;cvt ...X..."..."....fpgm...........s.W.5gasp.............\|..glyf..!X..g......).hdmx...d......%.....head.......6...6.)q_hhea.......!...$....hmtx.......M....m...loca...\|........R..maxp....... ... ...\name.......G.....m]post...\...\|....mm[.prep.......n.....!L.........s.._.<..........T.)........2..................x.c`d``........?F..Y..."..'..s............t...s...............s....x.c`a..8.......I...a..ftaPax.................A!....=...0(...t..'....L<.@. 9.L..J........"x..[h.E...3.5v[.I..[..lh.).$....!.Vc@.."XD.m.A.....>../UZ....k.KK1../J.".. EK-F,%.A.\|.f...<t.....3s.c.....'H(e....R.m.V...T.Y.&3.6d..P.I(.)c..4xJ.6.......V...l.r...+g.i...f;..D...ye...5.z;.....7.(.y_u.........k+Tc.S..`w...1m...n..W.}..F..Un...O.....O..~.&{...){G.+...Z....k....[...u.j%..S.9../8.......73....6...=.UiO.V.6.......q.b.....r

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151367
Entropy (8bit):	5.275957934672216
Encrypted:	false
SSDEEP:	1536:4jeAJsNJHoz3+2OLAcIKhuCS6+80TKVT2DNA8TNtCtECnmXumUY2L:4ERIO25cIfNtCtEC7
MD5:	2B43B8CA5D21EAE149E692ABA1EAD3FF
SHA1:	1D2E94FA9EA1F27D2D0F76495465765E48C35020
SHA-256:	DB25962C7BDA874307CFE656C88986288AC453743A13767F4ABBB8B21C7557EE
SHA-512:	878DC4DE3F252AC1E67379157FD4DCEA6855FDD30E34B452FF216A52EC7D6DBFFAEEC544111A235212B715C78B0391B2B5DD83620B44A0A3D85A5EBC17332D79
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/js/dist/Osler.min.js
Preview:	if(function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).dialogPolyfill=t()}(this,function(){"use strict";var e=window.CustomEvent;function t(e,t){var i="on"+t.type.toLowerCase();return"function"==typeof e[i]&&e[i](t),e.dispatchEvent(t)}function i(e){for(;e;){if("dialog"===e.localName)return e;e=e.parentElement?e.parentElement:e.parentNode?e.parentNode.host:null}return null}function a(e){for(;e&&e.shadowRoot&&e.shadowRoot.activeElement;)e=e.shadowRoot.activeElement;e&&e.blur&&e!==document.body&&e.blur()}function o(e,t){for(var i=0;i<e.length;++i)if(e[i]===t)return!0;return!1}function n(e){return!(!e\|\|!e.hasAttribute("method"))&&"dialog"===e.getAttribute("method").toLowerCase()}function r(e){return e.isConnected\|\|document.body.contains(e)}function s(e){if(e.submitter)return e.submitter;var t=e.target;if(!(t instanceof HTMLFormElement))return null;var i=d.formSubmitter;if(!i){var a=e.target;i=("ge

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x350, components 3
Category:	downloaded
Size (bytes):	249722
Entropy (8bit):	7.9824737853253485
Encrypted:	false
SSDEEP:	3072:4Sof0Rv2eWyLAhJmwJ6uxE5ZX0OyeKeNZDwEpwmdHkrVi1gR5gyRh8Z0wpSeKmTz:Fof1FoukTjNFwEp3oKg55RefTtIFxC
MD5:	C3B8E92A86CE1D3BF38B74B85766EFBB
SHA1:	3FB01B8241DC49EF2E8DA92353AE8807E91211DE
SHA-256:	9F1B04E3E5723EF5EFBC3F299E102D9ABB0EC199CAA6D83C14C35DB6F02DCF0B
SHA-512:	0DA278FB60E38AC9C0249E0EB52ED89E883F891CBBD8345997A47F5837B975573B150C72D39D951582DC93E2AF67516BD38EF0182357338A55D1C61B45D15CEF
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3149
Entropy (8bit):	7.733601579621352
Encrypted:	false
SSDEEP:	96:f82WQUWjWVy1yCmSnTIiwz3vFgwcta2Yt:3dI+kXz3vFgwUaht
MD5:	C618E96B15C5056127EC99F052754760
SHA1:	17CA0AB0265DBF6BA880E1F2A48B93CA1B59773C
SHA-256:	FBAEE2D3DD96D95372FD5406E9AB44E3494A380A158C7CCA7D26C245EAC33540
SHA-512:	EADBFAEC6C2E109D7CE8D84DB7F79A800E54435497C394CE3EB557BF02BFA4008BB303E560B3D8F09268CA43A10F73CBF26DDCFDD22052C7F4ABCB80ECA3107B
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/images/logos/white-logo.png
Preview:	.PNG........IHDR.......).....5A.;....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:2AC64B8771B811E490D9C0ADD797AB81" xmpMM:DocumentID="xmp.did:2AC64B8871B811E490D9C0ADD797AB81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2AC64B8571B811E490D9C0ADD797AB81" stRef:documentID="xmp.did:2AC64B8671B811E490D9C0ADD797AB81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..W]....IDATx..\...U.....].Y.%.%.)..j....21...C6f5.A..IS3M.\R.a...&j(...k..K.t.lbwY..;..u........3.\|...s..s..\../.Y.`

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7938)
Category:	downloaded
Size (bytes):	8109
Entropy (8bit):	5.138907230789502
Encrypted:	false
SSDEEP:	192:14rl8Oxxm9nN4ipLI64aEfwVFcCO3EKKZUdEKyM9a+VtN6p6jLqysXM:14rl8OxWnNDpLI6nFcCOjbaW5H
MD5:	4E4F6EF13840E47059B7C2194270E625
SHA1:	53BC1DDB76A5C965CC9FB5182903942C8D4C98C2
SHA-256:	0258CCB27A2C5E5E22EBC7231D1368B62483887D10863865A7695E91724ABAF7
SHA-512:	85C7EF20E2D65ACD37BD93916BA17BD293DBAA4CEF6FF02C269CF03BBCD503351B6F2C73F73D2AD0C77452C87E1033B64ABE63000BC4CF7BBC00BED931326028
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2515.js?cs=8bc887e594720e178c1f
Preview:	/! For license information please see signing_iframeless_mobile.2515.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2515],{942515:function(e,t,a){a(964900),a(321992),a(905004);var i=a(752856),n=a(737588),o=a.n(n),c=a(441988),d=a(642344),r=a(349268),l=a(507416),s=a(799020),h=a(486672),u=a(213224),g=a(387660),p=a(867712),v=0,f=c.c.extend({tagName:"div",className:"modal",events:{"click .close":"cancelOrClose"},dialogId:null,uri:null,useCache:!0,$lastActiveElement:o()([]),initialize(e){},mapUriData(e){return e},update(e,t){t=t\|\|{},e=e\|\|{};var a=this;function n(e){var t=!!e;if(s.c.envelope){var n=e.resources\|\|{},o=s.c.envelope.resources\|\|{};(e=i.cp.extend({},s.c.envelope,e)).resources=i.cp.extend({},o,n)}t?a.reload(a.mapUriData(e)):a.render(),a.$el.attr("modal-ready","")}"envelope"!==this.uri&&s.c[this.uri]?(n(s.c[this.uri]),t.afterUpdate&&t.afterUpdate()):this.uri&&!s.c[this.uri]?(t.showProgress&&l.c.trigger("progressStarted"),o().get

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	420655
Entropy (8bit):	5.349824066254744
Encrypted:	false
SSDEEP:	6144:9XqCzGIQnxhqPIMs/7ooynNUO7yWE7qjEhQBLnqvxyYKFKs:1qjnxhqgUE7qFnq6V
MD5:	E299B47727F3FBA334AD8BD6109CAB04
SHA1:	A5B4E82B461552AA131DE3F244D2BCD89F3FEF73
SHA-256:	27FF6F8B30F633A9E1954D6CC94756127292AA99560255E414BBB75B37416594
SHA-512:	2937C88A68B603D253E69BE88B802FFE619DF35E143B1222B46DF96DED15970F219BDBB65B1D65FCE003867507476B7A6E5C711CD505755641E486C10B2DC8E1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202308.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65438)
Category:	downloaded
Size (bytes):	107155
Entropy (8bit):	5.532438398424527
Encrypted:	false
SSDEEP:	768:Nemk+IVmSCc0Vpm13gV1e/JZ8Q7h3pPGYgsB1iVVvtbKTL4LQ+gcR+4giRbeRO5X:kVHEpm13gGnkE1iY4LQqTGs1Vdq+7
MD5:	CE0EC0BA273485291EBBFDEF0CCEA139
SHA1:	D205F53A8BD82FEE05521AE6A17741AA33F27B37
SHA-256:	00F3D2C14F26C4890046AA4D5BDAAAAF3625EBA41E11FDC19C24699FBE0D0442
SHA-512:	650480F5E4F6946BD0A9EA05B489C3CF5F36F7C91355636F158EEBF94F4A0633C87B27D8174E28F3167524076F8C73EA843091B601FDA6E5C0C8077EB45F9B4E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.optimizely-sdk.js?cs=2875f1dcf350103e8c90
Preview:	/! For license information please see signing_iframeless_mobile.optimizely-sdk.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4596],{884364:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(831100),i=function(){function e(){this.errorCount=0}return e.prototype.getDelay=function(){return 0===this.errorCount?0:1e3n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT[Math.min(n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT.length-1,this.errorCount)]+Math.round(1e3Math.random())},e.prototype.countError=function(){this.errorCount<n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT.length-1&&this.errorCount++},e.prototype.reset=function(){this.errorCount=0},e}();t.default=i},755096:function(e,t,r){"use strict";var n,i=this&&this.__extends\|\|(n=function(e,t){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)t.hasOwnProperty(r)&&(e[r]=t[r])},n(e,t)},function(e,t){func

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	1135196
Entropy (8bit):	5.54793087263863
Encrypted:	false
SSDEEP:	12288:aVPfZ+3K7VQcbCKAIrGVcFHHrl9eKFtm7Ly1T:q+3K72ceKAI1Nrl93Ftm7Ly1T
MD5:	0EB0EE030670BC0718AD1B6D4CCBCCF3
SHA1:	CF03A01FD61F66D9D3F419A63B47980707EE9D71
SHA-256:	1106A8174A497260805776E926C4B40C36B51E7D9F0014B14C98308D8DFFC6B2
SHA-512:	8D7F3D47948D47E70ACF3824C9977E06BBDBB0F9DA5C5A5763A9CFFCD5D9841216A23722ACD7A29EC12C730CD81B85DE1E0881A0D583F9562728EE438897D044
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.3444.js?cs=12612e1d13678ed781a1
Preview:	/! For license information please see signing_iframeless_mobile.3444.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3444,364],{439587:function(t,e,n){"use strict";var r=n(497352);t.exports=r},610076:function(t,e,n){"use strict";var r=n(170560);t.exports=r},520456:function(t,e,n){"use strict";var r=n(959304);t.exports=r},853180:function(t,e,n){"use strict";var r=n(567040);t.exports=r},958944:function(t,e,n){"use strict";var r=n(52684);t.exports=r},557896:function(t,e,n){"use strict";var r=n(840056);t.exports=r},575684:function(t,e,n){"use strict";var r=n(471800);t.exports=r},401312:function(t,e,n){"use strict";var r=n(616812);t.exports=r},742704:function(t,e,n){"use strict";var r=n(245380);t.exports=r},840944:function(t,e,n){"use strict";var r=n(25928);t.exports=r},10448:function(t,e,n){"use strict";var r=n(876804);t.exports=r},215876:function(t,e,n){"use strict";var r=n(535564);t.exports=r},431720:function(t,e,n){"use strict";var r=n(855772);n

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	downloaded
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11685)
Category:	downloaded
Size (bytes):	11854
Entropy (8bit):	5.26546499828219
Encrypted:	false
SSDEEP:	192:64EAhy6YpOKpRmYrY+LS/ABuz/hqycEZAtfqI+nuVaF+68KrxgzGIn0Z+gxg9Qyc:64EPpRmh+Xuc7t3+nuVI+mrTAEZL
MD5:	96B55250BAAA04EF2DAC631B6190877F
SHA1:	5E0AA57A41969344DC930F24BF236EDA65AC3CBC
SHA-256:	371B1F93965BA791AD0A4AD4919813FDCE683CAD4791F3C9DA8C9E222BB72767
SHA-512:	A5B9CDD751DF548D4C49695D87F3F0F2B646D18AFF266EAFB183CBC9C9BCFC21EB56288C941EC82B1F520F00ED45ED54918C8050C6A765261A3B25EFFF8DC9E8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.884.js?cs=401df0d909d9ecb50c0e
Preview:	/! For license information please see signing_iframeless_mobile.884.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[884],{470884:function(e,t,r){r(855331),r(971088),r(112084),r(853224),r(761088),r(947192),r(232048),r(427164),r(625744),r(211056),r(331432),r(819672),r(284204),r(726456),r(185179),r(321992),r(480168),r(394976),r(685120),r(439952);var n=r(395132),o=r(770572),i=r(278068),a=["SearchExperience"];function c(){c=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@iterator",s=i.asyncIterator\|\|"@@asyncIterator",u=i.toStringTag\|\|"@@toStringTag";function l(e,t,r){return Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{l({},"")}catch(e){l=function(e,t,r){return e[t]=r}}function h(e,t,r,n){var i=t&&t.prototype instanceof g?t:g,a=Object.create(i.prototype),c=new I(n\|\|

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 33752, version 0.0
Category:	downloaded
Size (bytes):	33752
Entropy (8bit):	7.984139047245452
Encrypted:	false
SSDEEP:	768:8VyJ64rZFHKtB7wvkAKE0/40pQeOSHKOfITzE1SRSgyTAIW4l8:mbeZJOSvkFB/40p/HKOfI8gyTAcC
MD5:	4DE7535F6F5DF8D5437C21C068DDB0EC
SHA1:	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23
SHA-256:	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
SHA-512:	E2A9B45F69BD1CBCF0D5F3710BECFACF6A28AF0A9FD034262F6AF4803628DADCE4C2FCC385758F88130AB68D362F3694ED786D0971CF7FD7E8FAF6CD1C2860DE
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/maven_pro_bold.woff
Preview:	wOFFOTTO...........x........................CFF ......Om......FFTM...h........Z...GDEF..T........ ....GPOS..TH..-....DiP}7GSUB..T(... ... l.t.OS/2.......H...`...Ccmap.......\|....#G..head...0...3...6....hhea...d... ...$.U.>hmtx.......Q...X.Xl7maxp..............P.name.......4....N...post........... .j.fx.c`d```d8...l<..W.n...8..2.F.../..)...:..&.(..v...x.c`d``../........g.2.EP.5.......P.....x.c`b.......u..1...<.f........p...).,fP`P...._....N.u05..X.@r.L.GP..x.m.1O.A.....(...XL...K....+.[...-..@.A....6..K...e#.x..\|.......^.p..PzV...s...=7q.O..z..+.xn.R=Q.....m.Y.......s..><........6n..c.lq@..klPC.....!".,AJ.`N.e.&.L....F..7g..&..w<.J...P..M-..@.Q.Kz.yn.)dRg...B..J...v:....gR.vFC..N.2....PF0..=.)V.,..{..LY.g"...;9..]p..2n!f....IW67..a.%.mO..-......iXax.c```f.`..F..8..1..,..........P..a)........L..(.(H).)().)X).QTz..........@....1.AU.+H(.UZBU2.................n...}.`...V=X.`.I...Q8.z....#..A.L.,.l...\.<.\|...B.".b...R.2.r...J..j...Z.:.z...F.&.f...V.6.v...N...n...

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1479
Entropy (8bit):	7.794311160891987
Encrypted:	false
SSDEEP:	24:WmdQWIr0fKpyVxluXUN5g6xFABlSvck2Li7Ba8WFujSCuYOrkzmpc:WvWUCK8jukvg6xFGlkck2u7BbWFujHuW
MD5:	7A6D6AB954A5FBCE1FF5DBF7F65E0C31
SHA1:	374020E34E814D0E899E7608BED7ACF6DF5933F5
SHA-256:	1F826E9043CDF883AB2FD1F713B7CC0C6B8F43EC0F9D9D8A24E3A43A8C616D2C
SHA-512:	25E1848E781315A27940B6B56AB7F95D7455E34772C8954B7807C1D88DD0E740E7E866BC30B0818725D550EF09420922C030FEDF9E7124C1C612FFAE95C8F0CA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sRGB.........gAMA......a.....pHYs..........o.d...\IDATx^.{..E...jiv....%......EW+.."E.....Y.-.V.t'....PB.,...E&.bHQfV.v..fdv..;3.{..z...9....f.3..;7...U.V.`.Uv@..; .d...l....6Ye.......MV...&..`.Uv@..%.R.Z..\............X...K.[.j.@..L...0\|.v\|w8.n.Ca.L....k....w`&.h:6.H..e..<...;p.e.......0.~.O.]XC...[y>.~./H[..".m.9.....:OY.....N...r......m\.o9.5*..&b....:....cy\|....\|..<..0.K`c.....p.D......[..AG...2.....0..W`.m.......`.\|.?.i......t........a...l..7.b\....\|c.F.k.B...".J.P.'..)..a.i.u+.9.F..9...v!..a-.o.4.q8.A.N+E..g`.\H...;B....$6......x7......Ey...B1....L_p.Y...E.F.<....cYUFe....C.#\.........VzS......^...h./...T.].NK.u....W..P...B..7.(..k.:......[R...u......2J.........iF...ex:...a..\....bse.....s.8..........;w..5..4...9...LhB.8.......D..nM'........'....q:....o...p$...:.v.C...q^..f.o.(p..Q.:..G...v.s.x...V4+.........ca*..4.bd.....Qp.+..(.0...g.....{.S....J..)......tpo..F...m...v@q..I...1.=...S.sA.t....Oh

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 41, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3149
Entropy (8bit):	7.733601579621352
Encrypted:	false
SSDEEP:	96:f82WQUWjWVy1yCmSnTIiwz3vFgwcta2Yt:3dI+kXz3vFgwUaht
MD5:	C618E96B15C5056127EC99F052754760
SHA1:	17CA0AB0265DBF6BA880E1F2A48B93CA1B59773C
SHA-256:	FBAEE2D3DD96D95372FD5406E9AB44E3494A380A158C7CCA7D26C245EAC33540
SHA-512:	EADBFAEC6C2E109D7CE8D84DB7F79A800E54435497C394CE3EB557BF02BFA4008BB303E560B3D8F09268CA43A10F73CBF26DDCFDD22052C7F4ABCB80ECA3107B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......).....5A.;....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:2AC64B8771B811E490D9C0ADD797AB81" xmpMM:DocumentID="xmp.did:2AC64B8871B811E490D9C0ADD797AB81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2AC64B8571B811E490D9C0ADD797AB81" stRef:documentID="xmp.did:2AC64B8671B811E490D9C0ADD797AB81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..W]....IDATx..\...U.....].Y.%.%.)..j....21...C6f5.A..IS3M.\R.a...&j(...k..K.t.lbwY..;..u........3.\|...s..s..\../.Y.`

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZMakmllNIbNVJUHTDPpvzmJhtQwH6GTOa46RoBltd7k6KymeJGxkWxehYM52nU-nmQ2&t=638399175142847209
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=5304, bps=230, compression=none, PhotometricIntepretation=RGB, description=abstract city lights at night, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 400x350, components 3
Category:	dropped
Size (bytes):	78968
Entropy (8bit):	7.840408835361954
Encrypted:	false
SSDEEP:	1536:upEp9E90Pmj1t2+KH487QEPFRR4sodZSycmFq2D5Um:oC29/j1lqFBugyqRm
MD5:	1E3E69BBA5353EE825E24A64FDC31C55
SHA1:	41087F29F587A84A83943BBB8730D08274FEE5D1
SHA-256:	6979AFCCAC0C47EAD6C42E13BA605643AFC1931A96188339D96CA3F4206CC561
SHA-512:	17B0FBF911D9C557EA44794798A38F1BD6BD1F64AB5BEBC8D356F3CA6AB40976F2EA12FBBD25320ED1BCD13B7249E97A1714D837415AC2E6DEEF328AB18D22FB
Malicious:	false
Reputation:	low
Preview:	....._Exif..II*...................................................................................................................................................!...............(...........1.......)...2.......H...;.......\...i.......d.............abstract city lights at night.SONY.ILCE-7RM3...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:33:22.Nikada..%.........&..............."...........'...........0...........2...................0231........6...........J...........^...........f...........n...........v...........~...................................................................................^.......................................................................................................................#...................................................2...........4...............................2018:10:18 15:12:38.2018:10:18 15:12:38.....@B..f...@B...-......................^.......f7:.....f7:.............^.......^.......................35mm F1.4 DG HSM \| Art

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21822), with CRLF line terminators
Category:	downloaded
Size (bytes):	21987
Entropy (8bit):	4.755795757861902
Encrypted:	false
SSDEEP:	192:P1GP/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:uk5yWeTUK1+KlkJ5de2UWmyTfwYUa2
MD5:	ED05BFD415DF47C95C9F655B7A1FC6D4
SHA1:	2EF7F5881A8AF7A2772F3829F5778A09AC53A1B1
SHA-256:	50DBECB3ED007AE3C814E0C220F9E9A153D02FBAFA3D9465C4B222042976A8EC
SHA-512:	65F2A7EDACF4626B4F5288D99D15CEE0251DB77A67FA880103219BA86A65AC2211E41FED4303C6B45DAADBDB7ECD08FA982FF6D30E2C4A5D1C179177AF41CA49
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/fonts/font-awesome/css/font-awesome.min.css
Preview:	/!.. Font Awesome 4.2.0 by @davegandy - http://fontawesome.io - @fontawesome.. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License).. */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.2.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.2.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff?v=4.2.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.2.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.2.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.921928094887362
Encrypted:	false
SSDEEP:	3:acDan:zDan
MD5:	1000A6CAF7299F030F5C73974CCD617E
SHA1:	44C1943894BE0A43D5F1176C085F82A9CF75DAAA
SHA-256:	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
SHA-512:	5864B198DC92823E2F166D2F594BF37B28F53CC0786D4680EB47B3B91D8C3ED831C446AF833EBF5E43A2F03336B8EBE17DDAC57AF5B03F835DE7F15FC551D294
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/cdn-reporter.js
Preview:	window.cdnReport();

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16402)
Category:	downloaded
Size (bytes):	16571
Entropy (8bit):	5.49235449290822
Encrypted:	false
SSDEEP:	384:k4YJBmXWsREQc2tKcLqcuskVHMrpESpJDArKO3Ara9d6r8Io7WdSmJY/jj:iJBgWsrkiJudVHMrpESDw3KInIBd6j
MD5:	68161CACDFD7F74EBB7AF7597DD8E850
SHA1:	7ACEFEB295AB703650F9EE1182D528620D8C28AC
SHA-256:	473FDF13AE0C2DEEF522C62100A6B208E7C5AF87B1264CC9F5EA6181B6319423
SHA-512:	D8930108C987E9FECA762AD9E8AD36C41119EB7770BC60481BB1C5498041E15BBFEDC0845FDDE112DAFBC0B1CBB47D710A4DECDE0D03E61BC0B7A8BB6EDF09EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.580.js?cs=ff525cf25d60ede3ea6a
Preview:	/! For license information please see signing_iframeless_mobile.580.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[580],{434008:function(t,e,i){"use strict";var n=i(446331),o=i(482576),s=i(296648),r=i(810152),h=i(511452),a=Math.min,c=[].lastIndexOf,u=!!c&&1/[1].lastIndexOf(1,-0)<0,d=h("lastIndexOf"),l=u\|\|!d;t.exports=l?function(t){if(u)return n(c,this,arguments)\|\|0;var e=o(this),i=r(e),h=i-1;for(arguments.length>1&&(h=a(h,s(arguments[1]))),h<0&&(h=i+h);h>=0;h--)if(h in e&&e[h]===t)return h\|\|0;return-1}:c},873320:function(t,e,i){var n=i(622808),o=i(434008);n({target:"Array",proto:!0,forced:o!==[].lastIndexOf},{lastIndexOf:o})},635904:function(t,e,i){"use strict";var n=i(800376),o=i(5775),s=i(158648),r=i(810152),h=i(480972);n&&(h(Array.prototype,"lastIndex",{configurable:!0,get:function(){var t=s(this),e=r(t);return 0==e?0:e-1}}),o("lastIndex"))},674336:function(t,e,i){"use strict";i.d(e,{Cy:function(){return n}});class n{constructor(){this._dat

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	dropped
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	94757
Entropy (8bit):	5.441212591752589
Encrypted:	false
SSDEEP:	1536:ALFDOPWMZMl2fsgGbe3N+oDM0RQERMNBQaxpp:ALFD/MZMkEX0+oDGnpp
MD5:	FBEBF89AD3D0B551C8F45F0A4A1A8B81
SHA1:	BC123A6E618C37D3521A43FBE0EB8794B7532FD9
SHA-256:	F96DE5E02EE3826A8849C6B23C4845EAAC1FC5A8592B5B379E477B4BA787541B
SHA-512:	1B35596CB800179C06F9C933E674891410453907023CA52F130DA41DA626F7CFE90E8E8B808BBAE7EBA4A63DE83E65918AEA2A065478D0AC9C43DBB997B8B1DC
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.1038.js?cs=243cd7ab26978187facc
Preview:	/! For license information please see signing_iframeless_mobile.1038.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1038],{634596:function(e,t,n){"use strict";n(644564);var r=n(835536);e.exports=r("Array").map},63012:function(e,t,n){"use strict";n(899920);var r=n(835536);e.exports=r("Array").sort},563104:function(e,t,n){"use strict";var r=n(509080),o=n(634596),i=Array.prototype;e.exports=function(e){var t=e.map;return e===i\|\|r(i,e)&&t===i.map?o:t}},80900:function(e,t,n){"use strict";var r=n(509080),o=n(63012),i=Array.prototype;e.exports=function(e){var t=e.sort;return e===i\|\|r(i,e)&&t===i.sort?o:t}},996256:function(e,t,n){"use strict";var r=n(75120),o=Math.floor,i=function(e,t){var n=e.length,s=o(n/2);return n<8?a(e,t):c(e,i(r(e,0,s),t),i(r(e,s),t),t)},a=function(e,t){for(var n,r,o=e.length,i=1;i<o;){for(r=i,n=e[i];r&&t(e[r-1],n)>0;)e[r]=e[--r];r!==i++&&(e[r]=n)}return e},c=function(e,t,n,r){for(var o=t.length,i=n.length,a=0,c=0;a<o\|\|c<i;)e[a+

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2832, bps=218, PhotometricIntepretation=RGB, description=Abstract neon colorful background. Creative bokeh. Selective focus. Template for design. Space for text., manufacturer=NIKON CORPORATION, model=NIKON D700, orientation=upper-left, width=4256], baseline, precision 8, 400x350, components 3
Category:	downloaded
Size (bytes):	59879
Entropy (8bit):	7.766010675091117
Encrypted:	false
SSDEEP:	1536:C0nVndXQZi4nQhO2C5n/018qaWssK/2vYPMVyR9:C0VFQZzMs5/0Gqah7UVy/
MD5:	7B9F8D3856049A7ABB61CA45281DB695
SHA1:	214B22F0D75FBFDD80EBC1AE36DDBA1687138DB6
SHA-256:	637A3A1A899D1A6A36B1FD85AA7F70B4B7749AC2FECFCDC76DAD84630C3E2F00
SHA-512:	52EED46B7470B3CF76C43A2D6CAFC4D36D74FB485431BF259E701208FE6ACAB056DAD4C96388B8EEC4A3F6E73B01F4620FA3B5685DB567D455FB2A9201618AE3
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-400x350/400x350-red-blue-Optical-Fibers.jpg?ext=.jpg
Preview:	.....EExif..II*...........................................................i...............I...........[...................................f...........n...(...........1.......v...2...........;.......................i...........\.........Abstract neon colorful background. Creative bokeh. Selective focus. Template for design. Space for text..NIKON CORPORATION.NIKON D700...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:48:29.Polina Shurygina.(c)Shurygina..&........................."...........'.......d...........0230................................................................................................................................07..........07..................................^...........................................................................................................Z...........................................................................1...........2...........4...+...................#.......2019:11:10 16:27:56.2019:11:10 16:27:56...............

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 49, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4052
Entropy (8bit):	7.80876326704094
Encrypted:	false
SSDEEP:	48:e/ENn2D44uhJ320fImR4cbY5En0oiOfOduNaXGEPIwOzUvVBA3CwZ4kwTcc4LrND:S820VO0fI3D540GiRXI6XRkwTyrNfb
MD5:	D23209078E0CEF2446F406375E8B3E70
SHA1:	C2411FA5E6BCE214BB930E47EB78A161FB2024DE
SHA-256:	308BAA42437ADD66584459A2B9FBCD1934A42B0185876011AC35E5573F0F1C6B
SHA-512:	28DF503861404813EFC44FC322C7CC3477A39F73CA13952D5BBDCF0153783E6A56FD671D3B4FC0EDC7B7F5423B7F83F846078215F20F81DEEE900E25B4D4A084
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/images/logos/logo.png
Preview:	.PNG........IHDR.......1.......){....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B787EEAF34872569"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...Z...IIDATx..]..UU..\A$...uP.'..lT0...G.p......_...iL.X"......N..-AqB#.'...68."\|..2..*H...o.t....9....=..9.........

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58107)
Category:	downloaded
Size (bytes):	375680
Entropy (8bit):	5.548000839680727
Encrypted:	false
SSDEEP:	3072:emKfou2MAZVNSNcyzszbIis8K9CBPIrTWR6/P/IRlfK6St2nBsLqqPVWeOPo3lQ:eNfou2MAFygzbXkozfK6St+aqqPVWlwe
MD5:	F28CEA7961A9730414F7AF1E37C0498A
SHA1:	72F2FF61DDACE3FE40283B3BC090B54B875899E1
SHA-256:	1517F80C1DB9C5DA72FC77906DC20E4BAF1CEA777CAF77ED450954FE6C726823
SHA-512:	698768CFD11B52A488D44F1372B8104A6E394CC9704C93B1BC83235E4926CFDAC010076280EEAC9F7719CC8F5A3F34C86962A379367D3B66A8C5331C0B53EDA1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TWPZT6Z
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"46",. . "macros":[{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":1,"vtp_name":"pageName"},{"f

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16730)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.307127382012041
Encrypted:	false
SSDEEP:	384:t4fK5ybTgZTyTyEmsUJURmJqhpny/Ay82JrHGw3+euhJ21Z7gnf87CQNmc/3v:D5uTgZTy+ERUmAMhYHfHjg2r7gSV3v
MD5:	ACCD21972586665CB525B445132FDF69
SHA1:	AA94DE09663C2BF3E30B7EC8432E3A416A432A13
SHA-256:	280F8BC4429C46BA61F6903E4249777C2704EF7816ED35E5D8D120C87264FCA5
SHA-512:	725182716721D4CB3E5946273A6C97A972E49DDD0EAFDA1643CF47CF8BF5DD17BCE3509C2909D5D7FFBA34D6E6D5258C0291A79D37AC534B0279BA5FA398807D
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2120.js?cs=2623d9b0e32eb7c179de
Preview:	/! For license information please see signing_iframeless_mobile.2120.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2120],{402120:function(e,t,s){s(112084),s(375300),s(454068),s(174016),s(627632),s(757768),s(409624);var n=s(737588),i=s.n(n),r=s(349268),o=s(247601);t.c=function(e,t,s){var n,a,l,u=e.ss\|\|{},p=/^\s+/,h=/\s+$/,c=/[xy]/g,d=/.(\/\|\\)/,f=/.[.]/,_=/[\t\r\n]/g,g=Object.prototype.toString.call(e.HTMLElement).indexOf("Constructor")>0,m=t.createElement("input");return m.type="file",n="multiple"in m&&"undefined"!=typeof File&&void 0!==(new XMLHttpRequest).upload,u.obj2string=function(e,t){var s=[];for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var i=t?t+"["+n+"]":n,r=e[n];s.push("object"==typeof r?u.obj2string(r,i):encodeURIComponent(i)+"="+encodeURIComponent(r))}return s.join("&")},u.extendObj=function(e,t){for(var s in t)Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s])},u.contains=function(e,t){for(var s

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	3.9878907834096475
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HH4yOE9HEEpGlyRHfHyY:YGKed2pHDIiEltDyY
MD5:	A1CB0B2D60ABD78CD4AFD51130704B14
SHA1:	73A4754A1DC9F006CABEFAE9E0713BD6A7EA4C32
SHA-256:	7137416AE47607DA7C495B7636C7B8C58C9DC2C393B936B394AE13BABB25E175
SHA-512:	A3AEBCCEF719900B9D6445F6DD91307B8426517D2A3F24A1778F9F621401829FAAE280BEA6E597DF99E6805E2E0A4C5E9303E20E37E6422B4CFA784DFCB7C97A
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3731
Entropy (8bit):	4.667047536642193
Encrypted:	false
SSDEEP:	96:3c5WT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoQ:3c5WNXK3XuXW5M
MD5:	5CFE3D6D2C014A090996528B94289A65
SHA1:	332F41B0BCBB30B3881FF676469A30C014C83821
SHA-256:	690E67955F1F8D5CBDBBAA1E739EF532A463607B5F7624748C59D8DE54991AB3
SHA-512:	612283727C8FFF6F88B1A2538B3994A154FED3300B8201B0F30BF5117E659D2A599311095C8ADAF2588D59C1823AD175654341A3886967ACF344EC07FDC911A8
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/134024834.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.clarityuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.clarity('set', '_uetmid', m);.. w.clarity('metadata', (function

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (741), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	26679
Entropy (8bit):	5.398172785918541
Encrypted:	false
SSDEEP:	384:wmUIiOCCUP81cr7JFkVpXFvfRbCnb9Cgc8lskFLqPI6WWFpmZRi8SNZ:w+iOrgecvkTXxfmZcrkZLXWHORinNZ
MD5:	4819A0BC5593BAFBB86D8721834385C0
SHA1:	038F57FBA36836A1561FECF24920CB62F0C782F4
SHA-256:	D3330C70BC8B55BD09C17D034B63D6E362F030942FB38DB09771EAFCC0F44E16
SHA-512:	B2AAD6D32A19ABC2CB2D3A5D4E3173944E1C6CAAC08F341A971526494143A2C47786E2F4B2CBCDE4D6BA07A7BE5C4736DBECE4EAEDC63EEAD7F276201B4E02F2
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/en/offices
Preview:	<!DOCTYPE html>..<html lang="en" xml:lang="en">..<head id="head"><title>...Office Locations - Osler, Hoskin & Harcourt LLP..</title><meta charset="UTF-8" /> . OneTrust Cookies Consent Notice start for osler.com -->....<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="25c02da3-4d83-47e6-b080-f533c2d99f75" ></script>..<script type="text/javascript">..function OptanonWrapper() { }..</script>.. OneTrust Cookies Consent Notice end for osler.com -->..<meta charset="utf-8" />..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1.0" />.. [if IE 8]>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<![endif]-->.... <link rel="stylesheet" href="/Osler/fonts/font-awesome/css/font-awesome.min.css">.. .. <link rel="stylesheet" href="/Osler/css/bootstrap-accessibility-plugin.min.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 65452, version 1.0
Category:	downloaded
Size (bytes):	65452
Entropy (8bit):	7.9945249526819975
Encrypted:	true
SSDEEP:	1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan
MD5:	D95D6F5D5AB7CFEFD09651800B69BD54
SHA1:	7D65E0227D0D7CDC1718119CD2A7DCE0638F151C
SHA-256:	199411F659F41AACCB959BACB1B0DE30E54F244352A48C6F9894E65AE0F8A9A1
SHA-512:	E96012D2FCD5DF03C2F7385C9EE2A2932B3909659D59E32BF3155E102EAF9EB7B4B00C5806C892ACE1B8F4BDB58630FB20868AD368C771BD8D2AAD7749B7A399
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/fonts/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0
Preview:	wOFF............... ........................FFTM...D........g.).GDEF...`....... .-..OS/2.......>...`..zLcmap.......G......\gasp................glyf.......6....MR .head...H...1...6.f..hhea...\|.......$....hmtx......G.....$.zloca................maxp........... .V..name.......u...8L"u@post...p...2...bq..qwebf..............S..........=.......S"......"d-x.c`d``..b...`b`d`d..$Y.<...K.3.x.c`f.f........b...........\|........A.+.... ...Q.H1")Q``.....M..x...JBq...x.,.Ow-.........h.";.....O >..,..h.-.UKq...h.N...c.P.&....a.c~0CDN.g....qfO...2.v.(Fn2.(.)..n......Q8..E...$$Q.KRR.....$.R...e..B.B.q$.B.9.P.5.h..a..%.m.p2!....KXb..K.....,..IK........4...2*.........>..z_....l.y..........:...........b';.`RZ.....zS..E=...'..:.J...z.+.C....a....)...6....p.j..............x...\|T..0~.9w.}..-..d&.&.$....a'......... ...P.....V.ZQ..}.b.V.w.....n~.b[.U[.?[!s.?...$$.}....{.>..y..<.....#6....q..$rP.F.5...m......)..C\.i....N\|J.su.qHH.&\.1.l..2....T.J..~$>.\....w$O.(W..9.w.yw<,.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	29385
Entropy (8bit):	5.096323160606681
Encrypted:	false
SSDEEP:	384:22aDjE5+4bQbYqafCuOGV6bhebZb2bAbnMfCKsUw6we3fJVGy:A4CJ1C6Bp
MD5:	868008C8657804430A3DE8DF0AB1A4AE
SHA1:	D7B146F58AA9C6B198CE0A22572976884A080D04
SHA-256:	21065B60430053DAD89C7DC9974D901FAE6F262F18A90ECA5826E9EB3736564B
SHA-512:	B5F05CDB37FB8DF5AAE825334753DE8AA46CB234F54CF164BC865AAD846B055CCFAE64F77864B244D65B152254FD37284DB547A263CC6539C9DC2DB5B4E34AD0
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/datafiles/TbNUKk2WA8BzXGs1sj3K8.json
Preview:	{"accountId": "275532918", "projectId": "20084925044", "revision": "2220", "attributes": [{"id": "20186401010", "key": "isBranded"}, {"id": "20195597153", "key": "isCompletedEmailNotificationEnabled"}, {"id": "20203483991", "key": "isMobile"}, {"id": "20205312882", "key": "isUserAccounted"}, {"id": "20207234882", "key": "language"}, {"id": "20207630262", "key": "country"}, {"id": "20218952064", "key": "isLastSigner"}, {"id": "20330146452", "key": "browser"}, {"id": "20330792890", "key": "environment"}, {"id": "20644900025", "key": "ds_a"}, {"id": "21121790361", "key": "IPAddress"}, {"id": "23060870973", "key": "senderAccountId"}, {"id": "23767381356", "key": "branded"}, {"id": "28244570321", "key": "recipientEmailDomain"}, {"id": "28335080019", "key": "site"}], "audiences": [{"name": "Force Enabled PSP Sender Accounts - Prod", "conditions": "[\"and\", [\"or\", [\"or\", {\"match\": \"exact\", \"name\": \"senderAccountId\", \"type\": \"custom_attribute\", \"value\": \"1d647807-efdb-46c6-

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:5FSEY:5ox
MD5:	3FE21113E68F120DDF55D8906EC0530A
SHA1:	7C9C8F2C2136643062E670560C64176A0050F432
SHA-256:	8CEF1CD761D073E3DE100C06058093D04DA7ACE00A705F98C4D1E81DE42CBFC8
SHA-512:	03C89BB8E7CD388F16FAD76F2127DCC7933314BAB9ADF9337CC5A6DE5266162FA71E097422C0E9C6D3B91DF422307C6174B2007F8F195E13CFC4AE0F9B3375B3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnLDT2N0qCXrxIFDRQuUQ8SBQ2Ch3s1?alt=proto
Preview:	ChIKBw0ULlEPGgAKBw2Ch3s1GgA=

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4722
Entropy (8bit):	5.674063352153878
Encrypted:	false
SSDEEP:	48:1iQHB86bRgyftWcdrJSEghkq8KFe75079NnCobfp1VbIOHVb5aCc:ZhRBftWErJehL8mS079NnC43JIEJ5G
MD5:	E6872C90592C095AC4B05FC37CB2F2C0
SHA1:	B71B3312EC6BD7CBAADD947CC95042496E0410F3
SHA-256:	509F2E49500FBAEB5D7E1959071F2922B693D0135080E2871E124EC8BDD08BB2
SHA-512:	0954A67931C7FE8E5918D35B35066C20E7A3ABDF477BA92FA48C3783CBA390C41C8C933C40B2E06E7916D3F3F6F565543EC21BAE822933941F26F3F13C5E6651
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCookieSettingsButton.json
Preview:	. {. "name": "otCookieSettingsButton",. "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgdGl0bGU9Ik1hbmFnZSBQcml2YWN5IFByZWZlcmVuY2VzIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uIG90LWhpZGUiPjxkaXYgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fZnJvbnQiPjxidXR0b24gdHlwZT0iYnV0dG9uIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uX19vcGVuIj48L2J1dHRvbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1mbG9hdGluZy1idXR0b25fX2JhY2siPjxidXR0b24gdHlwZT0iYnV0dG9uIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uX19jbG9zZSI+PCEtLT94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPy0tPiA8c3ZnIHJvbGU9InByZXNlbnRhdGlvbiIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PGcgaWQ9IkJhbm5lcl8wMiIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fc3ZnLWZpbGwiIHRyYW5zZm9ybT0idHJhbnNsYXRlKC0zMTguMDAwMDAwLCAtNzI1LjAwMDAwMCkiIGZpbGw9IiNmZmZmZmYiIGZpbGwtcnVsZT0ibm9uemVybyI+PGcgaWQ9Ikdyb3VwLTIiIHRyYW5zZm9ybT

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	240332
Entropy (8bit):	4.90143584748836
Encrypted:	false
SSDEEP:	1536:xhHcHQsUBvcrfZ3GEGa1xcpMvemTMvU6cTkX+hNtYhBrORhjsxQF6F0hwps3XhFs:uUBsxd1xcpMvemTMvU6gha
MD5:	D84152CB935DBFB9300ED4A50708BCF1
SHA1:	9826051D514F3DB2A1B4CB24EF9054A1C0BF3567
SHA-256:	3B28154BDBEF1919953ADB20005C0E3C7220F9FA66656879780327AA6B6DBBE5
SHA-512:	5BB8F4AEF53A829023C93508635271D1A3CE77EA16691B2A9F91B7404B94BD84070F9F532F826541C9D9524DCB9BD59BCF6B50A845362E8B2EEADFFF5E1EFFD6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.styles.js?cs=97ccd6f635c970474c8c
Preview:	/! For license information please see signing_iframeless_mobile.styles.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2176],{542396:function(e,t,o){var a=o(955500),i=o.n(a),r=o(302312),n=o.n(r)()(i());n.push([e.id,'.btn .icon,.btn-text{color:#333}img{max-width:none}.dialog.modal-wrap{background:rgba(0,0,0,.5);top:0;left:0;width:100%;height:100%;position:fixed;overflow:auto;outline:0!important;text-align:center;padding:0 2em}.icon{width:auto;height:auto;background:0 0;overflow:visible}.mvn-pro{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}.helv,div:not([data-disable-olive-div] ){font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:400}div:not([data-disable-olive-div] ){font-size:13px;line-height:normal;text-rendering:optimizeLegibility}h1,h2,h3,h4{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}h5{font-family:"Helvetica Neue",Helvetica,Arial,

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 40329
Category:	downloaded
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:/Z/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:/JP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	027A7D52E1CEED8AEF7DC13505B81D36
SHA1:	33CF0BCE6A4C8B44B4A80B3116C978C12EE93FD0
SHA-256:	29061464FB6FCE2326B952EACAA95C3C6183BFEA74C3851390E9838720D372A6
SHA-512:	FCDDEBF6DE759B5079E7DF2432771A866DE1824B119AD8CB3BAE11F9FAA060B943D52F121E4C63E7E20D43F31B2220C1D4E9C24A20004C4B061CD1A0A5EE5AC9
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OIraOhbH8dYmWuMx72NLg2J7X3NEA8pv5VQtFEWqTHEExepx7TUwZUeh0E-QDGbdH3gkHL4W7gJp3pm-xvAmoJCGu3YZyrY-30LLifE0byyBTuPNqmgSURntMKtPYO44DzjA-DbwqKN9rbzZh4zDZLA1&t=722fe453
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	29385
Entropy (8bit):	5.096323160606681
Encrypted:	false
SSDEEP:	384:22aDjE5+4bQbYqafCuOGV6bhebZb2bAbnMfCKsUw6we3fJVGy:A4CJ1C6Bp
MD5:	868008C8657804430A3DE8DF0AB1A4AE
SHA1:	D7B146F58AA9C6B198CE0A22572976884A080D04
SHA-256:	21065B60430053DAD89C7DC9974D901FAE6F262F18A90ECA5826E9EB3736564B
SHA-512:	B5F05CDB37FB8DF5AAE825334753DE8AA46CB234F54CF164BC865AAD846B055CCFAE64F77864B244D65B152254FD37284DB547A263CC6539C9DC2DB5B4E34AD0
Malicious:	false
Reputation:	low
Preview:	{"accountId": "275532918", "projectId": "20084925044", "revision": "2220", "attributes": [{"id": "20186401010", "key": "isBranded"}, {"id": "20195597153", "key": "isCompletedEmailNotificationEnabled"}, {"id": "20203483991", "key": "isMobile"}, {"id": "20205312882", "key": "isUserAccounted"}, {"id": "20207234882", "key": "language"}, {"id": "20207630262", "key": "country"}, {"id": "20218952064", "key": "isLastSigner"}, {"id": "20330146452", "key": "browser"}, {"id": "20330792890", "key": "environment"}, {"id": "20644900025", "key": "ds_a"}, {"id": "21121790361", "key": "IPAddress"}, {"id": "23060870973", "key": "senderAccountId"}, {"id": "23767381356", "key": "branded"}, {"id": "28244570321", "key": "recipientEmailDomain"}, {"id": "28335080019", "key": "site"}], "audiences": [{"name": "Force Enabled PSP Sender Accounts - Prod", "conditions": "[\"and\", [\"or\", [\"or\", {\"match\": \"exact\", \"name\": \"senderAccountId\", \"type\": \"custom_attribute\", \"value\": \"1d647807-efdb-46c6-

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 38948, version 7.504
Category:	downloaded
Size (bytes):	38948
Entropy (8bit):	7.988688959532416
Encrypted:	false
SSDEEP:	768:3cCA0yv5S/to3eWZKsaQ1QRhxPmUsL55yYk8GOOGuqMQq:Meyv2WZKkK3bs951k8z15q
MD5:	524064AAF51438DA21F8495FF4DE1126
SHA1:	D51FFD8E53CAC782A4CB7D5358CB6CCF2E42CD58
SHA-256:	CCA8F65E53A31274C17B5A13789B4E56CE6B6B1DE0C9F987F5D13129D578C0F8
SHA-512:	0E7794918A76DD3703B2A54AD9FB573E24D95FE76CEF2B4F107DB26D90603B626F57FD1232BF51A0D1B69978BCD9704E1C36E2C7A22F9B772E055A3E33869688
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/fonts/celeste-sans/CelesteSansWeb.woff
Preview:	wOFF.......$......f........p............... DSIG..............F.GPOS...........l...GSUB...P...v....\|...LTSH...d...w...<x.x.OS/2...8...Y...`.{U2VDMX.......~.......cmap.............W..cvt .......$...$.G..fpgm...d.......s.Y.7gasp.............g..glyf...d..d....<.x.hdmx...\...J...\|....head.......6...6.#-.hhea.......!...$....hmtx............FU".loca.......r...rQw.Dmaxp....... ... .J..name.......y...O..{.post............C.qprep...h...c....$............2%._.<..........T.).....g..-.....c............x.c`d``.......?..KX60.E........N........8.\|...................)....x.c`a\|.8.....i.....@hF+.#./@.7+..##.#S...{...h.(p..T`<.....O...7.....Ar...........Z.u...x.u.MHTQ....<..A.Q...q...0.LJ.T..lRb.lQ$-.Z..\%.h..4.U-..]E.d.2..!.h....@......e.~.s...{.....h.y.V..F...}..,..U'...H5.$$...;.f...p.#vIE\|N......d/.&{H'.!.$,.8/..b.vRb....W..(..j7jt.QY!.8...U.A.J-..I...4.I..>B.,q..6...E[...8.W....z......l.1.fZs~D>.Ib....,.'P....+.J.~S.MC'....2....t9[..k....3.P.9..riD....12.)...Y..;..D. ..QO[..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45689
Entropy (8bit):	5.077432367735251
Encrypted:	false
SSDEEP:	768:Ao9dTOD+dNWZDB6U9msq0Uez1zawlLdiMMAJVe3swcJlYFWuFD6DrctKCB:Ao90C+6Ammf1FdikVCswSlYEM7B
MD5:	C8B514C3EFE7F9CDFAEEB8105FC17239
SHA1:	A8B6E5A995ED3AA67A71555DBE74C1B1A0DDC17E
SHA-256:	96DC4BC8550F9905733380CDE983989EC67B091C6A4678BF1A32EBF14267A000
SHA-512:	6E7197E841C08D562AC485C32AEBF215218525683D80E5ADEF42AB4E91A5A60DE9B93BA11BDF2D902F0DB5AE8FA6004FFB5EEBFE8CAA7B22B64F28B2667CF30E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Preference Center","MainInfoText":"When you visit our website, we use cookies to enable essential site functionality, improve our website, provide relevant advertising and personalized content, including on third-party websites. Such information might include information about you, your preferences or your device. You have the option of accepting or rejecting the use of cookies on our website other than those that are categorized as Strictly Necessary Cookies. To enable or disable the use of certain cookie categories, select the toggle to the right of the relevant category. Blocking certain categories may impact your experience on our website. Your information may be stored and/or shared with our advertising partners outside of your jurisdictio

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	240748
Entropy (8bit):	5.092451370734677
Encrypted:	false
SSDEEP:	1536:baBhpy5W6DPDtHrI+t/UNqM0aBw2Zgq/BpDr2TKwC4psiB09UiFkET:oy5W6DPDtHrI+t/cCaBw2Z5NN9UiLT
MD5:	2C73DD9B48CB342C5FEB81C8A378B291
SHA1:	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76
SHA-256:	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C
SHA-512:	FA16248370983FFFE7DD3E1F68B988FF24D11633CC61C796EE285D06CB4368FBF647CE7805B57B6736038D7E961FD242529D7254938CB6F38217DFC1759B4047
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/css/olive.min.css
Preview:	@font-face{font-family:olive-icons;font-style:normal;font-weight:400;src:url(../fonts/olive-icons.eot);src:url(../fonts/olive-icons.eot?#iefix) format("eot"),url(../fonts/olive-icons.woff) format("woff"),url(../fonts/olive-icons.ttf) format("truetype"),url(../fonts/olive-icons.svg#olive-icons) format("svg")}@-webkit-keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@-webkit-keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:1

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	257
Entropy (8bit):	4.936853809456331
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4sl5RIFnzrnUg3QxUn3voPt0Bd+5IABcL0n:trwdU/i3vqZ/nnGevR2RBcL+
MD5:	6E132855B6DDD5C7A1FA7DAD2C9FE964
SHA1:	0342D3665682749F7C312B8B1EE6A169FA4C68C5
SHA-256:	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
SHA-512:	F3314BB8BFC2D262F98FAE116DC50A38BDB2A6AD2D6950BD42BBA43457A934B68894AD8C0952E7C2286E31433185DA1424CAC3048CE47AB0B2A0338C14210761
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M13.36 15H20V4H4v11h5v3.114L13.36 15zM4 2h16c1.105 0 2 .895 2 2v11c0 1.105-.895 2-2 2h-6l-7 5v-5H4c-1.105 0-2-.895-2-2V4c0-1.105.895-2 2-2z" fill="#333"/>.</svg>.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 622 x 234
Category:	dropped
Size (bytes):	10946
Entropy (8bit):	7.876349844907559
Encrypted:	false
SSDEEP:	192:t7yG2FYA1Ok3N8T2mqkhX5N9YWXBFJK2ZlxTIh3LCBQvrPqKHH:1QOkWSTkhdRhKmlV2vOGH
MD5:	C80281884317034392DE3E5DABDB1BAE
SHA1:	884426A3A17603C7D9AB1AB295B77E905D7E3457
SHA-256:	7A45CD07A7C1C9BB975BFC471C831FEDFCF375E7D6493E0F097F69BE81586641
SHA-512:	463B5C936125B2819A40A800F5D1B514CA0F208EBA70CB68F7DA9CDEEB38989D1281792B944025A4A0E84EDAB4F685BC431A5C35EB88C573E8FA9FFBC7D75241
Malicious:	false
Reputation:	low
Preview:	GIF89an...........3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,....n..........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h......p.Z...J\...)l...UEp.8\.........S....>.........P.\#.C...9r.....2].`...

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yND2uNShhTUBAP5n7Xu_4VEl-p2v7XApT3Wzf25zNj8jfHNT4wEsGAA2Kw1gCxln6iOKKZKXd_VfM8hBCSVnU9G4mkKk8MEcUDtNc08T0CzJigFOUXvGgrseIpqSzLM-sUZdqwGIcIt8aEKbHu1vqV81&t=722fe453
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	916
Entropy (8bit):	4.771526849920774
Encrypted:	false
SSDEEP:	24:2dXY1gmNUkRPxw4WEz6wUpMdse2IUpgttLPCCady9K4UpM1:cXwgiozoIitL6HEKg1
MD5:	21E07F08F3C13303B0F6B4FB21F8CDF3
SHA1:	6749A6196E3494E967C89AC99922007BD5F0DF37
SHA-256:	2CCAB17DB55F070343D224D89E3A5E6F7019F7269CF6711CF4B94DEC5747D05F
SHA-512:	1CC5462CE987299B4497A149EB44CEE3C94F8AE2F7878EAB2B897A1AD754C215CF9B1AFAC4B1CC0FE6271FF86446B5DD4EA62ED885899A1144E300EC1842D0DD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 38"><defs><style>.cls-1{fill:#505056;}</style></defs><g id="Assets"><g><path class="cls-1" d="M38,38H3c-1.65,0-3-1.35-3-3V11c0-1.65,1.35-3,3-3H38c1.65,0,3,1.35,3,3v24c0,1.65-1.35,3-3,3ZM3,10c-.55,0-1,.45-1,1v24c0,.55,.45,1,1,1H38c.55,0,1-.45,1-1V11c0-.55-.45-1-1-1H3Z"/><path class="cls-1" d="M45,30h-2c-.55,0-1-.45-1-1s.45-1,1-1h2c.55,0,1-.45,1-1V3c0-.55-.45-1-1-1H9c-.55,0-1,.45-1,1v2c0,.55-.45,1-1,1s-1-.45-1-1V3c0-1.65,1.35-3,3-3H45c1.65,0,3,1.35,3,3V27c0,1.65-1.35,3-3,3Z"/><path class="cls-1" d="M21.5,27c-.2,0-.4-.06-.57-.18L6.43,16.82c-.45-.31-.57-.94-.26-1.39,.31-.45,.94-.57,1.39-.26l13.89,9.58,11.92-9.54c.43-.34,1.06-.28,1.41,.16,.35,.43,.28,1.06-.16,1.41l-12.5,10c-.18,.15-.4,.22-.62,.22Z"/><path class="cls-1" d="M10,32H6c-.55,0-1-.45-1-1s.45-1,1-1h4c.55,0,1,.45,1,1s-.45,1-1,1Z"/></g></g></svg>

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4916434618325924
Encrypted:	false
SSDEEP:	96:jhiiiiiiiiVqViiiiiiiiiiiiiiiiiiik6iiiiiiiiAiiiiiiiiiiiiiiiiiiiiZ:juL8Ao6e8tRnMqJuB2
MD5:	681EAF56EF02CF99AA4F40DFBBAE9D35
SHA1:	DF0876CB6C4B20EE71F11A2AE86AEE4D507E11D3
SHA-256:	790AD661560A841522B7FC6E481337B4D5B117E158E1985D98ABDBDCD032D2C7
SHA-512:	5C100437B3E7411693A50C341948386C604F6A0FB98A55DFA32E3DDC4754D1EB659657B8630311AB5DE4D90F2BEF89C381C0471697F47DF4A44AB0471F9CBCB1
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$....................o...o...o...o...o...o...o...o...o...o...o...s.............................+)....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...y.}.....!..............o...o...o...o...o...o...o...o...o...o...o.GH..........................hn....q...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...p.C=.....5..........o...o...o...o...o...o...o...o...o...o...u...............................w...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o.".}....5......o...o...o...o...o...o...o...o...o...o.54..........................fk....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o.C=........o...o...o...o...o...o...o...o...o...o.............................*'....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	532999
Entropy (8bit):	5.34496817174915
Encrypted:	false
SSDEEP:	6144:0viJx0C9xUqCb8d2bHIbHrbHNb82bDRNRSaXQUsmwvzHKW03vFLbHXbHKbHGb82W:DJx0qRSaXQUsmwbHKW03tH2N
MD5:	0AF6DCA66CA1EC28D3E0C8785DCB51E7
SHA1:	47004EBF8292B046B01443E080FC8F632BBCD6BC
SHA-256:	D662B00392CEE959E9A0DD0CB45A247DA076307E0922DA98E852AE53DFD16CA6
SHA-512:	3D0CF608B306B230C73B54C3B0C0D645616BBD30D983E0035F106EBBA14147D79DFBA0315A14C7D8C70ECEF85750BC028C14B79EE442FB8DA6D934A4D912DCB1
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6672.js?cs=007e2853c7065f467cc6
Preview:	/! For license information please see signing_iframeless_mobile.6672.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6672],{864400:function(e,t,n){var r=n(813624);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,i){var a,o,s=null!=t?t:e.nullContext\|\|{},c=e.hooks.helperMissing,l="function",u=e.escapeExpression,d=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" <"+u(typeof(o=null!=(o=d(n,"htmlTag")\|\|(null!=t?d(t,"htmlTag"):t))?o:c)===l?o.call(s,{name:"htmlTag",hash:{},data:i,loc:{start:{line:3,column:3},end:{line:3,column:14}}}):o)+'\n class="pdf-ua_'+u(typeof(o=null!=(o=d(n,"tag")\|\|(null!=t?d(t,"tag"):t))?o:c)===l?o.call(s,{name:"tag",hash:{},data:i,loc:{start:{line:4,column:18},end:{line:4,column:25}}}):o)+"_"+u(typeof(o=null!=(o=d(n,"pathString")\|\|(null!=t?d(t,"pathString"):t))?o:c)===l?o.call(s,{name:"pathString",hash:{},data:i,loc:{start:{line:4,column:26},end:{line:4,column:40}}}):o)

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4052
Entropy (8bit):	7.80876326704094
Encrypted:	false
SSDEEP:	48:e/ENn2D44uhJ320fImR4cbY5En0oiOfOduNaXGEPIwOzUvVBA3CwZ4kwTcc4LrND:S820VO0fI3D540GiRXI6XRkwTyrNfb
MD5:	D23209078E0CEF2446F406375E8B3E70
SHA1:	C2411FA5E6BCE214BB930E47EB78A161FB2024DE
SHA-256:	308BAA42437ADD66584459A2B9FBCD1934A42B0185876011AC35E5573F0F1C6B
SHA-512:	28DF503861404813EFC44FC322C7CC3477A39F73CA13952D5BBDCF0153783E6A56FD671D3B4FC0EDC7B7F5423B7F83F846078215F20F81DEEE900E25B4D4A084
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.......){....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B787EEAF34872569"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...Z...IIDATx..]..UU..\A$...uP.'..lT0...G.p......_...iL.X"......N..-AqB#.'...68."\|..2..*H...o.t....9....=..9.........

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	354019
Entropy (8bit):	5.779943706611949
Encrypted:	false
SSDEEP:	3072:1j/bj1jhcNH/MRypzxH20qRmpZgfnzQmvqQbo5N/5ebsw5mcSaE8Pj+ZgfJwk9u0:1jDhjhcNlqRmGzRaN/5cswhE8kXA9ash
MD5:	11187D94C5A405A5DDD664B738500F50
SHA1:	192CF557753AFCD7A8462EB4BE915DABED19AF40
SHA-256:	E85F8AAAD58F656CC96E8F58B30CB2EBF84C011FBAE2820886692BA8BAADC17A
SHA-512:	68D7B235A1CC1C3F50A5D28920C296081B1B591F2398F4BE1D3937443CB091C3136367BF0B4A8679B482F681A96BDD0F36530EAFFE104B62BDB38BC348F1ADB9
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5936.js?cs=86c32bc2df3904a0d75c
Preview:	/! For license information please see signing_iframeless_mobile.5936.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5936],{514600:function(e){"use strict";var t,r={DEBUG:!1,LIB_VERSION:"2.45.0"};if("undefined"==typeof window){var o={hostname:""};t={navigator:{userAgent:""},document:{location:o,referrer:""},screen:{width:0,height:0},location:o}}else t=window;var a,n,i,s,l,c,u,d,p,m,v,h=Array.prototype,f=Function.prototype,y=Object.prototype,g=h.slice,_=y.toString,b=y.hasOwnProperty,w=t.console,x=t.navigator,k=t.document,M=t.opera,C=t.screen,S=x.userAgent,T=f.bind,z=h.forEach,H=h.indexOf,A=h.map,E=Array.isArray,B={},O={trim:function(e){return e.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},D={log:function(){if(r.DEBUG&&!O.isUndefined(w)&&w)try{w.log.apply(w,arguments)}catch(e){O.each(arguments,(function(e){w.log(e)}))}},warn:function(){if(r.DEBUG&&!O.isUndefined(w)&&w){var e=["Mixpanel warning:"].concat(O.toArray(arguments));try{w.warn.appl

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	dropped
Size (bytes):	3745
Entropy (8bit):	7.319238994753888
Encrypted:	false
SSDEEP:	48:Hu2/EvnLJnOcLJ3JK/L8GlRq8weMpUVCvoIhy7bEhCcmR687yHxl:Nklla/Jnq8vkNhjolyRl
MD5:	DEBD77E543E64173837073B5751ABB08
SHA1:	71577CA453893F08A57A63953B836E8198D878AF
SHA-256:	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
SHA-512:	0FB269F547FFB69E59448FA4E9E234DC4E9B381D5336947C12113D7A1DEC71A7D9EC4F6B2841C032EA1E3FB6E68328D34C1EE1B94761171E523AFBFA962280F2
Malicious:	false
Reputation:	low
Preview:	GIF89a,.,..2.+++RRRCCCTTT---LLLiii###SSS777@@@EEE888666KKK&&&NNN333%%%<<<000......>>>QQQ(((bbb......WWW...999,,,.................tttuuu$$$...zzzXXXmmm......UUU"""..........................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39EC547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39EB547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6189959b-1072-4052-a607-820f04aae975" stRef:documentID="xmp.did:695

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27579)
Category:	downloaded
Size (bytes):	27748
Entropy (8bit):	5.296182707067212
Encrypted:	false
SSDEEP:	768:RkRJKayOijW/PD3h1SvFBFJNChS0cu+CIGFvJEnLF8gyai/yoNAe3MGKAX8TNzfe:Ta5Ph84ncu/LyuUloNWAX8BAIH47
MD5:	0802EB5648BD5B06ECAA83EAD5429B67
SHA1:	9CC9B66CA845440ADEDFFDBC4860D809771CFC2B
SHA-256:	3D04E6F79B5EC3B2F83B39879E06E605AE454C5C85C32443D9BD677AA15CCB43
SHA-512:	92A48C3A181ACC520B222D8C1E10CE19729B16583E9056535B50068652D0288B7C2933917F9E86889163A4DA70EA1178B7F6CE8BDFE3D7F3AB842FA62EC9D389
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.327.js?cs=3df6fc1638547934485b
Preview:	/! For license information please see signing_iframeless_mobile.327.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[327],{248048:function(e,t,n){n.d(t,{k:function(){return l}});var r=n(921699),o=n(811504),i=n(794664),l=function(){var e=(0,o.useState)((0,i.Et)()\|\|""),t=(0,r.c)(e,2),n=t[0],l=t[1];return(0,o.useEffect)((function(){var e=function(){l(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"")};return(0,i.am)(e),function(){return(0,i.IP)(e)}}),[]),n}},260296:function(e,t,n){n.d(t,{_:function(){return _e}});var r=n(953504),o=n(577204),i=n(811504),l=n.t(i,2),s=n(248048),c=n(146356),a=n(283504);const f=Math.min,u=Math.max,d=Math.round,m=Math.floor,p=e=>({x:e,y:e}),g={left:"right",right:"left",bottom:"top",top:"bottom"},h={start:"end",end:"start"};function y(e,t,n){return u(e,f(t,n))}function v(e,t){return"function"==typeof e?e(t):e}function w(e){return e.split("-")[0]}function x(e){return e.split("-")[1]}function b(e){retur

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	downloaded
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=2685, bps=206, PhotometricIntepretation=RGB, description=Wide angle color image depicting the front view of a young woman walking through a futuristic subway tunnel in central London, , manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=4374], baseline, precision 8, 400x350, components 3
Category:	dropped
Size (bytes):	63917
Entropy (8bit):	7.772031862814663
Encrypted:	false
SSDEEP:	768:ypd5nwj3C7QenwjM/4+LH4YyxDrodtOx7JJOym1wtq7ZQ5JQGjss74JJMbC1jauz:UmH1d7x7QEFt4nMbCoutZ
MD5:	EE2C39E22BF051BD559CF937765D5F9C
SHA1:	B4A37389B55C7F9D876C24BAABE47F1D1B987D18
SHA-256:	98CB8665ABB1335CB7FF485ED5D644480953D2E75F0201976636E88A0FFFD997
SHA-512:	52EA57D266DE77EF6B0CBEAE59A96F3F22E6C21C68FF4AB463D893052455C7B4168909BABFAB023EEF4DE0D79EDD7651316251F0A27B15358749B4A47FE34444
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................}...............................c...............7...........=...................................J...........R...(...........1.......Z...2.......y...;...........i.....................Wide angle color image depicting the front view of a young woman walking through a futuristic subway tunnel in central London, UK. The tunnel is illuminated with multi colored lights. The woman is in the far distance, and the focus is on the cool science fiction architecture of the subway tunnel that curves round into the distance. Room for copy space..Canon.Canon EOS 6D...-..'....-..'..Adobe Photoshop 21.0 (Windows).2020:11:13 14:28:10.coldsnowstorm.. .........".............."...........'.......@...0...........2.......@...........0230........2...........F...........Z...........b...........j...........r...................................z...........96..........96..................................^.....................................................................

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (326), with no line terminators
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	5.045118929254492
Encrypted:	false
SSDEEP:	6:qhTHTMQvJT9I6l4RvJTiVvDzONNqXQqgRogE0DVAWAwaeVAOFHYKn:475R9I6wiVvDzONQXYE0TAwasYc
MD5:	69FCC6EB863379AB2532AE1DF283EF9E
SHA1:	9BFFB543E1D5FCD3C7B8D25F4FCFC140CC68F8CE
SHA-256:	2372552A494ACFCC27B0346A7C5DA88450C94D8C0CAD83C956153D971449D4A9
SHA-512:	ADD7D170DE7E01AF1262F4A7ADD4E9A39432E1BA0C10F27543644547C3F8DA937C1333F3F38492D6761C4731839DD6DA72C7EF8346B2FBB67D0AED89B3582432
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js
Preview:	var WebServiceCall=function(){function n(){try{return new XMLHttpRequest}catch(n){}try{return new ActiveXObject("Msxml2.XMLHTTP")}catch(t){}return null}return function(t,i,r){var u=n();u.open("POST",t+"/"+i,!0);u.setRequestHeader("Content-type","application/json");u.setRequestHeader("Accept","application/json");u.send(r)}}()

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57690)
Category:	downloaded
Size (bytes):	57861
Entropy (8bit):	5.301977857356686
Encrypted:	false
SSDEEP:	768:tNC0POVWCTDCkJkC98+XCUC3CUNCwCaCeChCs2CYCdCGCl1ig3xneRCbeCq1C2CP:0t8+liV
MD5:	69A1A76B24F1AE90395E6D9CFB58F01B
SHA1:	B4B1F89D7C68BA2D622F155AAC74573FE05B9F01
SHA-256:	F9B34613D38C8908AAC9B40FC4C2BEFE550BADEAA59E746D061DB28D3ECADB66
SHA-512:	E1B0ACCA73AAD6A7C666FD81811D4FFB71427A1A76153C2DADF9E11C96DB9905683EB4FE94B752748C979251CEA01983514D6C8ABC833DE74F8E1D39176C89C1
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5132.js?cs=484fcc52c9255e8d2439
Preview:	/! For license information please see signing_iframeless_mobile.5132.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5132],{607632:function(t,e,r){r.d(e,{W:function(){return v},U:function(){return m}});var n=r(811504),o=(r(761088),r(947192),r(326972),r(853224),r(427164),r(331432),r(174016),r(627632),r(726456),r(185179),r(270980),r(321992),r(480168),r(394976),r(931432),r(685120),r(439952),r(486672)),i=r(882320),a=r(247601),u=r(825796),c=r(608712);function l(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}function f(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function s(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?f(Object(r),!0).forEach((function(e){var n,o,i,a;n=t,o=e,i=r[e],(o="symb

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62300), with CRLF line terminators
Category:	downloaded
Size (bytes):	62397
Entropy (8bit):	5.350884702903751
Encrypted:	false
SSDEEP:	768:9Ijne57zoxJa28mpUG5YTMbLpPuB8++KX5wZUZJjK1qED0F4ztva+tZW:qjetzoxJaVQC+KJwZUj0iOW
MD5:	B31E76D22DA4399DB4B8C8ECCD35DC2B
SHA1:	B36D4554849D3F05DF0363366BE9133D35EACA98
SHA-256:	5BA7B351020430E304E1C38988858E13690202831484697551E56FED5826004E
SHA-512:	DE2A305DC568D53CA6961D0C9E9FF4497A9A7FE462620417DB3F7ABB2FD508E3729C5090A1119A0DF7DA998AE7C9BF6BB140838681AFCAD493848187BDB9A312
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.32/clarity.js
Preview:	/* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__proto__:null,get clone(){return hr},get compute(){return pr},get data(){return ir},get keys(){return or},get reset(){return vr},get start(){return dr},get stop(){return mr},get trigger(){return fr},get update(){return gr}}),n=Object.freeze({__proto__:null,get check(){return Or},get compute(){return Tr},get data(){return rr},get start(){return Er},get stop(){return Sr},get trigger(){return Nr}}),a=Object.freeze({__proto__:null,get compute(){return Dr},get data(){return xr},get log(){return Cr},get reset(){return Ar},get start(){return _r},get stop(){return Ir},get updates(){return Mr}}),r=Object.freeze({__proto__:null,get callbacks(){return Rr},get clear(){return qr},get consent(){return Yr},get data(){return jr},get electron(){return Lr},

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 350, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	368265
Entropy (8bit):	7.997219563752701
Encrypted:	true
SSDEEP:	6144:Nt0EMnW4FCpViC7ro/HnhUwTPkk3hpebpVbvE10GiR5oU7nLRqwqFS:Nten/IViC7roPKikkerECbRpLES
MD5:	DEB8B40CD19895ED729904D052C1FAF9
SHA1:	785F0613DD370F4E399623DBD88690241AC3A579
SHA-256:	9E8BBCAD67850997BF5D4C2A52823E45393267A467945E47BDD536FE751C6F95
SHA-512:	93F4B128ADA48C062BF55B6ED67A1499031C2E63FDE0B3579FB8A60744C5F1119F8A5757E1B547CEFE2AC747F01E91B1E9811BBD0102357CE7392E8BEE11F5EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^......[.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:1BB9582BEAEB11EEBDF8DEFFA7341574" xmpMM:DocumentID="xmp.did:1BB9582CEAEB11EEBDF8DEFFA7341574"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BB95829EAEB11EEBDF8DEFFA7341574" stRef:documentID="xmp.did:1BB9582AEAEB11EEBDF8DEFFA7341574"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>r<......IDATx..y.n.u.v....>..{.o..J.$@..HI.).,YV.vdksJ.#..TTI.U.....pU..TTI.D*....Y..DK.H.... A.;....g...w..N

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4916434618325924
Encrypted:	false
SSDEEP:	96:jhiiiiiiiiVqViiiiiiiiiiiiiiiiiiik6iiiiiiiiAiiiiiiiiiiiiiiiiiiiiZ:juL8Ao6e8tRnMqJuB2
MD5:	681EAF56EF02CF99AA4F40DFBBAE9D35
SHA1:	DF0876CB6C4B20EE71F11A2AE86AEE4D507E11D3
SHA-256:	790AD661560A841522B7FC6E481337B4D5B117E158E1985D98ABDBDCD032D2C7
SHA-512:	5C100437B3E7411693A50C341948386C604F6A0FB98A55DFA32E3DDC4754D1EB659657B8630311AB5DE4D90F2BEF89C381C0471697F47DF4A44AB0471F9CBCB1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$....................o...o...o...o...o...o...o...o...o...o...o...s.............................+)....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...y.}.....!..............o...o...o...o...o...o...o...o...o...o...o.GH..........................hn....q...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...p.C=.....5..........o...o...o...o...o...o...o...o...o...o...u...............................w...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o.".}....5......o...o...o...o...o...o...o...o...o...o.54..........................fk....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o.C=........o...o...o...o...o...o...o...o...o...o.............................*'....o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...o...

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9636)
Category:	downloaded
Size (bytes):	9837
Entropy (8bit):	5.53772393003891
Encrypted:	false
SSDEEP:	192:/4Gq256DH8TBYWly565xRKvb6cec1ckcYJC4R8gDnpsShXdssYe:/4GqI6r8TBYWl06HRKvOcec1ckc4CS8K
MD5:	83E135D0B1B85F03CBFBD61CAC4B78B6
SHA1:	533C8B9EFDA6DD399E729FD817C65981DDA2F368
SHA-256:	9BD322655BF7344142B992612CC13246705D36A43971F24521665BFBCDB2AAD6
SHA-512:	A29B3EE758E7AF4F977BB5DC3FDF8347DAA2015013B26A0366130BDCE9AB0656EDBAA6DFA712D0FB7D527C0C341B89C85517B04D69337019E8CBD25FAC986351
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.signupsidebar-entry.js?cs=c65f1e1430ea52dc4782
Preview:	/! For license information please see signing_iframeless_mobile.signupsidebar-entry.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8880],{794188:function(t,e,r){r.r(e),r(761088),r(947192),r(853224),r(331432),r(819672),r(726456),r(185179),r(321992),r(480168),r(394976),r(685120),r(439952);var n=r(811504),i=r(266056),s=r(425132),a=r(910104),f=r(825796),o=r(860024);function u(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function h(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?u(Object(r),!0).forEach((function(e){var n,i,s,a;n=t,i=e,s=r[e],(i="symbol"==typeof(a=function(t,e){if("object"!=typeof t\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var n=r.call(t,"string");if("object"!=typeof n)return n;throw new TypeError("@@toPrim

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225718
Entropy (8bit):	5.37949700981415
Encrypted:	false
SSDEEP:	3072:MhwvwI82wVdix0DvzxFkvYnUa3FmBRDYi:MhwvwJVExwr/kdaQbDYi
MD5:	D78F803B3665558F63F048E3A8740D4B
SHA1:	7036DE2D6CC408242C50EB01F2BA9B4A7271FDC6
SHA-256:	16CABC9D4B8AE81EED9193EC25B6D463E68290E5433069885156F7C1DC81E975
SHA-512:	F3291A4630D7F4A5A34AF6536E480C3106D34EB32A94B85454AF29E98CE4F66E34C98EF72647B056F78C5D0A049E1EAB0D78E41E25D76B2D5B2922E568673797
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.588629dd3c10b20ab52d.js
Preview:	/! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	85896
Entropy (8bit):	5.378199552244632
Encrypted:	false
SSDEEP:	1536:iphy0/1Pha/EFoYY8RHfysWcSQMEYP/oEr2DdVHBV8lPlV:YNY/EFoYY8RHfysWcSQMRGDdVHBclV
MD5:	A3014F212C6DEA6D270E366B6FB644C6
SHA1:	078744C792FA3B823010826DFA652B67823A3664
SHA-256:	F9F22595B4537D349C563C1872B1633B7476A1DB83E4398E26733D0E685F2153
SHA-512:	E3AE3F7E3CFDA5811FAB73A6EBDA13680114DF364A13C3503E0C16BE1F0F0B1259415C0C70BD5E648B063E5D38D8E2297F1DFB6EF6934D76D7858C1EFA018E2A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.1177.js?cs=5d71c250dbc142e06823
Preview:	/! For license information please see signing_iframeless_mobile.1177.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1177],{139840:function(e,t,n){var r=n(813624);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeError",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:57},end:{line:1,column:97}}}))+" "},3:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeWarning",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:107},end:{line:1,column:149}}}))+" "},5:function(e,t,n,r

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65329)
Category:	downloaded
Size (bytes):	328011
Entropy (8bit):	5.1362134504069505
Encrypted:	false
SSDEEP:	1536:Tjmw+kMUjudHRYPpQEQLJleCOL6i0aTNsA8L1ylwWi+n/MVMRu7YgPd0+1y0r8cM:3zYlmL6id+BRsMVMRu7YgGcUwrsEg6rO
MD5:	671B5CD09399B9D9661E24A9864D46A3
SHA1:	946A48F4A320C6CAE269ED210B2BB9215C3A9E8C
SHA-256:	241CB3EB194D17903675DFE017E527BF389D635EE029D386B41BDAD1106E2BB5
SHA-512:	D4CFF26A5EBA16D6966EA82DD86A74A2730DDAF1C701350E4B27F1A14710EC72A9D6FABCFBB20118D845110C97B7C8CDC74797A131EECB0650E2607100C60800
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/css/styles.min.css?v=11.0.4
Preview:	@charset "UTF-8";/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.btn-link:focus,.btn-link:hover,a,abbr[title]{text-decoration:underline}.label,audio,canvas,progress,sub,sup,video{vertical-align:baseline}.collapsing,.dropdown-menu .divider,.nav .nav-divider,.sr-only,svg:not(:root){overflow:hidden}hr,img{border:0}.gallery-blocks,table{border-collapse:collapse}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline dotted}b,optg

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.697845823084411
Encrypted:	false
SSDEEP:	3:5FSEumzth6G+:5oKv+
MD5:	6BEA64B5A52243B73E3199E1F97725EA
SHA1:	899C80F2B1E4EFEBFEF8F9236953D521EDA7AFC2
SHA-256:	D2CFB672FC3773083A014E8E61530468168D3415C5A38C526B10D3B4308C4A72
SHA-512:	026A906C77B46D9B6E4F9992AB4D1880970ED9785A4EE9C38280C4E25A65D4A42DECC438F2E704CC9562F68314AF0881F1C8891EF4F8F6D343E8B135CAB7B834
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnLDT2N0qCXrxIFDRQuUQ8SBQ2Ch3s1EhAJK_MpBwKjVYsSBQ2lkzYk?alt=proto
Preview:	ChIKBw0ULlEPGgAKBw2Ch3s1GgAKCQoHDaWTNiQaAA==

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19457)
Category:	downloaded
Size (bytes):	19652
Entropy (8bit):	5.221303203150861
Encrypted:	false
SSDEEP:	384:Bi4Dtv7bELnmtxyEaov7bELnmtxyH/uypa:nwbmtxyE9wbmtxyH2y4
MD5:	E888FC1F73D3B85262B8C6C51149E737
SHA1:	C1B3CB29DE1B2699530D672FD59EA44B037B8F38
SHA-256:	799ED7D2D26FA3DB59B56544528A9AEF5B12733190B348BFBA47773D606D9657
SHA-512:	7B3D24990A48E0137CC39E39616822E76229D7851550BF6ADD4ABD71A1BF00214F172D671D7610696E1275318EB133E9ED98E0944EE3855FCBE37B65E1DF1402
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.ai-q-and-a-entry.js?cs=b233370aa77eada3977a
Preview:	/! For license information please see signing_iframeless_mobile.ai-q-and-a-entry.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2804],{395132:function(t,e,r){"use strict";r.d(e,{IL:function(){return c},of:function(){return a}});var n=r(968996),o=r(369904),i=r(711156),a=function(){function t(e){(0,n.c)(this,t),(0,i.c)(this,"thunk",void 0),this.thunk=e}return(0,o.c)(t,[{key:"value",get:function(){return this.thunk()}}]),t}(),c=(new a((function(){return window})),new a((function(){return document})))},264928:function(t,e,r){var n=r(622808),o=r(752976),i=r(295032);n({target:"Object",stat:!0},{fromEntries:function(t){var e={};return o(t,(function(t,r){i(e,t,r)}),{AS_ENTRIES:!0}),e}})},622064:function(t,e,r){"use strict";r.r(e),r(761088),r(855331),r(971088),r(853224),r(306988),r(232048),r(427164),r(625744),r(279800),r(211056),r(264928),r(819672),r(185179),r(790292),r(321992),r(394976),r(440720),r(373656),r(394107),r(49896),r(686832),r(938252),r(1472

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1479
Entropy (8bit):	7.794311160891987
Encrypted:	false
SSDEEP:	24:WmdQWIr0fKpyVxluXUN5g6xFABlSvck2Li7Ba8WFujSCuYOrkzmpc:WvWUCK8jukvg6xFGlkck2u7BbWFujHuW
MD5:	7A6D6AB954A5FBCE1FF5DBF7F65E0C31
SHA1:	374020E34E814D0E899E7608BED7ACF6DF5933F5
SHA-256:	1F826E9043CDF883AB2FD1F713B7CC0C6B8F43EC0F9D9D8A24E3A43A8C616D2C
SHA-512:	25E1848E781315A27940B6B56AB7F95D7455E34772C8954B7807C1D88DD0E740E7E866BC30B0818725D550EF09420922C030FEDF9E7124C1C612FFAE95C8F0CA
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/d3be8f9e-1328-4432-981a-700d22c98729/af8b8ffa-721b-4a44-b983-b8844991da31/logo-small.png
Preview:	.PNG........IHDR...@...@......iq.....sRGB.........gAMA......a.....pHYs..........o.d...\IDATx^.{..E...jiv....%......EW+.."E.....Y.-.V.t'....PB.,...E&.bHQfV.v..fdv..;3.{..z...9....f.3..;7...U.V.`.Uv@..; .d...l....6Ye.......MV...&..`.Uv@..%.R.Z..\............X...K.[.j.@..L...0\|.v\|w8.n.Ca.L....k....w`&.h:6.H..e..<...;p.e.......0.~.O.]XC...[y>.~./H[..".m.9.....:OY.....N...r......m\.o9.5*..&b....:....cy\|....\|..<..0.K`c.....p.D......[..AG...2.....0..W`.m.......`.\|.?.i......t........a...l..7.b\....\|c.F.k.B...".J.P.'..)..a.i.u+.9.F..9...v!..a-.o.4.q8.A.N+E..g`.\H...;B....$6......x7......Ey...B1....L_p.Y...E.F.<....cYUFe....C.#\.........VzS......^...h./...T.].NK.u....W..P...B..7.(..k.:......[R...u......2J.........iF...ex:...a..\....bse.....s.8..........;w..5..4...9...LhB.8.......D..nM'........'....q:....o...p$...:.v.C...q^..f.o.(p..Q.:..G...v.s.x...V4+.........ca*..4.bd.....Qp.+..(.0...g.....{.S....J..)......tpo..F...m...v@q..I...1.=...S.sA.t....Oh

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	285461
Entropy (8bit):	5.370638273815559
Encrypted:	false
SSDEEP:	3072:JIDpADo21ivYF+/s+//5qYjZYkpO/hATbgjuqJ3PNnpO/zupO/llxdjs:JwpAIvYFos+/QYjZYkpO5vPppOCpO9dY
MD5:	19570FA9125E4E045338E85DD7B69AE9
SHA1:	AE683CE9E9B3B1BDE43D818E0BBAA3CC270A3C81
SHA-256:	C644EC09BF1885BA7903269FB8CBB83F370577D789A59FD5AD32487F38A0DDC9
SHA-512:	C048E8D897DEE40B38C119E8A16E29CA5BFCA132C318DADE2EA087223E5D14C46118343F1B6AA06551796FEB5C3CFA53F4C25E979C1B6EB7BD7D760BE8C93208
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.react-app.js?cs=9b01a425ded6b1853e55
Preview:	/! For license information please see signing_iframeless_mobile.react-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[536,2676],{934080:function(e,t,r){var n=r(813624);e.exports=(n.default\|\|n).template({compiler:[8,">= 4.3.0"],main:function(e,t,r,n,o){var i,a=e.lambda,l=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div class="center-content"><div class="text-wrap"><h3>'+l(a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpTitle"):i,t))+"</h3> <p>"+(null!=(i=a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpText"):i,t))?i:"")+'</p></div><button type="button" class="finish-button btn btn-main btn-lg" data-action="action-bar-finish" data-qa="slide-up-bar-finish-button" id="slide-up-bar-finish-button" aria-label="Finish" data-allow-unprompted-exit disabled="disabled"> '+l(a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpButton"):i,t))+" </button></div>"},useData:!0})},

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21968, version 7.-32506
Category:	downloaded
Size (bytes):	21968
Entropy (8bit):	7.991475222132061
Encrypted:	true
SSDEEP:	384:lgMLeDeXet2lVIEGRt3XIOCTcjRZsfNuut0va2U/+vAkC2b0DmVO1K1:lgMiD+et2lVIp+lwKNu60S7YVSbK1
MD5:	4D3380177371643E68EC379CDBA1E084
SHA1:	75BD764F66CC379EEACE9EC4FDD0D51CCB7B8092
SHA-256:	109FE4C8925F8759481C479406A6D8EC45F9191AA05B5234CE64490076D7E276
SHA-512:	C58C23F62D100265D7C7D4724C24BA9A4F4259FD9BDF50C7C102F615F257EAC3F06C2109CDB815E20728454CC2EDA4FA24E953E90F485C7D5631334C9832B769
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/fonts/celeste-sans/bold/celestesanscomp-bold-webfont.woff2
Preview:	wOF2......U...........Ub........................?FFTM..&..X....`..Z.<..e.....h..d.6.$..(..V.. .....e..X?webf..w.5l....@.....D...`.........!C...._Dl......YF_.R-m....,..!hz=T....J..M7.^1=.&.}!&....pf..\|.fw....).[S..-..[..?R.BW.>8......dk......9.?5yQ...y;.....G.$...V......3.............k..."""""...QQq..e.......e.u].~cZ..k...~.-...kof.Z.<.~+L..F)....Q.............#...7...+.B.$@....`...L.3.R(.k.+...}......YI....x....,.$+.w...9..j...r.x.W.4..E^`"..H..$p".....UE.8.M90.._.n....Ga.._.........Q........d.n....k...@.S....~..@8..T..IEJ".3TH........'...S......h.9.Fo......l.\..C4aa#..3.......\R~.......W.Z}3.....n.Z+......\|8.t.\|~.DWu.....6 ..8 DI....3....@.. .q.... )Ci5.k.v.8.9.~../...4.u1P.b...hL.@........m}.h.HP..H....k.N..L...J..A.i{/....`y18...".'..<.....n......b.\|t..j... 7.....5..V.^.L;K.>.b{1.;.W. N3W..h.....N......N".fv.m...jR.4h..A...#"........n.gf...9../.h3.-.E7...#\..rKj...A`.!VT..C..D.........'./.. i.....Vs..@I..=..:.VA0.....9.;....t,/%x./

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	72461
Entropy (8bit):	5.4237135717000795
Encrypted:	false
SSDEEP:	768:w7wniIfrm+qQ5HrQpchaYpaKaDszTNGdEKLOgUcBzkpYPSUn5Qp4HZ8ua8Yx2jCe:wkiIFqQ5LechaYjaDc5kpzPPp5HHAoWe
MD5:	365AE4E5F2C60A59971F2EDCEFC2BC1C
SHA1:	17A236030FEBB3E64521A9619D5BE36C6A5B4AFE
SHA-256:	D0FAD299D743FD442C27E1B0821294B9707A7C9E39BAB3271429E53AD0AE066D
SHA-512:	00B259F24AF8F53E407D160A750E2ECFFFFBDDD360974A57A7E589B730AF9ED9E6ED2C372290F74F97CD6FBFADC6AD5A6734181059D3761B3BADC60DDD628928
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.js?cs=6fe1c0b1d
Preview:	/! For license information please see signing_iframeless_mobile.js.LICENSE.txt /.!function(){var t,e,r,n,o,i={477548:function(t,e,r){var n=r(722155),o=r(508024),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a function")}},745952:function(t,e,r){var n=r(349112),o=r(508024),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a constructor")}},776960:function(t,e,r){var n=r(722155),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|n(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},5775:function(t,e,r){var n=r(33280),o=r(707536),i=r(683984).f,a=n("unscopables"),c=Array.prototype;null==c[a]&&i(c,a,{configurable:!0,value:o(null)}),t.exports=function(t){c[a][t]=!0}},527852:function(t,e,r){var n=r(674192),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw o("Incorrect invocation")}},235968:function(t,e,r){var n=r(926840),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not an obje

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (843), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	29245
Entropy (8bit):	5.297274096758199
Encrypted:	false
SSDEEP:	768:T+iOegecIkTXxfmZcEkZvz6Xh01YTnTWHORinoJ:KiOegRwajOTJwnK
MD5:	5D43955FF5A8382AE87AF330B2D1FFC0
SHA1:	CDEA11890E38C2FB05DE9BDCEBE0DC0B4BE38575
SHA-256:	E55C6B81CD865FB367413247F497179AFDAB59E63556DCA44719CBF417840BC5
SHA-512:	CF8E9697CA8098634B0B00D719D886E8077EF43F5E362D39977D4532B2AA906ADCFA50FA6E75B3E881FE52F0B5EF4A62FA97A3FB3ECD1DB7A13619F4A0159B7E
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/en/about-us
Preview:	<!DOCTYPE html>..<html lang="en" xml:lang="en">..<head id="head"><title>...About Osler \| Canadian Business Law Firm..</title><meta name="description" content="Osler has one focus . your business. We have the depth and breadth of experience to help solve your problems and provide the answers you need. Learn more." /> .<meta charset="UTF-8" /> . OneTrust Cookies Consent Notice start for osler.com -->....<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="25c02da3-4d83-47e6-b080-f533c2d99f75" ></script>..<script type="text/javascript">..function OptanonWrapper() { }..</script>.. OneTrust Cookies Consent Notice end for osler.com -->..<meta charset="utf-8" />..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1.0" />.. [if IE 8]>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<![

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 102804
Category:	downloaded
Size (bytes):	25609
Entropy (8bit):	7.992070293592458
Encrypted:	true
SSDEEP:	768:65FO8CctusRS+4iLLuVC9Vri5MLPMTleAD5:8FbxwsR/4iAz5MbMl5
MD5:	B62553925BD98826C60457D2EB6B9A46
SHA1:	84DBBB6D9B36A587C21B5A56B1D9E587E33BA943
SHA-256:	C58166FE4DF4BA8F25A960C21451EAF841D97F6F552F104E43431C9DB1C2E2CC
SHA-512:	7B6872144AE308224FF671A1EC63F040A40115888790CF6834AD85D517471CE5DAD3EC297EE751FB196B55118A181017151F7F06FCE0F2F26FF94E8EEC070033
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvug_UjKcAMuKcGN8K2MSXvgT8udzBVsAGOX4k6Oho8RiVMLgg2hTvzAoKKNsGU3y41Pm0SAg0I5SZXrYqLVEQaekg7Cme_6oN-lmYvn2GmxCA-qA1Y07nny7f5N0qGzmfL9ohu_66SpKXL72MfWHq8I1&t=722fe453
Preview:	............r.I.(.>f..d..B6. )U/.(....mGRuw.... I..B..X...<.O..p}.=#.P.>s.Y...D,..........................'.......;.'..2.Uu5.C..%..v.M&;T...u1.T.=...m....'_z.......4.&?~.__....".db00..IR..\|.(tj6+.y.$.L.$..."..FIx3+..tG%.7...N.'..........A9....9;.O...j...Y\|8.........LW........h&.%WW...\|\.Q..Tr....$\..?-&....}O...w..$R}....W.k.+.._..q...P..dR......`^.j]0.L..9......)...."...I....,.K..j...`1.a9-.`..-p..O..t...\|Bo..Uu.~.t...uB9S.J.o..Fe<.....A.SM.....d>.].HO..Qx...ao....a.J..h6K..q7.N.n'..Ga78....v..n...>..0.I.X?...$=...x..H..&.V.+.h..GyTJ....AT...x.Jl...X..t.H4...$9..^u....r9rq3.._..a...^I.{{.Ch....@.l.....@..BW.[..8~6.U3].I#....8....H`...4..I..6...I...Q1...W^]>...P.KJ.L......A...>.@hf.M...RP..)m.F...Wp{.!.R.".j.....!soO..]k...a."eo.S,...G\|n.\|!F[..O../.aR...$.\..4.N.-p1..}...2...r\a[`e.E..{H..?.....J.ak.Y...P......DP.d.?...<..Y.8....%d...@..e.....exc..g...b.....<z....7*8!...n..wG0.C..f..Y5....qE..p....2.rH-..r.S........q..R.$Q^q....!....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2516), with CRLF line terminators
Category:	downloaded
Size (bytes):	2794
Entropy (8bit):	5.528319856246417
Encrypted:	false
SSDEEP:	48:3aKZRWdvwh7lvmB1YeOCdCR2+yfeX8iOO/8ZGwc5zzIIEbDovsa2rNvMvbHMf:392Yh7lvmo3TJ8iMcBziDoTWz
MD5:	3FD0F1646DDAB3AD8D8CD1BBF5571151
SHA1:	A29E931F0A7BE5F33332F07D0403930C153A046B
SHA-256:	A47499325120C59D8800FFE89576DEACDA81BD853628925AA57EFA5953F45DC6
SHA-512:	F949D41207472276F81A26A30F2A793B86C2A12C34FF0BACF55FA6BC8855D6E7C3463684D9E9FDE5F162CBC817EB7CD37B0112744EBC329AA45EBD78AC14B230
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/Osler/js/dist/rem.min.js
Preview:	/*.. Module: rem - v1.3.2.. * Description: A polyfill to parse CSS links and rewrite pixel equivalents into head for non supporting browsers.. * Date Built: 2014-07-02.. * Copyright (c) 2014 \| Chuck Carpenter <chuck.carpenter@me.com>,Lucas Serven <lserven@gmail.com>;..*/..!function(a){"use strict";var b=function(){var a=document.createElement("div");return a.style.cssText="font-size: 1rem;",/rem/.test(a.style.fontSize)},c=function(){for(var a=document.getElementsByTagName("link"),b=[],c=0;c<a.length;c++)"stylesheet"===a[c].rel.toLowerCase()&&null===a[c].getAttribute("data-norem")&&b.push(a[c].href);return b},d=function(){for(var a=0;a<m.length;a++)j(m[a],e)},e=function(a,b){if(q.push(a.responseText),r.push(b),r.length===m.length){for(var c=0;c<r.length;c++)f(q[c],r[c]);(m=n.slice(0)).length>0?(r=[],q=[],n=[],d()):g()}},f=function(a,b){for(var c,d=k(a).replace(/\/\[\s\S]?\\//g,""),e=/[\w\d\s\-\/\\\[\]:,.'"()<>+~%#^$_=\|@]+\{[\w\d\s\-\/\\%#:!;,.'"()]+\d*\.?\d+rem[\w\d\s\-\/\\%#:

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-icons-favicon-default-16x16.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 37560, version 1.0
Category:	downloaded
Size (bytes):	37560
Entropy (8bit):	7.986336222628645
Encrypted:	false
SSDEEP:	768:LFg7GVJ6kU5VXtwAmsgqioep+spJaIKsuo+e4dc+csTfC/DuRD6rSNN:Gxp3SnsGDdEIZmxTq/Du6sN
MD5:	B9D0556A2C620A939D54C63BE3DF6C6C
SHA1:	97968884D4C5A93C46AB1334CE9E9156C694EA4D
SHA-256:	90973DB3F26FE86B648EC735F3183B44902E5CEDF2B1A042402BAC39DA70404F
SHA-512:	37B59878D38EC5E9CEFB9877E53D616696FE430298CE4F26D61DBBD7402F2867554E25DBD78BA95C445BC145EA469895BE43E2BD30C1906B8D27D8AF14E84EDA
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-75Bold.woff
Preview:	wOFF..............=4........................LTSH............F.jOS/2...8...V...`e<..VDMX.......m....sPz.cmap...............cvt .......>...>....fpgm...........b2Msfgasp................glyf......m'...h/z..hdmx..u@.......(..'.head.......6...6..2.hhea....... ...$...Ghmtx...(.......x.j..kern...$.......<...loca.............i.vmaxp....... ... ....name.......e.......post........... ...2prep... ............x.5.!..0.....6.....y......"d...H8.....;...vg."3.v../..^.,...m...c.d[.N5.. ..x...xSH...I....H...g.,(.....[J.80.#.a...M<.......n.....)..}J.F.qc_1N....iD?....x.c`f.a.........................9X.@....A_......\|<...........N0.g...3..X.N1(.!...J.h..x...c`.....w.....m.p..m..k..Zm............@..#..N..N...d...$3.Yf!.."..ld....s....IN..\27.e....4.O.'.,@.Y.....,....E(".RT....P...%dIJ.R...)m...,KYY.r.<.e.X...(+QIV..T...J...Ue5...2..T.5.!kQS...Cm...ud=.....R_6.....a#...4.Mh,...biFS.f...eKZX...R...lMk.FF.6..me{.......`Qt...L'..+]d7.Z$..&{.]....EO.^.A.z.....+.....@.9..r...

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-2XYX2S797K&gacid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=701014799
Preview:	<html></html>

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkr8ykHAqNVixIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 49, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4052
Entropy (8bit):	7.80876326704094
Encrypted:	false
SSDEEP:	48:e/ENn2D44uhJ320fImR4cbY5En0oiOfOduNaXGEPIwOzUvVBA3CwZ4kwTcc4LrND:S820VO0fI3D540GiRXI6XRkwTyrNfb
MD5:	D23209078E0CEF2446F406375E8B3E70
SHA1:	C2411FA5E6BCE214BB930E47EB78A161FB2024DE
SHA-256:	308BAA42437ADD66584459A2B9FBCD1934A42B0185876011AC35E5573F0F1C6B
SHA-512:	28DF503861404813EFC44FC322C7CC3477A39F73CA13952D5BBDCF0153783E6A56FD671D3B4FC0EDC7B7F5423B7F83F846078215F20F81DEEE900E25B4D4A084
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png
Preview:	.PNG........IHDR.......1.......){....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B787EEAF34872569"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...Z...IIDATx..]..UU..\A$...uP.'..lT0...G.p......_...iL.X"......N..-AqB#.'...68."\|..2..*H...o.t....9....=..9.........

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62243
Entropy (8bit):	5.409110995042521
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQrHoQqhF:s/3IgGDzlj18nQrSF
MD5:	8B73B216AC0A0730279EBB5FC109C29C
SHA1:	4D0A7239EE5F70D143300E772DE91B4768A7F4A4
SHA-256:	0A0721D78278F9A6C3DD3F639BAD1B3105D2DF9E97E3D4A74DBEC66D6B92C7EC
SHA-512:	4EFB681C418B2EC3266A5824515155E23F41677B0059D659F3CBED77F144206032B206907745E7E0AE6F4A01E99E7710F848D31B815BA15E4DD7E4A6B9F10F78
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gQ2xvc2UgQnV0dG9uIC0tPjxkaXYgY2xhc3M9Im90LXBjLWhlYWRlciI+PCEtLSBMb2dvIFRhZyAtLT48ZGl2IGNsYXNzPSJvdC1wYy1sb2dvIiByb2xlPSJpbWciIGFyaWEtbGFiZWw9IkNvbXBhbnkgTG9nbyI+PC9kaXY+PGJ1dHRvbiBpZD0iY2xvc2UtcGMtYnRuLWhhbmRsZXIiIGNsYXNzPSJvdC1jbG9zZS1pY29uIiBhcmlhLWxhYmVsPSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN0aW9uIGNsYXNzPSJvdC1zZGstcm93IG90LWNhdC1ncnAiPjxoMyBpZD0ib3QtY2F0ZWdvcnktdGl0bGUiPk1hbmFnZSBDb29raWUgUHJlZmVyZW5jZXM8L2gzPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q2

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13780, version 1.0
Category:	downloaded
Size (bytes):	13780
Entropy (8bit):	7.973002703865565
Encrypted:	false
SSDEEP:	384:TNY9PsTenykDcMLHye3cVV4FI7MvH36TYMa:TXwykhLHOM3Ma
MD5:	D2793531447C140874B62B7448EF7191
SHA1:	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60
SHA-256:	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
SHA-512:	33EDD561F46BFEE5D1A9AFA119F8EC6CAD9B9FD6B54FFD25B1862B5AFFFB1B82DB74D2A4AE11B7893D8261E0520EF5B5E5AF21E7D2D39D02BB849B9FDA268DDD
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/fonts/olive-icons.woff
Preview:	wOFF......5......._.........................GSUB.......;...T .%zOS/2...D...A...V6>H.cmap...........P.<..glyf......(v..E.....head.......3...6...hhea...P.......$.?..hmtx...p...J...dU...loca.......4...4CYTHmaxp../........ ....name..0....0...:...Lpost..1@.........+@.x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d~.8.....A.i.............X.....4........_..Q.....4#H.....>...x....r.W...@.(.A..s..s..A..%r.ND..g.E.s.6.\|./.{....N.T.[.jfV.......[...S.wt..ok:..L..kk.......O.+...L.......^n...eyU.w.C..G.>..V6u.l....+.x.{...V~..W..cj.1...c..%>...\|..t.;=\|...M.....1...3...a(..c8#.....].a,....&2.g...L.yf0.Y.f.s..\|....\|.F.u).X..V...a-.X..6...la+....v....a/......D3.8.....1.s...r...,.8...h.".....r....&.....r..<.!......o...<.).x....{^..?..._.....?..W..?Y.../.._..?....M.....R..[....4D5CeRT.U..{.........w(.5..+m.]Ki.........=My.....}Ny.T..<..)/.S@y.T..*<..7.....O..]xn(..7...%...T...\|.N.IC..3.j......u.O$...M.=<..Gx^Q...^..F.........O8...u.?<......p....L@..t@

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 350, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	368265
Entropy (8bit):	7.997219563752701
Encrypted:	true
SSDEEP:	6144:Nt0EMnW4FCpViC7ro/HnhUwTPkk3hpebpVbvE10GiR5oU7nLRqwqFS:Nten/IViC7roPKikkerECbRpLES
MD5:	DEB8B40CD19895ED729904D052C1FAF9
SHA1:	785F0613DD370F4E399623DBD88690241AC3A579
SHA-256:	9E8BBCAD67850997BF5D4C2A52823E45393267A467945E47BDD536FE751C6F95
SHA-512:	93F4B128ADA48C062BF55B6ED67A1499031C2E63FDE0B3579FB8A60744C5F1119F8A5757E1B547CEFE2AC747F01E91B1E9811BBD0102357CE7392E8BEE11F5EC
Malicious:	false
Reputation:	low
URL:	https://www.osler.com/osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png
Preview:	.PNG........IHDR.......^......[.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.4 (Windows)" xmpMM:InstanceID="xmp.iid:1BB9582BEAEB11EEBDF8DEFFA7341574" xmpMM:DocumentID="xmp.did:1BB9582CEAEB11EEBDF8DEFFA7341574"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1BB95829EAEB11EEBDF8DEFFA7341574" stRef:documentID="xmp.did:1BB9582AEAEB11EEBDF8DEFFA7341574"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>r<......IDATx..y.n.u.v....>..{.o..J.$@..HI.).,YV.vdksJ.#..TTI.U.....pU..TTI.D*....Y..DK.H.... A.;....g...w..N

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 145 x 60
Category:	downloaded
Size (bytes):	5469
Entropy (8bit):	7.404941626697962
Encrypted:	false
SSDEEP:	96:IvklPN/PqPZ8M86x9pOa36SrhE/knsz7BklPN/n:IIFHqPZbx9tKSrhtseFf
MD5:	097D652B65DEC6E954C335739754FC61
SHA1:	83155314927200EC3B9951246D0C1C3B631B088A
SHA-256:	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
SHA-512:	DE13A4A8CCEC57F7AF23143D55A93AF581D04F6066DF5C0D0B910DEC17EA0EA430621ACD88A25422A5180F37EDAC44A6746051BCE942F8D5E07BF8842A3F08EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/transparentLoader.gif
Preview:	GIF89a..<...............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39E8547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39E7547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22335ebf-8a2f-43c0-a35d-602b0ebe7cf3" stRef:documentID="xmp.did:695

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15677)
Category:	downloaded
Size (bytes):	15850
Entropy (8bit):	5.431070377061582
Encrypted:	false
SSDEEP:	192:44coUl3IeIaepuexE2BtggKrdvmvr8WM6sOuZZvPG2De5nulCPXOYVPwYXLbAUJ:44PII8NqMUsp9PG8er2hyV
MD5:	BD8BC2BBC699C8D8A5E40FA9CF17C412
SHA1:	6E7E059F8A89FE9229231062EB54DE91C209C9D6
SHA-256:	0646FCC08074F7915854941B48670A84E93732D01A44F1FDCFAC2AC62333E15C
SHA-512:	6A663515CE7711466DB0526F0071AA2A144329BD08EC83001D0484AC1D475B3137D6EA735735ED44A7CF66F79047E4703713BE0F90844D4628797D4C3ADEDCAC
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.9184.js?cs=7b6dd7ac7ee0acf13910
Preview:	/! For license information please see signing_iframeless_mobile.9184.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9184],{680368:function(e,r,a){var t=a(161040),n=a(811504);r.c=({forwardedRef:e,...r})=>n.createElement("svg",(0,t.c)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 16 16",width:16,height:16,"aria-hidden":!0,fill:"currentColor",focusable:!1,ref:e},r),n.createElement("path",{d:"M15.9 14.6 8.9.7C8.8.3 8.4 0 8 0s-.8.2-.9.6l-7 13.9c-.1.2-.1.3-.1.5 0 .6.4 1 1 1h14c.6 0 1-.4 1-1 0-.2 0-.3-.1-.4zM9 14H7v-2h2v2zm0-4H7V5h2v5z"}))},453216:function(e,r,a){a.d(r,{K:function(){return x}});var t=a(544864),n=a(577204),i=a(811504),d=a(203268),o=a.n(d),l=a(146356),c=a(161040),s=({forwardedRef:e,...r})=>i.createElement("svg",(0,c.c)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 20 20",width:20,height:20,"aria-hidden":!0,fill:"currentColor",focusable:!1,ref:e},r),i.createElement("path",{d:"m18.82 9.57-8.39-8.39a.6.6 0 0 0-.86 0L1.1

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-logo-default.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 22:27:42.415416956 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 22:27:52.025322914 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 22:27:53.882507086 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:53.882546902 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:53.882622004 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:53.882787943 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:53.882802963 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.102468014 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.104806900 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:54.104831934 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.105917931 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.105994940 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:54.107508898 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:54.107594013 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.110081911 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.110146046 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.110220909 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.110502958 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.110534906 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.149050951 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:54.149075031 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:27:54.201795101 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:27:54.643934011 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.644247055 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.644269943 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.645164967 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.645229101 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.647015095 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.647072077 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.647527933 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.647533894 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.692639112 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.823328972 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.823415995 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.823479891 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.825499058 CEST	49745	443	192.168.2.4	54.186.38.246
Apr 23, 2024 22:27:54.825557947 CEST	443	49745	54.186.38.246	192.168.2.4
Apr 23, 2024 22:27:54.869935036 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.869981050 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:54.870039940 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.870321989 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.870372057 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:54.870425940 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.870754004 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.870769978 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:54.871387005 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:54.871402025 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.090286016 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.090557098 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.090586901 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.090678930 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.091169119 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.091195107 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.091783047 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.091842890 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.092256069 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.092305899 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.517894030 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.518019915 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.518049955 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.518186092 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.559645891 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.559658051 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.572967052 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.572988987 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.579637051 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.580413103 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.620130062 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.624116898 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.812840939 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.812920094 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.813126087 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.815553904 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.815658092 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.815910101 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.886544943 CEST	49755	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.886559010 CEST	443	49755	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:55.887648106 CEST	49754	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:27:55.887665033 CEST	443	49754	35.190.25.25	192.168.2.4
Apr 23, 2024 22:27:56.111766100 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.111795902 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.111881971 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.115111113 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.115123034 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.122667074 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.122723103 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.122762918 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.122781992 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.122936964 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.122970104 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.122992992 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.123008966 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.123219013 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.123231888 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.331851959 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.332009077 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.337387085 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.337435007 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.338139057 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.338149071 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.338432074 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.338466883 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.338524103 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.338660955 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.338675022 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.339642048 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.339716911 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.339771986 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.339891911 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.342173100 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.342252970 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.342930079 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.343013048 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.343553066 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.343570948 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.343615055 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.343622923 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.383780003 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.383884907 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.384211063 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.407782078 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.448116064 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.534157991 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.534223080 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.534267902 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.534341097 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.534362078 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.534373999 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.534379959 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.573695898 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.573715925 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.573790073 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.574151993 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.574165106 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.574774027 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.574892044 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.574943066 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.574979067 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.575043917 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.575087070 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.575669050 CEST	49768	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.575691938 CEST	443	49768	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.576009989 CEST	49769	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:27:56.576023102 CEST	443	49769	35.186.241.51	192.168.2.4
Apr 23, 2024 22:27:56.786345959 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.786405087 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.787436008 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.787445068 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.787672997 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.789052010 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:56.832118034 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.994398117 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.994462967 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:56.994510889 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:57.944945097 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:57.944979906 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:27:57.945012093 CEST	49772	443	192.168.2.4	184.31.62.93
Apr 23, 2024 22:27:57.945019960 CEST	443	49772	184.31.62.93	192.168.2.4
Apr 23, 2024 22:28:02.594276905 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.594320059 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.594386101 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.594762087 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.594777107 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.810678005 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.811034918 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.811048031 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.811419010 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.812436104 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.812505007 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:02.813043118 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:02.813074112 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:03.084043980 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:03.084126949 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:03.084366083 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:03.085958958 CEST	49805	443	192.168.2.4	35.190.25.25
Apr 23, 2024 22:28:03.085985899 CEST	443	49805	35.190.25.25	192.168.2.4
Apr 23, 2024 22:28:03.191737890 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.191838980 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.191931963 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.192573071 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.192612886 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.407581091 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.463727951 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.467906952 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.467936993 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.468574047 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.470077038 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.470165014 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.470439911 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.470473051 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.663939953 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.664045095 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:03.664122105 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.700598955 CEST	49815	443	192.168.2.4	35.186.241.51
Apr 23, 2024 22:28:03.700639009 CEST	443	49815	35.186.241.51	192.168.2.4
Apr 23, 2024 22:28:04.189300060 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:04.189372063 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:04.189450979 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:05.241539001 CEST	49741	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:05.241573095 CEST	443	49741	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:05.422236919 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 23, 2024 22:28:05.422257900 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 23, 2024 22:28:06.909912109 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 23, 2024 22:28:07.014035940 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 23, 2024 22:28:07.014055014 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 23, 2024 22:28:07.014132977 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 23, 2024 22:28:19.359930038 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.359957933 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.360064030 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.360438108 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.360481024 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.360538006 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.360692978 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.360706091 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.361043930 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.361058950 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.690423012 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.690720081 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.690742970 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.691807032 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.691873074 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.692868948 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.693167925 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.693195105 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.693562984 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.693624973 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.693743944 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.693752050 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.696504116 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.696571112 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.697149992 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.697233915 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.737618923 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.737662077 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:19.737684011 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:19.784455061 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.132635117 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.134207010 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.134267092 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.134890079 CEST	49841	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.134907007 CEST	443	49841	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.136735916 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.180118084 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.700889111 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.700978041 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.700999975 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701037884 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701057911 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701076984 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701086044 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701128960 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701143980 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701143980 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701157093 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701248884 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701354980 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701370001 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701386929 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701436043 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701443911 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701443911 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701462984 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701523066 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701523066 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701570988 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701678038 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.701685905 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.701730967 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.702068090 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.702079058 CEST	443	49842	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.702109098 CEST	49842	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.720506907 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.720513105 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.720530987 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.720556021 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.720619917 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.720621109 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721230984 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721230030 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721259117 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.721259117 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.721564054 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721589088 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721590042 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.721647024 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.721932888 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722215891 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722238064 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.722426891 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722440004 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.722471952 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722666979 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722687960 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.722968102 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722976923 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.722980022 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.722987890 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.723144054 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.723184109 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.723332882 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:20.723346949 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:20.825493097 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:20.825531006 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:20.825746059 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:20.825831890 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:20.825839043 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.047081947 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.047369003 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.047395945 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.048132896 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.048321009 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.048382044 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.048667908 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.048759937 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.049166918 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.049166918 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.049179077 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.049304962 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.050014019 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.050103903 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.050396919 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.050396919 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.050425053 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.050554991 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.051892996 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.052076101 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.052154064 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.053276062 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.053446054 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.053462029 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.053684950 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.053812027 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.054048061 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.054048061 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.054080009 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.054194927 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.055295944 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.055491924 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.056636095 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.056750059 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.056777000 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.058101892 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058110952 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058289051 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.058310986 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058408022 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.058423042 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058461905 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058672905 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058677912 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.058689117 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.058955908 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.059020042 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.059020042 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.059039116 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.059092999 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.059245110 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.059329987 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.059354067 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.060156107 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.060347080 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.060549974 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.060549974 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.060560942 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.060621023 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103671074 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103678942 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103682041 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103687048 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103699923 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103688002 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.103720903 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103722095 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103730917 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103732109 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.103740931 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103748083 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.103770971 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.151149988 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.151164055 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.151165009 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.151231050 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.151238918 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.313910007 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314043999 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314133883 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314229012 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314248085 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.314280033 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314304113 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.314397097 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314486027 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314516068 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.314523935 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314753056 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314784050 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.314790964 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314907074 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.314935923 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.314944029 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315059900 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315089941 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.315098047 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315226078 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315256119 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.315263033 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315361023 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.315366030 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315567970 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.315671921 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.316994905 CEST	49849	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.317009926 CEST	443	49849	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.323911905 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.323945045 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.324160099 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.324285030 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.324295998 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.392010927 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.392041922 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.392297029 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.392318964 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.392431021 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.403768063 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.404150009 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.404966116 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.405308008 CEST	49845	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.405327082 CEST	443	49845	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.405517101 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.405555964 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.406562090 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.406694889 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.406708002 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.417803049 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.418169022 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.418761969 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.418906927 CEST	49848	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.418925047 CEST	443	49848	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.419226885 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.419254065 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.420063019 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.420263052 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.420274973 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496639967 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496653080 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496689081 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496699095 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496720076 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.496735096 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496742010 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496774912 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.496776104 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.496798038 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.496884108 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.497147083 CEST	49846	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.497158051 CEST	443	49846	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.500374079 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.500458002 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.500832081 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.500931025 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.500951052 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505201101 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505224943 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505234003 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505248070 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505256891 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505263090 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505294085 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505320072 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505342960 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505362034 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505492926 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505507946 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505599976 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505620956 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505639076 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505654097 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505671978 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.505698919 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505700111 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.505881071 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.506041050 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506078005 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506100893 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506141901 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506177902 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506179094 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.506179094 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.506196022 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506230116 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.506337881 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506381035 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.506386995 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506481886 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.506516933 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507332087 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507518053 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507541895 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507550955 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507563114 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507589102 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507620096 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507642031 CEST	49844	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507642984 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507653952 CEST	443	49844	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507658958 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507668018 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507689953 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507697105 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507705927 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.507726908 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507776022 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.507776022 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.512567043 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.512583971 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.512661934 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.513174057 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.513184071 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.539855957 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.540474892 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.540486097 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.541918993 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.541984081 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.542591095 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.542655945 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.542999029 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.543004036 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.588773966 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.609631062 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.609688044 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.609738111 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.609776020 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.609814882 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.609894991 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.609954119 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.609967947 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.610019922 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.610047102 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.610063076 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.610109091 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.610121965 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.610151052 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.610168934 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.611897945 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.611946106 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.611963987 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.611979961 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.611993074 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.611994028 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.612035036 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.612041950 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.612051010 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.612087011 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.612092972 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.612132072 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.612246037 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.612852097 CEST	49843	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.612863064 CEST	443	49843	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.713880062 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.713910103 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.713984966 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714020014 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714046955 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714174986 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714461088 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714476109 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714525938 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714540005 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714565992 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714601040 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714602947 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714616060 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714653969 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714674950 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.714690924 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.714988947 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715008020 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715049028 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715065956 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715092897 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715446949 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715470076 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715509892 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715547085 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715574980 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715703011 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715719938 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715763092 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715781927 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715816021 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715920925 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715939999 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.715975046 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.715995073 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.716018915 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.734514952 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.734860897 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.734890938 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.736047029 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.736816883 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.736896992 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.736903906 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.736917019 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.741828918 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.742249012 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.742261887 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.742742062 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.743333101 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.743417978 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.743470907 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.764488935 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.780039072 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.788115025 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.795490980 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.817033052 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817097902 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817147017 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817146063 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.817171097 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817229986 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.817236900 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817275047 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.817323923 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.818365097 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818388939 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818463087 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.818491936 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818536997 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.818722963 CEST	49850	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:21.818742037 CEST	443	49850	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:21.818865061 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818882942 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818932056 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.818941116 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.818964005 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.818975925 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.819081068 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819097996 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819134951 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.819144011 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819168091 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.819184065 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.819669008 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819685936 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819710016 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819737911 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.819745064 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.819768906 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820135117 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820156097 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820169926 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820178032 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820214987 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820255995 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820271969 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820313931 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820321083 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820343971 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820532084 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820549965 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820581913 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820589066 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820606947 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820661068 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820677042 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820708036 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820719957 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820732117 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820760012 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820801020 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820805073 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820822954 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820836067 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.820844889 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.820872068 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.821014881 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.823029995 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.823206902 CEST	49847	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.823221922 CEST	443	49847	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.823787928 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.823796988 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.824889898 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.824944019 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.826216936 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.826283932 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.826756954 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.826765060 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.836688995 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.838576078 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.838587046 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.840046883 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.840117931 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.840739965 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.840810061 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.841752052 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.841758013 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.862164021 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.862200975 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.862449884 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.862534046 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.862566948 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.862610102 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.863728046 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.863742113 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.863883972 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.863892078 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:21.871738911 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.886765003 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:21.930771112 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:21.930804968 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:21.930875063 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:21.931063890 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:21.931076050 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:21.935709000 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:21.935741901 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:21.935818911 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:21.936007977 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:21.936022997 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.082890034 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.082921028 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.083390951 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.083425999 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.083504915 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.150727987 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.151029110 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.151046038 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.153275967 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.153343916 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.153373957 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.153749943 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.153836966 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.153969049 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.153981924 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.154112101 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.154122114 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.155519009 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.155581951 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.156511068 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.156599045 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.156816959 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.156824112 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.165694952 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.165708065 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.165776014 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.165848017 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.165946007 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.165975094 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.166004896 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.167104006 CEST	49853	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.167152882 CEST	443	49853	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.169723988 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.169815063 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.169893980 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.170243025 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.170279026 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.184581041 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.184756041 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.184781075 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.185229063 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.185503960 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.185587883 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.185626030 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.187791109 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.187839031 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.187877893 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.187882900 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.187922955 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.187936068 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.187951088 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.188043118 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.188112974 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.188122034 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193674088 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193696022 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193705082 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193747997 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.193748951 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193785906 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193805933 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193834066 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.193834066 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.193837881 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193856955 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.193883896 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.193999052 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.194020987 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.194042921 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.194048882 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.194052935 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.194056988 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.194097996 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.194118977 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.194395065 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.194863081 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.194940090 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.195049047 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.196516991 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.196584940 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.227195024 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.227204084 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.229536057 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.240109921 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.244879961 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292238951 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292264938 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292320013 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292339087 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292361021 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292371035 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292383909 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292395115 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292517900 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292562962 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292578936 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292695045 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292756081 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292767048 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292802095 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292880058 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292927980 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292936087 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292952061 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.292980909 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.292995930 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293256044 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293318033 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293339968 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293375969 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293378115 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293397903 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293411970 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293428898 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293432951 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293462992 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293574095 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293627977 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293648005 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293704987 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293752909 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293761969 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293782949 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.293817997 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.293854952 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.298260927 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.298325062 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.298336983 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.298352003 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.298381090 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.298410892 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.298563957 CEST	49852	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.298580885 CEST	443	49852	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.301732063 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.301768064 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.301834106 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.302057028 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.302073002 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.393644094 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.393682003 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.393753052 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.394057035 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.394067049 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396614075 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396644115 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396711111 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396728039 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.396749020 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396776915 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396816969 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.396816969 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.396830082 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.396874905 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.397336006 CEST	49851	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.397352934 CEST	443	49851	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.397855997 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.397968054 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.397978067 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398020029 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398114920 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.398121119 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398233891 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398291111 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.398297071 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398399115 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398438931 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398462057 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.398468971 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.398494005 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.406392097 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.406420946 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.406491041 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.406903982 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.406915903 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.416538954 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416604996 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416650057 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416693926 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.416713953 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416763067 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.416768074 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416800976 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.416834116 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.418009043 CEST	49858	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:22.418025017 CEST	443	49858	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:22.424901962 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.424988985 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.425039053 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.425981045 CEST	49857	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:22.426001072 CEST	443	49857	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:22.446959019 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.490557909 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.490642071 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.490722895 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.491000891 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.491036892 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.494009972 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.494200945 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.494257927 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.495301962 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.495372057 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.495698929 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.495770931 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.495836020 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.495855093 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.501908064 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.501939058 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.501976967 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.501987934 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.502018929 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.502031088 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.502888918 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.502917051 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.502969980 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.502978086 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503005981 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503014088 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503042936 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503102064 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503108978 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503365993 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503386974 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503422022 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503427982 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503447056 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503597975 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503618956 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503649950 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.503659010 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.503678083 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.535820007 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.536792994 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.536823034 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.536902905 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.537223101 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.537251949 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.551460028 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.608200073 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.608249903 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.608282089 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.608294964 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.608319044 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.608330011 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609374046 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609416008 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609441996 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609452009 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609487057 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609505892 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609574080 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609704018 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609741926 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609764099 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609772921 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609790087 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609874964 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609920979 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609930038 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.609951019 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.609972954 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.610084057 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610122919 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610146999 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.610153913 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610176086 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.610217094 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610264063 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610275030 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.610291004 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610332966 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.610522032 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.610596895 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.611766100 CEST	49854	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.611778975 CEST	443	49854	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.612173080 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.612261057 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.612333059 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.614348888 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.614386082 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.627206087 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634658098 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634682894 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634691000 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634861946 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.634888887 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634910107 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634928942 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634941101 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.634947062 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634965897 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.634987116 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.635020971 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.635026932 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.635039091 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.635082960 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.638533115 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.638556957 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.639115095 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.639475107 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.639559031 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.639606953 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.645976067 CEST	49856	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.646002054 CEST	443	49856	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.646357059 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.646389008 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.646440029 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.647124052 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.647136927 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655330896 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655369043 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655376911 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655390024 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655416012 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.655419111 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655436039 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655452967 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.655471087 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.655615091 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655632973 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655666113 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.655673027 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.655692101 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.655704975 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.663810015 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.663837910 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.663927078 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.664207935 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.664218903 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.684118032 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.710872889 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.711078882 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.711111069 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.711786985 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.712124109 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.712218046 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.712248087 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.717658043 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.717840910 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.717870951 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.719322920 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.719377041 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.719775915 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.719861031 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.719906092 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.734327078 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.734669924 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.734678030 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.735867023 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.736167908 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.736295938 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.736300945 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.736337900 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.750413895 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.750646114 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.750725031 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.752180099 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.752264023 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.752660036 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.752753973 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.752779961 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.756136894 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.760122061 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760119915 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760189056 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760212898 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760221004 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760253906 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760343075 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760370016 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760374069 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.760376930 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760387897 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760395050 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760441065 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760448933 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760497093 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760507107 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760552883 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760569096 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760591984 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760623932 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760649920 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760751009 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760797024 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760813951 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760822058 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.760850906 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.760863066 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.786565065 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.800116062 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.806869030 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.806876898 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.806914091 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:22.851924896 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:22.864927053 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.864984989 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865005970 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865016937 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865045071 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865056038 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865294933 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865336895 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865361929 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865367889 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865394115 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865403891 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865602970 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865643978 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865657091 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865672112 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865699053 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865710020 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865813971 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865859032 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865875959 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865881920 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.865915060 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.865998030 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866039038 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866060972 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866066933 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866090059 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866102934 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866121054 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866230965 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866280079 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866585970 CEST	49855	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866600037 CEST	443	49855	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.866908073 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.866935015 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.867046118 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.869473934 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.869487047 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.876801968 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.876807928 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.876858950 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.877322912 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.877336025 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942542076 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942572117 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942579985 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942593098 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942625046 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942651987 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.942713022 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942749977 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.942750931 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.942783117 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.942929983 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942948103 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.942980051 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.943000078 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.943025112 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.943087101 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.946211100 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.946472883 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.946487904 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.946952105 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.947266102 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.947359085 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.947731018 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.968384027 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.968794107 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.968806982 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.969155073 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.971695900 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.971734047 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.971810102 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.971820116 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.971947908 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.973278999 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.973351002 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.973375082 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:22.981296062 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981359005 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981401920 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981400967 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.981441021 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981491089 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981533051 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981533051 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.981548071 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981569052 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.981838942 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981887102 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981904984 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.981916904 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.981964111 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982000113 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.982009888 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982048035 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.982054949 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982614040 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982652903 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.982661963 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982693911 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.982732058 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.982742071 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.983242989 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.983282089 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.983283997 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.983294010 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.983338118 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.983346939 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984122038 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984159946 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984160900 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.984172106 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984205961 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.984216928 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984270096 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984306097 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.984307051 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984319925 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.984353065 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.984894037 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985012054 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985050917 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985089064 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985101938 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.985117912 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985138893 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.985879898 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985924006 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985932112 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.985944986 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.985990047 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.985999107 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.986040115 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.986284018 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.986293077 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.986752987 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:22.986888885 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.986959934 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.986969948 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.986991882 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.987046957 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.987698078 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:22.987756968 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:22.988143921 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.013128042 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.013144970 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.019680977 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.019695997 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.020813942 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.020895958 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.021007061 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:23.021080971 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:23.021128893 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:23.021634102 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.021707058 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.021801949 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.021810055 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.040384054 CEST	49867	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:23.040421963 CEST	443	49867	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:23.047105074 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047131062 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047205925 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.047255039 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.047277927 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047343969 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.047719955 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047738075 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047795057 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.047811031 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047833920 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.047878027 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.048243046 CEST	49862	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.048270941 CEST	443	49862	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.053754091 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.053781986 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.054109097 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.054110050 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.054143906 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.061794996 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.061830997 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.061893940 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.061904907 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.061950922 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.062064886 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.062136889 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.063352108 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.063376904 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.065581083 CEST	49864	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.065591097 CEST	443	49864	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.075798035 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.075820923 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.075850964 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.075881958 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.075894117 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.075933933 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.076242924 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.076268911 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.076297045 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.076303005 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.076339960 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.086293936 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086363077 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.086397886 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086546898 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086600065 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.086610079 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086635113 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086678982 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.086687088 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.086848021 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.087580919 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.087658882 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.087661028 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.087688923 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.087713957 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.087728024 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.088601112 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.088670015 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.088677883 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.088702917 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.088730097 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.088742971 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.089257002 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.089318991 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.089330912 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.089381933 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.090132952 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.090209007 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.090228081 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.090281010 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.091176033 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.091242075 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.091263056 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.091312885 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.091979027 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.092056990 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.132718086 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.132802010 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.134355068 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.151568890 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.151587009 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.151823997 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.152113914 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.152122974 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.180401087 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.180483103 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.180516958 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.180535078 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.180538893 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.180583954 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.180583954 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.180715084 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.180857897 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182193041 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182251930 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182274103 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182310104 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182318926 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182343960 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182353973 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182372093 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182398081 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182398081 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182491064 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182521105 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182531118 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.182544947 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.182657957 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.183007956 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.190154076 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.190232992 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.190295935 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.190402985 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.190421104 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.190685034 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.190737963 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.190753937 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.190808058 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.191292048 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.191346884 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.191380978 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.191431999 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.192163944 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.192220926 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.192254066 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.192306042 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.193080902 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.193142891 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.193166018 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.193217993 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.194078922 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.194140911 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.194164991 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.194215059 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.195036888 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.195091009 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.195127010 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.195182085 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.195926905 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.195981979 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.196013927 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.196063995 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.196821928 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.196872950 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.196903944 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.197642088 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.197688103 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.197721004 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.197731972 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.197778940 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.198055983 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.198107004 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.198164940 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.198209047 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.198357105 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.198376894 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.198478937 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.198503971 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.198577881 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.198638916 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.198651075 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.198970079 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.199059963 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.199109077 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.199162960 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.199214935 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.199925900 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.199973106 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.200197935 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.200268984 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.200330019 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.201678991 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.201713085 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.201750994 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.201762915 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.201786995 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.201802015 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.201821089 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.203089952 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.203135014 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.203155041 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.203172922 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.203205109 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.204921007 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.204965115 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.204974890 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.204997063 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.205005884 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.205027103 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.205073118 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.205605030 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.205650091 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.206996918 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.207520008 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.207566977 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.207587957 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.207604885 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.207623005 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.207650900 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.209218025 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.209260941 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.209281921 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.209294081 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.209311962 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.209328890 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.210611105 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.210654020 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.210885048 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.210897923 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.210946083 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.210956097 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.211065054 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.211432934 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.212372065 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.212455988 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.212472916 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.213151932 CEST	49863	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.213164091 CEST	443	49863	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.214468956 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.221137047 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.221240997 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.221316099 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.222491980 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.222533941 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.224320889 CEST	49865	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.224351883 CEST	443	49865	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.237590075 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.237638950 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.237659931 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.237680912 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.237700939 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.237721920 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.237730026 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.244119883 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.248393059 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.260116100 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.263407946 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.279422045 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.294775009 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.294825077 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.294857979 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.294891119 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.294924021 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.294945002 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.296490908 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.296535015 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.296571016 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.296585083 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.296612024 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.296632051 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.296643019 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.297399998 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.297444105 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.297462940 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.297478914 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.297509909 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.298537016 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.298608065 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.298623085 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.300430059 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.300450087 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.300493002 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.300509930 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.300537109 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.301223040 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.301259041 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.301295996 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.301316977 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.301341057 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.302982092 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.303004026 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.303049088 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.303065062 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.303093910 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.303158998 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.303205967 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.303531885 CEST	49866	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.303560019 CEST	443	49866	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.316063881 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.316091061 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.316144943 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.316529989 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.316543102 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.317095041 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.317101955 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.317157030 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.317368031 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.317380905 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.375742912 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.376122952 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.376147032 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.376527071 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.376988888 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.377060890 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.377067089 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404489040 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404545069 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404592991 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404622078 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404653072 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404679060 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404700994 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404783010 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404843092 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404865980 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404876947 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.404902935 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.404922009 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.405065060 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.405124903 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.405486107 CEST	49868	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.405513048 CEST	443	49868	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.410418034 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.410443068 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.410501957 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.410655022 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.410669088 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.420116901 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.425493002 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427015066 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427038908 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427047014 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427062035 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427090883 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427102089 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427114964 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427134037 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427134037 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427161932 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427364111 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427386999 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427432060 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427437067 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.427457094 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.427561045 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.440927982 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.440956116 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.440963984 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441014051 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441016912 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441066027 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441088915 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441119909 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441143036 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441143036 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441143036 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441292048 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441761971 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441781044 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441821098 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441828966 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.441858053 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.441867113 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.453694105 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.453888893 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.453901052 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.455549002 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.455621004 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.456487894 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.456573963 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.456631899 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.500125885 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.507113934 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.507142067 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.521584988 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.521756887 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.521770000 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.523227930 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.523279905 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.524327993 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.524426937 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.524444103 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.531400919 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.531447887 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.531462908 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.531472921 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.531483889 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.531529903 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.531529903 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.531946898 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.531963110 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.532017946 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.532022953 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.532126904 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.532207012 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.532219887 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.532648087 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.532671928 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.532680035 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.532838106 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.532845974 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.532855988 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.533303022 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.533567905 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.533662081 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.533667088 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.533823013 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.542498112 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.542697906 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.542722940 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.543071032 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.543417931 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.543494940 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.543510914 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.545955896 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.545984030 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546025991 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546049118 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546066046 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546144962 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546225071 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546238899 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546278954 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546287060 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546303988 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546317101 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546463966 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546478987 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546506882 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546541929 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.546545982 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.546586037 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.551812887 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.551836014 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.551872969 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.551884890 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.552316904 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.552459002 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.552781105 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.552793026 CEST	443	49871	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.552820921 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.552839994 CEST	49871	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.553615093 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.568111897 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.577773094 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.577781916 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.577812910 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.584114075 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.593233109 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.624159098 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.636146069 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636172056 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636224985 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.636235952 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636271000 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.636271000 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.636600018 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636614084 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636636019 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.636698961 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.636698961 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.636706114 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637116909 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637135983 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637181044 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.637186050 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637222052 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.637516022 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637528896 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637567043 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.637572050 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637610912 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.637828112 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637978077 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.637996912 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638008118 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638026953 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638056040 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638061047 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638077974 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638298988 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638313055 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638355017 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638359070 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638432026 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638504028 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.638869047 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.638978958 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.639096022 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.644364119 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.644527912 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.644572973 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.647479057 CEST	49877	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:23.647492886 CEST	443	49877	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:23.649912119 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.649935007 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.649970055 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.649976015 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.650005102 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.650019884 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.650904894 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.650919914 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.650949955 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.650974035 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.650979042 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651006937 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651067972 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651093960 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651125908 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651130915 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651159048 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651412964 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651427031 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651459932 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651464939 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651493073 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651647091 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651664972 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651700974 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651706934 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651716948 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651851892 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651865005 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651901007 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.651911974 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.651926994 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657226086 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657284975 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657305002 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657330036 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657341957 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657361031 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657370090 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657383919 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657470942 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657525063 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657535076 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657543898 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657581091 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657711983 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657778025 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.657792091 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.657855034 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.684123039 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.687383890 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.687397957 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.703331947 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.722157955 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.722183943 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.722264051 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.722285032 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.722394943 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.733622074 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.736697912 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.737034082 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.737049103 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.737513065 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.737827063 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.737926006 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.737941027 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.740219116 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.740231991 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.740272045 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.740289927 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.740297079 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.740333080 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.740382910 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.743292093 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743309975 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743400097 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.743408918 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743463993 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.743801117 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743817091 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743855000 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.743859053 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.743896961 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.743896961 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.744206905 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744221926 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744247913 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744282961 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.744290113 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744314909 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.744613886 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744632006 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744704962 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.744704962 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.744710922 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744955063 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.744967937 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745035887 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.745039940 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745361090 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745378971 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745445967 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.745445967 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.745451927 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745959044 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.745971918 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746011972 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746017933 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746037006 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746433973 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746452093 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746495962 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746500969 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746522903 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746653080 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746668100 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746722937 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746722937 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746727943 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746826887 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746849060 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746886015 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746890068 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746897936 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.746901035 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.746975899 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.747015953 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.747015953 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.747313976 CEST	49869	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.747327089 CEST	443	49869	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.753530979 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.753581047 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.753664017 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.753817081 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.753848076 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754163027 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754188061 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754225969 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.754230976 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754261971 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.754271030 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.754709959 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754726887 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754769087 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.754774094 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.754803896 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.754826069 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.755078077 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.755093098 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.755162001 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.755168915 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.755217075 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756179094 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756192923 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756215096 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756248951 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756251097 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756262064 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756273031 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756305933 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756314039 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756325960 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.756364107 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756484032 CEST	49870	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.756495953 CEST	443	49870	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.757091045 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.757302999 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.757400990 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.757411003 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.757572889 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.761459112 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:23.761486053 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:23.761692047 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:23.761780977 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:23.761792898 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:23.762106895 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762180090 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762200117 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762223005 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762228966 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762238979 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762274027 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762329102 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762336969 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762556076 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762608051 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762624979 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762635946 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762671947 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762692928 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762768984 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762814045 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762831926 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762840986 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.762864113 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.762875080 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.780116081 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.781605005 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.826905966 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.826915026 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.826946974 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.826977968 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.826987028 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.827039957 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.827152014 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.827167034 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.827227116 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.827227116 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.827234030 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.832437992 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.832577944 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.832631111 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.832643032 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.832752943 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.832844973 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.832853079 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.832972050 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833022118 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833029032 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833127022 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833173990 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833180904 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833282948 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833354950 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833362103 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833455086 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833511114 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833518028 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833638906 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833689928 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833698034 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833798885 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.833852053 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.833859921 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834295988 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834391117 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.834398031 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834425926 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834470987 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.834511042 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834669113 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.834712982 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.834719896 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835191011 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835246086 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.835253000 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835357904 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835455894 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835509062 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.835516930 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.835649014 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.835655928 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836256981 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836344004 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.836344957 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836370945 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836416006 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.836458921 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836575985 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836637974 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.836644888 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.836992979 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.837045908 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.840059042 CEST	49883	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.840069056 CEST	443	49883	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.842854023 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.842889071 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.842907906 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.842951059 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.842952967 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.842972994 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.842974901 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.843004942 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.843041897 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.843041897 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.843211889 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.849256039 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.849375963 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.849392891 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.849495888 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.849749088 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.852838039 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:23.852857113 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:23.853147030 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:23.853219032 CEST	49880	443	192.168.2.4	52.85.132.14
Apr 23, 2024 22:28:23.853225946 CEST	443	49880	52.85.132.14	192.168.2.4
Apr 23, 2024 22:28:23.854020119 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:23.854034901 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:23.866558075 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.866614103 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.866636992 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.866648912 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.866677999 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.866687059 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.867321968 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.867690086 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.867773056 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.867782116 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.867821932 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.867835999 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.867892027 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868062973 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868124008 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868165016 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868226051 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868417025 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868499994 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868527889 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868582010 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868705988 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868762970 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868763924 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868777990 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868815899 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.868855000 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.868896961 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.869234085 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.869256973 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.869311094 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.870062113 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.870073080 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.871089935 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.871109009 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.871248960 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.871795893 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.871808052 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.872482061 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.872509003 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.872587919 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.872715950 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.872730017 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.873044968 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.873066902 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.873121023 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.873222113 CEST	49872	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.873229980 CEST	443	49872	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.874264002 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:23.874278069 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:23.924527884 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.924968958 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.925024033 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.925633907 CEST	49881	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.925671101 CEST	443	49881	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.930655003 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.930701971 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.930865049 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.931179047 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.931205034 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.931905985 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.931935072 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.931967974 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.931983948 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932024002 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932143927 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932167053 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932198048 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932204008 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932215929 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932245016 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932409048 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932425022 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932465076 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932468891 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.932498932 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.932509899 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.979964018 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:23.980046034 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:23.980160952 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:23.980652094 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:23.980679035 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:23.983478069 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.983506918 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.983550072 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.983572960 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.983617067 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.983773947 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.983839989 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:23.984117031 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.985392094 CEST	49882	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:23.985404968 CEST	443	49882	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.036655903 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.036683083 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.036742926 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.036772013 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.036788940 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.036809921 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.037056923 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037071943 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037100077 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037116051 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.037122965 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037154913 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.037600040 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037627935 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037669897 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.037673950 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037714005 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.037978888 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.037992954 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.038024902 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.038032055 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.038037062 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.038063049 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.038094044 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.038127899 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.039221048 CEST	49874	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.039232969 CEST	443	49874	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.053776979 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.053822041 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.053903103 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.054136992 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.054150105 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.075081110 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.075398922 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.075422049 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.076623917 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.079246998 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.079370975 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.079479933 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.081252098 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.081485987 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.081537008 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.083434105 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.084640026 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.084737062 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.084749937 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.084834099 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.087677956 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.087950945 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.088036060 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.088064909 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.088282108 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.088294029 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.089206934 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.089272976 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.089544058 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.089606047 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.089624882 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.089682102 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.089714050 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.089720964 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.089977980 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.090048075 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.090073109 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.091116905 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.091411114 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.091428041 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.092724085 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.093128920 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.093333960 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.093339920 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.097690105 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.098654032 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.098716974 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.098853111 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.099410057 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.099442005 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.099512100 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.099524021 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.100738049 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.101272106 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.101393938 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.101439953 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.118134975 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.118887901 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.118913889 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.119990110 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.120052099 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.120157957 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.120385885 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.120481968 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.120573044 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.120582104 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.126543999 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.132117987 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.140116930 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.141980886 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.141993046 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.141994953 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.141994953 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.141999006 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.163933039 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.163949013 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.164069891 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.165110111 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.165540934 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.165550947 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.165860891 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.165890932 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.165947914 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.166121006 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.166126966 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.186959028 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187021971 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187045097 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187083960 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187093019 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187125921 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187128067 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187144995 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187150002 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187165976 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187201977 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187378883 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187467098 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187473059 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187505007 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187549114 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187549114 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187556982 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187628984 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.187689066 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187978029 CEST	49884	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.187989950 CEST	443	49884	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.190196991 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.190212965 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.190263033 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.190445900 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.190459013 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.196139097 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.227037907 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.227504969 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.227564096 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.229008913 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.229077101 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.230101109 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.230190039 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.230240107 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.239736080 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.239898920 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.239954948 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.240330935 CEST	49887	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:24.240341902 CEST	443	49887	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:24.253360033 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.253561974 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.253603935 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.253973007 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.254266024 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.254345894 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.254375935 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.272856951 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.272880077 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.285336018 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.285350084 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.285475016 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.285696030 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.285708904 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.296118021 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.303668976 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.319436073 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.347301006 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347429991 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347498894 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.347526073 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347609997 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347719908 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347857952 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347863913 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.347888947 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.347903013 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348042011 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348146915 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348191977 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348200083 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348304987 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348350048 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348361015 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348396063 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348401070 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348680973 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348726988 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348733902 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348858118 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348903894 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.348910093 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.348995924 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.349432945 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.349479914 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.349488020 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.349611044 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.349657059 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.349663973 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.349700928 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.349705935 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350383997 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350435019 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.350441933 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350545883 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350599051 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.350609064 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350702047 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350781918 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.350827932 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.350835085 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351250887 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351300955 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.351306915 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351345062 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.351356983 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351511955 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351558924 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.351571083 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351785898 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.351835012 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.353677034 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353737116 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353782892 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353830099 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353830099 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.353848934 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353890896 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.353893042 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353908062 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.353933096 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.354031086 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.354068995 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.354074001 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.354146957 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.354190111 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.356760025 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356829882 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356878996 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356906891 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356928110 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.356928110 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356940985 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.356976032 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.356988907 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357012987 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357029915 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357057095 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357065916 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357090950 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357101917 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357110023 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357256889 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357302904 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357309103 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357331991 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357404947 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357445955 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357445955 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357464075 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357506037 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.357556105 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.357682943 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.358030081 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358091116 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358124971 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358144999 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.358153105 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358194113 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.358201027 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358846903 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358882904 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358901978 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.358908892 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358947039 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.358968973 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.358977079 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359014034 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.359020948 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359730959 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359778881 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.359786034 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359829903 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359863997 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359905005 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.359913111 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.359955072 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.360588074 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.360673904 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.360702038 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.360740900 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.360748053 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.360758066 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.360769033 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.361433983 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.361478090 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.361489058 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.361496925 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.361538887 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.361538887 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.361550093 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.361589909 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.361598015 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362382889 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362417936 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362462044 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.362468004 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362484932 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362514019 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.362521887 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.362541914 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.366847992 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.366985083 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367145061 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367213011 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.367219925 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367263079 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.367266893 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367394924 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367517948 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367528915 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.367544889 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367597103 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.367713928 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367914915 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.367968082 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.367973089 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368074894 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368144035 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.368148088 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368292093 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368379116 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368403912 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.368408918 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368555069 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.368557930 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368819952 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.368881941 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.373832941 CEST	49890	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.373847961 CEST	443	49890	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.374593019 CEST	49892	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.374609947 CEST	443	49892	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.374804974 CEST	49889	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.374818087 CEST	443	49889	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.380426884 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.380769968 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.380781889 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.381302118 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.381356955 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.382302999 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.382359028 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.383939028 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.384052992 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.384116888 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.384676933 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.385384083 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.385394096 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.388529062 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.388611078 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.389123917 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.389185905 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.389414072 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.389421940 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.390005112 CEST	49891	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.390019894 CEST	443	49891	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.392976999 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.393166065 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.393174887 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.394253969 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.394315004 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.395138025 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.395199060 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.395354033 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.395359993 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.403013945 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.403022051 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.403079033 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.403286934 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.403300047 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.403542995 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.405843973 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.405858994 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.405925989 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.406171083 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.406183004 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.408947945 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.409260988 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.409271002 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.410031080 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.410109997 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.410238028 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.410331964 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.410396099 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.410463095 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.410490036 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.411346912 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.411415100 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.411480904 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.424783945 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.425046921 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.425091982 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.426279068 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.426656961 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.426774025 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.426774025 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.426811934 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.426843882 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.432121038 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.434360981 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.434364080 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.434371948 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.449513912 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.456113100 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.461643934 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.461704016 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.461723089 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.461749077 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.461802959 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.461993933 CEST	49893	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.462004900 CEST	443	49893	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.464294910 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.464304924 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.465692043 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.465713024 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.465852976 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.466047049 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.466059923 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.474965096 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.474988937 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.475045919 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.475245953 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.475254059 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.479451895 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.479717016 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.481614113 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481674910 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481694937 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481713057 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481736898 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.481750965 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481769085 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481780052 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.481790066 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481810093 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481820107 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.481838942 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.481848001 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.501360893 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.501415014 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.501436949 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.501452923 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.501477957 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.501513958 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.501513958 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.511681080 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.531418085 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.531445980 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.531600952 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.533628941 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533653975 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533660889 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533682108 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533703089 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533735991 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.533766985 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533799887 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.533852100 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533905029 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.533920050 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.533984900 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.534192085 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.534208059 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.534246922 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.534260035 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.534286022 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.534306049 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.535886049 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.535897017 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.541810989 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.589970112 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.590063095 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.590142012 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.591154099 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.591202974 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.591284990 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.591597080 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.591633081 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.591970921 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.591983080 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.592619896 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.592667103 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.592880964 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.593261957 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.593277931 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.596474886 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.596559048 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.597152948 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.597548008 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.597580910 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.597624063 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.597629070 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.597676039 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.597709894 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.597709894 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.597727060 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.597904921 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.598155975 CEST	49900	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:24.598170042 CEST	443	49900	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:24.600980997 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.601140976 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.601336002 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.601349115 CEST	49901	443	192.168.2.4	74.125.138.157
Apr 23, 2024 22:28:24.601351023 CEST	443	49901	74.125.138.157	192.168.2.4
Apr 23, 2024 22:28:24.604321003 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.604671955 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.604727030 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.606365919 CEST	49895	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.606388092 CEST	443	49895	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.616199017 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.617731094 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.617743969 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.619407892 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.619473934 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.620754004 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.620801926 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.620877028 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.620877028 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.620908022 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.621057034 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.621342897 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.621448994 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.621731043 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.621737003 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.622842073 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.623081923 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.623105049 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.623538017 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.623781919 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.623796940 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.623819113 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.624174118 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.624226093 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.624352932 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.624658108 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.625698090 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.625873089 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.625884056 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.626380920 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.626498938 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.627736092 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.628886938 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.638269901 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.638361931 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.638400078 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.638427019 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.638480902 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.638498068 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.638634920 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.638698101 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.638711929 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.639087915 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.639103889 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.639149904 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.639166117 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.639194965 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.642445087 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.642503023 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.642524958 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.642538071 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.642569065 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.642585993 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.656630993 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.656655073 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.660717010 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.660763025 CEST	49902	443	192.168.2.4	172.217.215.156
Apr 23, 2024 22:28:24.660778999 CEST	443	49902	172.217.215.156	192.168.2.4
Apr 23, 2024 22:28:24.660813093 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.662322998 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.662498951 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.663007975 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.663023949 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.663748026 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.668112993 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.669694901 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.669701099 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.680469990 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.680716038 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.687978029 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.707624912 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.707655907 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.707730055 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.707762957 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.707909107 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.708282948 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.712810993 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.720356941 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.722794056 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.722803116 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.723192930 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.723387003 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.723397017 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.724330902 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.724387884 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.725085974 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.725109100 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.725120068 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.725162029 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.725177050 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.725203991 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.725233078 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.725233078 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.726798058 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.726902008 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.728408098 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.728432894 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.728486061 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.728497028 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.728534937 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.728657961 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.728713989 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.728873968 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.728873968 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.729281902 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.729293108 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.741553068 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.741602898 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.741645098 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.741660118 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.741691113 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.741710901 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.743818998 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.743844032 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.743921995 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.743937969 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.743964911 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.744115114 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.744383097 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.744398117 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.744456053 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.744471073 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.744611025 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.744657040 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.744715929 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.744745016 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745032072 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745047092 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745093107 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.745106936 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745151997 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.745455980 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745471001 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745529890 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.745546103 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745824099 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745839119 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745876074 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.745889902 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.745917082 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.746264935 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.746278048 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.746337891 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.746360064 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.746383905 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.755450010 CEST	49897	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.755466938 CEST	443	49897	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.758728981 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.758815050 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.758829117 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.758843899 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.758877039 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.758897066 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.776119947 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.776881933 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.776932001 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.776957035 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.776972055 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.776998043 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.777014971 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.778790951 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.788775921 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.789115906 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.789324999 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.789378881 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.791778088 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.791830063 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.791851997 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.791867018 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.791896105 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.791914940 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.797096968 CEST	49898	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.797149897 CEST	443	49898	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.805651903 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.805675030 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.805716991 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.805735111 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.805763006 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.805792093 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.807131052 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.809391975 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.809870005 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.809886932 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.810323000 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.810352087 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.810714960 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.810988903 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.811041117 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.811592102 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.811660051 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.811990023 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.812194109 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.812364101 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.812474966 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.812510967 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.812947035 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.812973022 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.814678907 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.814760923 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.815630913 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.815717936 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.816078901 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.816092968 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.827718019 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.827759981 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.827826023 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.827869892 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.827899933 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.828063011 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.829765081 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.829962969 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.830015898 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.830997944 CEST	49904	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.831013918 CEST	443	49904	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.836860895 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.836904049 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.836941957 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.836960077 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.837018013 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.837018013 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.837055922 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.837179899 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.842890024 CEST	49896	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:28:24.842921019 CEST	443	49896	99.84.191.81	192.168.2.4
Apr 23, 2024 22:28:24.850878954 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.850898027 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.850949049 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.850966930 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.850996017 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.851015091 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.851457119 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.851471901 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.851537943 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.851552963 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.852164030 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.852247000 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.852571964 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.852588892 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.852643967 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.852658987 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.852685928 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.852727890 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.852983952 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.852999926 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853043079 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853049994 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853063107 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853108883 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853108883 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853367090 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.853384972 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.853456974 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853473902 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853514910 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853528976 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853558064 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853903055 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853915930 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.853960991 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.853975058 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854000092 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.854352951 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854371071 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854420900 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.854456902 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854484081 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.854773998 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854789019 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854837894 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.854851007 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.854880095 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.855184078 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855202913 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855242968 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.855256081 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855282068 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.855633974 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855647087 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855705023 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.855725050 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.855746984 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.856080055 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856111050 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856146097 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.856149912 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856172085 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856197119 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.856219053 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.856230021 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856252909 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.856297970 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.868118048 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.880644083 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.880681038 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.880821943 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.881093979 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.889761925 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.889822006 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.889864922 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.889908075 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.889914036 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.889939070 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.889954090 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.889974117 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.890006065 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.890034914 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.890052080 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.890059948 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.890074015 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.890615940 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.890657902 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.892091990 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892143011 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892172098 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892204046 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892211914 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.892226934 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892241001 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.892317057 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892446995 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.892785072 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892848969 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892889977 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892919064 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.892940044 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.892985106 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893011093 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.893018961 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893059969 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893100023 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.893106937 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893325090 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.893349886 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893454075 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893495083 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893498898 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.893507957 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.893543005 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.893548012 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894253969 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894299984 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894308090 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.894314051 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894356012 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.894361019 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894860983 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.894906044 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.895163059 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.945581913 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945652962 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945700884 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945738077 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945746899 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.945768118 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945787907 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.945822001 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945858002 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945909977 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.945914030 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.945966005 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.945970058 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946038961 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946075916 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.946077108 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946089983 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946134090 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.946137905 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946863890 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946898937 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946926117 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.946933031 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.946969032 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.946974039 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947005987 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947040081 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.947043896 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947707891 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947747946 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947763920 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.947767973 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947809935 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947815895 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.947824001 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.947870016 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.948528051 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948601961 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948647022 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.948652983 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948705912 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948738098 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948744059 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.948749065 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.948772907 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.949385881 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.949574947 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.949644089 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.949654102 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.949659109 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.949692965 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.949697018 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950402975 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950453997 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.950458050 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950493097 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950531006 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950531006 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.950541019 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.950576067 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.950583935 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.951364994 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.951432943 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.951442003 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.951684952 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:24.951706886 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:24.953377008 CEST	49886	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:24.953401089 CEST	443	49886	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:24.962250948 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.962373018 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:24.962419033 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:24.976044893 CEST	49909	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.976129055 CEST	443	49909	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.977514029 CEST	49907	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.977540016 CEST	443	49907	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.979091883 CEST	49908	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:24.979113102 CEST	443	49908	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:24.993746996 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:25.004812002 CEST	49911	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.004822969 CEST	443	49911	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.048692942 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.049778938 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:25.049854994 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:25.049873114 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:25.049957037 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:25.051081896 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:25.072719097 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.072777033 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.072803974 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.072846889 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.072860003 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.072882891 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.072899103 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.072926998 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.079734087 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.079806089 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.079857111 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.079860926 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.079912901 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.082089901 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082235098 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082295895 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.082324028 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082407951 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082456112 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.082464933 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082618952 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.082720995 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.091247082 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.091260910 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.091711044 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.092889071 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.092957020 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.093231916 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.099061012 CEST	49910	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:25.099088907 CEST	443	49910	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:25.113025904 CEST	49913	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.113082886 CEST	443	49913	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.124166965 CEST	49914	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.124187946 CEST	443	49914	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.124949932 CEST	49915	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.124978065 CEST	443	49915	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.140113115 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.275938034 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.280694962 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.280764103 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.280821085 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.322937012 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.422703028 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.422729969 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.423289061 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.424036026 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.424163103 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.424164057 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.428872108 CEST	49912	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:25.428900003 CEST	443	49912	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:25.468122005 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.480269909 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638200998 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638253927 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638278008 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638298988 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638319016 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638331890 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638349056 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638365030 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638371944 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638391018 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638407946 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638449907 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638488054 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638506889 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638514996 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.638531923 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.638555050 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.742835045 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.742856979 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.742914915 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.742939949 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.742995977 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.743015051 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.743040085 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.743046999 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.743057966 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.743077993 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.743088961 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:25.743156910 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.744291067 CEST	49917	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:25.744308949 CEST	443	49917	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:26.625754118 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.625794888 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.625921011 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.638313055 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.638325930 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.769701004 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.769747972 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.769959927 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.770328999 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.770342112 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.774084091 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.774144888 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.774234056 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.774729013 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.774761915 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.776269913 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.776308060 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.776482105 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.776907921 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.776926994 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.778153896 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.778192043 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.778295040 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.778542995 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.778556108 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.780390978 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.780420065 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.780802011 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.781135082 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.781151056 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.782974958 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.782984972 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.783221006 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.783552885 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.783564091 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.959302902 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.959708929 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.959733963 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.960087061 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.960568905 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.960630894 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.961000919 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:26.961026907 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:26.989506006 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.989836931 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.989886045 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.990365982 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.990690947 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.990794897 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.991086006 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.992650986 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.992882013 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.992902040 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.993964911 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.994019985 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.994472980 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.994541883 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.994625092 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.994632006 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.996457100 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.996659040 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.996679068 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.997656107 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.997855902 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.997916937 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.997931004 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.998169899 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.998260975 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.998356104 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.999377012 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.999432087 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.999865055 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:26.999943018 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:26.999989986 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.000123978 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.000296116 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.000344038 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.004116058 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.004184961 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.004431963 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.004548073 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.004673958 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.036113024 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.039010048 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.039010048 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.040146112 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.054642916 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.054682016 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.056340933 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.056359053 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.089742899 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.089956999 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.089967966 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.090329885 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.090625048 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.090691090 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.090866089 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.090894938 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.101497889 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.102031946 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.257778883 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.257919073 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.257966995 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.258784056 CEST	49925	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.258805990 CEST	443	49925	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263607979 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263709068 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263797998 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263838053 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.263842106 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263879061 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263916016 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.263948917 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263977051 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.263992071 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.264014959 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.264703035 CEST	49928	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.264723063 CEST	443	49928	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.264995098 CEST	49926	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.265010118 CEST	443	49926	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.292958975 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293097019 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293188095 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293246984 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.293277979 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293333054 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.293339014 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293549061 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.293646097 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.293874979 CEST	49929	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.293889999 CEST	443	49929	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.338437080 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.338588953 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.338725090 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.338730097 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.338779926 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.339065075 CEST	49927	443	192.168.2.4	104.19.178.52
Apr 23, 2024 22:28:27.339082956 CEST	443	49927	104.19.178.52	192.168.2.4
Apr 23, 2024 22:28:27.417376041 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.417435884 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.417478085 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.417623043 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.417623043 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.417639017 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.417668104 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.417685032 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.417711973 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.446702003 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.446999073 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.447175026 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.457602978 CEST	49920	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.457619905 CEST	443	49920	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.473984957 CEST	49924	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.474013090 CEST	443	49924	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.634700060 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.634725094 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.634808064 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.635687113 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.635724068 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.962673903 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.962945938 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.962956905 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.964159966 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:27.964845896 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.964982986 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:27.965085030 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.008120060 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.424175978 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424272060 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424293041 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424335003 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424336910 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.424366951 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424384117 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424385071 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.424411058 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.424431086 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.424451113 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424595118 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:28.424643040 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.426220894 CEST	49933	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:28.426237106 CEST	443	49933	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:31.242733955 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.242789984 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.242854118 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.243331909 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.243350983 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.497303009 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.532947063 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.532973051 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.533406973 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.535027981 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.535094023 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.535223961 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.535237074 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.535243034 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.707148075 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.707228899 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:31.714433908 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.979984045 CEST	49940	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:31.980031013 CEST	443	49940	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:36.388725996 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.388761044 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.388835907 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.388912916 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.389023066 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.389091015 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.389328003 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.389364958 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.389421940 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.390114069 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.390136003 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.390396118 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.390424013 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.390674114 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.390687943 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.409075022 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.409116983 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.409188986 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.409401894 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.409431934 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.608083010 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.648874044 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.651907921 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.689064026 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.717087984 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.718076944 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.750581026 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.750606060 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.750845909 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.750868082 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.750960112 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.750972033 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.751072884 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.751084089 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.751141071 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.751477003 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.751631975 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.752407074 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.755532026 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.755716085 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.758939981 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.759027004 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.759922981 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.760008097 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.760602951 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.760680914 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:36.761464119 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.761523962 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:36.761831999 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.804116964 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.804371119 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:36.804477930 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:36.930509090 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.930605888 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:36.930656910 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.940238953 CEST	49951	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:36.940258980 CEST	443	49951	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:37.095623970 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.095685005 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.095757961 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.096457958 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.096478939 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.267290115 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267364025 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267399073 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267407894 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267427921 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.267443895 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267476082 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267486095 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.267496109 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.267501116 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.267534018 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.269961119 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270011902 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270032883 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270044088 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270081043 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270097971 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270145893 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270294905 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270302057 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270302057 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270323992 CEST	443	49948	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:37.270348072 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.270391941 CEST	49948	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:37.337726116 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.340939999 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.340981007 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.341509104 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.342681885 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.342782021 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.343197107 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.384160042 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.620584965 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.620692968 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.620820999 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.773111105 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:37.773150921 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.773247957 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:37.773494005 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:37.773509026 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.792553902 CEST	49952	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:37.792603970 CEST	443	49952	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:37.989684105 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.990035057 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:37.990076065 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.990758896 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.991153955 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:37.991254091 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:37.991333008 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:38.036119938 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:38.267623901 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:38.267802954 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:38.267981052 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:38.568865061 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:38.568865061 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:38.569055080 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:38.817826033 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:38.818022013 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:38.818135977 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:38.850531101 CEST	49949	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:38.850605011 CEST	443	49949	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:38.952904940 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:38.952949047 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:38.953278065 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:38.955812931 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:38.955827951 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:38.956481934 CEST	49953	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:38.956517935 CEST	443	49953	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:39.198585033 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.198868990 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:39.198920965 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.200066090 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.200618982 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:39.200803041 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.201503038 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:39.248133898 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.284616947 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.284666061 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.284743071 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.285078049 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.285092115 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.479244947 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.479356050 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.479449987 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:39.603524923 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.604032993 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.604118109 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.604419947 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.605011940 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.605093956 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.605458975 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.652118921 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.666784048 CEST	49954	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:39.666856050 CEST	443	49954	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:39.833257914 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.833352089 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:39.833489895 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.833800077 CEST	49958	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:39.833818913 CEST	443	49958	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.521308899 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.521403074 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.521491051 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.521727085 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.521752119 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.847951889 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.848297119 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.848360062 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.849509001 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.850070953 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.850244045 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:40.850251913 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.896121979 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:40.913256884 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.003107071 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.003160000 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.003715992 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.004112005 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.004122019 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.018575907 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.018619061 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.018692017 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.019184113 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.019191027 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.035761118 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.035793066 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.035911083 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.036226034 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.036238909 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.164459944 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164525986 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164551020 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164592981 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164601088 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164629936 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164637089 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164652109 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164652109 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164670944 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164684057 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164693117 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164731026 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164817095 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164876938 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164890051 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164901972 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.164932013 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.164948940 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.236505032 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.236975908 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.236994982 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.237350941 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.237762928 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.237823963 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.238346100 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.269202948 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269272089 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269295931 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269321918 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269340038 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269361019 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269422054 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269470930 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269500971 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269505978 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269536018 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269546032 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.269550085 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269654989 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.269722939 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.271250963 CEST	49960	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:41.271265984 CEST	443	49960	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:41.272514105 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.272809029 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.272819996 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.273159027 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.275439024 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.275502920 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.275804996 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.280119896 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.320120096 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.331572056 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.335468054 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.335505962 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.336636066 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.370609999 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.370915890 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.372915983 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.372984886 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.505882025 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.506280899 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.506344080 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.524736881 CEST	49962	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:41.524748087 CEST	443	49962	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:41.554815054 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.554893970 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.554963112 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.556591988 CEST	49964	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:41.556610107 CEST	443	49964	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:41.676682949 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.676968098 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:41.677053928 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.677833080 CEST	49961	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:41.677849054 CEST	443	49961	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.239819050 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.239881992 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.239918947 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.239952087 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.239964962 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.240063906 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.243208885 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.243227959 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.243432045 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.243469954 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.266750097 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.266840935 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.266912937 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.267272949 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.267309904 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.508764982 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.509331942 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.509365082 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.509727955 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.510373116 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.510432959 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.510554075 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.556121111 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.564570904 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.566613913 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.591152906 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.591181993 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.591494083 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.591521978 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.591862917 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.592842102 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.592932940 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.593046904 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.593080997 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.593107939 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.593621969 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.593817949 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:43.695873976 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.695888996 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:43.795183897 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.795269966 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.795443058 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.795960903 CEST	49976	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:43.795979023 CEST	443	49976	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:43.799777985 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:43.799818993 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:43.799880028 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:43.800106049 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:43.800112009 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.019263029 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019349098 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019404888 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019462109 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019491911 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019520998 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019577980 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019632101 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019640923 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019808054 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019844055 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019850969 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019875050 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019881964 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019900084 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.019927979 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.019933939 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.020123959 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.020184994 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.036055088 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.092602015 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.095329046 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.095340014 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.096725941 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.097460985 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.097646952 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.098093033 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.123508930 CEST	49975	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.123549938 CEST	443	49975	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.140157938 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.142489910 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.142580032 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.142663002 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.142916918 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.143057108 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.143687963 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.143747091 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.163311005 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.163353920 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.163431883 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.167231083 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.167248964 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.313468933 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.313560963 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.313694000 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.464870930 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.489810944 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.523977041 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.576304913 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.576334000 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.576940060 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.577343941 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.577384949 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.578107119 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.578799963 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.578888893 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.579807997 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.579912901 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.580719948 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.580756903 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.581042051 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.581082106 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.599874973 CEST	49977	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:44.599894047 CEST	443	49977	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:44.607520103 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.607606888 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.607722998 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.608076096 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.608130932 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.609019995 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.609138966 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.609214067 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.609407902 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.609441996 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.629795074 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.629837036 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.630095959 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.630644083 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.630656958 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.825126886 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.825428009 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.825448990 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.825900078 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.826317072 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.826400042 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.826527119 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:44.832231045 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832365036 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832401991 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832448959 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832459927 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832515955 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832544088 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832572937 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832572937 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832572937 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832588911 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832603931 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832623005 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832655907 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832672119 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832672119 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832696915 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832736015 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832758904 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.832786083 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.832859039 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.846808910 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.847080946 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.847110033 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.847489119 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.847824097 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.847887993 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.847971916 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.847995996 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:44.848004103 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:44.851824999 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.851845980 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.851851940 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.851893902 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.851913929 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.851918936 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.851999998 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.852054119 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.852054119 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.852080107 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.852112055 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.852173090 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.855271101 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.855308056 CEST	443	49979	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.855333090 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.855370045 CEST	49979	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.872112989 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:44.934214115 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.934689045 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.934740067 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.935131073 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.935657024 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.935739040 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.936120033 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.936161995 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.936779022 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.936876059 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.936889887 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.936942101 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.936963081 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.936968088 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937004089 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.937031984 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.937036037 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937096119 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937145948 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937161922 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.937167883 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937201977 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.937335968 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.937506914 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.947760105 CEST	49978	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.947771072 CEST	443	49978	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.963150978 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.963203907 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.963285923 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.963715076 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.963730097 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.968965054 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.969044924 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:44.969136953 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.969444990 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:44.969477892 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.059062958 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:45.059282064 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:45.059389114 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:45.059619904 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:45.059642076 CEST	443	49983	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:45.059655905 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:45.059855938 CEST	49983	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:45.120064974 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:45.120160103 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:45.120223999 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:45.121222019 CEST	49981	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:45.121242046 CEST	443	49981	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:45.172768116 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.172820091 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.173098087 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.174314976 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.174335003 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.207199097 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.207242012 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.207426071 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.208107948 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.208123922 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.290764093 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.292058945 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.292072058 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.293312073 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.294328928 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.294512033 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.294692993 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.294749975 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.296432972 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.297694921 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.297735929 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.298264980 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.300093889 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.300201893 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.300925970 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.300970078 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.389133930 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.389419079 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.389437914 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.389934063 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.390418053 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.390525103 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.390599966 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.398217916 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398281097 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398327112 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398356915 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398392916 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398415089 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398441076 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398482084 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398545027 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398602962 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398644924 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398686886 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398698092 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.398710012 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.398742914 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.436111927 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.450261116 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.450504065 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.450570107 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.451940060 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.452332020 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.452471018 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.452507973 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.452581882 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.503022909 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503093958 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503115892 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503129959 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503155947 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503159046 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503184080 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503199100 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503346920 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503397942 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503407955 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503432035 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503478050 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.503586054 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.503850937 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.504040956 CEST	49980	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.504061937 CEST	443	49980	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.509700060 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.509804010 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.509898901 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.510168076 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.510202885 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.576956034 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.637846947 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.637914896 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.637979031 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.638000011 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.638055086 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.659365892 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.659455061 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.659498930 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.662281036 CEST	49987	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:45.662292004 CEST	443	49987	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:45.731415987 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.731605053 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.731683969 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.742369890 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.742403984 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.742448092 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.742470980 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.742527962 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.742538929 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.742587090 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.742647886 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.742656946 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747165918 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747243881 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747286081 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747334957 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.747378111 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747412920 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.747433901 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.747534990 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747554064 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747607946 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.747629881 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.747653961 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.747711897 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.751226902 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:45.751282930 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:45.751389980 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:45.751892090 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:45.751924992 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:45.753078938 CEST	49989	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:45.753101110 CEST	443	49989	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:45.760680914 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:45.760714054 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:45.761030912 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:45.761255980 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:45.761261940 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:45.832520008 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.832953930 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.832979918 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.833333969 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.833699942 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.833776951 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.833904028 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.833945036 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847533941 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847606897 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847623110 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847644091 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847686052 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847733974 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847809076 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847831964 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847862959 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847888947 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847901106 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847906113 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847925901 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847939014 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.847946882 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.847965956 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.848033905 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848084927 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848114967 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.848144054 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848150015 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.848270893 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848334074 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.848344088 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848433018 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.848490953 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.848999023 CEST	49985	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.849009991 CEST	443	49985	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851536989 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851589918 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851618052 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.851634979 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851679087 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.851735115 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851784945 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.851793051 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851833105 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.851845980 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851886988 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851907969 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.851914883 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.851937056 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.852031946 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.852235079 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.855447054 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.855457067 CEST	443	49986	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.855547905 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.855547905 CEST	49986	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.858618975 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.858688116 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:45.858764887 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.859114885 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:45.859148026 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.000616074 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.001005888 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.001043081 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.002183914 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.003118038 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.003293037 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.003350019 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.044778109 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.044790030 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.075088024 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.075531006 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:46.075555086 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.076854944 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.077245951 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:46.077339888 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.077425957 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:46.124134064 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.186858892 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.187472105 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.187530994 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.188007116 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.188679934 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.188771009 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.188869953 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.188906908 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.281529903 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.281708002 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.282035112 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.282704115 CEST	49995	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.282721043 CEST	443	49995	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.286426067 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286484003 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286542892 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286561012 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.286595106 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286628962 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.286658049 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.286696911 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286741972 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286885977 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.286885977 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.286895990 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.286966085 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.305135012 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.305314064 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.305810928 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:46.306464911 CEST	49994	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:46.306495905 CEST	443	49994	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:46.390827894 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.390906096 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.390948057 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.390959024 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.390984058 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391021967 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.391048908 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.391055107 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391099930 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.391254902 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391300917 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391314030 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.391320944 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391376019 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.391431093 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.391544104 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.414823055 CEST	49991	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.414834976 CEST	443	49991	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.424607992 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.424696922 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.424793005 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.425280094 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.425332069 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.434161901 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.434186935 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.434279919 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.435405016 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.435420990 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.494046926 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494108915 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494131088 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494149923 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494180918 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494190931 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494227886 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494234085 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494260073 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494268894 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494323969 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494323969 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494404078 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494424105 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494457006 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494465113 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494486094 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494514942 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494566917 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.494582891 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494672060 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.494724035 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.497740030 CEST	49974	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.497770071 CEST	443	49974	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.640573025 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.640600920 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.640809059 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.641098976 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.641113997 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.667198896 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.667540073 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.667568922 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.669133902 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.669526100 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.669691086 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.669703960 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.669744968 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.682003975 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.682338953 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.682396889 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.683604002 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.685127974 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.685327053 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.685544968 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.712131023 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.728157997 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.950253963 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.950442076 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.950504065 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.951334953 CEST	49998	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.951353073 CEST	443	49998	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.955266953 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.955312967 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.955393076 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.955704927 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:46.955713034 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:46.963459969 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.963630915 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.963860989 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.968437910 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.969681978 CEST	50000	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:46.969716072 CEST	443	50000	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:46.970884085 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.970901012 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.972168922 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.972554922 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.972734928 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:46.973011971 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.973030090 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:46.973071098 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.035130978 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.035226107 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.035330057 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.035619974 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.035667896 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.198542118 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.221977949 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.221997976 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.222613096 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.224245071 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.224342108 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.224464893 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.268125057 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.276956081 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.277313948 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.277340889 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.277715921 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.278187990 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.278264046 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.278409004 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.317116022 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.317306995 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.317394972 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.320125103 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.323649883 CEST	50001	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.323668003 CEST	443	50001	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.338285923 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.338350058 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.338414907 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.344480991 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.344521046 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.481390953 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.481594086 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.481656075 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.485291004 CEST	50004	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.485320091 CEST	443	50004	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.557023048 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.557115078 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.557565928 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.560184002 CEST	50005	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:47.560230017 CEST	443	50005	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:47.670205116 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.670631886 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.670656919 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.671159029 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.671533108 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.671624899 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:47.671879053 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:47.671917915 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.019762039 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.020090103 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.020199060 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.050338984 CEST	50006	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.050409079 CEST	443	50006	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.536281109 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.536339045 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.536479950 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.536530018 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.579965115 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.641479015 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641500950 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641529083 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641601086 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.641629934 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641644001 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641663074 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.641693115 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.641715050 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.641738892 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.641889095 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746382952 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746417999 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746488094 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746548891 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746586084 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746606112 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746668100 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746743917 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746762037 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746841908 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.746926069 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.746938944 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747260094 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747293949 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747323036 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.747335911 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747370958 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747386932 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.747446060 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.747459888 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747489929 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:48.747523069 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.747570992 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.891377926 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.894531012 CEST	49996	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:48.894553900 CEST	443	49996	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.177721024 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.177805901 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.177876949 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.177908897 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.177964926 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.178066015 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.180299997 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.180329084 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.181410074 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.181444883 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.210799932 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.210829973 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.210916996 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.211225033 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.211250067 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.449417114 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.449829102 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.449907064 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.450289011 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.450779915 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.450854063 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.450927019 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.496118069 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.510545969 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.510786057 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.510818005 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.511806011 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.512167931 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.512295961 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.512377977 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.538410902 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.538634062 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.538666010 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.539864063 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.540179968 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.540360928 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:49.591106892 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.622251034 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:49.728321075 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.728404999 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.728518963 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.733046055 CEST	50014	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:49.733066082 CEST	443	50014	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:49.740248919 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:49.740340948 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.740448952 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:49.740716934 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:49.740745068 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.980082989 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.980783939 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:49.980818987 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.981204987 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.982134104 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:49.982203960 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:49.982898951 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:50.028109074 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:50.262904882 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:50.263000965 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:50.263065100 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:50.264194012 CEST	50015	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:50.264225006 CEST	443	50015	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:51.603244066 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:51.603444099 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:51.603516102 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:51.628573895 CEST	49950	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:28:51.628608942 CEST	443	49950	104.19.177.52	192.168.2.4
Apr 23, 2024 22:28:51.629580975 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:51.629611015 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:51.629853010 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:51.630600929 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:51.630620956 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:51.848994017 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.021871090 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.021902084 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.021910906 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.021979094 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022031069 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022058964 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022109032 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022109985 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022109985 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022109985 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022155046 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022170067 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022198915 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022209883 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.022209883 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022248030 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.022268057 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.024188995 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.116601944 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.116646051 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.117285013 CEST	50012	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.117316008 CEST	443	50012	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:52.118454933 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.118958950 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.119242907 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.119318008 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.119335890 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.119343996 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.331492901 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.331753016 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.331929922 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.332978010 CEST	50019	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:52.333003044 CEST	443	50019	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:52.804328918 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:52.804424047 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.046864986 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.046926022 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.047008991 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.047079086 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.047142982 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.047283888 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.047543049 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.047599077 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.170203924 CEST	50013	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.170247078 CEST	443	50013	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.174587011 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.174638987 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.174705982 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.176944017 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.176963091 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.391098022 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.392265081 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.392299891 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.392647028 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.427875042 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.428090096 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.428586960 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.476126909 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.667958021 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.668050051 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.668118954 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.838057041 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:53.838170052 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:53.838241100 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:53.838707924 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:53.838742971 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:53.853991032 CEST	50020	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:28:53.854034901 CEST	443	50020	104.18.32.137	192.168.2.4
Apr 23, 2024 22:28:53.986731052 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.986845016 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:53.986941099 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.988141060 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:53.988179922 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.053771973 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:54.054228067 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:54.054291010 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:54.054898024 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:54.055262089 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:54.055366993 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:28:54.225506067 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:28:54.315705061 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.316123009 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.316204071 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.316895008 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.317244053 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.317341089 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.317611933 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.317655087 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.317684889 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.364120007 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.610944986 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.610991955 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.611102104 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.611442089 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.611452103 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.673365116 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.673499107 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.673671007 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.701565981 CEST	50022	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:54.701610088 CEST	443	50022	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:54.850590944 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.871825933 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.871841908 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.872359037 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.879406929 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.879674911 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:54.880112886 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:54.928121090 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:55.131222010 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:55.131324053 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:55.131558895 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:55.251547098 CEST	50024	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:55.251585007 CEST	443	50024	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:55.263767004 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.263842106 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.264167070 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.264517069 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.264549971 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.393754005 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.393804073 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.393937111 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.394234896 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.394254923 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.519815922 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.519856930 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.520112991 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.520406008 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.520425081 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.586251020 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.617150068 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.721201897 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.721200943 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.765984058 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.765999079 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.766132116 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.766155958 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.766834974 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.767668962 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.768132925 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.768239021 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.769834042 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.770042896 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.770889997 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.771100998 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.816121101 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.816139936 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.844400883 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.898566961 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.898744106 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:55.898807049 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.900806904 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.901120901 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.901182890 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.916798115 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.916812897 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.917540073 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.921618938 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.921720028 CEST	50028	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:28:55.921746969 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.921762943 CEST	443	50028	13.107.213.51	192.168.2.4
Apr 23, 2024 22:28:55.971950054 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:55.972004890 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:55.974334955 CEST	50029	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:28:55.974343061 CEST	443	50029	172.64.155.119	192.168.2.4
Apr 23, 2024 22:28:56.219887018 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:56.220386028 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:56.220489025 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:57.044296980 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 23, 2024 22:28:57.051616907 CEST	50030	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:28:57.051654100 CEST	443	50030	13.107.246.41	192.168.2.4
Apr 23, 2024 22:28:57.148407936 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 23, 2024 22:28:57.148432970 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 23, 2024 22:28:57.148514986 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 23, 2024 22:28:57.319911957 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.319999933 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.320132971 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.321310043 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.321346998 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.560708046 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.626315117 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.664686918 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.664716005 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.666172028 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.668766022 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.668987989 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.670057058 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.672384024 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.672413111 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.672485113 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.672836065 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.672846079 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.692641973 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.692679882 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.692991972 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.693491936 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.693507910 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.712131977 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.838217974 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.838313103 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.838376999 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.911740065 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.935141087 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.935158014 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.935549021 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.940653086 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.948751926 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.948848963 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.949321985 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.949342012 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.950602055 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.950869083 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.952078104 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.952286959 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.952296019 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.954354048 CEST	50036	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:57.954391003 CEST	443	50036	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:57.992136955 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.996612072 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.996674061 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:57.996742010 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.996925116 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:57.996941090 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.000113964 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.025052071 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.190790892 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.190888882 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.190948963 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.191586971 CEST	50039	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.191606045 CEST	443	50039	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.196011066 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.196033001 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.196118116 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.197122097 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.197132111 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.223695040 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.223793983 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.223881006 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.224351883 CEST	50040	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.224364042 CEST	443	50040	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.233767986 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.234149933 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.234179974 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.234668970 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.235464096 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.235534906 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.235661983 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.260860920 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.260909081 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.261059999 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.261375904 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.261393070 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.280119896 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.320164919 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.438086033 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.438472033 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.438488960 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.439018965 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.439328909 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.439416885 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.439471006 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.480128050 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.504075050 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.504350901 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.504370928 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.505580902 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.505902052 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.506038904 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.506082058 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.512243986 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.512346983 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.512413025 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.513084888 CEST	50042	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:28:58.513104916 CEST	443	50042	52.45.52.13	192.168.2.4
Apr 23, 2024 22:28:58.516341925 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.516392946 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.516525030 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.516848087 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.516863108 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.523705959 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.620870113 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.715605974 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.715708971 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.715866089 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.716624022 CEST	50047	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.716643095 CEST	443	50047	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.753004074 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.753283024 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.753309011 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.753776073 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.754086971 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.754157066 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.754412889 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.785559893 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.785964966 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.786046982 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.786390066 CEST	50048	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:58.786417961 CEST	443	50048	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:58.800124884 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:59.036185980 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:59.036297083 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:59.036354065 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:59.037266016 CEST	50049	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:28:59.037293911 CEST	443	50049	52.200.166.19	192.168.2.4
Apr 23, 2024 22:28:59.791640043 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:59.791688919 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:28:59.791810989 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:59.792365074 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:28:59.792395115 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.007412910 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.007627964 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.007648945 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.008183956 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.008785963 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.008891106 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.008972883 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.008995056 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.009008884 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.220314026 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.220416069 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:00.220465899 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.220829010 CEST	50051	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:00.220854044 CEST	443	50051	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:01.162576914 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.162702084 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.162787914 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.162940979 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.163042068 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.163110971 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.163302898 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.163340092 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.163749933 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.163784027 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.163862944 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.164395094 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.164407015 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.164657116 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.164693117 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.175848961 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.175868988 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.175945997 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.176161051 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.176176071 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.378547907 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.378855944 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.378895044 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.379369020 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.379704952 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.379791021 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:01.415972948 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.416521072 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.416565895 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.417107105 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.417882919 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.417982101 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.418209076 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.431515932 CEST	50054	443	192.168.2.4	104.19.177.52
Apr 23, 2024 22:29:01.464127064 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.488518000 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.488837957 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.488893986 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.489084959 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.489343882 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.489377975 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.489382029 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.489842892 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.489888906 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.489933968 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.490087032 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.490127087 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.490305901 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.490394115 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.539248943 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.695089102 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.695204973 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.695285082 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.696295977 CEST	50055	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:01.696340084 CEST	443	50055	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:01.701447964 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:01.701488972 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.701597929 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:01.702034950 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:01.702049971 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.944408894 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944434881 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944470882 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944510937 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.944555044 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944586039 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.944613934 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.944679976 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944741964 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.944750071 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944775105 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.944823980 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.947071075 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.950795889 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:01.950814962 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.951988935 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.961488962 CEST	50052	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:01.961525917 CEST	443	50052	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:01.971122980 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:01.971230984 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:01.976066113 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:02.016141891 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:02.231659889 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:02.231760979 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:02.231853008 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:02.544472933 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.544509888 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.544644117 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.545171022 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.545187950 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.554059982 CEST	50056	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:02.554083109 CEST	443	50056	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:02.688407898 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:02.688447952 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:02.688483953 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:02.761590004 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.768162012 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.768182993 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.768819094 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.771846056 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.771945000 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:02.774235964 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:02.793587923 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:02.793621063 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:02.793701887 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:02.794680119 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:02.794715881 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:02.816154957 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:03.032850981 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:03.032942057 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:03.032998085 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:03.033834934 CEST	50057	443	192.168.2.4	104.18.32.137
Apr 23, 2024 22:29:03.033854008 CEST	443	50057	104.18.32.137	192.168.2.4
Apr 23, 2024 22:29:03.034223080 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.035278082 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:03.035293102 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.036708117 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.037503958 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:03.037671089 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.038053036 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:03.042932987 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.043044090 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.043140888 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.043534994 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.043570042 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.047475100 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.047630072 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.047699928 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.048142910 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.048168898 CEST	443	50053	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.048192978 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.048238993 CEST	50053	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.080144882 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.119285107 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.119318008 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.119385004 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.119941950 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.119961977 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.149947882 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.149970055 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.150048018 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.150727987 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.150753021 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.257770061 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.262743950 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.262794971 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.263369083 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.275839090 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.275998116 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.276371002 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.280143976 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.280169964 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.280280113 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.280782938 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.280800104 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.312658072 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.312839031 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.312961102 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:03.314069986 CEST	50059	443	192.168.2.4	52.45.52.13
Apr 23, 2024 22:29:03.314080000 CEST	443	50059	52.45.52.13	192.168.2.4
Apr 23, 2024 22:29:03.320141077 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.369548082 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.369568110 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.369668007 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.370038033 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.370049000 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.438556910 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.441169024 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.441188097 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.441524982 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.442739010 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.442816973 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.443272114 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.473395109 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.473628044 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.473689079 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.474200010 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.474536896 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.474630117 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.474698067 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.474740982 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.488121033 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.520206928 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.520761013 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.520780087 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.521244049 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.521579981 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.521667004 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.521816015 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.539932013 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.540015936 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.540081024 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.550343037 CEST	50063	443	192.168.2.4	172.64.155.119
Apr 23, 2024 22:29:03.550389051 CEST	443	50063	172.64.155.119	192.168.2.4
Apr 23, 2024 22:29:03.568120003 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.609365940 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.610904932 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.610923052 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.611429930 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.612278938 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.612354994 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.612715960 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.656168938 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.664495945 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.664691925 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.665071964 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.669316053 CEST	50066	443	192.168.2.4	13.107.213.51
Apr 23, 2024 22:29:03.669332981 CEST	443	50066	13.107.213.51	192.168.2.4
Apr 23, 2024 22:29:03.755422115 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.755451918 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.755533934 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.755559921 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.755630016 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.769638062 CEST	50068	443	192.168.2.4	99.84.191.81
Apr 23, 2024 22:29:03.769659042 CEST	443	50068	99.84.191.81	192.168.2.4
Apr 23, 2024 22:29:03.831156015 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.831655025 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.831747055 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.857019901 CEST	50067	443	192.168.2.4	13.107.246.41
Apr 23, 2024 22:29:03.857053041 CEST	443	50067	13.107.246.41	192.168.2.4
Apr 23, 2024 22:29:03.892765999 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.892971992 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:03.893182993 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.896934986 CEST	50070	443	192.168.2.4	52.200.166.19
Apr 23, 2024 22:29:03.896953106 CEST	443	50070	52.200.166.19	192.168.2.4
Apr 23, 2024 22:29:04.051764965 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:29:04.051935911 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:29:04.052001953 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:29:04.128647089 CEST	50021	443	192.168.2.4	74.125.136.106
Apr 23, 2024 22:29:04.128686905 CEST	443	50021	74.125.136.106	192.168.2.4
Apr 23, 2024 22:29:08.218276024 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.218348026 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.221954107 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.222733974 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.222779989 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.439728022 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.502186060 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.633898973 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.633975983 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.635516882 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.635896921 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.636075974 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.636090040 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.636136055 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.636142969 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.682547092 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.682619095 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.848434925 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.848540068 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:08.848598957 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.849387884 CEST	50085	443	192.168.2.4	142.251.15.138
Apr 23, 2024 22:29:08.849409103 CEST	443	50085	142.251.15.138	192.168.2.4
Apr 23, 2024 22:29:16.376187086 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:16.376267910 CEST	443	50054	104.19.177.52	192.168.2.4
Apr 23, 2024 22:29:16.376334906 CEST	50054	443	192.168.2.4	104.19.177.52

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 22:27:51.031783104 CEST	53	51902	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:51.068391085 CEST	53	53566	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:51.674998999 CEST	53	60050	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:51.889106989 CEST	49780	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:51.889384031 CEST	61996	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:53.776456118 CEST	62348	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:53.776702881 CEST	56279	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:53.881403923 CEST	53	62348	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:53.881664038 CEST	53	56279	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:54.000164986 CEST	57329	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.000333071 CEST	55888	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.001612902 CEST	64751	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.001899004 CEST	64992	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.108468056 CEST	53	64751	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:54.108623981 CEST	53	64992	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:54.593266010 CEST	59966	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.593755007 CEST	64343	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.760780096 CEST	61568	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.761460066 CEST	51225	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:54.866625071 CEST	53	51225	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:54.868191957 CEST	53	61568	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:56.017302990 CEST	62440	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:56.017302990 CEST	50555	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:56.122150898 CEST	53	62440	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:56.122165918 CEST	53	50555	1.1.1.1	192.168.2.4
Apr 23, 2024 22:27:59.549472094 CEST	58126	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:27:59.549869061 CEST	52809	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:00.265985012 CEST	53089	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:00.266494036 CEST	55479	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:00.297405005 CEST	64755	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:00.297610044 CEST	53108	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:02.473500967 CEST	53	57581	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:07.973135948 CEST	138	138	192.168.2.4	192.168.2.255
Apr 23, 2024 22:28:09.394845009 CEST	53	57388	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:19.161559105 CEST	64582	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:19.161679983 CEST	54508	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:20.719441891 CEST	63540	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:20.719825029 CEST	53361	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:20.824660063 CEST	53	63540	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:20.825059891 CEST	53	53361	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.824724913 CEST	50050	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:21.825193882 CEST	51722	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:21.828212976 CEST	64794	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:21.828366995 CEST	56562	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:21.929795027 CEST	53	51722	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.930294037 CEST	53	50050	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.933558941 CEST	53	56562	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.935313940 CEST	53	64794	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.968058109 CEST	53	54945	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:21.969948053 CEST	53	57093	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:22.170758009 CEST	59242	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:22.171051979 CEST	53578	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:22.429497004 CEST	57235	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:22.429636002 CEST	53971	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:22.534487009 CEST	53	57235	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:22.536289930 CEST	53	53971	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.041984081 CEST	63197	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.042268038 CEST	56630	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.045011997 CEST	56395	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.045156956 CEST	50017	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.072580099 CEST	64124	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.072777033 CEST	54634	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.150547028 CEST	53	50017	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.150701046 CEST	53	56395	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.174252987 CEST	53	60011	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.175471067 CEST	53	53706	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.177613974 CEST	53	64124	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.197045088 CEST	53	54634	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.654593945 CEST	63304	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.654872894 CEST	57020	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.760298014 CEST	53	63304	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.760783911 CEST	53	57020	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.873759031 CEST	62060	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.873887062 CEST	54621	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:23.979094028 CEST	53	62060	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:23.979137897 CEST	53	54621	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.058386087 CEST	50989	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.058532953 CEST	50890	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.059093952 CEST	56916	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.059535027 CEST	59717	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.084196091 CEST	55959	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.084335089 CEST	57702	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.163414001 CEST	53	50989	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.163475037 CEST	53	50890	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.163928032 CEST	53	56916	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.164248943 CEST	53	59717	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.179017067 CEST	52109	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.179197073 CEST	65275	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:24.189511061 CEST	53	55959	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.189647913 CEST	53	57702	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.222574949 CEST	53	59606	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:24.392930984 CEST	53	56848	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:26.438774109 CEST	62132	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:26.438874006 CEST	52610	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:26.478614092 CEST	55385	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:26.478950977 CEST	56453	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:26.545591116 CEST	53	52610	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:26.588042021 CEST	53	56453	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:26.878587008 CEST	53	53422	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:28.311301947 CEST	53	54661	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:29.181853056 CEST	50358	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:29.182645082 CEST	53297	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:28:29.288846970 CEST	53	53297	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:49.799587965 CEST	53	51228	1.1.1.1	192.168.2.4
Apr 23, 2024 22:28:52.902920961 CEST	53	50182	1.1.1.1	192.168.2.4
Apr 23, 2024 22:29:02.607659101 CEST	57151	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:29:02.608603001 CEST	54494	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:29:03.358707905 CEST	61938	53	192.168.2.4	1.1.1.1
Apr 23, 2024 22:29:03.358916044 CEST	51238	53	192.168.2.4	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 22:27:51.889106989 CEST	192.168.2.4	1.1.1.1	0xbaa8	Standard query (0)	na2.docusign.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:51.889384031 CEST	192.168.2.4	1.1.1.1	0x5fba	Standard query (0)	na2.docusign.net	65	IN (0x0001)	false
Apr 23, 2024 22:27:53.776456118 CEST	192.168.2.4	1.1.1.1	0x89ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.776702881 CEST	192.168.2.4	1.1.1.1	0x862a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 22:27:54.000164986 CEST	192.168.2.4	1.1.1.1	0x782e	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.000333071 CEST	192.168.2.4	1.1.1.1	0xdaa3	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 23, 2024 22:27:54.001612902 CEST	192.168.2.4	1.1.1.1	0x45e3	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.001899004 CEST	192.168.2.4	1.1.1.1	0xc6fa	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 23, 2024 22:27:54.593266010 CEST	192.168.2.4	1.1.1.1	0x3cf	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.593755007 CEST	192.168.2.4	1.1.1.1	0xc9a4	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 23, 2024 22:27:54.760780096 CEST	192.168.2.4	1.1.1.1	0x698d	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.761460066 CEST	192.168.2.4	1.1.1.1	0xb197	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 23, 2024 22:27:56.017302990 CEST	192.168.2.4	1.1.1.1	0xd2c6	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:56.017302990 CEST	192.168.2.4	1.1.1.1	0xdd11	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 23, 2024 22:27:59.549472094 CEST	192.168.2.4	1.1.1.1	0x26e8	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:59.549869061 CEST	192.168.2.4	1.1.1.1	0x72d8	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:00.265985012 CEST	192.168.2.4	1.1.1.1	0x3600	Standard query (0)	na2.docusign.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:00.266494036 CEST	192.168.2.4	1.1.1.1	0x5afd	Standard query (0)	na2.docusign.net	65	IN (0x0001)	false
Apr 23, 2024 22:28:00.297405005 CEST	192.168.2.4	1.1.1.1	0x5c3d	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:00.297610044 CEST	192.168.2.4	1.1.1.1	0x5eb2	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:19.161559105 CEST	192.168.2.4	1.1.1.1	0x8c27	Standard query (0)	www.osler.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:19.161679983 CEST	192.168.2.4	1.1.1.1	0xd38f	Standard query (0)	www.osler.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:20.719441891 CEST	192.168.2.4	1.1.1.1	0xfba5	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:20.719825029 CEST	192.168.2.4	1.1.1.1	0x22a8	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 23, 2024 22:28:21.824724913 CEST	192.168.2.4	1.1.1.1	0x6a55	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:21.825193882 CEST	192.168.2.4	1.1.1.1	0xbc8c	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:21.828212976 CEST	192.168.2.4	1.1.1.1	0x8287	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:21.828366995 CEST	192.168.2.4	1.1.1.1	0xbcb9	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 23, 2024 22:28:22.170758009 CEST	192.168.2.4	1.1.1.1	0x9e02	Standard query (0)	www.osler.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.171051979 CEST	192.168.2.4	1.1.1.1	0x231f	Standard query (0)	www.osler.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:22.429497004 CEST	192.168.2.4	1.1.1.1	0x57a	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.429636002 CEST	192.168.2.4	1.1.1.1	0xc2e6	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:23.041984081 CEST	192.168.2.4	1.1.1.1	0x569	Standard query (0)	a.quora.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.042268038 CEST	192.168.2.4	1.1.1.1	0x2299	Standard query (0)	a.quora.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:23.045011997 CEST	192.168.2.4	1.1.1.1	0x6a2b	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.045156956 CEST	192.168.2.4	1.1.1.1	0xabe9	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:23.072580099 CEST	192.168.2.4	1.1.1.1	0x8b72	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.072777033 CEST	192.168.2.4	1.1.1.1	0xd80	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:23.654593945 CEST	192.168.2.4	1.1.1.1	0x12aa	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.654872894 CEST	192.168.2.4	1.1.1.1	0x555e	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:23.873759031 CEST	192.168.2.4	1.1.1.1	0xe37	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.873887062 CEST	192.168.2.4	1.1.1.1	0xe8ba	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:24.058386087 CEST	192.168.2.4	1.1.1.1	0xcdc8	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.058532953 CEST	192.168.2.4	1.1.1.1	0x68c7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 23, 2024 22:28:24.059093952 CEST	192.168.2.4	1.1.1.1	0xc441	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.059535027 CEST	192.168.2.4	1.1.1.1	0x194d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 23, 2024 22:28:24.084196091 CEST	192.168.2.4	1.1.1.1	0x7962	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.084335089 CEST	192.168.2.4	1.1.1.1	0x95cc	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 23, 2024 22:28:24.179017067 CEST	192.168.2.4	1.1.1.1	0x6bb2	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.179197073 CEST	192.168.2.4	1.1.1.1	0x3e9d	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Apr 23, 2024 22:28:26.438774109 CEST	192.168.2.4	1.1.1.1	0x5e06	Standard query (0)	n.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:26.438874006 CEST	192.168.2.4	1.1.1.1	0x53da	Standard query (0)	n.clarity.ms	65	IN (0x0001)	false
Apr 23, 2024 22:28:26.478614092 CEST	192.168.2.4	1.1.1.1	0xbc7e	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:26.478950977 CEST	192.168.2.4	1.1.1.1	0xa140	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Apr 23, 2024 22:28:29.181853056 CEST	192.168.2.4	1.1.1.1	0xe63c	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:29.182645082 CEST	192.168.2.4	1.1.1.1	0x2ddb	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Apr 23, 2024 22:29:02.607659101 CEST	192.168.2.4	1.1.1.1	0x30f4	Standard query (0)	na2.docusign.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:29:02.608603001 CEST	192.168.2.4	1.1.1.1	0x3bf3	Standard query (0)	na2.docusign.net	65	IN (0x0001)	false
Apr 23, 2024 22:29:03.358707905 CEST	192.168.2.4	1.1.1.1	0xa947	Standard query (0)	na2.docusign.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:29:03.358916044 CEST	192.168.2.4	1.1.1.1	0xb15b	Standard query (0)	na2.docusign.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 22:27:51.995122910 CEST	1.1.1.1	192.168.2.4	0xbaa8	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:51.996400118 CEST	1.1.1.1	192.168.2.4	0x5fba	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881403923 CEST	1.1.1.1	192.168.2.4	0x89ef	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:53.881664038 CEST	1.1.1.1	192.168.2.4	0x862a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 22:27:54.106678963 CEST	1.1.1.1	192.168.2.4	0x782e	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.107203007 CEST	1.1.1.1	192.168.2.4	0xdaa3	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.108468056 CEST	1.1.1.1	192.168.2.4	0x45e3	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.108468056 CEST	1.1.1.1	192.168.2.4	0x45e3	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.108468056 CEST	1.1.1.1	192.168.2.4	0x45e3	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.108468056 CEST	1.1.1.1	192.168.2.4	0x45e3	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.148.51.66	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.108623981 CEST	1.1.1.1	192.168.2.4	0xc6fa	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.698997021 CEST	1.1.1.1	192.168.2.4	0x3cf	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.699796915 CEST	1.1.1.1	192.168.2.4	0xc9a4	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:54.868191957 CEST	1.1.1.1	192.168.2.4	0x698d	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.868191957 CEST	1.1.1.1	192.168.2.4	0x698d	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.868191957 CEST	1.1.1.1	192.168.2.4	0x698d	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:54.868191957 CEST	1.1.1.1	192.168.2.4	0x698d	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:56.122150898 CEST	1.1.1.1	192.168.2.4	0xd2c6	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:56.122150898 CEST	1.1.1.1	192.168.2.4	0xd2c6	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:56.122150898 CEST	1.1.1.1	192.168.2.4	0xd2c6	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:56.122150898 CEST	1.1.1.1	192.168.2.4	0xd2c6	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:27:59.654355049 CEST	1.1.1.1	192.168.2.4	0x26e8	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:27:59.656064034 CEST	1.1.1.1	192.168.2.4	0x72d8	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:00.373120070 CEST	1.1.1.1	192.168.2.4	0x5afd	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:00.373415947 CEST	1.1.1.1	192.168.2.4	0x3600	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:00.402604103 CEST	1.1.1.1	192.168.2.4	0x5eb2	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:00.403568983 CEST	1.1.1.1	192.168.2.4	0x5c3d	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:07.173983097 CEST	1.1.1.1	192.168.2.4	0x7d4a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:07.173983097 CEST	1.1.1.1	192.168.2.4	0x7d4a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:19.341131926 CEST	1.1.1.1	192.168.2.4	0xd38f	No error (0)	www.osler.com	prodoslercom.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.341131926 CEST	1.1.1.1	192.168.2.4	0xd38f	No error (0)	prodoslercom.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.354526043 CEST	1.1.1.1	192.168.2.4	0x8c27	No error (0)	www.osler.com	prodoslercom.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.354526043 CEST	1.1.1.1	192.168.2.4	0x8c27	No error (0)	prodoslercom.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.354526043 CEST	1.1.1.1	192.168.2.4	0x8c27	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.354526043 CEST	1.1.1.1	192.168.2.4	0x8c27	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:19.354526043 CEST	1.1.1.1	192.168.2.4	0x8c27	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:19.491473913 CEST	1.1.1.1	192.168.2.4	0x1067	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:19.491473913 CEST	1.1.1.1	192.168.2.4	0x1067	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:20.824660063 CEST	1.1.1.1	192.168.2.4	0xfba5	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:20.824660063 CEST	1.1.1.1	192.168.2.4	0xfba5	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:20.825059891 CEST	1.1.1.1	192.168.2.4	0x22a8	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 23, 2024 22:28:21.929795027 CEST	1.1.1.1	192.168.2.4	0xbc8c	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 23, 2024 22:28:21.930294037 CEST	1.1.1.1	192.168.2.4	0x6a55	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:21.930294037 CEST	1.1.1.1	192.168.2.4	0x6a55	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:21.933558941 CEST	1.1.1.1	192.168.2.4	0xbcb9	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 23, 2024 22:28:21.935313940 CEST	1.1.1.1	192.168.2.4	0x8287	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:21.935313940 CEST	1.1.1.1	192.168.2.4	0x8287	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.377135038 CEST	1.1.1.1	192.168.2.4	0x231f	No error (0)	www.osler.com	prodoslercom.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:22.377135038 CEST	1.1.1.1	192.168.2.4	0x231f	No error (0)	prodoslercom.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:22.393066883 CEST	1.1.1.1	192.168.2.4	0x9e02	No error (0)	www.osler.com	prodoslercom.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:22.393066883 CEST	1.1.1.1	192.168.2.4	0x9e02	No error (0)	prodoslercom.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:22.393066883 CEST	1.1.1.1	192.168.2.4	0x9e02	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:22.393066883 CEST	1.1.1.1	192.168.2.4	0x9e02	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.393066883 CEST	1.1.1.1	192.168.2.4	0x9e02	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.534487009 CEST	1.1.1.1	192.168.2.4	0x57a	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.534487009 CEST	1.1.1.1	192.168.2.4	0x57a	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:22.536289930 CEST	1.1.1.1	192.168.2.4	0xc2e6	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 23, 2024 22:28:23.147561073 CEST	1.1.1.1	192.168.2.4	0x569	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150562048 CEST	1.1.1.1	192.168.2.4	0x2299	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150701046 CEST	1.1.1.1	192.168.2.4	0x6a2b	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150701046 CEST	1.1.1.1	192.168.2.4	0x6a2b	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150701046 CEST	1.1.1.1	192.168.2.4	0x6a2b	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150701046 CEST	1.1.1.1	192.168.2.4	0x6a2b	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.150701046 CEST	1.1.1.1	192.168.2.4	0x6a2b	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.177613974 CEST	1.1.1.1	192.168.2.4	0x8b72	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:23.177613974 CEST	1.1.1.1	192.168.2.4	0x8b72	No error (0)	static-cdn.hotjar.com		52.85.132.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.177613974 CEST	1.1.1.1	192.168.2.4	0x8b72	No error (0)	static-cdn.hotjar.com		52.85.132.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.177613974 CEST	1.1.1.1	192.168.2.4	0x8b72	No error (0)	static-cdn.hotjar.com		52.85.132.15	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.177613974 CEST	1.1.1.1	192.168.2.4	0x8b72	No error (0)	static-cdn.hotjar.com		52.85.132.5	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.197045088 CEST	1.1.1.1	192.168.2.4	0xd80	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:23.760298014 CEST	1.1.1.1	192.168.2.4	0x12aa	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.760298014 CEST	1.1.1.1	192.168.2.4	0x12aa	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.760298014 CEST	1.1.1.1	192.168.2.4	0x12aa	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.760298014 CEST	1.1.1.1	192.168.2.4	0x12aa	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.760298014 CEST	1.1.1.1	192.168.2.4	0x12aa	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.979094028 CEST	1.1.1.1	192.168.2.4	0xe37	No error (0)	script.hotjar.com		99.84.191.81	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.979094028 CEST	1.1.1.1	192.168.2.4	0xe37	No error (0)	script.hotjar.com		99.84.191.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.979094028 CEST	1.1.1.1	192.168.2.4	0xe37	No error (0)	script.hotjar.com		99.84.191.43	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:23.979094028 CEST	1.1.1.1	192.168.2.4	0xe37	No error (0)	script.hotjar.com		99.84.191.77	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.138	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.139	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.113	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.100	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163414001 CEST	1.1.1.1	192.168.2.4	0xcdc8	No error (0)	analytics.google.com		142.251.15.101	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163928032 CEST	1.1.1.1	192.168.2.4	0xc441	No error (0)	stats.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163928032 CEST	1.1.1.1	192.168.2.4	0xc441	No error (0)	stats.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163928032 CEST	1.1.1.1	192.168.2.4	0xc441	No error (0)	stats.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.163928032 CEST	1.1.1.1	192.168.2.4	0xc441	No error (0)	stats.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.189511061 CEST	1.1.1.1	192.168.2.4	0x7962	No error (0)	td.doubleclick.net		172.217.215.156	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.189511061 CEST	1.1.1.1	192.168.2.4	0x7962	No error (0)	td.doubleclick.net		172.217.215.154	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.189511061 CEST	1.1.1.1	192.168.2.4	0x7962	No error (0)	td.doubleclick.net		172.217.215.155	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.189511061 CEST	1.1.1.1	192.168.2.4	0x7962	No error (0)	td.doubleclick.net		172.217.215.157	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284039974 CEST	1.1.1.1	192.168.2.4	0x6bb2	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284039974 CEST	1.1.1.1	192.168.2.4	0x6bb2	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284039974 CEST	1.1.1.1	192.168.2.4	0x6bb2	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284039974 CEST	1.1.1.1	192.168.2.4	0x6bb2	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284039974 CEST	1.1.1.1	192.168.2.4	0x6bb2	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284591913 CEST	1.1.1.1	192.168.2.4	0x3e9d	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:24.284591913 CEST	1.1.1.1	192.168.2.4	0x3e9d	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.544935942 CEST	1.1.1.1	192.168.2.4	0x5e06	No error (0)	n.clarity.ms	vmss-clarity-ingest-eus2-f.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.545591116 CEST	1.1.1.1	192.168.2.4	0x53da	No error (0)	n.clarity.ms	vmss-clarity-ingest-eus2-f.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.584449053 CEST	1.1.1.1	192.168.2.4	0xbc7e	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.584449053 CEST	1.1.1.1	192.168.2.4	0xbc7e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.588042021 CEST	1.1.1.1	192.168.2.4	0xa140	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:26.588042021 CEST	1.1.1.1	192.168.2.4	0xa140	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:29.286942959 CEST	1.1.1.1	192.168.2.4	0xe63c	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:29.286942959 CEST	1.1.1.1	192.168.2.4	0xe63c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:29.288846970 CEST	1.1.1.1	192.168.2.4	0x2ddb	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:29.288846970 CEST	1.1.1.1	192.168.2.4	0x2ddb	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:44.704142094 CEST	1.1.1.1	192.168.2.4	0x1356	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:28:44.704142094 CEST	1.1.1.1	192.168.2.4	0x1356	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 22:29:02.713659048 CEST	1.1.1.1	192.168.2.4	0x30f4	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:29:02.714306116 CEST	1.1.1.1	192.168.2.4	0x3bf3	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:29:03.464894056 CEST	1.1.1.1	192.168.2.4	0xb15b	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 22:29:03.465152979 CEST	1.1.1.1	192.168.2.4	0xa947	No error (0)	na2.docusign.net	na2.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

a.docusign.com

api.mixpanel.com

www.osler.com

cdn.cookielaw.org

geolocation.onetrust.com

static.hotjar.com

q.quora.com

script.hotjar.com

analytics.google.com

stats.g.doubleclick.net

td.doubleclick.net

www.clarity.ms

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49745	54.186.38.246	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:54 UTC	540	OUT	GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://na2.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:27:54 UTC	313	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:27:54 GMT Content-Length: 631 Connection: close Server: DS-Arya Expires: Wed, 24 Apr 2024 20:27:54 GMT Cache-Control: max-age=86400 Set-Cookie: ds_a=1d8157cd-e01d-4aa0-9aec-ad2dbb46f761;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-23 20:27:54 UTC	631	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 66 2c 72 2c 65 2c 6f 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 72 65 74 75 72 6e 20 64 65 66 69 6e 65 28 6f 29 3b 66 26 26 66 5b 72 5d 3f 66 5b 72 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 3a 75 5b 6e 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 7d 28 22 44 53 5f 41 72 79 61 22 2c 30 2c 30 2c 75 2e 6d 6f 64 75 6c 65 2c 22 65 78 70 6f 72 74 73 22 2c 22 6c 65 6e 67 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 66 2c 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 7b 7d 2c 63 3d 28 73 28 66 75 6e 63 74 Data Ascii: (function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49755	35.190.25.25	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:55 UTC	1091	OUT	GET /track/?data=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%3D%3D&ip=1&_=1713904074295 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na2.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na2.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:27:55 UTC	579	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://na2.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:27:55 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:27:55 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49754	35.190.25.25	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:55 UTC	1085	OUT	GET /track/?data=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%3D&ip=1&_=1713904074298 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na2.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na2.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:27:55 UTC	579	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://na2.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:27:55 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:27:55 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49768	35.186.241.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:56 UTC	885	OUT	GET /track/?data=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%3D%3D&ip=1&_=1713904074295 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:27:56 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:27:56 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:27:56 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49769	35.186.241.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:56 UTC	879	OUT	GET /track/?data=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%3D&ip=1&_=1713904074298 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:27:56 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:27:56 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:27:56 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49767	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 20:27:56 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=38162 Date: Tue, 23 Apr 2024 20:27:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49772	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:27:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 20:27:56 UTC	804	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=38109 Date: Tue, 23 Apr 2024 20:27:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 20:27:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49805	35.190.25.25	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:02 UTC	3471	OUT	GET /track/?data=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%3D%3D&ip=1&_=1713904082133 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na2.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na2.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:03 UTC	580	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://na2.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:28:03 GMT Content-Length: 1 x-envoy-upstream-service-time: 37 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:28:03 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49815	35.186.241.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:03 UTC	3265	OUT	GET /track/?data=eyJldmVudCI6ICJDQyBSZWNpcGllbnQgVmlldyBTaWdudXAgRm9ybSIsInByb3BlcnRpZXMiOiB7IiRvcyI6ICJXaW5kb3dzIiwiJGJyb3dzZXIiOiAiQ2hyb21lIiwiJHNjcmVlbl9oZWlnaHQiOiAxMDI0LCIkc2NyZWVuX3dpZHRoIjogMTI4MCwibXBfbGliIjogIndlYiIsImRpc3RpbmN0X2lkIjogIjllZGZiODIzYTZhNWZmZWI4NmZkZDlkN2E3NWI4ZmFkNWJjMjI3OTkiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjogIiRkaXJlY3QiLCJQYWdlIjogIlNpZ24gJiBSZXR1cm4gTW9kYWwiLCJIYXNoZWRFbWFpbCI6ICJiYTE4MTQ2ZDhlODAxMmUxOTE0Nzk5ODczMzk3YzIzYyIsIlBvc3QgU2lnbmluZyBEaWFsb2ciOiAiRG9uZSIsIkVudmVsb3BlIElEIjogIjBhYTYwNzdiOGVjOTAzNjAxNGZiYWE4NTU4ZTgxZjI4Mjc1YTUyM2IiLCJSZWNpcGllbnQgSUQiOiAiYmViMzJiMDY1MmZhODYzMzQzY2U1ZTRiMTYwN2JkMmMyMjQ5OGZmYyIsIlNpZ25lciBJRCI6ICI5ZWRmYjgyM2E2YTVmZmViODZmZGQ5ZDdhNzViOGZhZDViYzIyNzk5IiwiQnJvd3NlciBWZXJzaW9uIjogIkNocm9tZSAxMjMuMCIsIkZpZWxkcyBSZWNpcGllbnQiOiAiMiIsIkZpZWxkcyBFbnZlbG9wZSI6ICIyIiwiUmVxdWlyZWQgRmllbGRzIjogIjEiLCJMYW5ndWFnZSI6ICJlbiIsIlNpZ25pbmcgQWNjZXNzIjogIlJlbW90ZSIsIkF1dG9OYXYgUnVsZXMiOiAiRmllbGRzQWxsIiwiUmVjaXBpZW50cyI6ICIxIiwiUmVjaXBpZW50IFR5cGUiOiAiU2lnbmVyIiwiUmVjaXBpZW50cyBXb3JrZmxvdyI6ICIxIiwiU2VuZGVyIEFjY291bnQgSUQiOiAiOWNlZDk4ZmQyMjhlNjg5M2IxMWRjYTdjYjZiYTZkYTA0M2FjZjY4NyIsIkFjY291bnQgSUQiOiAiODkzZTJiNGE5MWFhMDYyNzQyOGRlNzlmMzIxNzkzNmM0MDZlYzEwYSIsIkJyYW5kZWQiOiB0cnVlLCJCcmFuZGVkIExvZ28iOiB0cnVlLCJCcmFuZGVkIENvbG9yIjogdHJ1ZSwiQnJhbmRlZCBGaWxlIjogZmFsc2UsIkNvbmNhdCBNb2RlIjogZmFsc2UsIkF0dGFjaG1lbnQgQWRkZWQiOiBmYWxzZSwiQXR0YWNobWVudCBDb3VudCI6IDAsIkF0dGFjaG1lbnQgTWV0aG9kIjogbnVsbCwiUGFnZXMiOiAiMTEiLCJEb2NzIjogIjMiLCJBdXRoZW50aWNhdGlvbiI6ICJOb25lIiwiTG9nZ2VkIEluIjogZmFsc2UsIkNvbnNlbnQgU2hvd24iOiBmYWxzZSwiQWNjb3VudCBIb2xkZXIiOiBmYWxzZSwiRmllbGQgU2lnbmF0dXJlIjogdHJ1ZSwiRmllbGQgSW5pdGlhbCI6IGZhbHNlLCJGaWVsZCBTdGFtcCI6IGZhbHNlLCJGaWVsZCBEYXRlIjogdHJ1ZSwiRmllbGQgVGV4dCI6IGZhbHNlLCJGaWVsZCBOYW1lIjogZmFsc2UsIkZpZWxkIENvbXBhbnkiOiBmYWxzZSwiRmllbGQgVGl0bGUiOiBmYWxzZSwiRmllbGQgRW1haWwiOiBmYWxzZSwiRmllbGQgQ2hlY2tib3giOiBmYWxzZSwiRmllbGQgUmFkaW8iOiBmYWxzZSwiRmllbGQgRHJvcGRvd24iOiBmYWxzZSwiRmllbGQgQXR0YWNobWVudCI6IGZhbHNlLCJGaWVsZCBOb3RlIjogZmFsc2UsIkZpZWxkIEFwcHJvdmUiOiBmYWxzZSwiRmllbGQgRGVjbGluZSI6IGZhbHNlLCJGaWVsZCBWaWV3IjogZmFsc2UsIkZpZWxkIEZvcm11bGEiOiBmYWxzZSwiVGVtcGxhdGUgVXNlZCI6IGZhbHNlLCJTdXBwbGVtZW50YWwgRG9jdW1lbnQgQ291bnQiOiAxLCJTdXBwbGVtZW50YWwgRG9jdW1lbnQgUmVxdWlyZW1lbnRzIjogIk5vSW50ZXJhY3Rpb24iLCJBdXRvQ29tcGxldGUgRW5hYmxlZCI6IGZhbHNlLCJwcm9kdWN0IGFyZWEiOiAiU2lnbmluZyIsIkRTX0EiOiAiMWQ4MTU3Y2QtZTAxZC00YWEwLTlhZWMtYWQyZGJiNDZmNzYxIiwiRnJlZWZvcm0iOiBmYWxzZSwiU2lnbmluZ0V4dGVuc2lvbnMiOiB0cnVlLCJCcm93c2VyIFdpZHRoIEluaXRpYWwiOiAxMjgwLCJCcm93c2VyIEhlaWdodCBJbml0aWFsIjogOTA3LCJCcm93c2VyIFdpZHRoIjogMTI4MCwiQnJvd3NlciBIZWlnaHQiOiA5MDcsIlNlc3Npb24gQWJvdXQgdG8gRXhwaXJlIENvdW50IjogMCwiVG9wIEZpbmlzaCBIaWRkZW4iOiBmYWxzZSwiUG93ZXJGb3JtIjogZmFsc2UsIkEvQiBUZXN0cyI6ICJpZnJhbWVsZXNzOiBtb2JpbGUiLCJQb3dlcmZvcm0gU2VuZGVyIjogZmFsc2UsIlBsYXRmb3JtIjogIldlYiBBcHAiLCJ0b2tlbiI6ICIzMDRjY2JkZTI0ZDNiMTVmZmUyZDVkZTMwYzEwZGFiMiJ9fQ%3D%3D&ip=1&_=1713904082133 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:03 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 20:28:03 GMT Content-Length: 1 x-envoy-upstream-service-time: 12 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 20:28:03 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49841	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:19 UTC	636	OUT	GET / HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:20 UTC	1034	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 20:28:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: close Location: /en/home Set-Cookie: CMSPreferredCulture=en-CA; expires=Wed, 23-Apr-2025 20:28:19 GMT; path=/; HttpOnly Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:19 GMT; path=/; HttpOnly Set-Cookie: ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd;Path=/;HttpOnly;Secure;Domain=www.osler.com Set-Cookie: ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.osler.com X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET set-cookie: ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; Path=/; Secure; HttpOnly; set-cookie: ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; SameSite=none; Path=/; Secure; HttpOnly; x-azure-ref: 20240423T202819Z-16f56cb894fh4vxq7cm94bepdg000000019g00000000m3a4 X-Cache: CONFIG_NOCACHE
2024-04-23 20:28:20 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 6e 2f 68 6f 6d 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/en/home">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49842	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:20 UTC	1012	OUT	GET /en/home HTTP/1.1 Host: www.osler.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c
2024-04-23 20:28:20 UTC	875	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 35610 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Set-Cookie: ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; path=/; HttpOnly; SameSite=Lax Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:20 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=Edge X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET set-cookie: ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; Path=/; Secure; HttpOnly; set-cookie: ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; SameSite=none; Path=/; Secure; HttpOnly; x-azure-ref: 20240423T202820Z-16f7b4795d4hbs9nymf33py59c00000005x0000000001p1q X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:20 UTC	13371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4f 73 6c 65 72 2c 20 48 6f 73 6b 69 6e 20 26 61 6d 70 3b 20 48 61 72 63 6f 75 72 74 20 4c 4c 50 20 7c 20 42 75 73 69 6e 65 73 73 20 4c 61 77 20 46 69 72 6d 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 73 6c 65 72 20 69 73 20 61 20 6c 65 61 64 69 6e 67 20 62 75 73 69 6e 65 73 73 20 6c 61 77 20 66 69 72 6d 20 70 72 61 63 74 69 73 69 6e 67 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 6c 79 20 66 72 6f 6d 20 6f 66 66 69 63 65 73 20 61 63 72 6f 73 73 Data Ascii: <!DOCTYPE html><html lang="en" xml:lang="en"><head id="head"><title>Osler, Hoskin & Harcourt LLP \| Business Law Firm</title><meta name="description" content="Osler is a leading business law firm practising internationally from offices across
2024-04-23 20:28:20 UTC	4096	IN	Data Raw: 72 63 68 22 20 6f 6e 6b 65 79 70 72 65 73 73 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 46 69 72 65 44 65 66 61 75 6c 74 42 75 74 74 6f 6e 28 65 76 65 6e 74 2c 20 26 23 33 39 3b 6f 66 66 63 61 6e 76 61 73 53 65 61 72 63 68 42 74 6e 26 23 33 39 3b 29 22 3e 0d 0a 09 0d 0a 09 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 20 69 64 3d 22 6c 62 6c 48 65 61 64 65 72 4f 66 66 63 61 6e 76 61 73 53 65 61 72 63 68 4d 6f 62 69 6c 65 22 20 66 6f 72 3d 22 6f 66 66 63 61 6e 76 61 73 54 78 74 53 65 61 72 63 68 22 3e 53 65 61 72 63 68 20 74 68 65 20 73 69 74 65 3a 3c 2f 6c 61 62 65 6c 3e 0d 0a 0d 0a 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 70 24 6c 74 24 63 74 6c 30 35 24 4d 6f 62 69 6c 65 4e 61 76 69 67 Data Ascii: rch" onkeypress="javascript:return WebForm_FireDefaultButton(event, 'offcanvasSearchBtn')"><label class="sr-only" id="lblHeaderOffcanvasSearchMobile" for="offcanvasTxtSearch">Search the site:</label> <input name="p$lt$ctl05$MobileNavig
2024-04-23 20:28:20 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 75 6d 6e 73 20 68 6f 6d 65 70 61 67 65 2d 74 69 6c 65 2d 63 6f 6d 70 6f 6e 65 6e 74 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 36 5f 70 61 67 65 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 5f 6c 74 5f 63 74 6c 30 31 5f 54 69 6c 65 4c 69 73 74 5f 72 70 74 49 74 65 6d 73 5f 63 74 6c 30 30 5f 47 72 69 64 50 61 6e 65 6c 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 75 6d 6e 73 20 67 72 69 64 2d 69 74 65 6d 22 3e 0d 0a 09 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 Data Ascii: > <div class="col-sm-12 columns homepage-tile-component"> <div id="p_lt_ctl06_pageplaceholder_p_lt_ctl01_TileList_rptItems_ctl00_GridPanel" class="col-xs-12 columns grid-item"> <div class="grid
2024-04-23 20:28:20 UTC	1759	IN	Data Raw: 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 6f 74 65 72 3e 0a 3c 21 2d 2d 46 4f 4f 54 45 52 20 45 4e 44 2d 2d 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 4f 73 6c 65 72 2f 6a 73 2f 64 69 73 74 2f 72 65 6d 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 31 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 Data Ascii: </div> </div></footer>...FOOTER END--><script type="text/javascript" src="/Osler/js/dist/rem.min.js"></script><script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script> ...[if lt IE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49846	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	994	OUT	GET /Osler/fonts/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: text/css Content-Length: 21987 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894fljwv72mzt8bkz1c00000001h0000000002x8w X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	3619	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 32 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 32 2e 30 27 Data Ascii: /! Font Awesome 4.2.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.2.0'
2024-04-23 20:28:21 UTC	12288	IN	Data Raw: 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 32 22 7d 2e 66 61 2d 67 65 61 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 33 22 7d 2e 66 61 2d 74 72 61 73 68 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 34 22 7d 2e 66 61 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 35 22 7d 2e 66 61 2d 66 69 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 36 22 7d 2e 66 61 2d 63 6c 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 37 22 7d 2e 66 61 2d 72 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 38 22 7d 2e 66 61 2d 64 6f 77 6e 6c 6f Data Ascii: signal:before{content:"\f012"}.fa-gear:before,.fa-cog:before{content:"\f013"}.fa-trash-o:before{content:"\f014"}.fa-home:before{content:"\f015"}.fa-file-o:before{content:"\f016"}.fa-clock-o:before{content:"\f017"}.fa-road:before{content:"\f018"}.fa-downlo
2024-04-23 20:28:21 UTC	6080	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 64 22 7d 2e 66 61 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 65 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 31 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 2d 73 71 75 61 72 Data Ascii: ore{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{content:"\f16d"}.fa-flickr:before{content:"\f16e"}.fa-adn:before{content:"\f170"}.fa-bitbucket:before{content:"\f171"}.fa-bitbucket-squar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49848	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	993	OUT	GET /Osler/css/bootstrap-accessibility-plugin.min.css HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: text/css Content-Length: 720 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894fdm9r7z8wfs1qqw000000001dg00000000bv5r X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	720	IN	Data Raw: 2e 62 74 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 23 30 30 30 20 64 6f 74 74 65 64 20 32 70 78 7d 2e 63 6c 6f 73 65 3a 66 6f 63 75 73 2c 2e 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 2e 6e 61 76 3e 6c 69 3e 61 3a 66 6f 63 75 73 2c 2e 6e 61 76 3e 6c 69 3e 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 2c 64 69 76 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 23 30 30 30 20 64 6f 74 74 65 64 20 31 70 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 69 74 65 6d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 39 39 39 39 39 39 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 36 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 6c 65 66 74 3b 2d 6d 6f 7a 2d Data Ascii: .btn:focus{outline:#000 dotted 2px}.close:focus,.close:hover,.nav>li>a:focus,.nav>li>a:hover,a:focus,div.active:focus{outline:#000 dotted 1px}.carousel-inner>.item{position:absolute;top:-999999em;display:block;-webkit-transition:.6s ease-in-out left;-moz-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49847	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	978	OUT	GET /Osler/css/styles.min.css?v=11.0.4 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: text/css Content-Length: 328011 Connection: close ETag: "051b627a086da1:0" Last-Modified: Thu, 04 Apr 2024 14:55:38 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894frt5xthgg03udhpc00000001g000000000079x X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	13622	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a Data Ascii: @charset "UTF-8";/! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normaliz
2024-04-23 20:28:21 UTC	4096	IN	Data Raw: 6f 6e 2d 69 63 65 2d 6c 6f 6c 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 33 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 63 65 2d 6c 6f 6c 6c 79 2d 74 61 73 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 33 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 64 75 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 33 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 70 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 33 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 70 74 69 6f 6e 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 33 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 65 6e 75 2d 68 61 6d 62 75 72 Data Ascii: on-ice-lolly:before{content:"\e231"}.glyphicon-ice-lolly-tasted:before{content:"\e232"}.glyphicon-education:before{content:"\e233"}.glyphicon-option-horizontal:before{content:"\e234"}.glyphicon-option-vertical:before{content:"\e235"}.glyphicon-menu-hambur
2024-04-23 20:28:21 UTC	16384	IN	Data Raw: 7d 2e 74 65 78 74 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 38 61 36 64 33 62 7d 61 2e 74 65 78 74 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 2c 61 2e 74 65 78 74 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 36 36 35 31 32 63 7d 2e 74 65 78 74 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 7d 61 2e 74 65 78 74 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 2c 61 2e 74 65 78 74 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 38 34 33 35 33 34 7d 2e 62 67 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 7d 61 2e 62 67 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 61 2e 62 67 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 Data Ascii: }.text-warning{color:#8a6d3b}a.text-warning:focus,a.text-warning:hover{color:#66512c}.text-danger{color:#a94442}a.text-danger:focus,a.text-danger:hover{color:#843534}.bg-primary{color:#fff;background-color:#337ab7}a.bg-primary:focus,a.bg-primary:hover{bac
2024-04-23 20:28:21 UTC	8192	IN	Data Raw: 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 77 Data Ascii: ning>td,.table>thead>tr.warning>th,.table>thead>tr>td.warning,.table>thead>tr>th.warning{background-color:#fcf8e3}.table-hover>tbody>tr.warning:hover>td,.table-hover>tbody>tr.warning:hover>th,.table-hover>tbody>tr:hover>.warning,.table-hover>tbody>tr>td.w
2024-04-23 20:28:21 UTC	8192	IN	Data Raw: 2d 62 74 6e 3e 73 65 6c 65 63 74 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 6c 67 7b 68 65 69 67 68 74 3a 34 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 36 70 78 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3e 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3e 74 65 78 74 61 72 65 61 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 73 Data Ascii: -btn>select.btn,.input-group-lg>select.form-control,.input-group-lg>select.input-group-addon,select.input-lg{height:46px;line-height:46px}.input-group-lg>.input-group-btn>select[multiple].btn,.input-group-lg>.input-group-btn>textarea.btn,.input-group-lg>s
2024-04-23 20:28:21 UTC	8192	IN	Data Raw: 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 Data Ascii: tive:focus,.btn-primary.active:hover,.btn-primary:active.focus,.btn-primary:active:focus,.btn-primary:active:hover,.open>.btn-primary.dropdown-toggle.focus,.open>.btn-primary.dropdown-toggle:focus,.open>.btn-primary.dropdown-toggle:hover{color:#fff;backgr
2024-04-23 20:28:21 UTC	16384	IN	Data Raw: 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6f 70 65 6e 3e 61 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 6c 65 66 74 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 64 72 6f 70 64 6f 77 6e 2d 62 61 63 6b 64 72 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 30 7d 2e 70 75 6c 6c 2d 72 69 67 68 74 3e 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 64 72 6f 70 75 70 20 2e Data Ascii: opdown-menu{display:block}.open>a{outline:0}.dropdown-menu-left{right:auto;left:0}.dropdown-header{font-size:12px;color:#777}.dropdown-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:990}.pull-right>.dropdown-menu{right:0;left:auto}.dropup .
2024-04-23 20:28:21 UTC	16384	IN	Data Raw: 23 65 37 65 37 65 37 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 Data Ascii: #e7e7e7}.navbar-default .navbar-link{color:#777}.navbar-default .navbar-link:hover{color:#333}.navbar-default .btn-link{color:#777}.navbar-default .btn-link:focus,.navbar-default .btn-link:hover{color:#333}.navbar-default .btn-link[disabled]:focus,.navbar
2024-04-23 20:28:21 UTC	16384	IN	Data Raw: 65 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 31 37 30 38 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 31 37 30 38 66 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 38 61 36 64 33 62 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 Data Ascii: e,button.list-group-item-info.active:focus,button.list-group-item-info.active:hover{color:#fff;background-color:#31708f;border-color:#31708f}.list-group-item-warning{color:#8a6d3b;background-color:#fcf8e3}a.list-group-item-warning,button.list-group-item-w
2024-04-23 20:28:21 UTC	9216	IN	Data Raw: 72 6f 77 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 35 70 78 20 35 70 78 20 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 74 6f 6f 6c 74 69 70 2e 74 6f 70 2d 6c 65 66 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 7b 72 69 67 68 74 3a 35 70 78 7d 2e 74 6f 6f 6c 74 69 70 2e 74 6f 70 2d 72 69 67 68 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 7b 6c 65 66 74 3a 35 70 78 7d 2e 74 6f 6f 6c 74 69 70 2e 72 69 67 68 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 7b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 35 70 78 20 35 70 78 20 35 70 78 Data Ascii: row{bottom:0;left:50%;margin-left:-5px;border-width:5px 5px 0;border-top-color:#000}.tooltip.top-left .tooltip-arrow{right:5px}.tooltip.top-right .tooltip-arrow{left:5px}.tooltip.right .tooltip-arrow{top:50%;left:0;margin-top:-5px;border-width:5px 5px 5px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49849	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	542	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:21 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Tue, 23 Apr 2024 02:35:10 GMT x-ms-request-id: b57d1c5d-f01e-002b-5698-95b94f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6 Expires: Wed, 24 Apr 2024 20:28:21 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87909978b87b7bb7-ATL
2024-04-23 20:28:21 UTC	510	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d Data Ascii: (!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!=
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: er,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 Data Ascii: t("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 Data Ascii: ,this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEleme
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 Data Ascii: ocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],th
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b Data Ascii: er"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 Data Ascii: gionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rule
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 Data Ascii: asIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49843	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	979	OUT	GET /Osler/js/bower_components/modernizr/modernizr.js HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	389	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: application/x-javascript Content-Length: 52757 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894fm2nn6atvm3qhr2s000000013g00000000uwra X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	15891	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 38 2e 33 0d 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0d 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c Data Ascii: /! Modernizr v2.8.3 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are avail
2024-04-23 20:28:21 UTC	16384	IN	Data Raw: 72 69 63 6b 79 20 74 6f 20 67 65 74 20 72 69 67 68 74 3a 0d 0a 20 20 20 20 2f 2f 0d 0a 20 20 20 20 2f 2f 20 55 73 69 6e 67 20 21 21 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 20 64 6f 65 73 20 74 77 6f 20 74 68 69 6e 67 73 20 77 65 20 64 6f 6e 27 74 20 77 61 6e 74 2e 20 49 74 3a 0d 0a 20 20 20 20 2f 2f 20 20 20 31 2e 20 4c 65 61 6b 73 20 6d 65 6d 6f 72 79 20 69 6e 20 49 45 39 3a 20 67 69 74 68 75 62 2e 63 6f 6d 2f 4d 6f 64 65 72 6e 69 7a 72 2f 4d 6f 64 65 72 6e 69 7a 72 2f 69 73 73 75 65 73 2f 35 31 33 0d 0a 20 20 20 20 2f 2f 20 20 20 32 2e 20 44 69 73 61 62 6c 65 73 20 70 61 67 65 20 63 61 63 68 69 6e 67 20 69 6e 20 57 65 62 4b 69 74 3a 20 77 65 62 6b 2e 69 74 2f 34 33 39 35 36 0d 0a 20 20 20 20 2f 2f 0d 0a 20 20 20 20 2f 2f 20 4d 65 Data Ascii: ricky to get right: // // Using !!navigator.geolocation does two things we don't want. It: // 1. Leaks memory in IE9: github.com/Modernizr/Modernizr/issues/513 // 2. Disables page caching in WebKit: webk.it/43956 // // Me
2024-04-23 20:28:21 UTC	12288	IN	Data Raw: 61 6c 69 64 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 64 6f 65 73 6e 27 74 20 73 74 69 63 6b 2c 20 77 65 20 6b 6e 6f 77 20 74 68 65 72 65 27 73 20 69 6e 70 75 74 20 73 61 6e 69 74 69 7a 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e 66 65 72 73 20 61 20 63 75 73 74 6f 6d 20 55 49 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 62 6f 6f 6c 20 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 2e 76 61 6c 75 65 20 20 20 20 20 20 20 20 20 3d 20 73 6d 69 6c 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 3d 20 27 70 6f 73 69 74 69 Data Ascii: alid. // If the value doesn't stick, we know there's input sanitization which infers a custom UI if ( bool ) { inputElem.value = smile; inputElem.style.cssText = 'positi
2024-04-23 20:28:21 UTC	4096	IN	Data Raw: 20 2b 20 27 22 29 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 29 20 2b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 29 3b 72 65 74 75 72 6e 20 6e 7d 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 28 68 74 6d 6c 35 2c 20 64 61 74 61 2e 66 72 61 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 20 20 Data Ascii: + '")'; }) + ');return n}' )(html5, data.frag); } /--------------------------------------------------------------------------/ /**
2024-04-23 20:28:21 UTC	4098	IN	Data Raw: 72 6f 70 65 72 74 69 65 73 20 74 6f 20 74 68 65 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 20 77 69 74 68 20 70 72 65 66 69 78 0d 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 5f 76 65 72 73 69 6f 6e 20 20 20 20 20 20 3d 20 76 65 72 73 69 6f 6e 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 65 78 70 6f 73 65 20 74 68 65 73 65 20 66 6f 72 20 74 68 65 20 70 6c 75 67 69 6e 20 41 50 49 2e 20 4c 6f 6f 6b 20 69 6e 20 74 68 65 20 73 6f 75 72 63 65 20 66 6f 72 20 68 6f 77 20 74 6f 20 6a 6f 69 6e 28 29 20 74 68 65 6d 20 61 67 61 69 6e 73 74 20 79 6f 75 72 20 69 6e 70 75 74 0d 0a 20 20 20 20 2f 2a 3e 3e 70 72 65 66 69 78 65 73 2a 2f 0d 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 5f 70 72 65 66 69 78 65 73 20 20 20 20 20 3d 20 70 72 65 66 69 78 65 73 3b 0d 0a 20 20 20 20 2f 2a Data Ascii: roperties to the return object with prefix Modernizr._version = version; // expose these for the plugin API. Look in the source for how to join() them against your input />>prefixes/ Modernizr._prefixes = prefixes; /*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49844	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1057	OUT	GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZMakmllNIbNVJUHTDPpvzmJhtQwH6GTOa46RoBltd7k6KymeJGxkWxehYM52nU-nmQ2&t=638399175142847209 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	455	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: application/x-javascript Content-Length: 23063 Connection: close Cache-Control: public Expires: Wed, 23 Apr 2025 20:26:38 GMT Last-Modified: Thu, 04 Jan 2024 03:25:14 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f7b4795d45gcwcnfmc7gcw3g00000002kg0000000077zu X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	15818	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-04-23 20:28:21 UTC	7245	IN	Data Raw: 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 Data Ascii: if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) { return window.pageXOffset; } else { i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49845	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1004	OUT	GET /CMSPages/GetResource.ashx?scriptfile=%7e%2fCMSScripts%2fWebServiceCall.js HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:21 UTC	551	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: application/x-javascript Content-Length: 326 Connection: close Cache-Control: public ETag: "file\|4/4/2024 10:52:28 AM" Expires: Tue, 30 Apr 2024 20:28:21 GMT Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Disposition: attachment; filename="WebServiceCall.js" x-azure-ref: 20240423T202821Z-16f56cb894fsrrwtv9xx2sy9ns000000014g00000000k0dh X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:21 UTC	326	IN	Data Raw: 76 61 72 20 57 65 62 53 65 72 76 69 63 65 43 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 6e 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 6e 28 29 3b 75 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 74 2b 22 2f 22 2b 69 2c 21 30 29 3b 75 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 Data Ascii: var WebServiceCall=function(){function n(){try{return new XMLHttpRequest}catch(n){}try{return new ActiveXObject("Msxml2.XMLHTTP")}catch(t){}return null}return function(t,i,r){var u=n();u.open("POST",t+"/"+i,!0);u.setRequestHeader("Content-type","applicati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49850	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	627	OUT	GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25c02da3-4d83-47e6-b080-f533c2d99f75.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:21 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:21 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8790997bdf85138b-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1929 Cache-Control: public, max-age=86400 Expires: Wed, 24 Apr 2024 20:28:21 GMT Last-Modified: Tue, 19 Sep 2023 09:22:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: ug7sJEH2YU+R6vsUNeAhQQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 72fd054d-201e-0091-059e-0b5c31000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-23 20:28:21 UTC	468	IN	Data Raw: 31 30 32 30 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 38 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 32 35 63 30 Data Ascii: 1020{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"25c0
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 62 31 62 63 36 36 39 63 2d 34 61 35 39 2d 34 34 38 63 2d 38 64 66 64 2d 62 36 36 65 35 33 65 30 34 66 34 64 22 2c 22 4e 61 6d 65 22 3a 22 51 75 65 62 65 63 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 63 61 22 3a 5b 22 71 63 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 66 72 22 3a 22 66 72 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 Data Ascii: ":[{"Id":"b1bc669c-4a59-448c-8dfd-b66e53e04f4d","Name":"Quebec","Countries":[],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"default":"en","fr":"fr"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GENERIC","UseGoogleVendors":fals
2024-04-23 20:28:21 UTC	1369	IN	Data Raw: 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 79 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 6e 72 22 2c 22 6e 75 22 2c 22 6e 7a 22 2c 22 6f 6d 22 2c 22 70 61 22 2c 22 70 65 22 2c 22 70 66 22 2c 22 70 67 22 2c 22 70 68 22 2c 22 70 6b 22 2c 22 70 6d 22 2c 22 70 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 Data Ascii: ","ls","ly","ma","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","my","mz","na","nc","ne","nf","ng","ni","np","nr","nu","nz","om","pa","pe","pf","pg","ph","pk","pm","pn"],"States":{},"LanguageSwitcherPlaceholder":{"default"
2024-04-23 20:28:21 UTC	930	IN	Data Raw: 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 Data Ascii: uage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.js
2024-04-23 20:28:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49851	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1135	OUT	GET /ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yND2uNShhTUBAP5n7Xu_4VEl-p2v7XApT3Wzf25zNj8jfHNT4wEsGAA2Kw1gCxln6iOKKZKXd_VfM8hBCSVnU9G4mkKk8MEcUDtNc08T0CzJigFOUXvGgrseIpqSzLM-sUZdqwGIcIt8aEKbHu1vqV81&t=722fe453 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 102801 Connection: close Cache-Control: public Expires: Wed, 23 Apr 2025 20:28:22 GMT Last-Modified: Tue, 23 Apr 2024 20:28:22 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894f4g6rbudmdpega90000000016g00000000dafb X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	3525	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-04-23 20:28:22 UTC	12288	IN	Data Raw: 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c 63 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 21 3d 3d 6e 75 6c 6c 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 61 63 74 75 61 6c 56 61 6c 75 65 2c 61 29 3b 76 61 72 20 65 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f Data Ascii: c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramName,c);if(typeof a!=="undefined"&&a!==null)b+="\n"+String.format(Sys.Res.actualValue,a);var e=Error.create(b,{name:"Sys.ArgumentOutO
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 77 69 6e 64 6f 77 2e 6f 70 65 72 61 2e 70 6f 73 74 45 72 72 6f 72 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 64 65 62 75 67 53 65 72 76 69 63 65 29 77 69 6e 64 6f 77 2e 64 65 62 75 67 53 65 72 76 69 63 65 2e 74 72 61 63 65 28 61 29 7d 2c Data Ascii: prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)window.opera.postError(a);if(window.debugService)window.debugService.trace(a)},
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 61 69 73 65 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 61 69 73 65 45 76 65 6e 74 28 62 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 43 Data Ascii: (a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Observer.raiseCollectionChanged=function(b,a){Sys.Observer.raiseEvent(b,"collectionC
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 5c 75 30 30 61 30 22 29 2e 6a 6f 69 6e 28 22 20 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 7d 3b 53 79 73 2e 43 75 6c 74 75 72 65 49 6e 66 6f 2e 72 65 67 69 73 74 Data Ascii: return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:function(a){return a.split("\u00a0").join(" ").toUpperCase()}};Sys.CultureInfo.regist
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 7d 7d 63 2e 61 70 70 65 6e 64 28 61 29 3b 63 2e 61 70 70 65 6e 64 28 27 22 27 29 7d 3b 53 79 73 2e 53 65 72 69 61 Data Ascii: FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serialization.JavaScriptSerializer._escapeChars[b])}}c.append(a);c.append('"')};Sys.Seria
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 57 69 6e 64 6f 77 28 74 68 69 73 2e 74 61 72 67 65 74 29 3b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 28 64 2e 70 61 67 65 58 4f 66 66 73 65 74 7c 7c 30 29 2b 61 2e 63 6c 69 65 6e 74 58 2d 63 2e 78 3b 74 68 69 73 2e 6f 66 Data Ascii: a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElement._getWindow(this.target);this.offsetX=(d.pageXOffset\|\|0)+a.clientX-c.x;this.of
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 6e 61 6d 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6e 61 6d 65 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 54 79 70 65 4e 61 6d 65 28 74 68 69 73 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 69 66 28 62 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 62 2b 31 29 3b 69 66 28 21 74 68 69 73 2e 67 65 74 5f 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 29 74 68 69 73 2e 5f 6e 61 6d 65 3d 61 3b 72 65 74 75 72 6e 20 61 7d 2c 73 65 74 5f 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 6e 61 6d 65 3d 61 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 53 79 73 2e 55 49 2e 42 65 68 61 76 69 6f 72 2e 63 61 6c 6c 42 61 73 65 4d 65 Data Ascii: unction(){if(this._name)return this._name;var a=Object.getTypeName(this),b=a.lastIndexOf(".");if(b!==-1)a=a.substr(b+1);if(!this.get_isInitialized())this._name=a;return a},set_name:function(a){this._name=a},initialize:function(){Sys.UI.Behavior.callBaseMe
2024-04-23 20:28:22 UTC	13260	IN	Data Raw: 61 6c 6c 65 64 3d 66 61 6c 73 65 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 30 7d 3b 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 64 64 5f 63 6f 6d 70 6c 65 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 61 64 64 48 61 6e 64 6c 65 72 28 22 63 6f 6d 70 6c 65 74 65 64 22 2c 61 29 7d 2c 72 65 6d 6f 76 65 5f 63 6f 6d 70 6c 65 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 22 63 6f 6d 70 6c 65 74 65 64 22 2c 61 29 7d 2c 63 6f 6d 70 6c 65 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 Data Ascii: alled=false;this._timeout=0};Sys.Net.WebRequest.prototype={add_completed:function(a){this._get_eventHandlerList().addHandler("completed",a)},remove_completed:function(a){this._get_eventHandlerList().removeHandler("completed",a)},completed:function(b){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49852	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1135	OUT	GET /ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadJaKr3VMEUCzTcVUg3yR_61yWBgJoleXt-5Wzlb_DbMqUsLvg1hc9B9Cbq075jVgMxR2b_4e3El0QfSbhYiSO0Zck-SkUtK5a0ahJ4I80fD0ivUmZ29GXEQmkrFUXLiggKgpiZLo68rZ0QbCQ6QY_s81&t=722fe453 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 40326 Connection: close Cache-Control: public Expires: Wed, 23 Apr 2025 20:28:22 GMT Last-Modified: Tue, 23 Apr 2024 20:28:22 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894fsdl45k3m180w6b0000000018000000000afnr X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	13530	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-04-23 20:28:22 UTC	4096	IN	Data Raw: 2e 5f 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 43 6f 6e 74 72 6f 6c 49 44 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 43 6f 6e 74 72 6f 6c 43 6c 69 65 6e 74 49 44 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 70 6f 73 74 42 61 63 6b 43 6f 6e 74 72 6f 6c 49 44 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 70 6f 73 74 42 61 63 6b 43 6f 6e 74 72 6f 6c 43 6c 69 65 6e 74 49 44 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 5f 64 6f 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 2c 66 2c 61 2c 65 29 Data Ascii: ._asyncPostBackControlIDs=null;this._asyncPostBackControlClientIDs=null;this._postBackControlIDs=null;this._postBackControlClientIDs=null;this._asyncPostBackTimeout=null;this._scrollPosition=null;this._activeElement=null},_doCallback:function(d,b,c,f,a,e)
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 2c 5f 67 65 74 50 61 67 65 4c 6f 61 64 65 64 45 76 65 6e 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 29 7b 76 61 72 20 6d 3d 5b 5d 2c 6c 3d 5b 5d 2c 6b 3d 63 3f 63 2e 76 65 72 73 69 6f 6e 34 3a 66 61 6c 73 65 2c 64 3d 63 3f 63 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 3a 6e 75 6c 6c 2c 65 2c 67 2c 68 2c 62 3b 69 66 28 21 64 29 7b 65 3d 74 68 69 73 2e 5f 75 70 64 61 74 65 50 61 6e 65 6c 49 44 73 3b 67 3d 74 68 69 73 2e 5f 75 70 64 61 74 65 50 61 6e 65 6c 43 6c 69 65 6e 74 49 44 73 3b 68 3d 6e 75 6c 6c 3b 62 3d 6e 75 6c 6c 7d 65 6c 73 65 7b 65 3d 64 2e 75 70 64 61 74 65 50 61 6e 65 6c 49 44 73 3b 67 3d 64 2e 75 70 64 61 74 65 50 61 6e 65 6c 43 6c 69 65 6e 74 49 Data Ascii: return false}}}return true},_getPageLoadedEventArgs:function(n,c){var m=[],l=[],k=c?c.version4:false,d=c?c.updatePanelData:null,e,g,h,b;if(!d){e=this._updatePanelIDs;g=this._updatePanelClientIDs;h=null;b=null}else{e=d.updatePanelIDs;g=d.updatePanelClientI
2024-04-23 20:28:22 UTC	6316	IN	Data Raw: 6c 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 46 61 69 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 62 2c 61 29 7b 61 2e 73 63 72 69 70 74 73 46 61 69 6c 65 64 3d 7b 73 72 63 3a 63 2e 73 72 63 2c 6d 75 6c 74 69 70 6c 65 43 61 6c 6c 62 61 63 6b 73 3a 62 7d 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 64 2c 61 29 7d 2c 5f 73 63 72 69 70 74 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 63 29 7b 76 61 72 20 65 3d 63 2e 65 78 65 63 75 74 6f 72 3b 69 66 28 77 69 6e 64 6f 77 2e 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 29 77 69 6e 64 6f 77 2e 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 3d 22 22 3b 69 66 28 77 69 6e 64 6f 77 2e 5f 5f Data Ascii: l)},_scriptIncludesLoadFailed:function(d,c,b,a){a.scriptsFailed={src:c.src,multipleCallbacks:b};this._scriptIncludesLoadComplete(d,a)},_scriptsLoadComplete:function(f,c){var e=c.executor;if(window.__theFormPostData)window.__theFormPostData="";if(window.__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49853	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1018	OUT	GET /Osler/images/logos/logo.png HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: image/png Content-Length: 4052 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894f7gqnz50s8mzsvyg000000014000000000mhh0 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	4052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 31 08 06 00 00 00 a8 0b 29 7b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR1){tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49854	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:21 UTC	1077	OUT	GET /osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: image/jpeg Content-Length: 249722 Connection: close ETag: "41919cb18390da1:0" Last-Modified: Wed, 17 Apr 2024 04:57:05 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202821Z-16f56cb894f4hxjjs88cmwhuqs00000001dg000000000mnz X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	13619	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-23 20:28:22 UTC	4096	IN	Data Raw: e1 ae 51 19 93 13 29 68 fd 36 38 5e 68 e4 81 5e 19 7c a9 93 57 de d3 d7 6d 04 06 02 ce 95 f2 a9 9a 8f 7e 67 e2 2c 92 55 96 47 51 c5 6c 10 12 6d 6e 11 52 9a fa 07 62 d5 b9 0f f2 e1 15 17 b7 70 29 d1 f4 9c d9 04 32 c6 20 37 aa 85 24 47 03 48 89 e8 26 35 2f 9b f7 87 89 64 eb 7a ad fe cd 25 b8 66 ee d9 c5 e7 e5 b6 e7 65 d6 ec 51 27 9b ba a4 d4 ee 2d f5 c3 9f 3d 72 d8 71 9b a6 fb c7 1c 2d 94 12 70 5d 01 a6 97 37 b7 3d 6f 9b 16 cd 56 69 7a 3a 73 28 8d 69 36 dd 69 c9 f6 ea a2 7e b2 43 ef c4 7d fc c1 66 3f 2c 43 d5 68 7c b1 8b 85 99 37 5a 9e 50 8a c7 62 2a 3f 35 3a db 1e 8b 44 f2 32 35 55 ea ee d5 6b 2e cf ee e6 9e b9 a4 e5 d9 b2 af e3 bd 72 68 9b c3 07 6f 83 cb 3a 34 73 ed 13 98 78 73 d7 77 64 2f 63 d2 2d f4 d5 79 12 b1 87 76 44 14 a4 47 dd 37 ab 9b b8 81 42 a7 Data Ascii: Q)h68^h^\|Wm~g,UGQlmnRbp)2 7$GH&5/dz%feQ'-=rq-p]7=oViz:s(i6i~C}f?,Ch\|7ZPb*?5:D25Uk.rho:4sxswd/c-yvDG7B
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 3c 55 e7 94 f0 e2 f8 53 15 79 fe 55 57 c7 3b c9 95 36 1e 22 47 39 53 1e 72 12 37 4f 6f 3e 5c 64 8f e1 1f f9 57 27 0c bf 82 4b f1 c2 3d 53 85 2a 39 0a 4e 4c 7a 38 6d 95 f1 19 b2 d7 ca 4c 5f 36 d3 95 cf 8f 31 de 81 95 e5 ad 96 d6 34 73 16 6c bb 3b 34 8e 2a 18 0e 44 63 bd 78 c2 fe 58 f5 4e 31 ee 7b a3 a7 e4 4a aa a3 54 f0 8b e7 8d 72 a7 11 51 50 6e fc f3 f1 c2 18 60 16 fe dd 00 cc f3 20 65 21 bd 0b 00 8f 6c c0 35 43 43 91 25 55 c9 0b ef c5 3a 22 e4 25 12 cc f7 17 b3 91 51 ce 5f cd 67 c8 b1 6c 2b dc ae 88 36 c8 29 86 e5 72 0d 55 6e 18 e7 4b f2 e3 f1 e3 73 1e 88 bc 85 21 f1 9c 22 16 1b 8a 80 91 1e 2b 8d 1a 67 f5 2e 97 6f 2b 1c b0 9a 57 63 61 63 5f 02 74 56 18 70 26 3a 4d 33 5a 24 30 dd 1a 24 c7 08 b7 91 c6 c3 b8 88 29 40 3b 91 6c 82 d4 33 06 a8 d0 bd a6 ad af Data Ascii: <USyUW;6"G9Sr7Oo>\dW'K=S9NLz8mL_614sl;4DcxXN1{JTrQPn` e!l5CC%U:"%Q_gl+6)rUnKs!"+g.o+Wcac_tVp&:M3Z$0$)@;l3
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: b7 c1 61 e3 12 1c f7 b9 b6 36 5f a8 2c f4 c9 38 87 ca 6e 6b 09 66 d0 4d 25 cc 71 cb a5 d7 b8 9d 99 24 ee dc 20 fa c7 6d 99 fe 1a 72 af 97 97 db 8a ef c2 3b cf 1c 46 b7 94 97 87 a0 bf b6 70 67 57 c7 20 e5 21 da 8f 5d ed 82 ba fb 17 47 2a a3 fd 97 8d 6f aa 3f c2 b7 8a e5 4e 54 bb ff 00 cf fe 1e 8e 55 5e 4b ac 3c 13 31 ae 5e 0d ee 0c 26 cd 72 28 e6 14 8e a5 96 d5 02 22 b4 96 11 19 30 45 bc 2d 34 71 15 1e 02 c3 1d 90 48 69 9e 1a e4 4e 22 ab 91 c3 6f c4 80 72 71 c2 90 af f8 86 e1 24 19 64 6a 18 82 67 ab 1c f0 4f 3c 51 8b 24 49 a9 09 05 fa 44 62 ff 00 63 23 c3 1f 50 57 7c ef 22 a2 cb 37 cc ce db 52 40 b3 8c ac f5 47 8f d5 57 ca f1 7c a2 7f 9e 31 89 cf ca 71 11 5d cd 19 8d b3 03 d3 fa 23 13 91 87 9b 22 fd b7 56 8c 04 03 71 c7 f9 b8 b9 9e 19 0e 98 a8 a7 79 9e 50 Data Ascii: a6_,8nkfM%q$ mr;FpgW !]G*o?NTU^K<1^&r("0E-4qHiN"orq$djgO<Q$IDbc#PW\|"7R@GW\|1q]#"VqyP
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: 09 f2 9d 17 83 7a 2b 76 5e b4 7e 49 94 33 4f c5 11 1f ac 68 85 c5 d7 74 a2 59 58 55 3f c7 6b 8a 49 86 b5 02 8c 49 45 f7 72 78 ff 00 9c 50 65 cb 43 45 8e 1e 0d a6 91 c4 02 31 bf c9 88 28 ee 7b 45 1d c8 bd 70 ca d4 6f de 18 80 f2 6c 6c 31 dc d4 64 24 54 04 44 44 fd 61 f8 eb ce b9 97 b3 37 27 5e f0 0d 75 d7 5c 1a 05 4a dd 2b e6 fe a8 e4 62 79 0d 92 66 f3 f1 ea 67 c0 95 69 71 3b e7 a4 c8 20 76 3e 5c 3b 7d fa 1f 0c 6f e5 57 52 e5 56 9f bc f1 42 b1 04 de b1 e1 fb b6 be bc 37 50 40 47 2b 5a aa d6 27 96 fc 91 e5 a1 18 f4 32 b5 88 d4 57 a3 90 4c 6b db 1c 25 47 a3 0c aa aa 51 31 ee 88 c2 2a 7e e0 b8 c3 b1 49 38 6b 2e 2b 5c ff 00 1e 15 55 5d e1 b4 6d 1b a3 fc 03 6b 09 0e 3a f1 f4 a0 33 cf 48 24 1a d9 10 cf 92 67 c6 8f 42 af 1d 71 0b eb 0a 3a a9 0f 1c c5 c7 55 d9 ce Data Ascii: z+v^~I3OhtYXU?kIIErxPeCE1({Epoll1d$TDDa7'^u\J+byfgiq; v>\;}oWRVB7P@G+Z'2WLk%GQ1*~I8k.+\U]mk:3H$gBq:U
2024-04-23 20:28:22 UTC	8192	IN	Data Raw: c3 95 aa ab e3 86 6f 94 c0 32 83 61 39 af 66 f5 d5 7e eb d0 fd be d0 b2 3a f9 b5 61 99 44 fd 6f 97 5c e2 39 0e 85 da f5 3b cb 55 28 17 9f 07 3e 12 71 e3 72 72 d9 aa 90 7d 57 db 76 68 ca fc ea a9 b1 b3 ea 78 c6 88 af 16 5d 26 e7 11 c6 e1 6d 3c b0 4b 07 69 e5 d7 0e eb 16 dc c4 76 46 29 95 e5 56 8e b5 df 7b 7f 0d fa f0 d2 36 07 b3 97 27 5e 67 d9 6e a8 cb b4 86 f2 d5 dd b9 c4 b2 8b 2c 1b 5d 5a 12 83 57 6c 86 bb 49 5c e3 e7 71 f7 05 33 6c ac 75 3d c1 5d a6 e0 d8 45 9b 85 e6 34 cd 1b 62 c3 76 39 5f 2e c1 45 8c 41 bf 6b ba d9 ad 71 d8 5b 53 43 e7 58 4b 6f 70 cc b7 1d c7 6c 23 e2 94 cd 1d ad 44 ab 5d 33 b1 23 61 f2 b2 bd f7 ac 29 e1 d5 ec 4c 57 63 65 1f 51 f7 b8 e6 3d f5 bd ba 23 6a 3e c0 e1 19 7c 3a 9a d9 96 61 31 4e 95 a7 5e 45 12 04 7f 23 88 b1 5a e7 12 34 67 Data Ascii: o2a9f~:aDo\9;U(>qrr}Wvhx]&m<KivF)V{6'^gn,]ZWlI\q3lu=]E4bv9_.EAkq[SCXKopl#D]3#a)LWceQ=#j>\|:a1N^E#Z4g
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 45 c7 eb 85 f6 21 92 b2 1e 33 de 78 85 ec 76 39 b8 c3 57 89 c9 25 8d 7c c3 21 03 bc b1 c5 15 6f fd 19 87 ff 00 de 64 86 76 95 18 f1 48 bd a3 8a 6e 64 3a 44 2e b3 65 f6 c3 c6 64 60 9b 73 12 c8 4f 49 90 a0 15 b7 55 12 50 04 07 ee 56 e6 53 a3 42 a1 c8 aa a7 bf b2 e6 a5 c4 f7 61 36 0d 64 77 9b 62 bb d0 1b 32 cd c4 d6 9b 4b 2d 15 98 76 06 3e e4 4c 8f 0d b0 74 74 89 20 13 23 e5 32 22 6e 18 fa ee d3 ae 97 12 43 13 45 75 96 35 7c 5c 67 b0 db 0f 36 dd b9 37 4e fa b1 9f 76 cf 39 fb 48 dc 3b 13 59 ea 1c eb b2 59 ae 69 a1 3a 79 a9 b6 2e 1f d0 60 db 64 6e bf e9 ce 0b b3 71 cf a7 5d ef 85 e4 ba 17 e9 f7 a8 59 86 63 9e f5 f1 83 55 e4 18 3f ba eb e9 59 04 3d d7 3b 1c b0 c8 6a d5 d9 76 2b 71 f5 72 92 2e b4 6e e4 a8 b2 d6 dd 0b d5 18 f4 dc 0b 77 e0 fd 5e d3 5a 8b 57 ef 28 Data Ascii: E!3xv9W%\|!odvHnd:D.ed`sOIUPVSBa6dwb2K-v>Ltt #2"nCEu5\|\g67Nv9H;YYi:y.`dnq]YcU?Y=;jv+qr.nw^ZW(
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: ca 35 08 0a 2d 91 14 a3 7e 54 7f 61 a6 3c ef db 72 1a 9a 48 b9 c3 1b 65 52 36 76 23 1c 49 0e 1f 49 fb 0f 51 bd 33 9a ef 23 25 80 a4 6c 01 4c 8f 3f 48 43 d7 f3 39 54 9b bd c8 0e e6 f3 e2 0a e9 68 18 34 70 6b 47 79 38 e3 48 f2 7c c0 4a 94 c4 e3 ef a7 32 46 fe 59 38 1c fe c2 32 22 e2 8e e2 07 ab 3b ed d4 f4 4b 1c 88 45 c9 0a 81 e6 40 ff 00 12 78 9a ec 5a eb 03 73 8b 78 38 a5 ac 6f 5e 67 88 14 b1 c8 f6 11 6a d1 34 6d 7d f1 22 fe d0 84 7b 69 1a d7 46 47 0b f4 f6 d2 b5 ec 90 7b 0f bd 0f b2 92 46 b9 88 b7 45 a2 e6 96 b9 c3 0c bd dd 55 bb 73 a2 d2 4b 06 58 9d 43 ec a7 ab 54 11 8a 7c 38 1a f3 18 ad 95 a8 55 aa 09 1f 88 b8 83 8e 09 86 06 9f 04 1b c6 33 6f 1a b5 ae 91 0e b7 36 ee 24 90 7c 28 a9 96 57 26 bf 4f bd db 18 e6 60 f1 bd a9 a0 27 e2 23 20 7b c5 32 1d 86 f1 Data Ascii: 5-~Ta<rHeR6v#IIQ3#%lL?HC9Th4pkGy8H\|J2FY82";KE@xZsx8o^gj4m}"{iFG{FEUsKXCT\|8U3o6$\|(W&O`'# {2
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 3d b3 84 32 16 b1 f3 b5 da a5 77 84 82 48 79 11 a8 2a 0c 76 23 3d 86 e3 99 ef df b8 e7 5b 49 64 82 77 bc 82 f2 5a e2 e8 dc ec 15 62 73 02 e6 41 cc 1f e1 ba 8c 06 bb 4f 2e da 02 09 2d fc 0e 70 f1 04 36 ba 69 c1 54 d7 3f 8e 5d a7 96 ac 88 0d 2f 24 9f 32 50 01 53 64 29 82 2f f5 22 d6 d7 69 b6 db be 47 03 18 3f 4a 34 06 82 e7 3b 50 ea 40 97 53 8a 56 cf 6d 23 59 ad d2 87 28 70 50 0d 85 85 9c 38 67 ec ad ba 4c d6 44 35 29 2f 00 92 85 a8 1a aa e0 05 f0 38 a7 6c 0c 0e 6b dc 1e 14 b4 92 a4 9b 5c 20 37 38 9e f3 4d 73 e4 69 94 46 e5 28 8e 73 4a 69 0f ff 00 08 e0 4d 3d 4d ac 2f 9d 46 98 69 c2 a3 23 fa 6b 7e 98 1d f3 ff 00 fa 51 51 fe 0a 69 05 25 20 c6 b1 a4 07 3a 45 a3 7a 77 2f f5 7f 26 64 cf 0d 46 4a d3 a2 78 d7 fa 25 6f 89 3f b4 ab 4e 6d ad c4 fe 88 f5 ec 0c da 3b Data Ascii: =2wHy*v#=[IdwZbsAO.-p6iT?]/$2PSd)/"iG?J4;P@SVm#Y(pP8gLD5)/8lk\ 78MsiF(sJiM=M/Fi#k~QQi% :Ezw/&dFJx%o?Nm;
2024-04-23 20:28:22 UTC	9216	IN	Data Raw: 3e 5b 4a 6a d2 41 03 b7 31 95 3a 48 4e a6 62 a3 0e 83 ae f5 85 fa 67 d3 ae 8f 96 14 66 3e ca 31 09 40 e7 bb 66 78 5c 4a 19 98 30 0e e2 40 08 1c 30 44 2a 2a 4d 8e e9 a5 92 b5 c8 e8 dd 62 d3 d3 0c 88 b8 af 57 fe de c9 14 7f f9 a1 91 1d df 29 99 c2 f0 f3 18 1a e7 44 8e 3f 4c 7b 81 ab 6d 37 f6 4a 4a 2b 42 73 0e 51 cc f6 af 83 99 6d 67 7c 52 c6 e0 43 d9 24 6e 2c 91 8e 06 e1 cd 78 20 8c 88 a5 25 49 a2 3f 0d 01 92 74 e9 ef a2 4d 64 95 81 d3 4a a8 2a c7 c3 5c 8e 66 bb c1 16 fe 78 5c b8 06 bc 31 f6 e3 77 2f 55 79 60 82 08 c1 2c 5b 81 ee 20 df 8d 73 0d 9c 0c 4e 5d 31 f3 61 24 7e 07 fe 11 97 80 ab 7b 2a e0 f6 51 37 cb f9 76 56 26 b9 74 7b 8e 63 36 e7 d3 4c 8d d0 b5 c5 64 9f 68 c9 10 38 c4 1c 40 7b 1a 8b e5 38 87 00 be 5b 9a a5 a7 6a 37 bc fb 69 16 fe 58 c4 62 5d 6d Data Ascii: >[JjA1:HNbgf>1@fx\J0@0D*MbW)D?L{m7JJ+BsQmg\|RC$n,x %I?tMdJ\fx\1w/Uy`,[ sN]1a$~{*Q7vV&t{c6Ldh8@{8[j7iXb]m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49858	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	427	OUT	GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25c02da3-4d83-47e6-b080-f533c2d99f75.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:22 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8790997fad278bb6-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 7880 Cache-Control: public, max-age=86400 Expires: Wed, 24 Apr 2024 20:28:22 GMT Last-Modified: Tue, 19 Sep 2023 09:22:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: ug7sJEH2YU+R6vsUNeAhQQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d8e9c10f-101e-0033-1f67-796628000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-23 20:28:22 UTC	468	IN	Data Raw: 31 30 32 30 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 38 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 32 35 63 30 Data Ascii: 1020{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"25c0
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 62 31 62 63 36 36 39 63 2d 34 61 35 39 2d 34 34 38 63 2d 38 64 66 64 2d 62 36 36 65 35 33 65 30 34 66 34 64 22 2c 22 4e 61 6d 65 22 3a 22 51 75 65 62 65 63 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 63 61 22 3a 5b 22 71 63 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 66 72 22 3a 22 66 72 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 Data Ascii: ":[{"Id":"b1bc669c-4a59-448c-8dfd-b66e53e04f4d","Name":"Quebec","Countries":[],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"default":"en","fr":"fr"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GENERIC","UseGoogleVendors":fals
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 79 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 6e 72 22 2c 22 6e 75 22 2c 22 6e 7a 22 2c 22 6f 6d 22 2c 22 70 61 22 2c 22 70 65 22 2c 22 70 66 22 2c 22 70 67 22 2c 22 70 68 22 2c 22 70 6b 22 2c 22 70 6d 22 2c 22 70 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 Data Ascii: ","ls","ly","ma","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","my","mz","na","nc","ne","nf","ng","ni","np","nr","nu","nz","om","pa","pe","pf","pg","ph","pk","pm","pn"],"States":{},"LanguageSwitcherPlaceholder":{"default"
2024-04-23 20:28:22 UTC	930	IN	Data Raw: 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 Data Ascii: uage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.js
2024-04-23 20:28:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49857	104.18.32.137	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:22 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8790997fad891d72-ATL
2024-04-23 20:28:22 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49856	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1027	OUT	GET /Osler/fonts/celeste-sans/CelesteSansWeb.woff HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.osler.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	388	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-font-woff Content-Length: 38948 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f56cb894fkhtg8srtqvg1hnw00000001f00000000078zd X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	15892	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 98 24 00 14 00 00 00 01 66 04 00 07 01 f8 00 00 96 70 00 00 01 93 00 00 03 dc 00 00 98 04 00 00 00 20 44 53 49 47 00 00 88 c8 00 00 0d a8 00 00 15 84 e6 dc 46 eb 47 50 4f 53 00 00 85 b0 00 00 02 9f 00 00 04 6c bd f0 f2 ac 47 53 55 42 00 00 88 50 00 00 00 76 00 00 00 a4 7c 8f 8d 0b 4c 54 53 48 00 00 05 64 00 00 00 77 00 00 01 3c 78 18 78 8a 4f 53 2f 32 00 00 02 38 00 00 00 59 00 00 00 60 80 7b 55 32 56 44 4d 58 00 00 05 dc 00 00 03 7e 00 00 0b ba e6 94 d0 e3 63 6d 61 70 00 00 14 a8 00 00 02 bb 00 00 03 de 12 57 8b 95 63 76 74 20 00 00 18 cc 00 00 00 24 00 00 00 24 08 47 01 0d 66 70 67 6d 00 00 17 64 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 00 85 a0 00 00 00 10 00 00 00 10 00 67 00 0a 67 6c 79 66 00 00 1b 64 00 00 64 Data Ascii: wOFF$fp DSIGFGPOSlGSUBPv\|LTSHdw<xxOS/28Y`{U2VDMX~cmapWcvt $$GfpgmdsY7gaspgglyfdd
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: e1 f0 2f c1 5e 86 8c 8b ce d5 09 dc cf 70 c3 00 68 a4 37 d7 ad 8f 81 3b 2e 7c c3 05 ee b8 c0 1d 17 b8 e3 02 77 5c 60 b1 0b 2c 76 81 c5 2e b0 d8 05 16 53 97 d3 05 16 bb c0 62 17 58 ec e2 ec 47 11 aa c8 ab fa 74 0d 48 31 4a 11 82 80 ef 9d 1a 6f b2 9e 6c cf 46 75 bb 74 ee 74 34 54 4a b8 77 ed 22 d7 eb c3 21 4f a4 ba 20 21 62 f2 84 27 a2 76 9a 96 f2 13 0c 5b ce 41 c6 cf 87 f8 77 a2 df 76 2e 3f 38 bf 3e e4 69 59 e8 03 8b b2 e7 7f 20 41 51 80 e5 7b 28 ea f1 46 a3 00 c1 f9 7b f8 ab 3c d1 a8 c7 13 8b 9d 7a 0d 79 b4 bb 95 be c3 b6 6c e4 1e 65 ef 08 ac 7c 87 42 ba 21 25 6a 18 7a 87 9a d5 ea 6c 3c aa be ca e2 4f 97 bd 11 7b d8 67 db d5 7f e7 54 a2 5d 88 59 92 d6 70 aa 1c 27 3f 52 78 fc 39 0c d6 c6 5d ce 8d ab 0a 30 c4 e3 a1 39 91 fe d8 69 0e 2a c6 a4 c4 a7 ea 9d 4d Data Ascii: /^ph7;.\|w\`,v.SbXGtH1JolFutt4TJw"!O !b'v[Awv.?8>iY AQ{(F{<zyle\|B!%jzl<O{gT]Yp'?Rx9]09i*M
2024-04-23 20:28:22 UTC	6672	IN	Data Raw: 49 9c dd 88 ab 37 a2 7b 30 61 79 af 02 3a 26 01 60 12 d0 31 09 f0 7f 73 a0 36 68 0b 74 1b e8 1e d0 83 a0 47 40 97 40 97 41 57 41 cf 81 be 07 7a 15 f4 2b 90 86 c9 fe 8d 30 5d ee 19 ad 59 df 67 3b 5b a1 0d f0 b9 72 64 ce 6f 59 0a 2d a7 18 5f a9 72 76 84 b3 ee 60 d8 56 9c 57 38 1f bb 27 e9 c3 3d 5e fe 10 bc 4c 90 5f 90 e1 c8 ff 3e 2f b5 83 1a d2 68 10 fe 9e a3 34 87 1c 99 1b 64 6e 98 e7 2b d3 58 69 00 2b df b8 7c 65 8e 03 1b 61 e2 6d e5 89 6e 18 aa 2e 20 2a b1 6d e3 61 09 1e 92 f1 96 3b 45 ff c6 5b e1 dc 84 c4 f6 d8 2c 37 03 67 ce 08 f7 5a 9d 7d 09 ed f1 d8 32 63 bb 7e 8b ae 5b 5e 07 5f 4b 64 99 26 c9 70 a6 ed 43 e2 03 f6 70 76 4f e2 c4 25 76 63 e9 30 39 1e 4c 4a c5 6f 14 d8 8d 82 7a 63 6e 8f 60 33 9b 50 cf ed 97 d4 51 49 02 95 a4 8e 4a 92 57 99 9a 03 b5 41 Data Ascii: I7{0ay:&`1s6htG@@AWAz+0]Yg;[rdoY-_rv`VW8'=^L_>/h4dn+Xi+\|eamn. *ma;E[,7gZ}2c~[^_Kd&pCpvO%vc09LJozcn`3PQIJWA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49855	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1072	OUT	GET /osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	375	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: image/png Content-Length: 157684 Connection: close ETag: "14ccce10f90da1:0" Last-Modified: Tue, 16 Apr 2024 15:02:14 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f56cb894f659cp1btp5a7rgc00000001g0000000000qf1 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	15905	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDR,,"tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: a1 72 d0 51 62 50 10 dd 91 2a 72 92 58 ab 2d c5 d3 90 5f 89 55 50 b9 b3 16 83 3e c9 01 45 b1 d1 04 e4 da 2d ba 5a 33 72 85 b5 e2 1f 36 5d 02 0e aa d4 5c a0 7b df a1 f0 12 0d f2 bc 43 48 c3 cf ac ad 20 b2 84 d0 7e 9b 78 df c8 65 d1 5b 48 78 7b 37 d1 43 fc 4e 8c 70 42 bf 95 26 06 55 48 26 c7 a8 0b 94 bc 40 0e 07 ad b6 11 a2 83 10 aa 31 4d c4 94 41 d5 6c 42 a0 52 d0 d4 f4 a6 85 3a 94 2d ab a2 b6 43 54 13 19 86 40 5a a7 83 bb 59 22 17 c1 c8 bb 60 20 5b 54 47 19 00 b1 d3 ca 1b f4 39 13 02 ad 5a d0 c9 15 c0 56 b1 05 bd 5d 80 1e 31 92 2d d9 47 c0 69 93 2b 17 ee 60 24 a8 0d fa 8e 19 aa ee 46 8a b1 16 cb 83 d2 b2 c0 17 b2 a5 b3 f9 6c 17 e2 97 5f bf a5 d8 7e f5 fa ed 2f 3e fb bb 6a b3 a9 42 5e d8 aa b1 f9 56 76 a0 50 03 ba 4a 59 fe ed 6f 7e e7 d7 be fd f1 c7 f2 c5 Data Ascii: rQbP*rX-_UP>E-Z3r6]\{CH ~xe[Hx{7CNpB&UH&@1MAlBR:-CT@ZY"` [TG9ZV]1-Gi+`$Fl_~/>jB^VvPJYo~
2024-04-23 20:28:22 UTC	12288	IN	Data Raw: f0 f9 7d 8f 66 b1 e2 ce be 28 f0 54 03 ce cd e5 19 1b 4e 27 74 c6 d6 3c ba c3 88 16 6d 4c 24 c0 01 1b 7d 41 03 a0 82 5c 5a 48 7a ae e3 56 50 c9 31 15 00 ba d8 cd 9f 25 d8 a6 28 4a 8c ad e8 75 98 bb c4 13 42 28 97 ca 78 74 7c b2 a2 87 12 ea de 2c d2 84 4e 20 34 f6 59 de 93 ef 87 9c d5 d6 14 9b 49 78 0b 9d 0b 94 17 8e 2d 60 e8 b9 b4 2c 8d 4a c1 0e 01 0b 2c cb e3 07 c1 1b 4f 78 0f 12 b3 40 78 ad 19 2a 53 bd a3 a8 cd 94 b2 41 ee c7 11 68 4e 65 d1 5b 37 4d dd 34 5d 53 52 db 6c 28 10 aa b4 ec 36 37 df 3c ff 63 95 65 fd d0 2d 18 93 df f4 ee f0 68 a5 08 b1 4b bf 71 ce ec c7 03 aa 85 a8 3e b6 76 47 9f db c1 3c 18 7e 51 fb 7d 69 d0 40 d6 54 61 2a 71 b6 3a c8 96 a5 6b bb 9b ce 37 ce ff 24 17 9f d7 f9 51 61 0e 0e 4f 16 ab 35 58 3c ce d2 1b d3 b9 e6 61 90 d0 59 11 58 Data Ascii: }f(TN't<mL$}A\ZHzVP1%(JuB(xt\|,N 4YIx-`,J,Ox@xSAhNe[7M4]SRl(67<ce-hKq>vG<~Q}i@Taq:k7$QaO5X<aYX
2024-04-23 20:28:22 UTC	4096	IN	Data Raw: 93 15 4f e2 54 bc 27 c8 1f a4 9d 10 5f 13 e3 fd 22 27 83 e0 84 19 cb 59 15 79 ca 4d b6 de 36 a3 39 44 fc e5 cb 17 9f 3e 7a f2 42 d9 27 ad de 77 94 8b ea d6 d1 19 c1 0c 46 9d f0 f7 de ff da e6 b3 67 57 bb 5d c6 d9 be b7 ab 61 9f e7 79 05 15 0d 3e d5 71 6f 5a 93 88 d6 8a 81 f2 3c e3 6a fa 3f 81 17 6d 65 ca 6e 7a 33 f7 04 27 d8 18 b1 49 df ba 6a f6 62 d5 ad af ae 2e cf 96 32 8a 97 e4 13 d2 bc 57 8a 87 ce 61 18 52 44 51 20 20 a0 cf 4f fc af 46 9b 57 33 63 9f 57 54 d9 e7 15 ca 5f 34 ee 7f 69 fd e9 55 cb fe f3 c8 c7 7e 25 ac bd 1a c8 be 35 e2 b0 48 75 dc f8 bf 5d f6 f7 af ba 8b b7 b3 e0 c7 59 50 17 de 87 bd b2 f0 5f 9e da 01 45 28 8b 8e ab 0b 9f cf c0 e1 e2 28 82 81 fc 0e 74 4d 84 d6 75 12 18 03 c9 61 e3 88 fb a8 a4 53 1a 87 81 d1 28 f0 11 86 9e 47 ca 08 6c f9 Data Ascii: OT'_"'YyM69D>zB'wFgW]ay>qoZ<j?menz3'Ijb.2WaRDQ OFW3cWT_4iU~%5Hu]YP_E((tMuaS(Gl
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: cf 38 46 40 c5 f5 b3 ab 3f f8 b5 77 df a8 93 1f 3c 79 96 c1 19 c6 8f ae d7 ed 30 fe da 9d 89 57 dd cb 56 a5 19 db ec 21 b8 06 c1 e6 38 60 29 24 83 58 02 ed 40 cf ec 6b 8b e1 ac 0d 3d fa 32 3f 61 91 ee a0 cb 93 8a b8 c0 e8 2a a7 a4 74 d7 1f 26 f3 f9 62 79 66 ac a5 a8 4b 3e a2 ed 47 2c 9e 48 86 a2 12 0f b4 d0 a8 96 23 19 a3 d3 4f 4f 73 30 3e 88 2a 04 35 a1 db 65 22 04 46 0b b5 59 ec 79 63 18 c1 46 61 63 38 0e 55 96 a3 6c c9 51 3a c8 fb 57 92 2d c7 09 52 7a 22 94 3a 60 bc 11 63 83 48 8b e2 57 29 27 e4 37 79 9c 4b 2c b8 b5 a3 51 58 58 88 27 60 04 8c 1b 65 06 74 11 e2 0c a2 f3 a0 79 a1 34 8d 82 db 61 f0 bd 86 cd 55 68 cc 32 ca f5 f7 0a 62 3c 58 ae 51 64 b8 e0 25 c3 88 a6 8f 6d 89 2d 05 b9 75 be 40 b5 c6 d7 68 b8 f3 83 21 8f 15 55 a1 d1 de fb 68 8e f1 85 40 78 Data Ascii: 8F@?w<y0WV!8`)$X@k=2?at&byfK>G,H#OOs0>5e"FYycFac8UlQ:W-Rz":`cHW)'7yK,QXX'`ety4aUh2b<XQd%m-u@h!Uh@x
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: bd f7 3f ac 6a 20 bf 7c 18 4f 0f 1f ff e8 e9 d2 8a 92 04 ff ee 38 7d dc 77 ab f5 ba 6d 5a 4e 00 1e 47 ad 4d a2 6f 5f 1c 07 4a a9 0f 15 53 5e 17 52 5d 3f 75 a6 af b9 61 b0 c1 27 a6 c0 ab d0 10 32 c5 30 ce ae 64 a5 45 d1 78 42 62 d4 5e 12 7d 5b 6a 22 ca 4c 5e 37 91 c2 3f 49 85 aa c4 b0 96 06 72 52 04 fa 44 a6 c8 91 cf 39 11 ab b2 12 4b 84 aa 3e 0d f1 90 39 0a 9f 26 2e 93 93 3f f9 8b 5f c1 5b af 64 5a e0 93 d9 7a 89 6d 96 9f c8 4d 9f 95 ec 3a 33 80 2a a2 22 02 04 9f 09 93 ea b7 b8 e4 2e 20 bb 51 3a 2d 84 84 5c 39 11 ea 40 9a 60 24 0d 38 71 55 9a 85 c7 77 59 7e 31 87 2a c9 a8 9d 33 20 24 c9 34 0e 0d 00 7f 77 b4 3e 8f c0 72 ff fc 59 53 d5 73 aa 12 14 69 41 cb f2 fb 9c 91 24 06 62 c2 34 f2 84 9e 3e bc 3b bc 7f 27 00 cf ba fe d0 cd fa ee ee bb f7 6f a7 cb 53 55 Data Ascii: ?j \|O8}wmZNGMo_JS^R]?ua'20dExBb^}[j"L^7?IrRD9K>9&.?_[dZzmM:3". Q:-\9@`$8qUwY~13 $4w>rYSsiA$b4>;'oSU
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 20 53 8a a9 20 fb 37 4b 30 91 93 d0 c8 18 9c 98 28 67 92 34 c0 34 d9 4e 58 a7 6d 90 a8 33 17 12 3b 91 21 51 1f 38 b2 15 56 2c a8 fb 3e 53 b5 2a 6e b2 fc 10 08 64 1d b5 46 8b 55 6e cd 48 76 0d 8e 40 f2 f2 11 e7 1c 1c db 2e cc 87 b4 cb 57 c9 38 fa b8 a2 df f2 53 2a 3d d2 6d 15 64 c6 aa 12 03 05 d5 16 24 60 0b 3d 2f a5 91 48 36 e3 27 bf 14 f0 7c 2a 6b e1 09 72 00 dd 65 5d 71 92 88 9d dc 9c 03 b4 25 47 a5 58 5c e4 07 26 07 0a 4b 56 29 cb 44 ca 99 94 98 ae d2 a0 e9 0c 24 75 d0 a4 31 9a a5 f7 c8 5f d9 80 a7 ce 9f d2 ec 25 29 1b e3 a1 9b e5 0f 7f f1 cb 44 81 98 95 52 70 f1 3c e9 09 e2 ee 6b 2e 6d 31 c3 a1 88 c0 82 f7 96 32 6c c9 4d 55 91 88 7f 93 3a 0f 9b 1e 36 b1 82 cf a4 70 cb 4b f2 ef e4 e9 9a d3 b8 69 ce 83 b2 16 b2 cb 98 f0 18 0a 59 e6 36 81 65 3c 7d 32 25 Data Ascii: S 7K0(g44NXm3;!Q8V,>SndFUnHv@.W8S=md$`=/H6'\|*kre]q%GX\&KV)D$u1_%)DRp<k.m12lMU:6pKiY6e<}2%
2024-04-23 20:28:22 UTC	13312	IN	Data Raw: 93 34 5c 2b c9 75 5c 1b a4 85 ce 39 f8 9b 46 b3 9c 8f 70 9f ac f6 4d df 31 14 47 c0 bc 55 ef 71 03 10 2d 0f f8 a4 ae 20 d3 0e bc 55 62 4b 1b b2 d3 ff f5 dd ef 39 d1 5b 68 3c 84 13 6a 35 f7 61 bc a4 2a 04 2b b7 e5 a6 0a 94 ea 28 2b 5f bc 75 6d 57 4b d3 b3 04 27 e4 74 eb 2c 2c 45 df 4a 02 ea 23 1e 2e e2 33 7d 0e 99 24 b7 24 ee c0 8d 91 94 80 57 38 e9 a2 47 fc 02 4e 8a 71 14 78 93 75 c1 8f 15 91 05 d9 02 f1 6a c6 63 e4 28 0b 47 b2 db ea 86 19 08 d5 1a da 48 72 b6 0d 41 8c de 94 47 95 3b d6 68 e9 0f f1 e6 c9 1a 6e 66 07 57 06 58 d0 16 62 8f 58 e3 fb 9e 0e a0 65 61 25 01 50 9a 93 8f e0 9a 88 92 00 04 5c 6e d5 5c 46 31 75 24 90 ae 3c 84 cf 59 d6 7b ef 24 0e 21 0b 54 b6 ae 62 bc 4b e5 f6 1d 6f c3 e6 11 74 5b b2 c5 d8 d5 cd 85 b5 e0 70 12 15 6c 4a 9e f0 80 45 59 Data Ascii: 4\+u\9FpM1GUq- UbK9[h<j5a*+(+_umWK't,,EJ#.3}$$W8GNqxujc(GHrAG;hnfWXbXea%P\n\F1u$<Y{$!TbKot[plJEY
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 8c cf 1d 11 fc 80 e0 6c c7 d5 2e 9a fc 50 cb 09 d7 80 2c c3 b2 b4 5d c7 d9 9a 98 1a 13 1d ad a3 de 96 40 f7 41 fc 30 db f4 40 ed 8d fb d3 69 fe c3 47 dc 05 81 c0 a7 14 e7 07 b1 e2 e6 54 2b 9e 1d 95 32 79 be c6 ba 34 48 7f 80 ca e1 47 2a 45 ec 1e 10 b5 05 97 2d 0f 95 b2 97 9c 1e b2 79 67 3a e4 e1 59 73 f4 da 6a fa c0 59 72 12 04 a2 67 34 76 24 b3 09 f7 07 81 98 02 32 d6 b6 08 8e 63 29 b7 78 2a 5a af 75 3f fb 94 cb a4 c4 ad 20 b3 1b 69 15 11 70 cf 2a c1 e0 62 3c 27 71 4c a8 28 4b fd 34 dc 6e d7 64 23 a0 14 73 14 31 29 71 2e 92 0d 2e 22 75 dd d4 fd 59 24 92 95 46 0f b1 50 fd 04 1f 25 51 eb 5a d9 b0 5c 3d de a4 b3 78 39 91 8c a7 ac e2 ba 84 cd 65 7c 2f 44 5e 8f 60 59 4c f3 d5 67 9f e3 f2 73 07 b7 ee d1 9b ba c7 db 54 0b f7 b1 b5 bd 55 1b 11 4b f9 72 6c 70 2d Data Ascii: l.P,]@A0@iGT+2y4HGE-yg:YsjYrg4v$2c)xZu? ip*b<'qL(K4nd#s1)q.."uY$FP%QZ\=x9e\|/D^`YLgsTUKrlp-
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: b3 48 03 d5 c1 05 b0 e7 26 b6 c9 e8 8d 46 36 9a 15 8e ba 7b 48 ed b9 9b e2 9e d9 d0 e5 c2 39 2a 94 a6 da 0a ec e0 18 c7 31 45 04 eb f5 51 ec d2 24 58 4b 56 1d ad a1 d0 32 32 72 3b fc e3 0f bf ff 87 df fc ae ef 1d 56 51 4f aa c7 da 3a b0 0b bb 5a f6 d6 70 8f 64 b6 eb 33 ad 6c 17 02 c0 96 26 28 f9 26 2a 3f 51 e8 fb 2e 11 64 f7 39 0d 42 1f 5a c7 d0 01 c8 2b ea 61 49 fa 9b 52 ba 38 52 d0 8a 53 15 47 a3 ae cb 0a ae d3 f3 10 08 24 a5 f6 95 e7 b7 23 15 a4 0c d9 7b d9 5e b1 ea 38 88 e7 e4 61 40 da ed 73 8d a6 de f7 44 0c 62 38 e1 db f2 82 7d bd 91 af 24 70 68 47 d7 eb 70 c1 fd 37 ac 3a 8c 48 2f 45 9f 8a 98 8c 45 12 ee 58 f7 64 e3 2e de 50 23 36 20 99 a6 b0 b3 df 0a fa d8 ce 58 7c 81 72 13 20 fc 0a 5b 00 e0 17 0b 26 03 2f d1 24 da 19 ec 52 36 fb 64 a6 5c 7a f5 72 Data Ascii: H&F6{H91EQ$XKV22r;VQO:Zpd3l&(&?Q.d9BZ+aIR8RSG$#{^8a@sDb8}$phGp7:H/EEXd.P#6 X\|r [&/$R6d\zr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49862	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1062	OUT	GET /Osler/fonts/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.osler.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.osler.com/Osler/fonts/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	388	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-font-woff Content-Length: 65452 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f7b4795d4d49mrgyqqa182d000000005n0000000001k2d X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	15892	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 ff ac 00 0e 00 00 00 01 b6 20 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 44 00 00 00 1c 00 00 00 1c 67 b3 29 9d 47 44 45 46 00 00 01 60 00 00 00 1f 00 00 00 20 02 2d 00 04 4f 53 2f 32 00 00 01 80 00 00 00 3e 00 00 00 60 8b 02 7a 4c 63 6d 61 70 00 00 01 c0 00 00 01 47 00 00 02 b2 d4 93 ac 5c 67 61 73 70 00 00 03 08 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 03 10 00 00 e8 36 00 01 8d bc 4d 52 20 8a 68 65 61 64 00 00 eb 48 00 00 00 31 00 00 00 36 08 66 11 da 68 68 65 61 00 00 eb 7c 00 00 00 1f 00 00 00 24 0f 02 09 db 68 6d 74 78 00 00 eb 9c 00 00 02 47 00 00 07 fc 1c 24 14 7a 6c 6f 63 61 00 00 ed e4 00 00 03 f4 00 00 04 02 01 7f 9d fa 6d 61 78 70 00 00 f1 d8 00 00 00 Data Ascii: wOFF FFTMDg)GDEF` -OS/2>`zLcmapG\gaspglyf6MR headH16fhhea\|$hmtxG$zlocamaxp
2024-04-23 20:28:22 UTC	16384	IN	Data Raw: 04 2b dc 48 e1 e8 a2 44 b1 e0 0f fb 2f 98 eb e9 f3 98 e3 f3 e6 fa 67 cf 0d 04 e6 bd fc ed 25 c7 4b 5c 48 d4 0f 90 f8 f0 15 c7 f8 20 e3 44 7e e2 f8 a7 3b 4b 6c c8 80 c1 ed 71 d6 5a 3c 78 46 c8 1c 6f 68 ed 8d de f2 94 0b dd 50 cd 8c 74 4c 4f 2f 6b 9e d9 7d f7 14 67 6e c9 92 9a e9 c5 7c 2e 57 cd 84 1c 48 5f 71 b8 67 ba c6 81 9c dd a9 b1 d2 f4 8a ec b3 fa c8 82 ac 73 69 4f 2e 74 c7 ce 59 5d 87 b9 aa f1 c9 c2 ce 71 3d 50 85 49 59 c3 65 30 63 24 52 5b 5b f4 d4 c3 4e f6 e5 33 d8 3e 28 46 e3 16 e9 65 21 23 81 7b d0 38 1a 85 a1 f0 bd 48 bb c9 d0 f0 f8 64 50 c3 09 a8 2c 9b db 2f 32 b4 67 30 10 08 cd e8 8a d7 61 22 e0 79 71 8b 07 29 76 97 53 37 f7 02 18 b1 62 21 b1 68 20 85 fa 35 ee 24 7f f1 ca e5 af bc 8c 36 6a 94 4c 7f 5a 1d ee fc f4 cb bb ee 7d 0e a1 6e 12 e4 8f Data Ascii: +HD/g%K\H D~;KlqZ<xFohPtLO/k}gn\|.WH_qgsiO.tY]q=PIYe0c$R[[N3>(Fe!#{8HdP,/2g0a"yq)vS7b!h 5$6jLZ}n
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 81 b9 e7 a7 53 d5 98 12 90 49 7f ad 14 7f 85 a3 23 c4 14 b6 c4 a5 48 fc 0a 0e 75 e9 48 3f 05 36 ab 15 98 3c 4e cd 7f 72 0e 8c 8b 57 cb 74 2a ad c2 f4 dd 1b e2 d0 f4 aa 7f 55 4d 17 3f 9c fc f1 9d 1f 33 7d 7f aa d2 33 46 e0 55 1f 77 66 81 9e f4 82 91 25 f0 1a c7 06 f9 8b 3f 5d 02 0d bc 42 41 03 7a eb df 16 a7 bf 94 f3 2a 08 e1 0e fa a2 fe fe 03 07 fa fb e1 a1 74 bf e4 fb 29 ac 77 2d ae 77 20 5f 6f f6 a4 f5 06 a3 6a 46 9f b2 1d 7e 40 bd 6f 1b 51 3b e1 a4 ad 90 ab f6 7f 8d 57 6b 71 38 5f 3d e6 c2 31 4d a0 44 f2 d7 0e d4 7f bd 19 6c 34 ac 97 d5 53 9d 18 27 2e 70 8a 57 3c d2 62 40 ff 87 db 70 68 fc 2a 33 ee 42 cb 02 56 f5 93 a4 23 27 c9 86 28 11 4e a4 c8 c6 09 8a 6c a0 df de f1 6a 5d 00 81 ff cf d3 ac 4a d3 5d b6 fe ba 7c fd 47 d7 32 70 8a 57 3f ca 82 72 9a 6d Data Ascii: SI#HuH?6<NrWtUM?3}3FUwf%?]BAzt)w-w _ojF~@oQ;Wkq8_=1MDl4S'.pW<b@ph*3BV#'(Nlj]J]\|G2pW?rm
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: bc 19 30 f2 40 e6 ec ce b1 3d d3 27 3c f9 c7 b4 0e 02 27 cc 6b 22 4a 8a b8 28 2d e2 a6 2d 18 63 42 07 34 3e 36 1e 90 00 df e0 26 b9 04 98 34 ac 0f 51 26 1a 7d da e1 1b e6 45 04 b6 ff 4f 70 02 7f 94 7f ec d9 67 e9 30 0a 7d cd 1f 6d 05 6a b4 78 7d 71 15 68 4b dd c1 bc f6 2c ff 18 50 a4 ee a0 c3 ee 81 d7 0c b9 86 81 d7 dc 6e 3a 8c 02 28 01 2c e6 17 81 d9 1f 78 b7 6c 19 78 0f ec 39 f6 c1 65 c7 8f 1f 9f f4 01 98 cd 2f e2 3f df 02 a0 f7 18 d8 c3 df 90 93 7a 3f cb 94 7a 5f a1 80 6e 53 16 74 67 99 a0 1b 91 f0 ef 9b 86 b0 74 c5 14 bb 06 f5 cb 1e a1 4f 92 9d 46 8f 2b 07 12 a9 cc 10 10 0c b6 b9 d0 a2 4c 40 18 7e ac 5d 31 88 e5 ee 60 c3 e9 9d 47 8c 58 99 d6 5a f3 b8 05 9f 67 e2 c5 3b 3f bd 8b 51 d1 e7 1a 00 64 ef fd 74 d1 44 f9 91 95 53 5a 47 82 c0 a3 77 02 f3 ed e0 Data Ascii: 0@='<'k"J(--cB4>6&4Q&}EOpg0}mjx}qhK,Pn:(,xlx9e/?z?z_nStgtOF+L@~]1`GXZg;?QdtDSZGw
2024-04-23 20:28:23 UTC	408	IN	Data Raw: 4d 81 11 4e 91 99 a6 c6 b5 c5 ef 4f bb 54 d4 9c d0 f3 97 86 74 63 f4 1c 20 aa 38 99 2e a5 65 4b a4 b8 e1 02 1e 98 6e d2 0f f9 6a 9b cd 2c ff b8 31 27 44 52 0b 7b 38 d1 4f 4f 0a 53 73 e8 87 83 4d ff 68 41 ab 3a 22 cf ae 0c 0f cf 73 f5 95 22 93 86 35 d7 8a 6a 0e 7f 6a 8e 74 9c 60 d6 07 9e 1b 2f 4d d0 53 9c 5e a5 d2 26 9a 19 1f 2b 47 95 4d 4e 28 0e 4f 55 b9 a9 71 c3 77 35 de e0 a6 c9 4d 8b 9b 71 6e e4 cf b6 c5 95 85 63 e4 6b b5 42 33 6d 06 b5 6b 3c 64 50 9b 41 6d 06 b5 19 d4 66 50 bb 9d 52 ea 63 12 a1 b1 54 e5 a6 c6 4d 3d da 6d 87 0a 0f 9a dc b4 b8 19 e7 86 41 95 31 6e f8 6b 85 41 15 06 55 ea dc 34 b8 61 44 85 11 15 46 54 62 db 76 1c 8b 7b c6 55 19 57 65 5c 95 71 55 c6 55 19 57 65 5c 95 71 55 d6 54 63 4d 35 46 d4 18 51 63 44 2d 36 6f 51 bc e1 a2 4a dc cb 15 Data Ascii: MNOTtc 8.eKnj,1'DR{8OOSsMhA:"s"5jjt`/MS^&+GMN(OUqw5MqnckB3mk<dPAmfPRcTM=mA1nkAU4aDFTbv{UWe\qUUWe\qUTcM5FQcD-6oQJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49863	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1019	OUT	GET /Osler/fonts/celeste/CelesteWeb.woff? HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.osler.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:22 UTC	388	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/x-font-woff Content-Length: 47896 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f56cb894fsrrwtv9xx2sy9ns000000016g00000000e0hu X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:22 UTC	3738	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 bb 18 00 13 00 00 00 01 71 c8 00 07 01 f8 00 00 b9 70 00 00 01 86 00 00 03 aa 00 00 ba f8 00 00 00 20 44 53 49 47 00 00 a8 9c 00 00 10 d2 00 00 19 44 43 2b c2 97 47 50 4f 53 00 00 91 ec 00 00 0e 71 00 00 24 2a a0 fc 6e 38 47 53 55 42 00 00 a0 60 00 00 08 3c 00 00 10 da 0f a4 f9 ad 4c 54 53 48 00 00 06 d0 00 00 00 92 00 00 01 fd c6 74 b0 50 4f 53 2f 32 00 00 02 24 00 00 00 5c 00 00 00 60 82 af 58 a6 63 6d 61 70 00 00 17 fc 00 00 03 e6 00 00 06 2e f6 ac cd 3b 63 76 74 20 00 00 1d 58 00 00 00 22 00 00 00 22 00 e9 07 fa 66 70 67 6d 00 00 1b e4 00 00 01 02 00 00 01 73 06 57 9c 35 67 61 73 70 00 00 91 d8 00 00 00 14 00 00 00 14 00 7c 00 2e 67 6c 79 66 00 00 21 58 00 00 67 ba 00 00 d4 a4 bf 0e 29 f5 68 64 6d 78 00 00 07 64 00 00 10 Data Ascii: wOFFqp DSIGDC+GPOSq$*n8GSUB`<LTSHtPOS/2$\`Xcmap.;cvt X""fpgmsW5gasp\|.glyf!Xg)hdmxd
2024-04-23 20:28:23 UTC	12288	IN	Data Raw: c0 7b 49 2a 74 81 7d 4b 6f 05 43 e8 ba 6e 61 8d 35 c4 a9 e9 1d c4 c6 64 29 c8 8b 5d c7 7a 85 d4 53 a8 50 e2 50 d1 6b 38 6f b0 d1 1a d8 65 c1 1e 51 8e 22 0f 91 54 d7 a0 ca 0e 69 58 f3 7f 1b 65 09 43 a0 ba b1 25 53 aa 4d dc fa 95 6a ab 3a 98 7b f2 f0 59 c1 6e ff e4 00 0b ab aa aa 8a 38 f8 ec b6 2e 68 6f 88 7f ac 27 b8 76 be 66 bf fa 1a 79 cd 22 f4 20 a9 e5 59 62 0c b6 50 41 67 e3 c5 c1 bf 1b ab 9c 04 15 58 5b 61 fa d8 39 07 3f ee 11 fb 95 0e b6 c6 78 cb f3 c7 e8 28 3b a0 16 14 91 32 91 d6 1d 54 73 68 96 f3 92 0d a0 27 38 8a 09 d6 1b a8 ec 2a 67 c7 a6 8e d6 46 22 af 64 17 1a 47 79 b9 eb 94 2b 45 eb 94 a4 3b 1b 3f 61 77 98 61 07 82 4f 4c fe 5a 94 5c f1 8c b6 5c c7 18 2b 55 c5 fb 09 2a 76 80 fd 60 c9 b3 54 61 db b6 37 8c 70 3a a1 d9 05 5e 6a d6 65 29 c8 cb a5 Data Ascii: {It}KoCna5d)]zSPPk8oeQ"TiXeC%SMj:{Yn8.ho'vfy" YbPAgX[a9?x(;2Tsh'8gF"dGy+E;?awaOLZ\\+U*v`Ta7p:^je)
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 25 61 55 01 7f a1 b8 29 fb 01 46 4a 05 ef 08 68 23 a4 28 1b dd b5 2b 40 87 e6 cc c8 6c a4 6e c9 d6 27 43 72 80 e0 57 c6 b8 36 7f de 87 46 ab 65 f0 27 b3 8e b4 39 9e af b8 74 0a aa 18 ed 1d 07 89 8f e8 b7 e0 bb e0 19 32 87 ad ae 4b 7a 33 b2 5d 9d 3c 03 65 fe e2 3b 4e 2c 45 3b ae d0 26 85 cd 23 01 ef f0 96 6a 65 4b cd 1b 68 2c 5e ea 48 36 22 91 91 94 24 a5 46 22 91 46 d2 01 9e 09 37 77 14 0b db 26 a2 d1 89 6d 85 e2 8e 66 f8 bf a3 d3 65 bf bf 3c 1d 8d 4c 96 7c be d2 24 f1 23 bf 04 be 09 af 47 70 a6 4f b0 2f b3 17 4e a1 23 27 01 75 f0 2f 87 93 57 60 d4 20 18 c9 0e a6 bf e4 16 ea 7e 6b 76 db cc cc b6 ac d5 5f df 98 0f 16 83 1c 6d b4 fb d2 3e f4 bf dd 48 73 c1 22 bc 3e bd e9 c0 6c e9 ea 4b e6 e7 2f b9 ba 34 7b 60 53 fa f8 3b 8a db f7 8f 09 a3 33 d3 d5 50 a8 3a Data Ascii: %aU)FJh#(+@ln'CrW6Fe'9t2Kz3]<e;N,E;&#jeKh,^H6"$F"F7w&mfe<L\|$#GpO/N#'u/W` ~kv_m>Hs">lK/4{`S;3P:
2024-04-23 20:28:23 UTC	15486	IN	Data Raw: 54 4a 69 7b 98 f3 84 32 3e a9 12 8c 4e ba 7d 2c 38 98 29 29 83 09 5f 21 9f 75 0b 95 7c ca e9 f5 78 7d e5 75 55 80 64 f1 26 d1 1b f2 38 1d 9c df e5 8d d5 92 91 aa 22 3b c4 81 14 8e 9b dd 5c 12 09 06 fb fb f2 0e be 16 e1 0a 29 01 f8 fc fd 29 41 59 ea 89 4a 1c f6 42 a1 ee 02 17 42 96 a9 a2 dd cd 12 66 3b 83 55 6c b5 f9 a5 77 bb 94 31 a3 3c 3b c8 2b 35 1f 0f 32 95 2e 13 9d 25 3a 6f 09 b5 ef e7 89 fa 00 1e 38 2d 04 3b 78 8e 91 d4 c3 3a 6f 98 d5 fc bb c7 68 60 0d 07 31 70 d0 02 e5 a0 ae 97 e3 35 b3 06 b4 1c 91 48 33 26 71 28 95 a5 06 0b c3 68 a2 d1 0e a9 35 40 0d 1b 9e ca 4d f9 25 1b 2f c7 fd e1 c1 82 b4 76 3c 52 59 27 c5 6d 72 32 1d 80 56 18 2c 67 65 3e dd 1f 8b 24 cb 3e 21 ec 89 c4 0a 6e 4e f2 82 a7 03 ae 7e 7b 90 75 83 2f da b8 44 3d 3d 31 6d 3b eb 2c 20 73 Data Ascii: TJi{2>N},8))_!u\|x}uUd&8";\))AYJBBf;Ulw1<;+52.%:o8-;x:oh`1p5H3&q(h5@M%/v<RY'mr2V,ge>$>!nN~{u/D==1m;, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49866	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	555	OUT	GET /scripttemplates/202308.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:22 UTC	815	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: 2+I2Cj649lHjQKiedh8F2Q== Last-Modified: Wed, 25 Oct 2023 03:55:47 GMT x-ms-request-id: 722cf87a-c01e-0042-458a-2f8003000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 78972 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 879099832b906769-ATL
2024-04-23 20:28:22 UTC	554	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 38 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c70/** * onetrust-banner-sdk * v202308.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 46 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return ne
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 58 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void $((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,X(e)}function X(e){2===e._state&&0==
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 4b 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){return new K(function(e,t){t(o)})},K.race=func
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6e 65 3d 6e 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=ne=ne\|\|{})[e.Purpose=1
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 7c 7c 7b 7d 29 5b 65 2e 48 6f 73 74 3d 31 5d 3d 22 48 6f 73 74 22 2c 65 5b 65 2e 47 65 6e 56 65 6e 3d 32 5d 3d 22 47 65 6e 56 65 6e 22 2c 65 Data Ascii: ["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=Ce=Ce\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ye=ye\|\|{})[e.Host=1]="Host",e[e.GenVen=2]="GenVen",e
2024-04-23 20:28:22 UTC	1369	IN	Data Raw: 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 45 65 3d 45 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 49 41 42 3d 22 49 41 42 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 52 49 43 3d 22 47 45 4e 45 52 49 43 22 2c 65 2e 4c 47 50 44 3d 22 4c 47 50 44 22 2c 65 2e 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 3d 22 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 22 2c 65 2e 43 50 52 41 3d 22 43 50 52 41 22 2c 65 2e 43 44 50 41 3d 22 43 44 50 41 22 2c 65 2e 55 53 4e 41 54 49 4f 4e 41 4c Data Ascii: egalBasis",(e=_e=_e\|\|{}).cookies="cookies",e.vendors="vendors",(e=Ee=Ee\|\|{}).GDPR="GDPR",e.IAB="IAB",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENERIC="GENERIC",e.LGPD="LGPD",e.GENERIC_PROMPT="GENERIC_PROMPT",e.CPRA="CPRA",e.CDPA="CDPA",e.USNATIONAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49864	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	777	OUT	GET /Osler/images/logos/logo.png HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/png Content-Length: 4052 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f56cb894f2bgjg7qau3rrudn00000001e000000000aeu9 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	4052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 31 08 06 00 00 00 a8 0b 29 7b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR1){tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49865	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1047	OUT	GET /Osler/fonts/celeste-sans/bold/celestesanscomp-bold-webfont.woff2 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.osler.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.osler.com/Osler/css/styles.min.css?v=11.0.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	375	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: font/woff2 Content-Length: 21968 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202822Z-16f56cb894f2bgjg7qau3rrudn00000001d000000000cdm2 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	15905	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 55 d0 00 13 00 00 00 00 be a0 00 00 55 62 00 07 81 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 26 1b 88 58 1c 81 10 06 60 00 83 5a 08 3c 09 84 65 11 10 0a 82 c9 68 82 ab 64 01 36 02 24 03 87 28 0b 83 56 00 04 20 05 89 1a 07 85 65 0c 81 58 3f 77 65 62 66 06 1b 77 ac 35 6c 9b 85 cf bb 1d 40 b8 fb b6 98 8d 44 04 1b 07 60 93 dd e2 ec ff ff 9c 9c 8c 21 43 0f c3 cc de 5f 44 6c 98 09 1d ac d2 08 59 46 5f 09 52 2d 6d 97 be a3 ed 2c 0f 1c 21 68 7a 3d 54 a6 12 95 a8 4a aa ca 4d 37 ba 5e 31 3d 9a 26 88 7d 21 26 08 8e b1 8a 70 66 08 1a 7c 89 66 77 b0 98 06 f2 29 ae 5b 53 bf e4 2d 9a f7 5b bd ed 3f 52 db 42 57 a9 3e 38 dd 8d e6 8e ee 1c 97 fd 64 6b e8 07 bd cf d8 fd 39 17 3f 35 79 51 b3 93 07 79 3b Data Ascii: wOF2UUb?FFTM&X`Z<ehd6$(V eX?webfw5l@D`!C_DlYF_R-m,!hz=TJM7^1=&}!&pf\|fw)[S-[?RBW>8dk9?5yQy;
2024-04-23 20:28:23 UTC	6063	IN	Data Raw: 4c 9d 02 bd a2 a9 2a ce 90 99 1d 4c 4e af 60 12 08 27 07 5d 54 6f 7e 8a 45 c0 ee d1 fe 94 e7 14 62 11 fc 98 a1 d4 8e 4f 46 0c 99 98 38 aa 09 c6 fa b6 a9 59 31 11 b6 5a be 71 8c 9e a2 bd 00 d1 d1 f8 cc 79 f4 94 40 29 91 52 e7 29 9a b3 77 18 18 86 87 18 28 8e 82 18 c2 db 0c 92 d2 80 1d 15 74 00 13 5b 11 14 fa 68 9d 30 5c 2a d4 7d 30 42 36 e5 00 97 33 4b c3 fb b6 22 74 64 65 c3 5f fd ff 41 1c db da 75 cd fa 12 bf f9 00 d7 5f e2 69 a6 d1 67 6e a7 52 27 75 4f 1a 82 93 b6 b5 9a 92 0d 35 da 17 06 46 e2 27 70 d0 f2 47 6c 16 9c 25 a8 24 4d a2 0f 53 61 26 68 d7 38 0f 1a b8 e5 b4 00 e2 48 22 e7 62 3a 92 53 e3 3c ab a5 d0 d7 40 21 30 f1 77 43 80 c6 94 10 18 67 64 38 31 48 63 5a 12 73 cf 08 84 09 18 61 54 59 5b d8 4f 40 c5 45 ed 6d 68 95 ef 4f 75 6d ed 3b 0b 47 1e 2e Data Ascii: LLN`']To~EbOF8Y1Zqy@)R)w(t[h0\}0B63K"tde_Au_ignR'uO5F'pGl%$MSa&h8H"b:S<@!0wCgd81HcZsaTY[O@EmhOum;G.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49867	172.64.155.119	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:23 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:22 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 879099836eda1817-ATL
2024-04-23 20:28:23 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49868	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1069	OUT	GET /osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/jpeg Content-Length: 32033 Connection: close ETag: "85ed5b43b529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894fsdl45k3m180w6b0000000017000000000c3s5 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	15904	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-23 20:28:23 UTC	16129	IN	Data Raw: e9 68 98 ea 82 ec ad e6 5d 4a e1 70 24 73 8a 8e 9e 51 7b c8 0d 68 24 93 20 00 a9 27 60 8e ea c1 23 2d 68 f0 fc 6e a1 b8 7d 0c 1a 84 e4 5c 47 21 39 61 ad a9 a4 16 3f b4 34 20 8d f0 a6 25 12 86 e6 32 ee 47 b7 a8 8d 6d 70 d6 0f da 71 8e df 0d c6 f6 d8 b3 69 f5 b4 ea 77 5a 19 72 72 5f f9 7f db 8b 7d d5 e6 3a e1 21 00 be 09 2e d4 03 43 a6 57 54 65 58 17 b9 2e 76 24 a6 21 87 0a f4 63 c3 d3 b2 2d dd c9 71 16 16 b8 8c 6e 2e 29 34 b8 c7 12 80 d0 a3 5a be c9 86 b3 2e 70 dd be 4b 43 b5 b5 a0 71 b8 6f 98 03 62 a8 98 11 6f 31 f5 10 eb b7 6e b4 3c 82 e7 34 37 14 c0 e1 20 97 21 e2 24 99 d2 1f 9a ca 02 1c f6 e1 00 bb 10 68 55 38 57 8b 8a 4a a4 d2 55 3c 92 f7 90 1a 02 92 64 00 15 24 ea 10 72 59 12 46 58 1e 27 50 dd 23 fd b1 ab de a9 92 78 00 5d 43 4d 14 d0 30 14 72 ca 0f Data Ascii: h]Jp$sQ{h$ '`#-hn}\G!9a?4 %2GmpqiwZrr_}:!.CWTeX.v$!c-qn.)4Z.pKCqobo1n<47 !$hU8WJU<d$rYFX'P#x]CM0r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49869	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:22 UTC	1073	OUT	GET /osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/png Content-Length: 368265 Connection: close ETag: "ffa331707fda1:0" Last-Modified: Mon, 25 Mar 2024 22:02:12 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f7b4795d4jzjgmdcz033zhkn00000005xg00000000c5n4 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	15906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 5e 08 02 00 00 00 e8 bc 5b 00 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDR^[tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 04 42 e7 1f 47 2d b4 34 59 41 66 47 b7 d4 04 4f 41 f0 a1 7d 34 7d 37 f2 b0 ad 07 8f 77 79 ca c2 37 3b 38 49 1a f4 1b dd af bd 82 f2 8d b1 5b 1a 84 00 20 ff b6 d6 fc f9 06 53 3e 8e 62 5b ce 84 cf 7d 78 30 81 68 5f 28 9d ce e5 fd c8 21 fa 36 fb 92 b4 55 ce a8 95 f7 f9 b2 a6 b6 bb 51 e8 69 14 9e 29 5b 4b 87 69 b8 2e 01 bb 2b 54 f7 9b 9c a1 54 dc 54 ac 8d 58 2a 23 6a 02 fe bb 0e d8 6e e8 d9 69 7c f5 d1 64 fd be fa c6 4b f5 f4 58 27 43 5d 4d a6 75 62 ee ff ae cb d7 57 de 1d df cc df ba b7 aa 7b cd da c5 22 ce ca 5d 7e c3 76 10 b0 41 da ab c2 9e f4 8c 02 47 03 4e 75 18 94 68 4d a8 82 62 62 66 87 7a 7e 6a bb c3 7a fb 4a bd 7d b5 19 ac 21 fb 58 a1 79 b8 05 03 1b 7a ab d4 c6 f2 77 93 39 d0 32 87 14 0d c0 63 b0 13 08 4d 28 68 4b 77 60 11 ab 99 aa cf 64 ca 90 18 53 Data Ascii: BG-4YAfGOA}4}7wy7;8I[ S>b[}x0h_(!6UQi)[Ki.+TTTX*#jni\|dKX'C]MubW{"]~vAGNuhMbbfz~jzJ}!Xyzw92cM(hKw`dS
2024-04-23 20:28:23 UTC	12288	IN	Data Raw: 49 0d af 16 e6 7f 0d a4 80 b3 4b a3 a5 a4 53 0a e3 32 e3 18 a8 8a 96 70 b0 b3 42 f3 5f 20 c1 a9 d5 b2 1d 16 db d0 5e 18 e9 db 4c 19 b3 86 52 ab 8d fd 18 b6 85 7b 08 99 f9 58 b0 29 f0 c4 f9 36 d5 2c 01 a1 03 ac 9b b5 c5 e2 c9 b7 80 9d 1a 08 a3 1e 49 79 96 e6 57 e4 ec 62 bc 74 38 58 38 94 96 6a 32 5f 72 5c 57 65 0f 2a bb 87 bc 52 9a 00 08 15 8d d3 85 83 c3 f7 fe 60 f5 d8 49 31 18 87 9f f9 94 a7 ce eb e3 9f 90 96 eb 5c fa 82 ca 2e ab 07 56 47 ad a6 ce 52 6c e9 f7 ac 95 e2 89 3b dd bd d7 8a 8b b7 b6 de 7c d2 71 9d f1 d6 e5 ea 6d 0f 04 69 46 be fc 47 e2 d0 83 49 69 d1 be f8 38 2c 7d 63 d6 5e 8d 42 f4 0f d4 c2 8a fa ec 68 c2 99 17 0f db 54 94 49 d8 84 14 61 83 00 96 0c f8 29 c8 60 14 5a 4e 9a 70 1b 50 9b a7 41 32 cc c2 a4 50 1d 75 1b eb d4 8b 8c 63 ba fa 39 57 Data Ascii: IKS2pB_ ^LR{X)6,IyWbt8X8j2_r\We*R`I1\.VGRl;\|qmiFGIi8,}c^BhTIa)`ZNpPA2Puc9W
2024-04-23 20:28:23 UTC	4096	IN	Data Raw: e8 01 68 67 03 39 43 7d 07 16 3a c4 c7 97 2e 70 15 d8 43 5f 2e 99 c3 8c 8c db c1 80 e1 2d b3 7a 8c f1 92 ec 61 a1 37 df 5a 6b df 81 66 39 02 88 ba 89 5a 65 01 e0 47 09 77 40 bc bb 36 38 d8 ae 2b b0 3a c1 b8 b7 af a8 08 cb 75 14 81 5a da 55 7b 4b ea ae 1d 15 bf 03 92 33 74 0f 13 78 f8 56 a2 60 98 27 0d b9 cb 88 86 1d 31 9b 4f cd 64 cc 89 8c 35 9a 74 8a 8e 99 77 ac 82 11 24 21 c7 90 80 c6 8f d7 35 bd a6 0c 7a 9d 20 88 69 c6 ba ad 37 b4 38 41 7f ca 8e 61 0f 6b fc b0 97 82 8c 82 bf 2d 21 9c 45 57 63 14 a4 de 8f 33 a0 fe 4d 31 47 62 0e 97 2d 84 1d a3 b9 b5 27 b5 f6 07 41 4d e3 f3 98 21 88 d9 bc a4 e5 a7 a2 18 c4 a0 57 18 a2 2f 19 a9 6b 14 00 11 1c d1 67 3d b0 ae 86 1b 0b 30 e8 f4 1f b3 2e 29 76 e5 85 7d 79 8a 7f 10 ab 83 23 d7 86 b1 78 83 7e 13 5a a9 2c 9e 34 Data Ascii: hg9C}:.pC_.-za7Zkf9ZeGw@68+:uZU{K3txV`'1Od5tw$!5z i78Aak-!EWc3M1Gb-'AM!W/kg=0.)v}y#x~Z,4
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 5b 6b 08 40 99 41 7c 24 a9 22 ca 05 f8 3a 56 10 1a 72 47 e9 ee 0f d1 60 46 6e ad d1 d4 ee ec d4 04 30 6f 16 56 70 41 25 14 1b eb 60 c1 55 b7 84 0a 3a 2a 46 14 46 68 74 8a 5b b4 0c 50 81 50 ef e1 2b d1 aa a0 09 18 2e 18 c3 83 19 cb f2 7a 3e 66 4b 01 9c 21 cd 42 2e 5a 29 b5 3a bd 93 fb 33 97 55 0f 5d 1c 14 9b 2b f4 8d cf 1c 1a ca 7d e6 03 87 df 3e 2a 0e 84 e2 2f be 75 cb 0c b2 8f dd 3f ba b1 23 d2 43 59 f2 57 6a df f8 ac 98 4a d0 c6 4b 74 eb 2f 45 e7 3a b5 17 a1 39 a1 37 61 20 88 b3 2a 65 66 9a 54 22 51 6f ad 7e 03 b7 74 64 1f 8d ef 85 3e d5 8d d3 42 b5 e9 2a e5 27 6d d1 21 ea b2 bc 84 8a 26 d5 5b 54 5f c2 3e 35 3d 20 b4 44 8c ea 57 d4 bf 9b aa 41 c9 4b 5d c0 36 4b 60 6a 8c 4c 80 7f 11 a3 0b b9 a4 55 cf b3 59 67 28 16 5b a0 01 a8 d5 c2 5e 20 b2 d8 7f 32 fc Data Ascii: [k@A\|$":VrG`Fn0oVpA%`U:FFht[PP+.z>fK!B.Z):3U]+}>/u?#CYWjJKt/E:97a efT"Qo~td>B'm!&[T_>5= DWAK]6K`jLUYg([^ 2
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: f5 8c 1f 58 c8 ae 33 12 ab 65 fe 20 99 27 e0 41 a0 ca c1 a5 eb 11 ef 67 c6 69 74 0f 56 60 e1 38 26 ee c5 61 4a 66 e4 dc 31 21 3b 88 64 61 93 ba ae e8 9c 90 03 79 32 4b 32 d7 2b 06 37 c8 c9 bd 88 c1 a0 8f 37 a5 95 26 c7 32 82 10 7a 3e 2a f6 47 06 88 27 dc 89 81 68 b4 da 67 e4 03 84 30 7b 4c 96 97 20 1d 31 cd 18 dd d3 58 a0 ca a4 54 77 81 4a 08 3a cd 78 3c c1 c4 2a a9 81 90 30 59 4e c7 f7 08 be d0 96 6e 4b 3c 67 e3 39 a6 1d 08 f9 fc ba 59 fe fc b6 dc d2 2d b4 74 8d b4 12 31 c4 49 2d f2 e1 dd d4 6e 60 f0 9c 2e f1 3a 58 22 c4 00 42 04 2d dc 63 14 cb 51 48 2e ad 64 e8 fe 32 3f f8 c8 4e f9 f2 df a2 b5 a7 8b 3d f7 ca be 95 22 aa d7 d4 15 7a 34 94 eb fc 87 03 ba 68 4d 92 8e 3c 4a 47 f7 d0 4b 5f 5b d8 70 a9 71 db 8d 8d 1d 94 4f da ae af d2 5f c7 88 18 79 67 9d 4e Data Ascii: X3e 'AgitV`8&aJf1!;day2K2+77&2z>G'hg0{L 1XTwJ:x<0YNnK<g9Y-t1I-n`.:X"B-cQH.d2?N="z4hM<JGK_[pqO_ygN
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 6d 47 b9 fe 9e c2 50 90 e9 71 82 f4 f4 4c dd 1d dd b9 ac 72 e2 bc f3 37 fe e4 ea 77 ee f8 fa 37 c4 e8 3e 1a 3f 06 29 c9 99 49 55 8b fc d4 bc 8a 97 22 81 4c 70 71 b9 35 7c 03 a6 a8 42 57 99 d6 a2 ed 4d 00 a4 b7 9d c4 94 9d 9e 04 1e 56 3b 4e 45 8b c8 8a a9 29 21 63 74 4d 2b 16 1e 61 4a 3a 92 08 c3 8c 9d 43 59 7b 0b 6b de 69 61 f5 1d 03 0f c9 e2 34 30 64 8a 94 7a 2a 01 3b 50 60 b2 25 38 fb 0b 58 e4 82 dd b7 53 29 64 27 41 28 52 05 99 29 a0 0f e9 77 40 53 4e 14 40 d0 50 f5 b1 63 ab 03 40 1d 23 32 e4 e3 ed e8 55 bd 86 39 bc ee f8 9e 5d 56 35 a4 33 df 42 fb 6f 7f e0 ef 5e bd e4 f2 3f dd fa d6 2f 0e de f5 2f 0f dc fd f5 f3 c4 4b ee de 94 30 92 95 d1 b9 f2 9f 6d 79 13 39 33 62 ed 6f 51 aa 46 ee 01 3a f1 63 b1 f1 25 f2 e8 e3 61 79 4a 5c f6 e7 72 7e 94 16 76 88 81 Data Ascii: mGPqLr7w7>?)IU"Lpq5\|BWMV;NE)!ctM+aJ:CY{kia40dz*;P`%8XS)d'A(R)w@SN@Pc@#2U9]V53Bo^?//K0my93boQF:c%ayJ\r~v
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: b5 91 b9 9b 60 b6 33 2c 72 79 00 93 4d 44 24 9b 76 eb d1 09 62 67 0a e3 69 69 2c 8b c0 e0 d0 97 cf 4c 84 e7 91 db c2 4d 23 1e 41 89 18 a9 58 c2 e4 3d 0e ab 57 f9 6d 53 ae 0c b5 45 82 65 b0 8b e3 10 f5 33 03 c4 bc 00 da 1a 4e a4 49 70 2c 53 cd f2 0c 76 5f 22 14 a6 09 1d 6e 00 09 fc 26 62 9f 46 a9 cb ef 52 6a 3f 05 c9 26 5b 9a 00 54 af 80 55 17 4b 42 0f 44 c8 86 c5 3b 70 61 9e 9c 87 56 6f 78 b1 9c 8c d3 fa 97 d1 be 05 5a fa 97 b0 db 95 ab 7e 72 2c 72 9d 42 b6 7c ce 09 db 8b d9 cb 6a f3 47 63 5b 36 d1 3d df 90 8d 59 56 72 cc d3 be bf 17 af fd a3 c6 cd 5f 1f 3a fe 68 ea 65 3f db fc c6 3f 58 27 1e 92 57 bf 4e 4c 15 e5 da a7 db e1 8b a7 37 ec d9 9c a4 83 51 b2 64 ef a6 e9 2b e8 dc e3 7d 61 95 5b e3 59 a0 fa 9a 41 ea 50 5c 2f 32 83 b2 30 4d c5 19 91 1b 93 e9 02 Data Ascii: `3,ryMD$vbgii,LM#AX=WmSEe3NIp,Sv_"n&bFRj?&[TUKBD;paVoxZ~r,rB\|jGc[6=YVr_:he??X'WNL7Qd+}a[YAP\/20M
2024-04-23 20:28:23 UTC	1024	IN	Data Raw: 1c 72 3a ab 72 7b ca 4f 54 4f 95 37 5f ec dd 77 6f 7e f1 11 08 84 1f fb d0 bb 6e fa f2 23 85 c7 1e d8 7c f7 2f e0 ef 7d 4c fc ec 6f c3 7b 7f 11 cf 3d 8e df bc 4f 94 8b 70 ea db 01 5f 79 45 e6 9a ae 6b c2 5d 7b 02 d1 dd e6 e4 74 f2 e4 67 c0 2a 0b 97 ab 20 e3 77 be 01 99 15 70 75 6e 15 20 26 cb 7d 59 e8 0f 1c 11 7d a3 6a bd 8b 74 93 f0 8f c1 08 44 43 2e 17 54 2d 33 6f e1 95 9a c8 96 0d ba bd 95 2a 11 a7 89 d9 d5 20 e7 5b 87 8e 1e 1d 0d 17 0b 72 18 d4 aa 94 ff 8b a6 50 08 47 f9 7c 9b 2c 4a 98 5b c3 4a 8a 3e 17 89 7b 96 c0 53 00 6f 82 20 d5 24 2c 23 b3 49 79 e4 45 40 f7 03 1d 6b 3a f5 1e 30 0c ba fc 33 06 d5 55 28 97 08 94 5d 07 e1 0c d1 23 20 65 a4 86 8d e4 22 d9 27 f6 3a d2 7d 42 be 57 6d 1e ac b4 10 f9 57 a2 63 a7 4f 3d e9 1e e9 c7 68 6f 31 9f a1 24 d3 3b Data Ascii: r:r{OTO7_wo~n#\|/}Lo{=Op_yEk]{tg* wpun &}Y}jtDC.T-3o* [rPG\|,J[J>{So $,#IyE@k:03U(]# e"':}BWmWcO=ho1$;
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: b1 73 02 da 6f 80 e0 5e 88 0c 63 28 06 f5 19 3c f7 19 9c 7a 88 2a 6f cd 0d a9 05 78 df 27 f0 3d 1f 83 3f f8 75 b8 72 0e 06 76 d0 d4 a3 c9 25 48 c3 6a db 36 56 2e 14 0a c9 14 86 3b 2a ab 67 7a c6 8e 55 aa e5 7a 23 27 dc d1 e4 3f 7c 6e d7 b1 5b 0a bf f2 af 6b 27 57 f1 e1 cf d2 f6 dc 79 10 0e dc 29 56 96 bc 0e 67 78 70 db d2 a9 49 4b 44 1a 99 27 fc bb 26 82 eb c6 66 3a 01 ed d7 b9 43 5d a2 96 6c 24 97 20 30 00 e1 6d 47 0f ba 8b cd cd e9 6f 5d c2 9b 7f 0e da 03 a2 50 25 a2 60 9a 06 ff d4 37 8a 45 84 07 13 4e bd 6c e1 74 dd b4 92 25 2c 94 88 59 4a 9e e0 4d 1a 1b c9 e8 42 1c 69 da f5 c4 6a 91 c9 90 fc 32 79 19 4a 69 5a b4 9e 36 fa 5f 19 42 4a 29 48 5f 40 99 fb d6 73 aa fd 46 5c 56 12 ab 06 4a 14 d0 4d 04 07 8a 91 5c 51 90 fd 4d 84 6e e9 f6 dd 38 ba 0f 86 ae a1 Data Ascii: so^c(<zox'=?urv%Hj6V.;gzUz#'?\|n[k'Wy)VgxpIKD'&f:C]l$ 0mGo]P%`7ENlt%,YJMBij2yJiZ6_BJ)H_@sF\VJM\QMn8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49870	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	836	OUT	GET /osler/media/Osler/Content/Images/Tile-700x350/Federal-Budget-2024-700x350.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/jpeg Content-Length: 249722 Connection: close ETag: "41919cb18390da1:0" Last-Modified: Wed, 17 Apr 2024 04:57:05 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894fsrrwtv9xx2sy9ns000000013000000000rqmz X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	15903	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 7c 9d ae 63 97 d3 fa 13 4b f1 4a 98 41 22 b4 fc 30 cf 93 b8 71 db 6c ec 69 e4 6b f7 24 d5 6c cf 08 b2 e9 9c 99 3a 1d ab ee 5c cc 21 67 36 8e 0a 4c c9 1a 84 be fa f7 3a a4 60 1d 53 2e 2f e7 d4 f5 a2 0b 2e 0b 10 65 67 63 c6 7c 7d f5 d5 f3 6c 49 ba ea 36 d2 02 89 d0 d9 a4 05 d2 4d ee 30 3e 86 2f 27 6c bc 9d b9 79 43 26 87 b9 ec 38 ba 25 ff 00 67 74 ad b1 cc 4c b0 27 46 11 92 7c ea 4b 43 9c 44 3a b5 a6 45 1b f1 75 a0 55 c4 87 27 96 fa 8d 9a 13 4d ad 88 9e ce d5 f3 6d 2c 7e 1f 96 fd 8c a3 2b c4 ea 0d 60 97 66 6f 7c 30 7f 38 ae 24 b2 08 c9 57 14 ec 4e 38 4f 09 06 55 22 87 d8 9c 90 b3 ed 1e 37 3d 01 28 70 3e 70 9f af 0d be 99 8a 25 34 14 f6 6e 28 f4 c8 39 b0 fc 5a 6e a4 39 dc 59 d5 6b 06 88 30 25 dc 6e d1 41 fd b0 fb fb ec 3c b3 48 6b 08 b0 f1 9b 58 ba 37 5a 9b Data Ascii: \|cKJA"0qlik$l:\!g6L:`S./.egc\|}lI6M0>/'lyC&8%gtL'F\|KCD:EuU'Mm,~+`fo\|08$WN8OU"7=(p>p%4n(9Zn9Yk0%nA<HkX7Z
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 6b 93 60 39 0f 4b fe e7 dd 64 dc 6b 31 d7 9b 83 19 b2 c3 9d e7 13 c0 64 56 9b 59 63 72 06 4d 8d 9c 8a 89 bb 8f 20 93 30 df dc 1b f7 13 d5 c8 70 02 50 10 4d 03 a3 09 15 f2 24 c4 14 81 cb 8a e5 a6 30 bf 78 5e 1d c9 00 2a 3d 81 72 2f f0 33 00 36 09 f2 8c 81 8e 64 8e 51 32 58 18 f7 7c 49 c4 78 3c 01 81 50 14 bf 0f 14 ac 5e 45 3b 1e 9b 5f 26 93 8f d2 37 dd 07 42 e6 92 d6 23 44 81 9d 1d ec 2c 48 6e 56 81 d6 10 d6 b6 63 27 b2 5a b1 39 dc 52 23 74 7b 57 d5 19 ed e7 fc 73 c2 f8 f6 f0 be 5d c6 fb 27 06 a9 c4 5e 22 fb 73 af 75 3f b7 92 19 c5 50 88 0e 7c 3a b7 b9 44 8a 9f 36 6f 08 30 b2 e6 c0 57 38 30 ca c4 08 d5 88 d0 b1 c8 08 2f 5e 45 8c a3 e0 4a a2 e0 46 29 23 65 71 88 4e 96 f5 ee c2 db 28 7e 91 1f 5a ef 68 08 b7 b8 85 d5 a1 04 b2 0c d7 f0 4e 49 09 61 5a 8f e3 6b Data Ascii: k`9Kdk1dVYcrM 0pPM$0x^*=r/36dQ2X\|Ix<P^E;_&7B#D,HnVc'Z9R#t{Ws]'^"su?P\|:D6o0W80/^EJF)#eqN(~ZhNIaZk
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 72 5d 99 89 1e 97 b3 95 76 d1 81 aa fa b9 96 53 ff 00 d6 39 19 30 1c 98 85 b1 ec 6f 67 14 2f bc d1 8e 87 65 98 e6 5a e3 1a b3 0e 4b 91 d0 b6 97 ab cc 5f fa c1 13 f2 a3 62 f1 a2 f6 54 62 b5 58 8a 9c 1a aa a0 d1 17 81 17 f1 ca ed 32 8a 38 f8 bc 2b e8 38 56 77 82 d8 e4 59 2c 6e ab 6a 46 5b eb ec 2b 2a 7d 8f 75 01 7d 91 e9 ba 97 56 bd 96 9f da 16 9f 4f dc 52 e2 bd 7e 88 a8 ad 12 aa 72 a5 9f 9a 78 e4 5e 52 57 98 af a3 82 cf 35 0d ae 0f 36 3d 77 ed af 75 f5 d7 52 3b 20 dd ff 00 d4 2d 9b ae 79 65 12 c6 ac ad 3c 43 ba 30 4a d7 50 65 97 38 d4 cc 37 73 e0 d2 81 b3 b5 ce 29 b2 a7 e9 4a d1 55 59 e0 fa ce 23 2a 35 56 9d a8 af cb b6 1e 98 89 8c ec d9 44 f0 92 89 c9 05 4e 38 c8 bc 2a af 89 8e f2 d3 3b f3 d5 7b f6 d0 ef 2f fe 45 3d 75 7e 53 8f 8d e8 09 3a 13 66 59 eb 7c Data Ascii: r]vS90og/eZK_bTbX28+8VwY,njF[+}u}VOR~rx^RW56=wuR; -ye<C0JPe87s)JUY#5VDN8*;{/E=u~S:fY\|
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: d5 6d d4 4c 9e 26 ff 00 57 ff 00 b4 3d f5 1c 8f 51 23 48 5e bb dc 1e 9d 54 78 de bc 44 5a 8c ac 25 d1 a3 40 76 4a 3a 77 d3 9b 32 f9 d9 1e 3d 47 af 82 d0 05 85 16 a5 72 62 69 e5 ed 26 22 46 a4 ea 54 23 fb 86 5d a4 1b 1a 6e f6 22 b0 b8 5c 64 e1 fd 43 86 37 fe 92 a0 d0 df c0 a5 de 17 29 3e 22 23 0e 2d 01 b9 1d 46 a3 dc 29 57 39 8c 94 63 a8 b8 37 c4 98 02 1c 50 f6 56 cc b5 a4 3d 48 39 db 49 ba 0c 78 71 4a 6b f7 3b f0 43 48 0d 0c 69 b3 72 0d 69 c1 06 2b 9e 34 d6 0d d4 cc 98 05 d4 5b e0 ea 50 3c 40 1e 20 1e c3 50 87 c3 e6 30 3c 12 f6 78 81 08 6f 6b 8b db c4 05 4a 02 39 c0 a1 44 b2 71 19 1f 65 13 00 d4 97 ed 3f 1c 71 c6 b6 2c 08 4b 61 6b 4f 51 00 28 ea ec a8 d8 e7 38 c6 b8 64 a3 0f 7d 6b 00 86 c8 df 95 e9 92 88 c6 b5 2d 71 37 24 aa 13 f3 ef a8 e5 70 b8 70 1f 23 Data Ascii: mL&W=Q#H^TxDZ%@vJ:w2=Grbi&"FT#]n"\dC7)>"#-F)W9c7PV=H9IxqJk;CHiri+4[P<@ P0<xokJ9Dqe?q,KakOQ(8d}k-q7$pp#
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 5c f1 dc 82 27 4f ea dd fe de 56 41 14 68 e9 74 35 84 c8 f6 c7 a8 3d e0 a8 62 30 12 8e 71 02 c6 bd 47 ce 3d 46 f9 64 e6 1c ca 79 bc e9 24 f1 b9 af 6b 41 69 0c 91 a7 4f 94 9a 5b 1b 86 96 8c a8 c7 cb f7 c5 d1 37 9a 44 e8 a4 8c a7 97 34 33 02 ad 4f a4 b5 cd 50 55 02 b5 31 ae 4b b8 9e f3 c9 b4 85 ce 3c 5c e8 da 4f bc 9a de 7a 9b d5 fc da 3d a7 2a 84 5d ce fa 9e ec 99 1b 71 7c 8e c1 ad 68 24 9e 01 4d 6e 39 4f a1 58 fe 57 c8 c8 3a 1c dd 3f a9 91 b7 04 bd e5 7c b3 9e 98 c0 23 fa ce 34 cd f7 3d df 6e 77 1b 83 72 e9 66 91 e5 7f ce e3 8f ba 81 60 8c 1f 6a 7b 96 bc 98 e3 6b be 1e cf b6 9b ba db 42 c8 37 2c 2a d7 c6 dd 0f 69 fe a6 bd a8 e0 7a c1 5a 77 37 f4 f7 ee 2f 36 6c ed 3a bc a9 f7 07 71 0b b8 82 c9 8b 9a 89 c4 5b 2a 6f 2e e6 fb ae 50 de 76 d6 a6 8d c4 32 40 24 Data Ascii: \'OVAht5=b0qG=Fdy$kAiO[7D43OPU1K<\Oz=]q\|h$Mn9OXW:?\|#4=nwrf`j{kB7,izZw7/6l:q[*o.Pv2@$
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 5a 41 b3 47 db f3 a7 80 30 68 f8 57 2c 0e 6a e9 85 53 d9 ef a2 16 e2 a3 f7 fc fd d5 b4 31 b5 49 94 5b 05 47 2d 35 f3 c5 a4 80 a0 3b 10 b9 fb 30 5e 35 23 b4 84 15 b9 38 bb 57 ca a7 1a 4e a2 ef 99 a8 de e2 13 4f 72 fd b4 f3 1b 35 8b 12 7d ab f6 d3 5d a0 83 19 00 5b 3b 1f 7e 75 29 71 fc b3 c7 10 53 0a fd 4c 4e d1 3b 40 01 2d 72 47 b0 e2 99 53 e5 87 65 3c 8d 7f e2 d2 7c 4b 7c 73 ed e2 01 a6 6d a4 88 b1 fc 12 e9 89 cb 15 4f 69 14 d8 26 b0 12 17 69 e0 48 0d 0b 8d d0 27 55 7e bb c8 71 db 03 f5 27 84 10 40 45 ca e9 8f ce a3 2f 71 3a 5b a7 1c 06 29 d5 72 4f 5e 34 f6 ed 5a 1d 28 6e 0a 07 87 02 42 e3 88 cd 6f 46 16 38 79 ee 24 78 8a 02 40 c1 78 80 10 76 25 3b 6b 32 79 cd 28 40 c8 62 4a e7 6b fb a9 ce c0 df e1 f6 0f 85 48 43 da 1e e0 cf 10 0b 60 6e d5 c8 84 42 50 a6 Data Ascii: ZAG0hW,jS1I[G-5;0^5#8WNOr5}][;~u)qSLN;@-rGSe<\|K\|smOi&iH'U~q'@E/q:[)rO^4Z(nBoF8y$x@xv%;k2y(@bJkHC`nBP
2024-04-23 20:28:23 UTC	1024	IN	Data Raw: bc 84 81 ba 25 6d 65 ee f9 db bc 57 e9 b7 2c d3 b9 09 de 49 e0 83 ef a7 cb 3a 79 4d 04 95 41 f7 a9 a1 b9 96 13 fa 76 c6 7c b6 ea 00 34 63 a9 d9 92 6c 84 02 29 bb 2d e8 58 93 c2 e1 f8 78 03 f7 60 bc 29 ef 73 ac 45 b8 74 35 0c 44 80 ed 27 04 0b 7f 6f 1a 71 a6 b7 42 b8 1a 23 f1 5f ba 80 7f 0b 27 b2 83 83 7f 0e 19 52 3a 35 5e 98 d4 72 46 d7 35 fa ad 7c 31 1d be ca 20 b1 af ea 3f 20 6f ef a3 ca 9b ba d5 ea 3f 24 bf c9 6a 97 35 81 02 c9 64 8c 80 e0 81 c4 39 c2 e0 25 e8 ec 04 5f 96 f9 41 2e ec 0a 87 a8 90 bd d5 b1 d2 3c 24 90 9c 06 a2 97 eb b9 e1 50 ba 47 24 5e 60 b1 1d 44 93 87 75 3e 57 34 68 53 89 4f 6f ce b6 ae 0f 69 6e 97 14 6f 0c 3b 3e 15 3b 9a 80 13 61 d7 d3 ef a7 17 0b e9 e1 ed ed a0 e2 50 6a 08 81 30 35 cc f6 bb 98 bc cd ab f6 8c 6b 81 76 96 8d 2a fd 44 Data Ascii: %meW,I:yMAv\|4cl)-Xx`)sEt5D'oqB#_'R:5^rF5\|1 ? o?$j5d9%_A.<$PG$^`Du>W4hSOoino;>;aPj05kv*D
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 80 27 04 26 de d5 15 27 ac 3d 64 77 3b 7e 55 3c 45 9b 38 99 e1 0f 69 07 f3 e4 70 54 8d 88 3c b6 11 f9 9f 57 d2 80 c9 cb 39 9b 43 f6 ef 0b 0c ed 1e 19 18 33 6f 02 0f d4 d5 50 6f 82 12 e8 37 8e 73 b6 65 de 17 63 a4 0b 65 96 1d 7d 55 12 47 a9 a1 81 08 42 56 e9 6e cf 7d 20 9d c1 a4 60 48 45 5e 99 d3 1c e1 a8 e4 42 74 34 85 fe 23 7b db 89 ab bb c3 74 ad 5a 94 20 c3 87 4b d5 8a 01 d1 2a 06 b1 cb e2 c9 0e 00 9b 57 9c e7 94 16 38 58 54 fe a7 3b 00 dd fc cc f2 db 3d c1 7b 50 78 5c 84 0b 69 09 a8 2a 04 16 b5 16 c5 31 d4 d2 a4 1c f8 60 88 8a 9d f5 b7 82 57 24 8c 61 d4 02 63 73 51 b6 47 9d 6a 5d 95 ec 45 37 cc 7f 83 57 c4 f1 ec 38 77 54 64 37 c2 41 fe 7f 75 39 9a 92 f6 23 db 4e d4 ed 4d f8 5d 57 a1 a3 09 24 1d 4a 3b 8d 73 5d b3 d1 f0 ba 38 da 41 c1 0c 4c 50 7a ae 57 Data Ascii: '&'=dw;~U<E8ipT<W9C3oPo7sece}UGBVn} `HE^Bt4#{tZ KW8XT;={Px\i1`W$acsQGj]E7W8wTd7Au9#NM]W$J;s]8ALPzW
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: d9 4a d7 d2 d2 dd 6b 7e 98 d4 da 5c 74 b9 55 30 a7 a4 a1 01 4c 2f 9f c8 d7 23 1a 94 fe 95 dd df 98 53 da 56 91 68 e1 d3 8d 04 a3 5a b0 af 46 7e ee 72 26 09 76 30 4c 21 df 6d dd 76 6e 36 32 90 d9 e3 70 50 35 06 ab 98 4d 83 80 55 04 8a f4 87 ef 7f ed aa 6e bd 3b bc da 47 bb 83 cb 3a 92 19 9a 1f 24 0e 18 f8 4a 81 c1 ec 1a 80 16 31 ed b7 52 a7 26 de 82 f8 a4 01 4c 3b 96 80 f6 69 c3 48 94 28 21 42 3c 35 2e 0d 72 ed c6 e9 c4 f3 7d a3 44 52 97 7d 52 c5 83 5e b8 17 60 1d 9d 94 d2 11 e2 18 ae 34 f4 62 81 88 e2 d3 74 f9 8e 05 08 c0 54 9a 5a 25 e5 33 b0 39 ec 22 da 5d 8b 9a 30 0e 69 50 40 ba 0a 83 7d ca 77 05 c3 6c f6 cc c2 0e 2d 07 05 19 69 24 25 47 cc 20 7f fa 72 07 80 b9 3c 2b 87 62 ad 73 ee 48 f9 4e 88 44 81 a5 71 8c 91 34 47 b8 12 de ea fd 5e f9 9a b6 31 6e 60 Data Ascii: Jk~\tU0L/#SVhZF~r&v0L!mvn62pP5MUn;G:$J1R&L;iH(!B<5.r}DR}R^`4btTZ%39"]0iP@}wl-i$%G r<+bsHNDq4G^1n`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49871	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	955	OUT	GET /Osler/js/dist/rem.min.js HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	388	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: application/x-javascript Content-Length: 2794 Connection: close ETag: "0cba7b79f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:30 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894fbfb7s01cn307u5w000000013g00000000g4hu X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	2794	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4d 6f 64 75 6c 65 3a 20 72 65 6d 20 2d 20 76 31 2e 33 2e 32 0d 0a 20 2a 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 70 6f 6c 79 66 69 6c 6c 20 74 6f 20 70 61 72 73 65 20 43 53 53 20 6c 69 6e 6b 73 20 61 6e 64 20 72 65 77 72 69 74 65 20 70 69 78 65 6c 20 65 71 75 69 76 61 6c 65 6e 74 73 20 69 6e 74 6f 20 68 65 61 64 20 66 6f 72 20 6e 6f 6e 20 73 75 70 70 6f 72 74 69 6e 67 20 62 72 6f 77 73 65 72 73 0d 0a 20 2a 20 44 61 74 65 20 42 75 69 6c 74 3a 20 32 30 31 34 2d 30 37 2d 30 32 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 20 7c 20 43 68 75 63 6b 20 43 61 72 70 65 6e 74 65 72 20 3c 63 68 75 63 6b 2e 63 61 72 70 65 6e 74 65 72 40 6d 65 2e 63 6f 6d 3e 2c 4c 75 63 61 73 20 53 65 72 76 65 6e 20 3c 6c 73 65 Data Ascii: /** * Module: rem - v1.3.2 * Description: A polyfill to parse CSS links and rewrite pixel equivalents into head for non supporting browsers * Date Built: 2014-07-02 * Copyright (c) 2014 \| Chuck Carpenter <chuck.carpenter@me.com>,Lucas Serven <lse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49872	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	831	OUT	GET /osler/media/Osler/Content/Images/Tile-300x300/300x300-Elizabeth-Sale.png?ext=.png HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3
2024-04-23 20:28:23 UTC	375	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/png Content-Length: 157684 Connection: close ETag: "14ccce10f90da1:0" Last-Modified: Tue, 16 Apr 2024 15:02:14 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894fjdrtxgas6zynh6n00000001ag00000000gkrw X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	15905	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDR,,"tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: a1 72 d0 51 62 50 10 dd 91 2a 72 92 58 ab 2d c5 d3 90 5f 89 55 50 b9 b3 16 83 3e c9 01 45 b1 d1 04 e4 da 2d ba 5a 33 72 85 b5 e2 1f 36 5d 02 0e aa d4 5c a0 7b df a1 f0 12 0d f2 bc 43 48 c3 cf ac ad 20 b2 84 d0 7e 9b 78 df c8 65 d1 5b 48 78 7b 37 d1 43 fc 4e 8c 70 42 bf 95 26 06 55 48 26 c7 a8 0b 94 bc 40 0e 07 ad b6 11 a2 83 10 aa 31 4d c4 94 41 d5 6c 42 a0 52 d0 d4 f4 a6 85 3a 94 2d ab a2 b6 43 54 13 19 86 40 5a a7 83 bb 59 22 17 c1 c8 bb 60 20 5b 54 47 19 00 b1 d3 ca 1b f4 39 13 02 ad 5a d0 c9 15 c0 56 b1 05 bd 5d 80 1e 31 92 2d d9 47 c0 69 93 2b 17 ee 60 24 a8 0d fa 8e 19 aa ee 46 8a b1 16 cb 83 d2 b2 c0 17 b2 a5 b3 f9 6c 17 e2 97 5f bf a5 d8 7e f5 fa ed 2f 3e fb bb 6a b3 a9 42 5e d8 aa b1 f9 56 76 a0 50 03 ba 4a 59 fe ed 6f 7e e7 d7 be fd f1 c7 f2 c5 Data Ascii: rQbP*rX-_UP>E-Z3r6]\{CH ~xe[Hx{7CNpB&UH&@1MAlBR:-CT@ZY"` [TG9ZV]1-Gi+`$Fl_~/>jB^VvPJYo~
2024-04-23 20:28:23 UTC	12288	IN	Data Raw: f0 f9 7d 8f 66 b1 e2 ce be 28 f0 54 03 ce cd e5 19 1b 4e 27 74 c6 d6 3c ba c3 88 16 6d 4c 24 c0 01 1b 7d 41 03 a0 82 5c 5a 48 7a ae e3 56 50 c9 31 15 00 ba d8 cd 9f 25 d8 a6 28 4a 8c ad e8 75 98 bb c4 13 42 28 97 ca 78 74 7c b2 a2 87 12 ea de 2c d2 84 4e 20 34 f6 59 de 93 ef 87 9c d5 d6 14 9b 49 78 0b 9d 0b 94 17 8e 2d 60 e8 b9 b4 2c 8d 4a c1 0e 01 0b 2c cb e3 07 c1 1b 4f 78 0f 12 b3 40 78 ad 19 2a 53 bd a3 a8 cd 94 b2 41 ee c7 11 68 4e 65 d1 5b 37 4d dd 34 5d 53 52 db 6c 28 10 aa b4 ec 36 37 df 3c ff 63 95 65 fd d0 2d 18 93 df f4 ee f0 68 a5 08 b1 4b bf 71 ce ec c7 03 aa 85 a8 3e b6 76 47 9f db c1 3c 18 7e 51 fb 7d 69 d0 40 d6 54 61 2a 71 b6 3a c8 96 a5 6b bb 9b ce 37 ce ff 24 17 9f d7 f9 51 61 0e 0e 4f 16 ab 35 58 3c ce d2 1b d3 b9 e6 61 90 d0 59 11 58 Data Ascii: }f(TN't<mL$}A\ZHzVP1%(JuB(xt\|,N 4YIx-`,J,Ox@xSAhNe[7M4]SRl(67<ce-hKq>vG<~Q}i@Taq:k7$QaO5X<aYX
2024-04-23 20:28:23 UTC	4096	IN	Data Raw: 93 15 4f e2 54 bc 27 c8 1f a4 9d 10 5f 13 e3 fd 22 27 83 e0 84 19 cb 59 15 79 ca 4d b6 de 36 a3 39 44 fc e5 cb 17 9f 3e 7a f2 42 d9 27 ad de 77 94 8b ea d6 d1 19 c1 0c 46 9d f0 f7 de ff da e6 b3 67 57 bb 5d c6 d9 be b7 ab 61 9f e7 79 05 15 0d 3e d5 71 6f 5a 93 88 d6 8a 81 f2 3c e3 6a fa 3f 81 17 6d 65 ca 6e 7a 33 f7 04 27 d8 18 b1 49 df ba 6a f6 62 d5 ad af ae 2e cf 96 32 8a 97 e4 13 d2 bc 57 8a 87 ce 61 18 52 44 51 20 20 a0 cf 4f fc af 46 9b 57 33 63 9f 57 54 d9 e7 15 ca 5f 34 ee 7f 69 fd e9 55 cb fe f3 c8 c7 7e 25 ac bd 1a c8 be 35 e2 b0 48 75 dc f8 bf 5d f6 f7 af ba 8b b7 b3 e0 c7 59 50 17 de 87 bd b2 f0 5f 9e da 01 45 28 8b 8e ab 0b 9f cf c0 e1 e2 28 82 81 fc 0e 74 4d 84 d6 75 12 18 03 c9 61 e3 88 fb a8 a4 53 1a 87 81 d1 28 f0 11 86 9e 47 ca 08 6c f9 Data Ascii: OT'_"'YyM69D>zB'wFgW]ay>qoZ<j?menz3'Ijb.2WaRDQ OFW3cWT_4iU~%5Hu]YP_E((tMuaS(Gl
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: cf 38 46 40 c5 f5 b3 ab 3f f8 b5 77 df a8 93 1f 3c 79 96 c1 19 c6 8f ae d7 ed 30 fe da 9d 89 57 dd cb 56 a5 19 db ec 21 b8 06 c1 e6 38 60 29 24 83 58 02 ed 40 cf ec 6b 8b e1 ac 0d 3d fa 32 3f 61 91 ee a0 cb 93 8a b8 c0 e8 2a a7 a4 74 d7 1f 26 f3 f9 62 79 66 ac a5 a8 4b 3e a2 ed 47 2c 9e 48 86 a2 12 0f b4 d0 a8 96 23 19 a3 d3 4f 4f 73 30 3e 88 2a 04 35 a1 db 65 22 04 46 0b b5 59 ec 79 63 18 c1 46 61 63 38 0e 55 96 a3 6c c9 51 3a c8 fb 57 92 2d c7 09 52 7a 22 94 3a 60 bc 11 63 83 48 8b e2 57 29 27 e4 37 79 9c 4b 2c b8 b5 a3 51 58 58 88 27 60 04 8c 1b 65 06 74 11 e2 0c a2 f3 a0 79 a1 34 8d 82 db 61 f0 bd 86 cd 55 68 cc 32 ca f5 f7 0a 62 3c 58 ae 51 64 b8 e0 25 c3 88 a6 8f 6d 89 2d 05 b9 75 be 40 b5 c6 d7 68 b8 f3 83 21 8f 15 55 a1 d1 de fb 68 8e f1 85 40 78 Data Ascii: 8F@?w<y0WV!8`)$X@k=2?at&byfK>G,H#OOs0>5e"FYycFac8UlQ:W-Rz":`cHW)'7yK,QXX'`ety4aUh2b<XQd%m-u@h!Uh@x
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: bd f7 3f ac 6a 20 bf 7c 18 4f 0f 1f ff e8 e9 d2 8a 92 04 ff ee 38 7d dc 77 ab f5 ba 6d 5a 4e 00 1e 47 ad 4d a2 6f 5f 1c 07 4a a9 0f 15 53 5e 17 52 5d 3f 75 a6 af b9 61 b0 c1 27 a6 c0 ab d0 10 32 c5 30 ce ae 64 a5 45 d1 78 42 62 d4 5e 12 7d 5b 6a 22 ca 4c 5e 37 91 c2 3f 49 85 aa c4 b0 96 06 72 52 04 fa 44 a6 c8 91 cf 39 11 ab b2 12 4b 84 aa 3e 0d f1 90 39 0a 9f 26 2e 93 93 3f f9 8b 5f c1 5b af 64 5a e0 93 d9 7a 89 6d 96 9f c8 4d 9f 95 ec 3a 33 80 2a a2 22 02 04 9f 09 93 ea b7 b8 e4 2e 20 bb 51 3a 2d 84 84 5c 39 11 ea 40 9a 60 24 0d 38 71 55 9a 85 c7 77 59 7e 31 87 2a c9 a8 9d 33 20 24 c9 34 0e 0d 00 7f 77 b4 3e 8f c0 72 ff fc 59 53 d5 73 aa 12 14 69 41 cb f2 fb 9c 91 24 06 62 c2 34 f2 84 9e 3e bc 3b bc 7f 27 00 cf ba fe d0 cd fa ee ee bb f7 6f a7 cb 53 55 Data Ascii: ?j \|O8}wmZNGMo_JS^R]?ua'20dExBb^}[j"L^7?IrRD9K>9&.?_[dZzmM:3". Q:-\9@`$8qUwY~13 $4w>rYSsiA$b4>;'oSU
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 20 53 8a a9 20 fb 37 4b 30 91 93 d0 c8 18 9c 98 28 67 92 34 c0 34 d9 4e 58 a7 6d 90 a8 33 17 12 3b 91 21 51 1f 38 b2 15 56 2c a8 fb 3e 53 b5 2a 6e b2 fc 10 08 64 1d b5 46 8b 55 6e cd 48 76 0d 8e 40 f2 f2 11 e7 1c 1c db 2e cc 87 b4 cb 57 c9 38 fa b8 a2 df f2 53 2a 3d d2 6d 15 64 c6 aa 12 03 05 d5 16 24 60 0b 3d 2f a5 91 48 36 e3 27 bf 14 f0 7c 2a 6b e1 09 72 00 dd 65 5d 71 92 88 9d dc 9c 03 b4 25 47 a5 58 5c e4 07 26 07 0a 4b 56 29 cb 44 ca 99 94 98 ae d2 a0 e9 0c 24 75 d0 a4 31 9a a5 f7 c8 5f d9 80 a7 ce 9f d2 ec 25 29 1b e3 a1 9b e5 0f 7f f1 cb 44 81 98 95 52 70 f1 3c e9 09 e2 ee 6b 2e 6d 31 c3 a1 88 c0 82 f7 96 32 6c c9 4d 55 91 88 7f 93 3a 0f 9b 1e 36 b1 82 cf a4 70 cb 4b f2 ef e4 e9 9a d3 b8 69 ce 83 b2 16 b2 cb 98 f0 18 0a 59 e6 36 81 65 3c 7d 32 25 Data Ascii: S 7K0(g44NXm3;!Q8V,>SndFUnHv@.W8S=md$`=/H6'\|*kre]q%GX\&KV)D$u1_%)DRp<k.m12lMU:6pKiY6e<}2%
2024-04-23 20:28:23 UTC	13312	IN	Data Raw: 93 34 5c 2b c9 75 5c 1b a4 85 ce 39 f8 9b 46 b3 9c 8f 70 9f ac f6 4d df 31 14 47 c0 bc 55 ef 71 03 10 2d 0f f8 a4 ae 20 d3 0e bc 55 62 4b 1b b2 d3 ff f5 dd ef 39 d1 5b 68 3c 84 13 6a 35 f7 61 bc a4 2a 04 2b b7 e5 a6 0a 94 ea 28 2b 5f bc 75 6d 57 4b d3 b3 04 27 e4 74 eb 2c 2c 45 df 4a 02 ea 23 1e 2e e2 33 7d 0e 99 24 b7 24 ee c0 8d 91 94 80 57 38 e9 a2 47 fc 02 4e 8a 71 14 78 93 75 c1 8f 15 91 05 d9 02 f1 6a c6 63 e4 28 0b 47 b2 db ea 86 19 08 d5 1a da 48 72 b6 0d 41 8c de 94 47 95 3b d6 68 e9 0f f1 e6 c9 1a 6e 66 07 57 06 58 d0 16 62 8f 58 e3 fb 9e 0e a0 65 61 25 01 50 9a 93 8f e0 9a 88 92 00 04 5c 6e d5 5c 46 31 75 24 90 ae 3c 84 cf 59 d6 7b ef 24 0e 21 0b 54 b6 ae 62 bc 4b e5 f6 1d 6f c3 e6 11 74 5b b2 c5 d8 d5 cd 85 b5 e0 70 12 15 6c 4a 9e f0 80 45 59 Data Ascii: 4\+u\9FpM1GUq- UbK9[h<j5a*+(+_umWK't,,EJ#.3}$$W8GNqxujc(GHrAG;hnfWXbXea%P\n\F1u$<Y{$!TbKot[plJEY
2024-04-23 20:28:23 UTC	3072	IN	Data Raw: 8c cf 1d 11 fc 80 e0 6c c7 d5 2e 9a fc 50 cb 09 d7 80 2c c3 b2 b4 5d c7 d9 9a 98 1a 13 1d ad a3 de 96 40 f7 41 fc 30 db f4 40 ed 8d fb d3 69 fe c3 47 dc 05 81 c0 a7 14 e7 07 b1 e2 e6 54 2b 9e 1d 95 32 79 be c6 ba 34 48 7f 80 ca e1 47 2a 45 ec 1e 10 b5 05 97 2d 0f 95 b2 97 9c 1e b2 79 67 3a e4 e1 59 73 f4 da 6a fa c0 59 72 12 04 a2 67 34 76 24 b3 09 f7 07 81 98 02 32 d6 b6 08 8e 63 29 b7 78 2a 5a af 75 3f fb 94 cb a4 c4 ad 20 b3 1b 69 15 11 70 cf 2a c1 e0 62 3c 27 71 4c a8 28 4b fd 34 dc 6e d7 64 23 a0 14 73 14 31 29 71 2e 92 0d 2e 22 75 dd d4 fd 59 24 92 95 46 0f b1 50 fd 04 1f 25 51 eb 5a d9 b0 5c 3d de a4 b3 78 39 91 8c a7 ac e2 ba 84 cd 65 7c 2f 44 5e 8f 60 59 4c f3 d5 67 9f e3 f2 73 07 b7 ee d1 9b ba c7 db 54 0b f7 b1 b5 bd 55 1b 11 4b f9 72 6c 70 2d Data Ascii: l.P,]@A0@iGT+2y4HGE-yg:YsjYrg4v$2c)xZu? ip*b<'qL(K4nd#s1)q.."uY$FP%QZ\=x9e\|/D^`YLgsTUKrlp-
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: e9 8a 93 14 b6 33 c2 84 e1 ce c8 65 5d 7e f3 8b af be f8 ec 0d 3b e2 4e e1 17 39 98 09 f4 6f 70 95 f1 5f 79 5b 78 01 aa ea 83 8a a6 1a 86 b6 f5 d2 90 db 6c aa f7 57 e6 25 24 77 14 67 c5 93 fa 4d 9a 22 02 39 2e f1 81 1d 1a ca 4f 93 8f c8 1b 12 17 9e 7e 59 cd 1b ca c0 86 0d 99 72 55 29 b3 9c 01 8c 90 b4 e8 7b 43 35 0e 2e 46 05 3f 6c e7 ba 31 da a3 5e 70 d3 99 ae 93 4d 87 e0 17 b6 e5 87 75 3b 38 d7 29 8b 30 3b 1a f1 4c 79 e4 d4 d9 e6 ae 3b b6 d6 6e d4 62 46 84 ed 42 f4 6d df ee 87 81 a6 e1 96 39 5f 3a 53 6d eb 69 02 8d f8 90 d4 aa 28 9d 86 38 47 3e ca 22 c5 4b 00 d6 69 49 a5 a3 35 7a 31 d5 1b 08 41 84 82 2b 32 99 18 28 15 5f f2 0e 0f 54 bb 8b 0f d4 33 93 e5 8b ba a8 39 29 72 6b 9e b4 7b 43 73 05 0a 6d 00 1a 57 05 61 ae 91 92 f6 cd a9 3a 60 ed ba 47 5a 30 8e Data Ascii: 3e]~;N9op_y[xlW%$wgM"9.O~YrU){C5.F?l1^pMu;8)0;Ly;nbFBm9_:Smi(8G>"KiI5z1A+2(_T39)rk{CsmWa:`GZ0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49874	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	992	OUT	GET /Osler/js/dist/Osler.min.js HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
2024-04-23 20:28:23 UTC	390	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: application/x-javascript Content-Length: 151367 Connection: close ETag: "0ab182aa086da1:0" Last-Modified: Thu, 04 Apr 2024 14:55:42 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894fhr8rcrxcb44u4s4000000019g000000003k13 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	3602	IN	Data Raw: 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 65 7c 7c 73 65 6c 66 29 2e 64 69 61 6c 6f 67 50 6f 6c 79 66 69 6c 6c 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 69 3d 22 6f 6e 22 2b 74 2e 74 79 70 Data Ascii: if(function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).dialogPolyfill=t()}(this,function(){"use strict";var e=window.CustomEvent;function t(e,t){var i="on"+t.typ
2024-04-23 20:28:23 UTC	12288	IN	Data Raw: 6e 74 28 65 2e 74 79 70 65 2c 65 2e 62 75 62 62 6c 65 73 2c 65 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 77 69 6e 64 6f 77 2c 65 2e 64 65 74 61 69 6c 2c 65 2e 73 63 72 65 65 6e 58 2c 65 2e 73 63 72 65 65 6e 59 2c 65 2e 63 6c 69 65 6e 74 58 2c 65 2e 63 6c 69 65 6e 74 59 2c 65 2e 63 74 72 6c 4b 65 79 2c 65 2e 61 6c 74 4b 65 79 2c 65 2e 73 68 69 66 74 4b 65 79 2c 65 2e 6d 65 74 61 4b 65 79 2c 65 2e 62 75 74 74 6f 6e 2c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 2c 74 68 69 73 2e 64 69 61 6c 6f 67 5f 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 69 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 2c 66 6f 63 75 73 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 64 69 61 6c 6f 67 5f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: nt(e.type,e.bubbles,e.cancelable,window,e.detail,e.screenX,e.screenY,e.clientX,e.clientY,e.ctrlKey,e.altKey,e.shiftKey,e.metaKey,e.button,e.relatedTarget),this.dialog_.dispatchEvent(i),e.stopPropagation()},focus_:function(){var e=this.dialog_.querySelecto
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 6d 71 6c 2e 6d 61 74 63 68 65 73 7c 7c 74 68 69 73 2e 69 73 55 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 65 73 74 72 6f 79 28 29 7d 29 2c 74 68 69 73 2e 6d 71 6c 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 61 73 73 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6d 61 74 63 68 65 73 28 29 3f 22 6f 6e 22 3a 22 6f 66 66 22 3b 74 28 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 65 5d 28 29 7d 29 7d 7d 2c 6e 2e 70 Data Ascii: this.mql.matches\|\|this.isUnconditional},clear:function(){t(this.handlers,function(e){e.destroy()}),this.mql.removeListener(this.listener),this.handlers.length=0},assess:function(){var e=this.matches()?"on":"off";t(this.handlers,function(t){t[e]()})}},n.p
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 65 53 74 61 74 75 73 28 22 6c 6f 61 64 69 6e 67 22 29 2c 69 2e 6c 6f 61 64 69 6e 67 3d 21 30 2c 69 2e 68 61 73 53 69 7a 65 7c 7c 28 69 2e 69 6d 67 48 69 64 64 65 6e 3d 21 30 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 6c 6f 61 64 69 6e 67 22 29 2c 74 2e 66 69 6e 64 49 6d 61 67 65 53 69 7a 65 28 69 29 29 2c 61 29 7d 7d 7d 29 3b 76 61 72 20 5f 3b 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 22 7a 6f 6f 6d 22 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 2d 69 6e 2d 6f 75 74 22 2c 64 75 72 61 74 69 6f 6e 3a 33 30 30 2c 6f 70 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 28 22 69 6d 67 22 29 3f 65 3a 65 2e 66 69 Data Ascii: eStatus("loading"),i.loading=!0,i.hasSize\|\|(i.imgHidden=!0,a.addClass("mfp-loading"),t.findImageSize(i)),a)}}});var _;e.magnificPopup.registerModule("zoom",{options:{enabled:!1,easing:"ease-in-out",duration:300,opener:function(e){return e.is("img")?e:e.fi
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 64 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 30 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 31 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 69 6e 22 29 5b 72 5d 28 22 22 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 30 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 73 68 6f 77 6e 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 7d 3b 69 66 28 21 65 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 29 72 65 74 75 72 6e 20 73 2e 63 61 Data Ascii: eClass("collapsed").attr("aria-expanded",!0),this.transitioning=1;var s=function(){this.$element.removeClass("collapsing").addClass("collapse in")[r](""),this.transitioning=0,this.$element.trigger("shown.bs.collapse")};if(!e.support.transition)return s.ca
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 28 29 2c 70 3d 6f 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 3d 6f 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 69 66 28 63 29 7b 76 61 72 20 75 3d 72 2c 66 3d 74 68 69 73 2e 67 65 74 50 6f 73 69 74 69 6f 6e 28 74 68 69 73 2e 24 76 69 65 77 70 6f 72 74 29 3b 72 3d 22 62 6f 74 74 6f 6d 22 3d 3d 72 26 26 64 2e 62 6f 74 74 6f 6d 2b 68 3e 66 2e 62 6f 74 74 6f 6d 3f 22 74 6f 70 22 3a 22 74 6f 70 22 3d 3d 72 26 26 64 2e 74 6f 70 2d 68 3c 66 2e 74 6f 70 3f 22 62 6f 74 74 6f 6d 22 3a 22 72 69 67 68 74 22 3d 3d 72 26 26 64 2e 72 69 67 68 74 2b 70 3e 66 2e 77 69 64 74 68 3f 22 6c 65 66 74 22 3a 22 6c 65 66 74 22 3d 3d 72 26 26 64 2e 6c 65 66 74 2d 70 3c 66 2e 6c 65 66 74 3f 22 72 69 67 68 74 22 3a 72 2c 6f 2e 72 65 6d 6f 76 65 43 Data Ascii: osition(),p=o[0].offsetWidth,h=o[0].offsetHeight;if(c){var u=r,f=this.getPosition(this.$viewport);r="bottom"==r&&d.bottom+h>f.bottom?"top":"top"==r&&d.top-h<f.top?"bottom":"right"==r&&d.right+p>f.width?"left":"left"==r&&d.left-p<f.left?"right":r,o.removeC
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 74 74 6f 6e 2c 20 69 6e 70 75 74 22 29 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 2d 31 29 29 7d 6e 61 76 42 61 72 54 6f 67 67 6c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 74 68 69 73 29 3b 22 66 61 6c 73 65 22 3d 3d 3d 6e 61 76 42 61 72 54 6f 67 67 6c 65 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 3f 68 61 6e 64 6c 65 4f 70 65 6e 4f 66 66 63 61 6e 76 61 73 28 29 3a 68 61 6e 64 6c 65 43 6c 6f 73 65 4f 66 66 63 61 6e 76 61 73 28 29 7d 29 3b 76 61 72 20 68 65 61 64 65 72 3d 24 28 22 2e 73 69 74 65 2d 68 65 61 64 65 72 22 29 2c 6c 61 73 74 53 63 72 6f 6c 6c 54 6f 70 3d 30 2c 64 69 72 65 63 74 69 6f 6e 3d 22 64 6f 77 6e 22 2c 73 68 61 64 6f 77 3d 21 31 2c 6d 61 78 48 65 69 67 68 74 3d 30 3b Data Ascii: tton, input").attr("tabindex",-1))}navBarToggle.on("click",function(e){$(this);"false"===navBarToggle.attr("aria-expanded")?handleOpenOffcanvas():handleCloseOffcanvas()});var header=$(".site-header"),lastScrollTop=0,direction="down",shadow=!1,maxHeight=0;
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 28 65 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 77 68 69 63 68 29 26 26 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 5b 30 5d 2e 63 6c 6f 73 65 28 29 7d 29 29 7d 29 3b 76 61 72 20 69 65 56 65 72 73 69 6f 6e 3d 67 65 74 56 65 72 73 69 6f 6e 49 45 28 29 2c 74 69 6d 65 73 48 61 73 53 65 61 72 63 68 65 64 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 54 6f 70 69 63 43 6f 6f 6b 69 65 28 65 29 7b 76 61 72 20 74 3d 24 28 22 23 22 2b 65 2e 64 61 74 61 73 65 74 2e 67 75 69 64 29 2c 69 3d 24 28 74 29 2e 6e 65 78 74 41 6c 6c 28 22 2e 64 62 69 63 2d 74 6f 70 69 63 2d 63 61 72 64 22 29 3b 28 61 6e 69 6d 61 74 65 4c 69 73 74 28 74 29 2c 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 28 65 2e 64 61 74 61 73 65 74 2e 67 75 69 64 29 2c 69 29 26 26 69 Data Ascii: (e.keyCode\|\|e.which)&&t.each(function(){$(this)[0].close()}))});var ieVersion=getVersionIE(),timesHasSearched=0;function removeTopicCookie(e){var t=$("#"+e.dataset.guid),i=$(t).nextAll(".dbic-topic-card");(animateList(t),removeCookie(e.dataset.guid),i)&&i
2024-04-23 20:28:24 UTC	1024	IN	Data Raw: 73 6c 65 72 2e 69 73 53 74 75 64 65 6e 74 53 65 61 72 63 68 26 26 28 65 3d 22 2f 61 70 69 2f 66 69 6e 64 2f 73 74 75 64 65 6e 74 22 29 2c 65 7d 3b 76 61 72 20 74 2c 69 2c 61 2c 6f 3b 72 65 74 75 72 6e 20 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 73 6c 65 72 2e 69 73 54 65 61 6d 53 65 61 72 63 68 3f 28 65 28 22 2e 61 70 70 6c 79 2d 66 69 6c 74 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 4f 73 6c 65 72 2e 70 65 6f 70 6c 65 4c 69 73 74 2e 68 69 64 65 54 61 62 6c 65 28 29 2c 63 28 29 2c 4f 73 6c 65 72 2e 69 73 42 75 74 74 6f 6e 53 65 61 72 63 68 3d 21 30 2c 74 28 65 29 7d 29 2c 65 28 22 2e 73 75 62 6d 69 Data Ascii: sler.isStudentSearch&&(e="/api/find/student"),e};var t,i,a,o;return e(function(){Osler.isTeamSearch?(e(".apply-filter").on("click",function(e){e.preventDefault(),e.stopPropagation(),Osler.peopleList.hideTable(),c(),Osler.isButtonSearch=!0,t(e)}),e(".submi
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 4f 73 6c 65 72 2e 70 65 6f 70 6c 65 4c 69 73 74 2e 68 69 64 65 54 61 62 6c 65 28 29 2c 63 28 29 2c 4f 73 6c 65 72 2e 69 73 42 75 74 74 6f 6e 53 65 61 72 63 68 3d 21 30 2c 61 28 29 7d 29 2c 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 29 3a 4f 73 6c 65 72 2e 69 73 52 65 73 6f 75 72 63 65 53 65 61 72 63 68 3f 28 6e 75 6c 6c 21 3d 3d 65 28 22 23 68 69 64 4e 6f 64 65 49 44 22 29 26 26 28 4f 73 6c 65 72 2e 69 73 52 65 73 6f 75 72 63 65 43 61 74 65 67 6f 72 79 53 65 61 72 63 68 3d 21 30 29 2c 65 28 22 2e 61 70 70 6c 79 2d 66 69 6c 74 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e Data Ascii: on(e){e.preventDefault(),e.stopPropagation(),Osler.peopleList.hideTable(),c(),Osler.isButtonSearch=!0,a()}),s(window.location.hash)):Osler.isResourceSearch?(null!==e("#hidNodeID")&&(Osler.isResourceCategorySearch=!0),e(".apply-filter").on("click",function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49880	52.85.132.14	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	537	OUT	GET /c/hotjar-139501.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:23 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 23 Apr 2024 20:28:23 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/6f22059ba0bb7bd483c77e2a70723197 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c57d1eb27f41d3e95fc5060845849c06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 X-Amz-Cf-Id: 7OefRYlvl1ELou81XDnlAzE_0IrKRsHH1bB02lmUclf9ZiDy5lSXeA==
2024-04-23 20:28:23 UTC	4097	IN	Data Raw: 66 66 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 33 39 35 30 31 2c 22 72 22 3a 30 2e 30 38 39 37 33 35 38 32 33 30 30 38 32 36 30 30 35 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 39 39 39 39 39 39 39 39 38 39 34 37 32 38 38 33 65 2d 39 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 Data Ascii: ffawindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":139501,"r":0.08973582300826005,"rec_value":1.9999999989472883e-9,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"sess
2024-04-23 20:28:23 UTC	16384	IN	Data Raw: 35 32 62 30 0d 0a 74 65 22 2c 22 64 69 73 70 6c 61 79 5f 64 65 6c 61 79 22 3a 30 2c 22 70 65 72 73 69 73 74 5f 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 73 70 6f 6e 73 65 22 2c 22 74 61 72 67 65 74 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 74 65 72 6e 22 3a 22 2f 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 64 65 76 69 63 65 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 65 78 61 63 74 22 2c 22 Data Ascii: 52b0te","display_delay":0,"persist_condition":"response","targeting_percentage":100,"targeting":[{"component":"url","match_operation":"contains","negate":false,"pattern":"/","name":null,"rule_type":null},{"component":"device","match_operation":"exact","
2024-04-23 20:28:23 UTC	4792	IN	Data Raw: 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 29 28 6e 2c 69 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 21 31 3d 3d 3d 65 29 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 61 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 6e 29 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 65 34 2c 61 2e 73 65 6e 64 28 69 29 7d 63 61 74 63 68 28 74 29 7b 7d 75 2e 62 72 6f 77 73 65 72 2e 73 68 6f 75 6c 64 4c 6f 67 4d 65 74 72 69 63 73 26 26 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 22 4e 65 77 20 4d 65 74 72 69 63 73 3a 20 22 2c 74 29 7d 2c 76 3d 7b 67 65 74 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 5b 74 5d 7d 2c 67 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: ndBeacon.bind(navigator)(n,i)}catch(t){}if(!1===e)try{var a=new XMLHttpRequest;a.open("POST",n),a.timeout=1e4,a.send(i)}catch(t){}u.browser.shouldLogMetrics&&console.debug("New Metrics: ",t)},v={getConfig:function(t){return u[t]},getState:function(t){retu
2024-04-23 20:28:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49877	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	675	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:23 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:23 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,1e4818f4f7f7355871b53585eb69ec49,10.0.0.127,44860,89.187.171.132,,360366680815,1,1713904103.586,0.002,,.,0,0,0.000,0.000,-,0,0,203,232,116,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49883	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	630	OUT	GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:23 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 879099885bf06737-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 80569 Cache-Control: public, max-age=86400 Expires: Wed, 24 Apr 2024 20:28:23 GMT Last-Modified: Tue, 19 Sep 2023 09:22:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 9HxyuA320diNlN+ajGTkaQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b41b4249-701e-001a-320e-15585c000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-23 20:28:23 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1a{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Pre
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 72 74 79 20 77 65 62 73 69 74 65 73 2e 20 53 75 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 69 6e 63 6c 75 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 2e 20 59 6f 75 20 68 61 76 65 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 61 63 63 65 70 74 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 6f 73 65 20 74 68 61 74 20 61 72 65 20 63 61 74 65 67 6f 72 69 7a 65 64 20 61 73 20 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f 6f 6b 69 65 73 2e 20 54 6f 20 65 6e Data Ascii: rty websites. Such information might include information about you, your preferences or your device. You have the option of accepting or rejecting the use of cookies on our website other than those that are categorized as Strictly Necessary Cookies. To en
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 73 74 6f 72 65 64 20 61 6e 64 2f 6f 72 20 73 68 61 72 65 64 20 77 69 74 68 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 61 72 74 6e 65 72 73 20 6f 75 74 73 69 64 65 20 6f 66 20 79 6f 75 72 20 6a 75 72 69 73 64 69 63 74 69 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 68 6f 77 20 77 65 20 6d 61 6e 61 67 65 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 79 6f 75 72 20 72 69 67 68 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 6e 64 20 63 6f 72 72 65 63 74 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 77 69 74 68 64 72 61 77 20 63 6f 6e 73 65 6e 74 2c 20 70 6c 65 61 73 65 20 76 Data Ascii: ation may be stored and/or shared with our advertising partners outside of your jurisdiction. For more information about how we manage personal information, including your rights to access and correct personal information and to withdraw consent, please v
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 73 20 79 6f 75 72 20 6c 61 6e 67 75 61 67 65 20 70 72 65 66 65 72 65 6e 63 65 20 6f 72 20 6c 6f 67 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f 75 72 20 61 64 76 65 72 74 69 73 Data Ascii: s your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for our advertis
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 79 6f 75 72 20 62 72 6f 77 73 65 72 20 74 6f 20 62 6c 6f 63 6b 20 6f 72 20 61 6c 65 72 74 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 73 69 74 65 20 77 69 6c 6c 20 6e 6f 74 20 74 68 65 6e 20 77 6f 72 6b 2e 20 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 64 6f 20 6e 6f 74 20 73 74 6f 72 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 6c 79 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 22 3a 22 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4f 54 54 22 3a 22 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 Data Ascii: your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.","GroupNameMobile":"Strictly Necessary Cookies","GroupNameOTT":"Strictly Necessary C
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 6c 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 72 75 6e 20 6f 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 41 7a 75 72 65 20 63 6c 6f 75 64 20 70 6c 61 74 66 6f 72 6d 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 76 69 73 69 74 6f 72 20 70 61 67 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 76 65 72 20 69 6e 20 61 6e 79 20 62 72 6f 77 73 69 6e 67 20 73 65 73 73 69 6f 6e 2e 22 2c 22 44 75 72 Data Ascii: ler.com","IsSession":true,"Length":"0","description":"This cookie is set by websites run on the Windows Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session.","Dur
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 69 64 22 3a 22 30 31 64 62 36 36 37 61 2d 62 62 64 30 2d 34 38 31 37 2d 61 32 36 37 2d 39 32 30 31 65 38 35 35 34 35 36 30 22 2c 22 4e 61 6d 65 22 3a 22 43 75 72 72 65 6e 74 43 6f 6e 74 61 63 74 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e Data Ascii: ontains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"","id":"01db667a-bbd0-4817-a267-9201e8554560","Name":"CurrentContact","Host":"www.
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 32 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 75 6e 74 20 76 69 73 69 74 73 20 61 6e 64 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 73 20 73 6f 20 77 65 20 63 61 6e 20 6d 65 61 73 75 72 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 2e 20 54 Data Ascii: ,"OptanonGroupId":"C0002","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. T
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 77 77 77 2e 6f 73 6c 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 62 79 20 4d 69 63 72 6f 73 6f 66 74 20 43 6c 61 72 69 74 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 6d 75 6c 74 69 70 6c 65 20 70 61 67 65 20 76 69 65 77 73 20 62 79 20 61 20 75 73 65 72 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 43 6c 61 72 69 74 79 20 73 65 73 73 69 6f 6e 20 72 65 63 6f 72 64 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c Data Ascii: www.osler.com","IsSession":false,"Length":"0","description":"Used by Microsoft Clarity to connect multiple page views by a user into a single Clarity session recording.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,
2024-04-23 20:28:23 UTC	1369	IN	Data Raw: 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 5f 67 61 22 2c 22 69 64 22 3a 22 66 64 34 64 32 62 65 65 2d 34 64 34 61 2d 34 31 65 65 2d 38 63 36 39 2d 34 39 62 36 61 64 36 65 63 33 64 66 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 61 22 2c 22 48 6f 73 74 22 3a 22 6f 73 6c 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 32 39 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 55 6e 69 76 65 72 73 61 6c 20 41 6e 61 6c Data Ascii: on":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cookie_ga","id":"fd4d2bee-4d4a-41ee-8c69-49b6ad6ec3df","Name":"_ga","Host":"osler.com","IsSession":false,"Length":"729","description":"This cookie name is associated with Google Universal Anal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49881	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	1072	OUT	GET /osler/media/Osler/Content/Email/Email-Icon.svg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
2024-04-23 20:28:23 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/svg+xml Content-Length: 916 Connection: close ETag: "c025adb1b129d91:0" Last-Modified: Mon, 16 Jan 2023 13:51:55 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f7b4795d4xft4nk2mmryd7dc00000006cg000000004vy4 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	916	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 33 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 35 30 35 30 35 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 41 73 73 65 74 73 22 3e 3c 67 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 38 2c 33 38 48 33 63 2d 31 2e 36 35 2c 30 2d 33 2d 31 2e 33 35 2d 33 2d 33 56 31 31 63 30 2d 31 2e 36 35 2c 31 2e 33 35 2d 33 2c 33 2d 33 48 33 38 63 31 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 38"><defs><style>.cls-1{fill:#505056;}</style></defs><g id="Assets"><g><path class="cls-1" d="M38,38H3c-1.65,0-3-1.35-3-3V11c0-1.65,1.35-3,3-3H38c1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49882	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	1059	OUT	GET /Osler/images/logos/white-logo.png HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
2024-04-23 20:28:23 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:23 GMT Content-Type: image/png Content-Length: 3149 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f7b4795d4jzjgmdcz033zhkn000000063g00000000290p X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:23 UTC	3149	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 29 08 06 00 00 00 35 41 cb 3b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR)5A;tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49884	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:23 UTC	863	OUT	GET /osler/media/Osler/Content/Images/Tile-300x300/ESG-Podcast-300x300.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
2024-04-23 20:28:24 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: image/jpeg Content-Length: 32033 Connection: close ETag: "85ed5b43b529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202823Z-16f56cb894f7gqnz50s8mzsvyg000000015000000000k44r X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:24 UTC	15904	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-23 20:28:24 UTC	16129	IN	Data Raw: e9 68 98 ea 82 ec ad e6 5d 4a e1 70 24 73 8a 8e 9e 51 7b c8 0d 68 24 93 20 00 a9 27 60 8e ea c1 23 2d 68 f0 fc 6e a1 b8 7d 0c 1a 84 e4 5c 47 21 39 61 ad a9 a4 16 3f b4 34 20 8d f0 a6 25 12 86 e6 32 ee 47 b7 a8 8d 6d 70 d6 0f da 71 8e df 0d c6 f6 d8 b3 69 f5 b4 ea 77 5a 19 72 72 5f f9 7f db 8b 7d d5 e6 3a e1 21 00 be 09 2e d4 03 43 a6 57 54 65 58 17 b9 2e 76 24 a6 21 87 0a f4 63 c3 d3 b2 2d dd c9 71 16 16 b8 8c 6e 2e 29 34 b8 c7 12 80 d0 a3 5a be c9 86 b3 2e 70 dd be 4b 43 b5 b5 a0 71 b8 6f 98 03 62 a8 98 11 6f 31 f5 10 eb b7 6e b4 3c 82 e7 34 37 14 c0 e1 20 97 21 e2 24 99 d2 1f 9a ca 02 1c f6 e1 00 bb 10 68 55 38 57 8b 8a 4a a4 d2 55 3c 92 f7 90 1a 02 92 64 00 15 24 ea 10 72 59 12 46 58 1e 27 50 dd 23 fd b1 ab de a9 92 78 00 5d 43 4d 14 d0 30 14 72 ca 0f Data Ascii: h]Jp$sQ{h$ '`#-hn}\G!9a?4 %2GmpqiwZrr_}:!.CWTeX.v$!c-qn.)4Z.pKCqobo1n<47 !$hU8WJU<d$rYFX'P#x]CM0r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49889	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	430	OUT	GET /consent/25c02da3-4d83-47e6-b080-f533c2d99f75/25cdfee2-024b-4a52-a054-a6e05347c926/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8790998bae0107ee-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 7877 Cache-Control: public, max-age=86400 Expires: Wed, 24 Apr 2024 20:28:24 GMT Last-Modified: Tue, 19 Sep 2023 09:22:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 9HxyuA320diNlN+ajGTkaQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8a1e6f68-301e-0069-42e8-8600cf000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-23 20:28:24 UTC	468	IN	Data Raw: 37 63 31 62 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1b{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Privacy Pre
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 74 79 20 77 65 62 73 69 74 65 73 2e 20 53 75 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 69 6e 63 6c 75 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 2e 20 59 6f 75 20 68 61 76 65 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 61 63 63 65 70 74 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 6f 73 65 20 74 68 61 74 20 61 72 65 20 63 61 74 65 67 6f 72 69 7a 65 64 20 61 73 20 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f 6f 6b 69 65 73 2e 20 54 6f 20 65 6e 61 Data Ascii: ty websites. Such information might include information about you, your preferences or your device. You have the option of accepting or rejecting the use of cookies on our website other than those that are categorized as Strictly Necessary Cookies. To ena
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 6d 61 79 20 62 65 20 73 74 6f 72 65 64 20 61 6e 64 2f 6f 72 20 73 68 61 72 65 64 20 77 69 74 68 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 61 72 74 6e 65 72 73 20 6f 75 74 73 69 64 65 20 6f 66 20 79 6f 75 72 20 6a 75 72 69 73 64 69 63 74 69 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 68 6f 77 20 77 65 20 6d 61 6e 61 67 65 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 79 6f 75 72 20 72 69 67 68 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 6e 64 20 63 6f 72 72 65 63 74 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 77 69 74 68 64 72 61 77 20 63 6f 6e 73 65 6e 74 2c 20 70 6c 65 61 73 65 20 76 69 Data Ascii: tion may be stored and/or shared with our advertising partners outside of your jurisdiction. For more information about how we manage personal information, including your rights to access and correct personal information and to withdraw consent, please vi
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 20 79 6f 75 72 20 6c 61 6e 67 75 61 67 65 20 70 72 65 66 65 72 65 6e 63 65 20 6f 72 20 6c 6f 67 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 Data Ascii: your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for our advertisi
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6f 75 72 20 62 72 6f 77 73 65 72 20 74 6f 20 62 6c 6f 63 6b 20 6f 72 20 61 6c 65 72 74 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 73 69 74 65 20 77 69 6c 6c 20 6e 6f 74 20 74 68 65 6e 20 77 6f 72 6b 2e 20 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 64 6f 20 6e 6f 74 20 73 74 6f 72 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 6c 79 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 22 3a 22 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4f 54 54 22 3a 22 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f Data Ascii: our browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.","GroupNameMobile":"Strictly Necessary Cookies","GroupNameOTT":"Strictly Necessary Co
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 72 75 6e 20 6f 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 41 7a 75 72 65 20 63 6c 6f 75 64 20 70 6c 61 74 66 6f 72 6d 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 76 69 73 69 74 6f 72 20 70 61 67 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 76 65 72 20 69 6e 20 61 6e 79 20 62 72 6f 77 73 69 6e 67 20 73 65 73 73 69 6f 6e 2e 22 2c 22 44 75 72 61 Data Ascii: er.com","IsSession":true,"Length":"0","description":"This cookie is set by websites run on the Windows Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session.","Dura
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 69 64 22 3a 22 30 31 64 62 36 36 37 61 2d 62 62 64 30 2d 34 38 31 37 2d 61 32 36 37 2d 39 32 30 31 65 38 35 35 34 35 36 30 22 2c 22 4e 61 6d 65 22 3a 22 43 75 72 72 65 6e 74 43 6f 6e 74 61 63 74 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 6f Data Ascii: ntains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"","id":"01db667a-bbd0-4817-a267-9201e8554560","Name":"CurrentContact","Host":"www.o
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 32 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 75 6e 74 20 76 69 73 69 74 73 20 61 6e 64 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 73 20 73 6f 20 77 65 20 63 61 6e 20 6d 65 61 73 75 72 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 2e 20 54 68 Data Ascii: "OptanonGroupId":"C0002","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. Th
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 77 77 2e 6f 73 6c 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 62 79 20 4d 69 63 72 6f 73 6f 66 74 20 43 6c 61 72 69 74 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 6d 75 6c 74 69 70 6c 65 20 70 61 67 65 20 76 69 65 77 73 20 62 79 20 61 20 75 73 65 72 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 43 6c 61 72 69 74 79 20 73 65 73 73 69 6f 6e 20 72 65 63 6f 72 64 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 Data Ascii: ww.osler.com","IsSession":false,"Length":"0","description":"Used by Microsoft Clarity to connect multiple page views by a user into a single Clarity session recording.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 5f 67 61 22 2c 22 69 64 22 3a 22 66 64 34 64 32 62 65 65 2d 34 64 34 61 2d 34 31 65 65 2d 38 63 36 39 2d 34 39 62 36 61 64 36 65 63 33 64 66 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 61 22 2c 22 48 6f 73 74 22 3a 22 6f 73 6c 65 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 32 39 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 55 6e 69 76 65 72 73 61 6c 20 41 6e 61 6c 79 Data Ascii: n":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cookie_ga","id":"fd4d2bee-4d4a-41ee-8c69-49b6ad6ec3df","Name":"_ga","Host":"osler.com","IsSession":false,"Length":"729","description":"This cookie name is associated with Google Universal Analy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49886	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	867	OUT	GET /osler/media/Osler/Content/Images/Tile-700x350/700x350-dealpoints-2024.png?ext=.png HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103
2024-04-23 20:28:24 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: image/png Content-Length: 368265 Connection: close ETag: "ffa331707fda1:0" Last-Modified: Mon, 25 Mar 2024 22:02:12 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202824Z-16f56cb894f79wk6x1g9kkehwn00000001fg000000001csc X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:24 UTC	13622	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 5e 08 02 00 00 00 e8 bc 5b 00 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 Data Ascii: PNGIHDR^[tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:5
2024-04-23 20:28:24 UTC	4096	IN	Data Raw: 60 fd 5a 79 e1 91 b2 b7 ce 62 a2 97 b3 06 08 0e a4 5e 40 9f 20 ae 80 1e 80 7e 73 be 88 2d ab 6a 22 79 9a 14 59 99 f2 0c 11 2d de 8d a1 ef c0 65 90 9b 87 1d 59 c0 e6 85 51 cb 82 56 6d d5 90 a4 eb e4 07 86 43 49 8c 49 8e 42 f4 1e 01 99 31 85 79 00 68 10 3a 1b bf ee a9 8e a1 38 46 fc 3d 5a 55 2b eb 20 2e f0 c7 d9 f8 f5 57 69 6d 93 2e 5d a1 8b 57 a8 db c5 5d 10 f3 90 c0 a6 8f 50 45 81 eb 20 f5 73 c1 04 9d 40 c7 46 3d d5 09 a6 22 3d 0c 74 f9 d7 69 65 5f 1a 17 0f ad a6 93 dc e6 67 ec 33 e9 6e 94 ee b0 14 d7 74 af 50 07 13 ac ce 93 3b c9 73 59 9d 97 d5 f5 34 bc 4d 74 5a 65 ee 8d 9b aa 9b 3c 72 65 38 3d 2e 16 f7 0e 11 01 4e 62 da 2f 68 ef 96 5a bc 25 9c a0 63 68 a5 fe 7d c0 fe c5 18 55 03 3c 51 bc 8d e3 01 fa 31 28 09 a6 15 ac 73 27 c0 4f 8c 81 d6 76 f0 38 ec fb Data Ascii: `Zyb^@ ~s-j"yY-eYQVmCIIB1yh:8F=ZU+ .Wim.]W]PE s@F="=tie_g3ntP;sY4MtZe<re8=.Nb/hZ%ch}U<Q1(s'Ov8
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 4e 27 e3 93 53 d9 a8 01 08 d5 95 74 7b 85 b7 14 08 23 cf fa ba 38 e5 95 6c 2c e1 a8 74 20 0d 76 e4 9d be 81 1d 95 08 48 2e 4f 51 b4 b9 9c ab e9 b1 3a 3b 00 d8 b8 78 09 21 28 06 64 2e c1 d6 9a 4b f2 88 ad ef 9d 57 88 fa ee be 6f d7 f9 91 2b a7 b6 1e 9a f2 0d 7b 65 2b 7a e5 cd 7a 39 55 e5 11 bd ff e3 d5 cd 2f ae 0c fb 79 77 a7 d9 bf a1 5f f9 03 1a de a7 7e e6 97 8b e7 7e db 7c f6 13 a3 9f f8 c5 45 de d0 ed af 08 51 43 4a f6 c5 17 51 be cf 2e 83 57 34 31 4c e0 64 34 4d bb bb db 4a 6e af 82 a5 ea 47 18 64 73 99 d9 91 82 3b 00 f6 33 35 1d db dc ee af bd dd df 82 39 81 ea 6c b0 1d 18 4a 1e ef 42 63 74 a4 d5 20 c9 21 40 d3 05 62 2d 4a 3f da 49 1f 4f f5 56 39 de 34 e5 56 8a 40 25 1a 48 59 87 0e f1 4d ce 0a bd 71 ae 2a aa 53 16 52 dc 0d 47 51 b9 0c 7d 1b a5 da 42 Data Ascii: N'St{#8l,t vH.OQ:;x!(d.KWo+{e+zz9U/yw_~~\|EQCJQ.W41Ld4MJnGds;359lJBct !@b-J?IOV94V@%HYMq*SRGQ}B
2024-04-23 20:28:24 UTC	8192	IN	Data Raw: 1c c5 93 47 db 2e c5 90 62 ff 3a dd b8 88 3f c3 ef a0 8c 09 f0 c7 7d 3f 25 df fc 9a 38 f3 35 fa 7b ff 1c 68 c4 73 e7 e9 b6 53 54 aa 04 17 5e 2c ce 2d 0e 2e 9f 11 7e 17 4f a4 bb 87 3e c1 81 63 a2 52 8d ce bf 50 df dc ce 4f cf 1f a6 6b ed 17 4f 6f 4f 3d f4 ae 5f fd af 76 fe fc 2f c2 ab af 09 a8 ee d8 52 1d ed 92 2d 46 c3 00 c2 68 f3 ab 1c 91 01 da 42 d9 27 b9 5d af e2 88 ca 1a 63 49 e3 18 cc 99 83 2b f6 d1 23 ee bd f7 3a 27 4f a6 b9 9c 68 f5 d3 dd 7e bc be 9b 6c ec a6 ed 1e 0e 91 a9 aa 28 e6 d0 80 01 b3 80 d0 7e 83 d1 46 0e cb a9 90 a1 5a 09 00 9a fa 0d ea b4 a8 5b 67 a7 39 8b 71 b8 3e d2 26 a1 d2 d3 63 68 2d a8 db 9c 9f c7 12 1a d5 45 ff 12 e6 d3 76 05 49 83 bf 03 df 54 ec b8 1e 48 c5 71 28 72 f9 64 76 31 5a 3c 98 1c 3c 9a 2e ad b1 10 b2 85 74 5c 9d f1 ad Data Ascii: G.b:?}?%85{hsST^,-.~O>cRPOkOoO=_v/R-FhB']cI+#:'Oh~l(~FZ[g9q>&ch-EvITHq(rdv1Z<<.t\
2024-04-23 20:28:24 UTC	8192	IN	Data Raw: 07 4d f4 bc ac 2c e5 0e ca c2 b1 d4 2e ab a4 ce 4e c6 16 92 e8 18 aa 9d ed ec d6 2b ae 73 f9 74 66 7a 3c ba fb fe 5a 78 b0 fa e8 2b 32 7e c1 bf 77 d6 da f8 86 b7 7d 9d 16 bf 3f b5 0f 64 e2 7d 6f aa dc 48 e7 d3 db 3e 99 ac 7e ac 70 ec 0e d1 b8 2c 9f ff b5 7e ab d5 c8 ff dd ab cf 3c ef 94 7b f9 82 17 ee d5 21 a9 50 5d b5 3b db 53 77 dd d3 7a ec cf bc db ee 83 24 e7 fe 26 00 6e aa 4a 03 c6 15 37 02 28 b5 24 c6 d4 0e a3 89 00 1c 8a d4 8e a5 1d 47 83 44 46 49 2a 03 b8 40 30 e8 c5 08 9d b2 f2 9d 9c 58 7d 08 96 07 d7 d0 50 fc 69 b1 e0 74 03 25 42 7e 56 15 10 52 bb a2 f9 2d 4c f8 18 4e 8b 1c 59 6d 6c 48 3b 78 e6 19 78 79 ac 66 0d f2 52 2f 3d 6c 21 e7 08 d8 ba 26 9f 43 d3 2c cf 1e 30 53 8b a4 a9 c0 1e 34 01 21 21 d5 69 21 b7 c8 ce d0 d4 12 cd cc d2 54 15 86 0e ea Data Ascii: M,.N+stfz<Zx+2~w}?d}oH>~p,~<{!P];Swz$&nJ7($GDFI*@0X}Pit%B~VR-LNYmlH;xxyfR/=l!&C,0S4!!i!T
2024-04-23 20:28:24 UTC	8192	IN	Data Raw: 67 70 2c 3d b6 ab 71 fd 2c 8a 78 f0 69 23 46 24 0a 79 d7 7b 84 ef 99 af 3f 2d 0d 47 ee bd 03 8d f8 dc 45 63 6d 1e 30 e7 b9 57 e8 c1 8f a9 72 01 5e f3 6e 44 33 87 e1 32 ba 7e 4d b4 b6 78 fc db b7 25 8c fb 51 f6 f4 51 ad 6a 75 01 1e 6c 1a 92 92 9d a1 81 83 ea 00 63 60 e0 37 b5 8d 3b 63 44 bc 38 a6 1b 22 d6 bc d2 ba 26 43 87 61 39 ab be 73 63 4b ec 5c 83 23 43 c8 a2 c2 99 71 ec 3b b4 c4 78 65 05 9c ea 24 4f fb 53 09 76 54 c7 9e 1e 60 52 60 51 22 a6 0d 73 d1 90 2d a0 3b b2 19 56 83 c9 4d 82 8a 03 5c 04 44 52 fd 3b 24 cc b9 af 05 6a c3 c7 40 54 bd eb 10 b7 15 cf 50 95 a1 ad 2a 93 24 93 b2 b1 a9 da 1b a4 ef 80 bd 22 19 2d 88 bc a7 be 73 a6 c8 66 f1 0c 3b 55 df 2a 37 2d 0b c3 f0 df 4a e5 85 8a 96 aa 02 50 a5 83 c3 ca 4e b9 11 88 43 58 56 9f 88 c1 91 41 b5 1f ea Data Ascii: gp,=q,xi#F$y{?-GEcm0Wr^nD32~Mx%QQjulc`7;cD8"&Ca9scK\#Cq;xe$OSvT`R`Q"s-;VM\DR;$j@TP$"-sf;U7-JPNCXVA
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: b5 3c 95 59 73 d1 d6 39 77 f9 7c 63 68 ef f1 87 ef 2e 5c 7d 7a 73 b9 46 2b 67 07 0e 3d d6 dd 7f 70 30 11 ee 7c e7 1b 91 61 63 b3 18 f1 b1 1b d9 8b 95 ed d2 59 4c 14 a0 d9 10 c5 b3 b8 91 5d 34 7d 52 bd 3b b1 71 9d 5e fe 63 e0 57 d2 a3 68 28 03 83 26 0e 40 ee 5a 85 ef 86 0b ff 21 15 02 fc 48 55 8a 34 33 d3 4d 59 47 0d 6b 6f 31 9b 4d 86 d4 dc bc 76 6d f3 0b 17 16 cf ec 34 64 66 08 aa 3b f1 40 8c a3 76 be c0 3c 3a 1f d3 be db ae 4e c4 c1 ae d7 64 1e 97 1d 4b 3f f1 ba 14 2f 58 ca 38 37 a0 62 d0 ac 36 d5 1c b1 f5 30 01 5d cf 9b 88 e8 af c9 fd 22 06 16 f5 8b f7 98 e3 e4 f7 f5 4f 7e d2 c3 06 4b b3 1e 10 5e c7 a7 e9 e0 09 78 2b e8 6b 5c dd a4 a5 15 5a ad 50 72 54 55 a2 c2 e8 a9 cb 41 bd 0d a6 01 cb 98 76 81 9e 80 d1 49 aa 23 8f da 3f b4 c0 09 6a 3b ce 83 1f a0 9d Data Ascii: <Ys9w\|ch.\}zsF+g=p0\|acYL]4}R;q^cWh(&@Z!HU43MYGko1Mvm4df;@v<:NdK?/X87b60]"O~K^x+k\ZPrTUAvI#?j;
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 1c 4d 3f 46 0b a3 14 24 05 08 10 2e 97 8c 81 c8 a4 44 b9 2c d2 ea 6e 9b 15 49 e8 c7 b0 6c 31 bf 58 93 25 64 98 a0 18 db bc 13 c3 f5 9b 55 52 89 fe fc a4 ec d6 d1 61 55 85 72 50 a3 ee 1c 75 2b 58 3a 8b 7d 8f 00 77 60 4c be b6 b6 52 e9 93 8a d9 9d 16 ae 17 5c 35 61 0c 52 16 8b 0a c4 a1 1f 1b 28 a8 a2 d3 6f a3 bb 0e 3b 5c d6 74 42 03 83 3b f6 28 97 45 af 11 f5 a4 9d de b4 59 4e 9b c5 ac e1 58 9c 48 08 f2 ad 64 68 5a 0e 40 ea 7e bd e3 ce 37 3b 0b cd d6 5c db 9f ea ba b5 4a 95 e6 67 b1 13 c0 0f 50 df a9 09 31 98 a8 c1 3a 07 4f 58 db 23 12 27 b3 c0 8c 27 b9 31 0e 01 09 4e 49 59 53 43 bf 42 e6 ca 46 a4 5d c1 42 36 49 87 bb 50 eb 79 3a e7 7c 63 93 07 96 13 5a ac 1d 7a c2 38 d7 d0 ad 74 a1 fb 07 5a 1c 9a 18 dc a0 67 25 27 19 8c f1 07 a3 58 28 da 72 e2 ea 5f cf 3b Data Ascii: M?F$.D,nIl1X%dURaUrPu+X:}w`LR\5aR(o;\tB;(EYNXHdhZ@~7;\JgP1:OX#''1NIYSCBF]B6IPy:\|cZz8tZg%'X(r_;
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 2f 97 d7 be 86 7e e5 0d 74 cf 97 f2 d7 bc 2a b7 eb fa f9 4a 45 dc 7e 0b 1d ba cb f6 d2 63 bb ae 59 f2 36 d7 ee bc e7 92 51 f1 33 ef 7c eb 1d ff f2 05 05 de 47 36 5c 6e 97 fc cc 25 bb d3 83 83 eb f2 b1 74 a7 2b 4a cd 78 2a 95 cc 8f b8 7e bd 5b 5d 6c 36 3b cd 7a d0 75 bd e5 95 b3 a5 f9 23 ed 4c b1 95 8c 37 aa 4b d5 73 b3 3d bf 1d f4 a2 70 71 51 b4 14 62 ee 89 b0 25 86 b6 88 81 09 b5 1d 14 ca 57 21 19 95 ea ae 1e 94 75 28 e6 88 8c 2b 54 9e a7 6e 5a ad 0c de 83 be 5d 5c d8 83 aa b4 71 6a 36 66 78 d8 68 8d d2 73 d7 b6 50 61 cc 29 6e 0d e6 be f3 d4 bf 98 ba 16 33 f1 a7 be f1 8c 96 99 fa df 65 af a0 37 fe 12 7d e8 d7 29 5e 80 bd aa 3a 91 ba 5d da b1 47 78 82 8e 2d d2 ae 9f c1 4a 38 71 2b 10 83 c3 f5 c8 ea 22 2d 9f a6 4e 8d ab e2 5a 2f 8e 87 6f d5 91 5d d8 09 77 Data Ascii: /~tJE~cY6Q3\|G6\n%t+Jx~[]l6;zu#L7Ks=pqQb%W!u(+TnZ]\qj6fxhsPa)n3e7})^:]Gx-J8q+"-NZ/o]w
2024-04-23 20:28:24 UTC	9216	IN	Data Raw: 7a e7 50 e2 a9 7b 7f a9 b0 59 0d 8d 8e 07 cf 3d 90 fe dc a7 1b fb f6 fd cd ef 94 ee 3e 35 7e eb bb ef 7c e8 f3 85 68 ad e2 ae 40 c7 d1 89 4a b3 b9 b1 b2 44 4e aa cd 1a 96 53 8c 1b 2d 12 19 ca c1 7a 26 a2 e1 6f 96 eb b1 8e e5 aa 6f fb ec 15 af cf e1 0c 44 9c f5 f2 4a 5a c6 75 33 14 f7 16 a6 e5 4a 8e 0c 0f f5 a5 17 66 71 7d 12 82 d7 92 ab 50 6e 96 6e b5 fc e5 4b a0 a3 5d e8 41 22 71 78 bc 56 d0 73 c1 82 60 55 ac 36 f4 af d5 cd 26 99 ee b2 19 44 b9 4e 77 b8 d4 a0 66 a6 2e 04 f5 c9 38 48 c9 7b db 34 c0 1f c1 86 26 fc 31 96 e2 e4 7b 28 b3 04 99 34 d4 b7 84 a7 07 9c 9d dc e9 c9 70 19 2a 63 95 ac 58 46 09 4e 6f d5 18 17 46 d8 4e c2 a3 c8 c7 2a 33 45 b3 fa 43 e7 f8 41 c4 88 d0 63 64 83 22 4f 27 db d7 9e 5d 0f 0c 12 e6 62 94 62 25 bd 34 cb a6 f4 ab 66 2d 8a 28 cf Data Ascii: zP{Y=>5~\|h@JDNS-z&ooDJZu3Jfq}PnnK]A"qxVs`U6&DNwf.8H{4&1{(4pcXFNoFN3ECAcd"O']bb%4f-(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49892	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	597	OUT	GET /scripttemplates/202308.1.0/assets/otFloatingRounded.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Zv+fhwKmGo9dFfHdHSE3uQ== Last-Modified: Wed, 25 Oct 2023 03:55:37 GMT x-ms-request-id: 79573634-e01e-0037-41c8-12eb2f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 80570 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998bcd077bd0-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 32 37 64 31 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 Data Ascii: 27d1 { "name": "otFloatingRounded", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkIj48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0i
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 69 4d 69 50 6e 42 76 62 47 6c 6a 65 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 30 61 58 52 73 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 59 32 39 75 64 47 56 75 64 43 49 2b 50 48 41 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 70 5a 44 30 69 59 6d 46 75 62 6d 56 79 4c 57 39 77 64 47 6c 76 62 6e 4d 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 4a 68 Data Ascii: iMiPnBvbGljeTwvYT48L2Rpdj48ZGl2IGNsYXNzPSJvdC1kcGQtY29udGFpbmVyIj48aDMgY2xhc3M9Im90LWRwZC10aXRsZSI+PC9oMz48ZGl2IGNsYXNzPSJvdC1kcGQtY29udGVudCI+PHAgY2xhc3M9Im90LWRwZC1kZXNjIj48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBpZD0iYmFubmVyLW9wdGlvbnMiPjxkaXYgY2xhc3M9ImJh
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6c 65 66 74 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 30 25 3b 6f 76 65 Data Ascii: s": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFloatingRounded{position:fixed;background-color:#fff;width:60%;max-width:700px;z-index:2147483645;border-radius:2.5px;bottom:2em;left:1em;font-size:16px;max-height:90%;ove
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 3a 31 30 70 78 20 33 30 70 78 20 34 70 78 20 33 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 67 76 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 33 30 70 78 20 31 30 70 78 20 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 Data Ascii: adding:10px 30px 4px 30px}#onetrust-banner-sdk .ot-gv-list-handler{padding:0 30px 10px 30px;font-size:.812em;margin-bottom:0;border:0;line-height:normal;height:auto;width:auto}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk .ot-b-addl-desc
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 Data Ascii: to;white-space:normal;word-break:break-word;word-wrap:break-word;padding:12px 10px;line-height:1.2;font-weight:600;font-size:.813em}#onetrust-banner-sdk #onetrust-accept-btn-handler{margin-right:0}#onetrust-banner-sdk #onetrust-pc-btn-handler{border:1px s
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 Data Ascii: anner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .banner-option-input[aria-expanded=true] .ot-arrow-container{transform:rotate(90deg)}#onetrust-banner-sdk .banner-option-input[aria-expanded=tr
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 Data Ascii: font-size:1em}#onetrust-banner-sdk .ot-dpd-desc{font-size:.813em;line-height:1.5}#onetrust-banner-sdk .ot-dpd-desc .onetrust-vendors-list-handler{display:block;margin-left:0px;margin-top:5px;padding:0;margin-bottom:0;border:0;line-height:normal;height:aut
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 30 70 78 20 31 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 6d 61 72 67 69 6e 3a 30 20 31 2e 38 37 35 72 65 6d 20 2e 36 32 35 72 65 6d 20 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 67 76 2d 6c 69 6e 6b 2d 63 74 6e 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 30 Data Ascii: 0px 15px}#onetrust-banner-sdk .ot-optout-signal{margin:0 1.875rem .625rem 1.875rem}#onetrust-banner-sdk #ot-gv-link-ctnr{margin-bottom:15px}#onetrust-banner-sdk #onetrust-button-group button{width:100%}#onetrust-banner-sdk #banner-options{padding:0 15px 0
2024-04-23 20:28:24 UTC	58	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: r.cookie-setting-link{text-align:center}}" }
2024-04-23 20:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49893	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	593	OUT	GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: jih879mbIcNSFioYCdj3Tg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: 2db4c4e0-401e-004c-4457-79a9b3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 21796 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998bcf4e4532-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 37 63 37 37 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c77 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 49 2b 50 48 56 73 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 5a 47 56 30 63 79 49 2b 50 47 78 70 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib3QtYWNjLXR4dCI+PHVsIGNsYXNzPSJvdC12ZW4tZGV0cyI+PGxpIGNsYXNzPSJvdC12
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 6a 59 58 52 6c 5a 32 39 79 65 53 31 6f 62 33 4e 30 4c 57 78 70 63 33 51 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 53 47 39 7a 64 43 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 55 62 32 64 6e 62 47 55 67 53 46 52 4e 54 43 42 6c 62 47 56 74 5a 57 35 30 49 43 30 74 50 Data Ascii: IiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBjYXRlZ29yeS1ob3N0LWxpc3QtaGFuZGxlciI+SG9zdCBMaXN0PC9idXR0b24+PC9kaXY+PCEtLSBUb2dnbGUgSFRNTCBlbGVtZW50IC0tP
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 31 4c 6a 5a 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 45 79 4c 6a 4d 67 4d 43 30 78 4e 32 77 33 4c 6a 45 74 4e 79 34 78 59 7a 51 75 4e 79 30 30 4c 6a 63 67 4d 54 49 75 4d 79 Data Ascii: 3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU1LjZjLTQuNy00LjctNC43LTEyLjMgMC0xN2w3LjEtNy4xYzQuNy00LjcgMTIuMy
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 6a 62 6e 51 69 50 6b 64 76 62 32 64 73 5a 53 42 4e 59 58 42 7a 50 43 39 6f 4e 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 Data Ascii: YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZuZC1jbnQiPkdvb2dsZSBNYXBzPC9oNj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49890	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	602	OUT	GET /scripttemplates/202308.1.0/assets/otCookieSettingsButton.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: 9GF+jcCjcByGYYY8HRatvg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: 23acec11-c01e-000f-2f64-0d4fef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 80570 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998bcb5fade4-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 31 32 37 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 73 42 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 32 52 72 4c 57 4a 30 62 69 31 6d 62 47 39 68 64 47 6c 75 5a 79 49 67 64 47 6c 30 62 47 55 39 49 6b 31 68 62 6d 46 6e 5a 53 42 51 63 6d 6c 32 59 57 4e 35 49 46 42 79 5a 57 5a 6c 63 6d 56 75 59 32 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 6d 78 76 59 58 52 70 62 6d 63 74 59 6e 56 30 64 47 39 75 49 47 39 30 4c 57 68 70 5a 47 55 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 5a 73 62 32 46 Data Ascii: 1272 { "name": "otCookieSettingsButton", "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgdGl0bGU9Ik1hbmFnZSBQcml2YWN5IFByZWZlcmVuY2VzIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uIG90LWhpZGUiPjxkaXYgY2xhc3M9Im90LWZsb2F
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 63 33 5a 6e 49 48 4a 76 62 47 55 39 49 6e 42 79 5a 58 4e 6c 62 6e 52 68 64 47 6c 76 62 69 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 30 49 44 49 30 49 69 42 32 5a 58 4a 7a 61 57 39 75 50 53 49 78 4c 6a 45 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 50 47 63 67 61 57 51 39 49 6c 42 68 5a 32 55 74 4d 53 49 67 63 33 52 79 62 32 74 6c 50 53 4a 75 62 32 35 6c 49 69 42 7a 64 48 4a 76 61 32 55 74 64 32 6c 6b 64 47 67 39 49 6a 45 69 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 2b 50 47 63 67 61 57 51 39 49 6b 4a 68 62 6d 35 6c 63 6c 38 77 4d 69 49 67 59 32 78 Data Ascii: c3ZnIHJvbGU9InByZXNlbnRhdGlvbiIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PGcgaWQ9IkJhbm5lcl8wMiIgY2x
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e Data Ascii: -floating-button.ot-hide{display:none}#ot-sdk-btn-floating.ot-floating-button::before,#ot-sdk-btn-floating.ot-floating-button::after{text-transform:none;line-height:1;user-select:none;pointer-events:none;position:absolute;transform:scale(0);opacity:0;tran
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 30 29 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 66 72 6f 6e 74 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: ot-floating-button__back{transform:rotateY(0)}#ot-sdk-btn-floating .ot-floating-button__front,#ot-sdk-btn-floating .ot-floating-button__back{position:absolute;width:100%;height:100%;-webkit-backface-visibility:hidden;backface-visibility:hidden;background-
2024-04-23 20:28:24 UTC	63	IN	Data Raw: 63 69 74 79 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 39 35 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: city:100%;transform:scale(0.95) rotate(0deg)}}" }
2024-04-23 20:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49891	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	593	OUT	GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 25 Oct 2023 03:55:54 GMT ETag: 0x8DBD50E49DDD45B x-ms-request-id: 5e107fbf-201e-0007-239e-0b55e0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 80570 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998bda6c674d-ATL
2024-04-23 20:28:24 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c Data Ascii: #onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c Data Ascii: er-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 Data Ascii: k-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49887	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	442	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:24 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,d1ede462d0767f838bfd8efd7ef129ac,10.0.0.207,6738,89.187.171.132,,231692623492,1,1713904104.181,0.001,,.,0,0,0.000,0.000,-,0,0,203,119,59,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49896	99.84.191.81	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	545	OUT	GET /modules.588629dd3c10b20ab52d.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225718 Connection: close Date: Tue, 23 Apr 2024 14:47:08 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "d78f803b3665558f63f048e3a8740d4b" Last-Modified: Tue, 23 Apr 2024 14:46:56 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dd6a13d6510988eea7236b9a3cd830fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C2 X-Amz-Cf-Id: S26dHfHgM2gQBX1UpuufEpwRQtIquOnbYk8eYD36DizgZzDbP4_iRg== Age: 20476
2024-04-23 20:28:24 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 35 38 38 36 32 39 64 64 33 63 31 30 62 32 30 61 62 35 32 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 2e 61 63 74 69 76 65 57 69 64 67 65 74 3d 65 7d 29 29 7d 2c 74 2e 73 65 74 4c 61 6e 67 75 61 67 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 6c 61 6e 67 75 61 67 65 20 22 27 2b 74 2b 27 22 27 29 3b 65 3d 74 2c 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c Data Ascii: ((function(){e.runCallback(),t.activeWidget=e}))},t.setLanguage=hj.tryCatch((function(t){if(!u.includes(t))throw new Error('Invalid language "'+t+'"');e=t,hj.widget.activeLanguageDirection=n.indexOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 28 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 29 2a 29 7c 28 22 2e 2b 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 29 2c 22 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 75 73 65 72 44 Data Ascii: (hj.tryCatch((function(e){return/^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}),"utils.validateEmail"),hj.tryCatch((function(){return hj.userD
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 68 69 73 5b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 20 63 28 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 7d 7d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 26 26 63 28 29 29 7d 2c 68 6a 2e 69 6e 69 74 69 61 6c 56 69 73 69 74 44 61 74 61 53 65 6e 74 26 26 65 2e 61 63 74 69 76 61 74 65 28 29 2c 65 7d 28 29 2c 21 30 29 7d 29 2c 22 63 6f 6d 6d 61 6e 64 22 29 28 29 7d 2c 31 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 37 38 38 29 2c 6f 3d 6e 28 36 39 33 39 29 2c 69 3d 6e 28 35 36 35 38 29 2c 61 3d 6e 28 36 38 34 39 29 2c 73 3d 6e 28 36 37 Data Ascii: 0;e<arguments.length;e+=1)this[this.length]=arguments[e];return c(),this.length}}),n.length>0&&c())},hj.initialVisitDataSent&&e.activate(),e}(),!0)}),"command")()},1229:function(e,t,n){"use strict";n.r(t);var r=n(4788),o=n(6939),i=n(5658),a=n(6849),s=n(67
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 26 26 75 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 22 23 32 61 39 64 38 66 22 3b 63 21 3d 65 26 26 73 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 2c 73 3d 21 31 29 2c 63 3d 65 2c 76 6f 69 64 20 30 21 3d 3d 68 6a 2e 64 65 62 75 67 26 26 68 6a 2e 64 65 62 75 67 2e 69 73 4f 6e 28 29 26 26 28 22 6f 62 6a 65 63 Data Ascii: ebug:function(){},trace:function(){},log:function(){},info:function(){},warn:function(){},error:function(){}})},debug:function(e,t,n){var r=t&&u[t.toLowerCase()]\|\|"#2a9d8f";c!=e&&s&&(console.groupEnd(),s=!1),c=e,void 0!==hj.debug&&hj.debug.isOn()&&("objec
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 6e 5b 74 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 21 72 2e 6c 65 6e 67 74 68 29 7d 29 29 29 29 29 29 29 29 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 79 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 22 29 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6e 65 77 20 56 28 6e 2e 72 6f 6f 74 2c 65 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6f 6c 64 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 72 3d 6e 65 77 20 71 28 74 29 3b 6e 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 28 72 29 26 26 6e 2e 63 61 6c 6c 62 61 63 6b 28 72 29 7d 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 Data Ascii: n[t])\|\|void 0===r\|\|!r.length)}))))))))}),"MutationSummary.changesToReport"),this.observerCallback=hj.tryCatch((function(e){if(e&&e.length){var t=new V(n.root,e,n.options.oldPreviousSibling),r=new q(t);n.changesToReport(r)&&n.callback(r)}}),"MutationSummar
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 72 5d 2b 22 2f 2a 20 4f 72 69 67 69 6e 61 6c 6c 79 3a 20 3c 6c 69 6e 6b 20 22 3b 66 6f 72 28 76 61 72 20 75 3d 30 2c 6c 3d 61 2e 6c 65 6e 67 74 68 3b 75 3c 6c 3b 75 2b 2b 29 22 69 64 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 26 26 22 63 6c 61 73 73 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 7c 7c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 5b 75 5d 2e 6e 61 6d 65 2c 61 5b 75 5d 2e 76 61 6c 75 65 29 2c 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 61 5b 75 5d 2e 6e 61 6d 65 2b 27 3d 22 27 2b 61 5b 75 5d 2e 76 61 6c 75 65 2b 27 22 20 27 3b 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 22 3e 20 2a 2f 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 62 6c 6f 62 2d 68 61 73 68 2d 22 2b 73 29 2c 6f 2e 70 61 72 65 6e 74 4e Data Ascii: r]+"/* Originally: <link ";for(var u=0,l=a.length;u<l;u++)"id"!==a[u].name&&"class"!==a[u].name\|\|c.setAttribute(a[u].name,a[u].value),i[e.parentSelector]+=a[u].name+'="'+a[u].value+'" ';i[e.parentSelector]+="> */",c.classList.add("blob-hash-"+s),o.parentN
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 68 2c 64 2c 66 2c 67 3d 7b 7d 2c 70 3d 22 22 2c 76 3d 76 6f 69 64 20 30 2c 6d 3d 6e 75 6c 6c 2c 79 3d 21 31 2c 6a 3d 69 2e 66 5f 2e 6e 6f 77 28 29 2c 62 3d 21 31 3b 67 2e 65 76 65 6e 74 73 3d 5b 5d 2c 67 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 74 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 63 6f 6e 74 65 6e 74 22 29 2c 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 6e 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 75 72 6c 4d 44 35 22 29 2c 65 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 74 65 6e 74 5f Data Ascii: h,d,f,g={},p="",v=void 0,m=null,y=!1,j=i.f_.now(),b=!1;g.events=[],g.storePageContent=function(t,n){hj.log.warnIfEmpty(t,"tryStorePageContent: content"),hj.log.warnIfEmpty(n,"tryStorePageContent: urlMD5"),e.storePageContent(t,(function(e){var t=e.content_
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d Data Ascii: &"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_(e)}function C(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enum
2024-04-23 20:28:24 UTC	16384	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 61 2e 66 5f 2e 6e 6f 77 28 29 2c 5f 3d 6e 75 6c 6c 21 3d 3d 28 64 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 53 61 6d 70 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 43 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 29 26 26 5f 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2c 7b 69 64 3a 77 2c 63 72 65 61 74 65 64 3a 53 2c 69 6e 53 61 6d 70 6c 65 3a 5f 2c 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 28 76 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 29 26 26 76 6f 69 64 20 30 21 Data Ascii: &void 0!==h?h:a.f_.now(),_=null!==(d=null==i?void 0:i.inSample)&&void 0!==d&&d,C=null!==(p=(null==i?void 0:i.recordingEnabled)&&_)&&void 0!==p&&p,{id:w,created:S,inSample:_,sessionizerBetaEnabled:null!==(v=null==i?void 0:i.sessionizerBetaEnabled)&&void 0!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49895	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	1143	OUT	GET /osler/media/Osler/Content/Email/Email-Icon.svg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _ga=GA1.2.1593841297.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome
2024-04-23 20:28:24 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: image/svg+xml Content-Length: 916 Connection: close ETag: "c025adb1b129d91:0" Last-Modified: Mon, 16 Jan 2023 13:51:55 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202824Z-16f7b4795d4jwb2qfy3gcz4vrn00000005qg000000001vut X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:24 UTC	916	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 33 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 35 30 35 30 35 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 41 73 73 65 74 73 22 3e 3c 67 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 38 2c 33 38 48 33 63 2d 31 2e 36 35 2c 30 2d 33 2d 31 2e 33 35 2d 33 2d 33 56 31 31 63 30 2d 31 2e 36 35 2c 31 2e 33 35 2d 33 2c 33 2d 33 48 33 38 63 31 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 38"><defs><style>.cls-1{fill:#505056;}</style></defs><g id="Assets"><g><path class="cls-1" d="M38,38H3c-1.65,0-3-1.35-3-3V11c0-1.65,1.35-3,3-3H38c1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49900	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	1197	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904101416&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713904103&sct=1&seg=0&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&en=page_view&_fv=1&_ss=1&tfd=4918 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:28:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49897	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	1154	OUT	GET /Osler/images/logos/white-logo.png HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _ga=GA1.2.1593841297.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome; _ga_2XYX2S797K=deleted
2024-04-23 20:28:24 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: image/png Content-Length: 3149 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202824Z-16f7b4795d4rkp5np5bqm66nwg00000005t0000000004gh1 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:24 UTC	3149	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 29 08 06 00 00 00 35 41 cb 3b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR)5A;tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49901	74.125.138.157	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	795	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&cid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:28:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49902	172.217.215.156	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	934	OUT	GET /td/ga/rul?tid=G-2XYX2S797K&gacid=1593841297.1713904103&gtm=45je44h0v898263613z8898501896za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=701014799 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 23 Apr 2024 20:28:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 23-Apr-2024 20:43:24 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 20:28:24 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-23 20:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49898	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	1452	OUT	POST /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive Content-Length: 72 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904103.60.0.0; _ga=GA1.1.1593841297.1713904103
2024-04-23 20:28:24 UTC	72	OUT	Data Raw: 7b 22 4e 6f 64 65 41 6c 69 61 73 50 61 74 68 22 3a 22 2f 48 6f 6d 65 22 2c 22 44 6f 63 75 6d 65 6e 74 43 75 6c 74 75 72 65 43 6f 64 65 22 3a 22 65 6e 2d 43 41 22 2c 22 55 72 6c 52 65 66 65 72 72 65 72 22 3a 22 22 7d Data Ascii: {"NodeAliasPath":"/Home","DocumentCultureCode":"en-CA","UrlReferrer":""}
2024-04-23 20:28:24 UTC	999	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:24 GMT; path=/; HttpOnly Set-Cookie: CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; expires=Wed, 11-Apr-2074 20:28:24 GMT; path=/; HttpOnly Set-Cookie: VisitorStatus=11064158108; expires=Sat, 23-Apr-2044 20:28:24 GMT; path=/; HttpOnly Set-Cookie: CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; expires=Tue, 23-Apr-2024 20:48:24 GMT; path=/; HttpOnly Set-Cookie: CMSLandingPageLoaded=true; expires=Tue, 23-Apr-2024 20:48:24 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Robots-Tag: none X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202824Z-16f56cb894f2bgjg7qau3rrudn00000001ag00000000h8hx X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49904	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	528	OUT	GET /tag/uet/134024834 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/x-javascript Content-Length: 846 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; expires=Wed, 23 Apr 2025 20:28:24 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608 x-azure-ref: 20240423T202824Z-16f56cb894f6f2tcp7uf29qkh4000000013g00000000pwe3 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:24 UTC	846	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);a[c]("metadata",(function(){a[c]("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49907	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	402	OUT	GET /scripttemplates/202308.1.0/assets/otCookieSettingsButton.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: 9GF+jcCjcByGYYY8HRatvg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: eed13055-c01e-0020-0262-0d4224000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 74663 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998f1fb9135b-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 31 32 37 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 73 42 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 32 52 72 4c 57 4a 30 62 69 31 6d 62 47 39 68 64 47 6c 75 5a 79 49 67 64 47 6c 30 62 47 55 39 49 6b 31 68 62 6d 46 6e 5a 53 42 51 63 6d 6c 32 59 57 4e 35 49 46 42 79 5a 57 5a 6c 63 6d 56 75 59 32 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 6d 78 76 59 58 52 70 62 6d 63 74 59 6e 56 30 64 47 39 75 49 47 39 30 4c 57 68 70 5a 47 55 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 5a 73 62 32 46 Data Ascii: 1272 { "name": "otCookieSettingsButton", "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgdGl0bGU9Ik1hbmFnZSBQcml2YWN5IFByZWZlcmVuY2VzIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uIG90LWhpZGUiPjxkaXYgY2xhc3M9Im90LWZsb2F
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 63 33 5a 6e 49 48 4a 76 62 47 55 39 49 6e 42 79 5a 58 4e 6c 62 6e 52 68 64 47 6c 76 62 69 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 30 49 44 49 30 49 69 42 32 5a 58 4a 7a 61 57 39 75 50 53 49 78 4c 6a 45 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 50 47 63 67 61 57 51 39 49 6c 42 68 5a 32 55 74 4d 53 49 67 63 33 52 79 62 32 74 6c 50 53 4a 75 62 32 35 6c 49 69 42 7a 64 48 4a 76 61 32 55 74 64 32 6c 6b 64 47 67 39 49 6a 45 69 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 2b 50 47 63 67 61 57 51 39 49 6b 4a 68 62 6d 35 6c 63 6c 38 77 4d 69 49 67 59 32 78 Data Ascii: c3ZnIHJvbGU9InByZXNlbnRhdGlvbiIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PGcgaWQ9IkJhbm5lcl8wMiIgY2x
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e Data Ascii: -floating-button.ot-hide{display:none}#ot-sdk-btn-floating.ot-floating-button::before,#ot-sdk-btn-floating.ot-floating-button::after{text-transform:none;line-height:1;user-select:none;pointer-events:none;position:absolute;transform:scale(0);opacity:0;tran
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 30 29 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 66 72 6f 6e 74 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: ot-floating-button__back{transform:rotateY(0)}#ot-sdk-btn-floating .ot-floating-button__front,#ot-sdk-btn-floating .ot-floating-button__back{position:absolute;width:100%;height:100%;-webkit-backface-visibility:hidden;backface-visibility:hidden;background-
2024-04-23 20:28:24 UTC	63	IN	Data Raw: 63 69 74 79 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 39 35 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: city:100%;transform:scale(0.95) rotate(0deg)}}" }
2024-04-23 20:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49908	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	397	OUT	GET /scripttemplates/202308.1.0/assets/otFloatingRounded.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Zv+fhwKmGo9dFfHdHSE3uQ== Last-Modified: Wed, 25 Oct 2023 03:55:37 GMT x-ms-request-id: 8500ea18-801e-0098-35c7-1219e2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 69727 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998f18834542-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 32 37 64 31 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 Data Ascii: 27d1 { "name": "otFloatingRounded", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkIj48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0i
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 69 4d 69 50 6e 42 76 62 47 6c 6a 65 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 30 61 58 52 73 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 59 32 39 75 64 47 56 75 64 43 49 2b 50 48 41 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 70 5a 44 30 69 59 6d 46 75 62 6d 56 79 4c 57 39 77 64 47 6c 76 62 6e 4d 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 4a 68 Data Ascii: iMiPnBvbGljeTwvYT48L2Rpdj48ZGl2IGNsYXNzPSJvdC1kcGQtY29udGFpbmVyIj48aDMgY2xhc3M9Im90LWRwZC10aXRsZSI+PC9oMz48ZGl2IGNsYXNzPSJvdC1kcGQtY29udGVudCI+PHAgY2xhc3M9Im90LWRwZC1kZXNjIj48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBpZD0iYmFubmVyLW9wdGlvbnMiPjxkaXYgY2xhc3M9ImJh
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6c 65 66 74 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 30 25 3b 6f 76 65 Data Ascii: s": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFloatingRounded{position:fixed;background-color:#fff;width:60%;max-width:700px;z-index:2147483645;border-radius:2.5px;bottom:2em;left:1em;font-size:16px;max-height:90%;ove
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 3a 31 30 70 78 20 33 30 70 78 20 34 70 78 20 33 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 67 76 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 33 30 70 78 20 31 30 70 78 20 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 Data Ascii: adding:10px 30px 4px 30px}#onetrust-banner-sdk .ot-gv-list-handler{padding:0 30px 10px 30px;font-size:.812em;margin-bottom:0;border:0;line-height:normal;height:auto;width:auto}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk .ot-b-addl-desc
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 Data Ascii: to;white-space:normal;word-break:break-word;word-wrap:break-word;padding:12px 10px;line-height:1.2;font-weight:600;font-size:.813em}#onetrust-banner-sdk #onetrust-accept-btn-handler{margin-right:0}#onetrust-banner-sdk #onetrust-pc-btn-handler{border:1px s
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 Data Ascii: anner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .banner-option-input[aria-expanded=true] .ot-arrow-container{transform:rotate(90deg)}#onetrust-banner-sdk .banner-option-input[aria-expanded=tr
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 Data Ascii: font-size:1em}#onetrust-banner-sdk .ot-dpd-desc{font-size:.813em;line-height:1.5}#onetrust-banner-sdk .ot-dpd-desc .onetrust-vendors-list-handler{display:block;margin-left:0px;margin-top:5px;padding:0;margin-bottom:0;border:0;line-height:normal;height:aut
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 30 70 78 20 31 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 6d 61 72 67 69 6e 3a 30 20 31 2e 38 37 35 72 65 6d 20 2e 36 32 35 72 65 6d 20 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 67 76 2d 6c 69 6e 6b 2d 63 74 6e 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 30 Data Ascii: 0px 15px}#onetrust-banner-sdk .ot-optout-signal{margin:0 1.875rem .625rem 1.875rem}#onetrust-banner-sdk #ot-gv-link-ctnr{margin-bottom:15px}#onetrust-banner-sdk #onetrust-button-group button{width:100%}#onetrust-banner-sdk #banner-options{padding:0 15px 0
2024-04-23 20:28:24 UTC	58	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: r.cookie-setting-link{text-align:center}}" }
2024-04-23 20:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49909	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	393	OUT	GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	825	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 25 Oct 2023 03:55:54 GMT ETag: 0x8DBD50E49DDD45B x-ms-request-id: f042c46f-001e-004d-6e9e-0bf66f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 4861 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998f290c6768-ATL
2024-04-23 20:28:24 UTC	544	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f Data Ascii: #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ico
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e Data Ascii: nc-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#on
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 Data Ascii: ckground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scre
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 Data Ascii: etrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inpu
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 Data Ascii: y:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae8
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c 23 Data Ascii: onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,#
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 Data Ascii: dk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 Data Ascii: r-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,#
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d Data Ascii: -columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49911	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	599	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Tue, 23 Apr 2024 02:35:12 GMT ETag: 0x8DC633E006B73BC x-ms-request-id: 26092cb0-c01e-001f-452d-958a87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5479 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998f884906f8-ATL
2024-04-23 20:28:24 UTC	541	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-04-23 20:28:24 UTC	110	IN	Data Raw: 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 3 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49910	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	393	OUT	GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:24 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: jih879mbIcNSFioYCdj3Tg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: 95e205de-001e-005d-1464-143307000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 85670 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790998f78956744-ATL
2024-04-23 20:28:24 UTC	560	IN	Data Raw: 37 63 37 37 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c77 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 49 2b 50 48 56 73 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 5a 47 56 30 63 79 49 2b 50 47 78 70 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib3QtYWNjLXR4dCI+PHVsIGNsYXNzPSJvdC12ZW4tZGV0cyI+PGxpIGNsYXNzPSJvdC12
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 6a 59 58 52 6c 5a 32 39 79 65 53 31 6f 62 33 4e 30 4c 57 78 70 63 33 51 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 53 47 39 7a 64 43 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 55 62 32 64 6e 62 47 55 67 53 46 52 4e 54 43 42 6c 62 47 56 74 5a 57 35 30 49 43 30 74 50 Data Ascii: IiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBjYXRlZ29yeS1ob3N0LWxpc3QtaGFuZGxlciI+SG9zdCBMaXN0PC9idXR0b24+PC9kaXY+PCEtLSBUb2dnbGUgSFRNTCBlbGVtZW50IC0tP
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 31 4c 6a 5a 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 45 79 4c 6a 4d 67 4d 43 30 78 4e 32 77 33 4c 6a 45 74 4e 79 34 78 59 7a 51 75 4e 79 30 30 4c 6a 63 67 4d 54 49 75 4d 79 Data Ascii: 3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU1LjZjLTQuNy00LjctNC43LTEyLjMgMC0xN2w3LjEtNy4xYzQuNy00LjcgMTIuMy
2024-04-23 20:28:24 UTC	1369	IN	Data Raw: 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 6a 62 6e 51 69 50 6b 64 76 62 32 64 73 5a 53 42 4e 59 58 42 7a 50 43 39 6f 4e 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 Data Ascii: YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZuZC1jbnQiPkdvb2dsZSBNYXBzPC9oNj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49913	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	705	OUT	GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/d3be8f9e-1328-4432-981a-700d22c98729/af8b8ffa-721b-4a44-b983-b8844991da31/logo-small.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:25 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:25 GMT Content-Type: image/png Content-Length: 1479 Connection: close Content-MD5: em1quVSl+84f9dv39l4MMQ== Last-Modified: Tue, 15 Aug 2023 09:31:44 GMT ETag: 0x8DB9D7270C04EB5 x-ms-request-id: 59fbd166-901e-0012-3a47-234253000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 77870 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 879099904a5ebe15-ATL
2024-04-23 20:28:25 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 05 5c 49 44 41 54 78 5e ed 9a 7b 88 95 45 18 87 cf 6a 69 76 bf 17 05 85 25 b6 86 95 14 14 15 45 57 2b d2 ae 90 22 45 89 15 99 e6 1f 59 9a 2d d8 56 90 74 27 0a a3 ac fe 50 2a 42 b4 2c a3 0b 95 45 26 11 62 48 51 66 56 84 76 93 2e 66 64 76 dd 9e e7 3b 33 1f 7b ce ee 7a f6 98 05 39 f3 83 c7 f7 fb 66 e6 9b 33 f3 ce 3b 37 b5 a5 03 55 12 56 9f 60 93 55 76 40 b0 c9 2a 3b 20 d8 64 95 1d 10 6c b2 ca 0e 08 36 59 65 07 04 9b ac b2 03 82 4d 56 d9 01 c1 26 ab ec 80 60 93 55 76 40 b0 c9 aa 25 d8 52 ed 83 5a f7 c3 5c 02 Data Ascii: PNGIHDR@@iqsRGBgAMAapHYsod\IDATx^{Ejiv%EW+"EY-Vt'PB,E&bHQfVv.fdv;3{z9f3;7UV`Uv@; dl6YeMV&`Uv@%RZ\
2024-04-23 20:28:25 UTC	936	IN	Data Raw: ca 39 92 46 90 a3 39 98 b2 8e 76 21 f2 8c c6 b3 61 2d e9 6f 86 34 fb 71 38 9c 41 9a 4e 2b 45 de b9 98 67 60 01 5c 48 fe 9f a6 3b 42 86 b3 8b dd 93 24 36 ec bc a2 dc e7 98 d9 d5 b7 ca 78 2a 37 d4 1c 81 c1 f0 a2 89 9d 45 79 d7 93 a9 d5 b7 42 31 ac 1b fd a3 4c 5f 70 1a 59 ce d0 2e 45 9d 46 e3 3c 88 9d df 16 63 59 55 46 65 14 e5 ec f8 43 a0 23 5c cf 0a e9 80 91 d5 c7 ca 1b c1 f6 56 7a 53 0d 81 a1 e0 8f 1b 5e a3 a0 8b 68 c0 2f e1 f1 df 54 97 5d ad 4e 4b 82 75 a0 0a e9 00 57 f5 8d 50 b3 98 f5 42 1f c3 37 e0 28 19 9e 6b b1 3a b1 8d d1 98 03 ae 07 5b 52 b6 b1 10 75 f7 85 81 d0 a8 c3 f5 32 4a 95 ed 2e a4 03 0c 17 17 11 69 46 2e 2e eb ab 8f 65 78 3a c7 df 83 8b 61 19 0d 5c 04 13 c1 b5 62 73 65 f8 db c6 c9 d4 73 0b 38 9d 96 c1 0c 9c de eb 7f d7 e4 3b 77 08 d7 9b 35 Data Ascii: 9F9v!a-o4q8AN+Eg`\H;B$6x*7EyB1L_pY.EF<cYUFeC#\VzS^h/T]NKuWPB7(k:[Ru2J.iF..ex:a\bses8;w5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49914	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	699	OUT	GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:25 UTC	825	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:25 GMT Content-Type: image/png Content-Length: 4052 Connection: close Content-MD5: 0jIJB44M7yRG9AY3Xos+cA== Last-Modified: Tue, 15 Aug 2023 09:23:45 GMT ETag: 0x8DB9D71531C7E83 x-ms-request-id: cc2d2718-d01e-004e-5b58-79170b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5436 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87909990498b1375-ATL
2024-04-23 20:28:25 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 31 08 06 00 00 00 a8 0b 29 7b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR1){tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-04-23 20:28:25 UTC	1369	IN	Data Raw: 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 46 36 43 37 33 37 36 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 46 36 43 37 33 37 37 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 46 36 43 37 33 37 34 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 46 36 43 37 33 37 35 37 31 39 30 31 31 45 34 42 37 Data Ascii: (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B7
2024-04-23 20:28:25 UTC	1369	IN	Data Raw: 95 1d 5b d7 60 0c 2f f7 04 5a 3c d8 15 c1 48 4d fa bd 45 31 95 e4 f4 c6 f9 86 e4 71 a8 6f 47 43 da 30 cb df 8f 04 dd 9c c0 7b 7f 42 70 8a ca d9 a8 9d a8 18 0e 3f 8d 11 f4 37 d5 b1 5b 5c 1e db 15 72 99 8d b2 48 de 63 4b 9a ee 36 9b e6 25 ed 48 31 5b 58 69 8b 87 41 8b 92 a6 1b e2 db 3b 98 9c 7a 59 fe ae 2f b0 53 29 69 bf a3 fe 4f 48 54 80 b8 cb 5c af 59 60 13 b0 97 7b 01 ed 65 9a b4 a5 9c 2e 8b d8 89 59 31 3b e9 68 84 21 be ab e5 ef cf 85 50 87 d4 79 27 7a 9a ef 32 63 ee 0f 5a 88 e2 9e 62 9a b0 d3 53 09 68 90 c9 52 70 22 ea 5d a2 89 6f 65 f9 bb 4f 8a 87 26 41 ab 35 8b cb 72 37 49 5b 61 48 7b 21 01 0d e2 4a d3 64 02 39 4b 13 b7 c3 f2 f7 70 00 bb 3c c5 44 e2 d5 12 8e af dd 8c d7 1a 63 d7 ca 09 b4 bd 34 f1 1f 22 b3 cd 09 68 d0 7b 08 5e f7 a0 bf e6 c9 6a 96 e1 Data Ascii: [`/Z<HME1qoGC0{Bp?7[\rHcK6%H1[XiA;zY/S)iOHT\Y`{e.Y1;h!Py'z2cZbShRp"]oeO&A5r7I[aH{!Jd9Kp<Dc4"h{^j
2024-04-23 20:28:25 UTC	770	IN	Data Raw: b6 01 f7 8e 40 da 72 13 c8 64 e6 a2 5f c9 b4 50 40 2b 85 71 31 c2 e3 29 6b 35 12 77 21 1a 38 17 dc 36 84 ce 6a 01 9e 21 80 b5 d6 e7 45 70 5f d4 63 a3 87 8e a1 0e ca a9 88 57 ed dc 5d 20 70 7f a2 fe d7 35 f3 06 e4 ff 6e 8c e0 e1 76 e7 4a a5 bf 8b 22 aa 32 29 a0 78 ab 4e 24 1f 0a fa 6f 01 82 87 0d c9 57 fb bd 35 31 e3 52 18 25 1c b7 51 ef d1 24 d3 5b aa 0e 05 5e 22 3f d1 14 a4 b3 06 ca 47 61 fd 12 a9 57 d3 b1 65 00 2f 4c f3 91 5d de 81 86 bf be f3 58 10 33 1d de 19 21 d3 59 9e 68 6b bc 23 26 29 c7 c5 6e ad 80 87 be a6 1d 22 2e b3 0b f8 2a 30 1d a6 78 93 10 5d 38 a3 3c 37 76 85 32 5f 72 b7 40 ee 61 f3 44 cd 3d 7c 25 dc d6 1c 25 fb f3 3c c6 52 66 49 e6 a1 34 fa 70 4e 42 3a ed 72 8b dc 8e 9e cb 8f e5 51 22 f2 9a 4c fb 2e 13 1b 45 b3 d6 b3 01 3a c5 7a 81 1a fd Data Ascii: @rd_P@+q1)k5w!86j!Ep_cW] p5nvJ"2)xN$oW51R%Q$[^"?GaWe/L]X3!Yhk#&)n".*0x]8<7v2_r@aD=\|%%<RfI4pNB:rQ"L.E:z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49915	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:24 UTC	606	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:25 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:25 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 22 Apr 2024 06:06:21 GMT ETag: 0x8DC62925540D275 x-ms-request-id: 2cddd7bb-e01e-0018-53e8-94e6e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 83764 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 879099904a61be15-ATL
2024-04-23 20:28:25 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-23 20:28:25 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-23 20:28:25 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-23 20:28:25 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-23 20:28:25 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49912	104.19.177.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:25 UTC	571	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:25 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:25 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Mon, 22 Apr 2024 06:06:20 GMT ETag: 0x8DC629254B1C5EC x-ms-request-id: 031bd8fc-e01e-00a1-6b83-94e2fe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 77642 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 879099918cd2b027-ATL
2024-04-23 20:28:25 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49917	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:25 UTC	595	OUT	GET /s/0.7.32/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423
2024-04-23 20:28:25 UTC	640	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:25 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 62397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 10:14:24 GMT ETag: "0x8DC637E269DDB2B" x-ms-request-id: 7414ebae-a01e-003d-236e-9558c0000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240423T202825Z-16f56cb894fq656zwwgapudkng000000016000000000t6uy Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-23 20:28:25 UTC	15744	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 33 32 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__pro
2024-04-23 20:28:25 UTC	16384	IN	Data Raw: 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2b 3d 6f 5b 74 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 6c 3d 7a 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 72 2e 70 72 69 76 61 63 79 3d 22 49 4e 50 55 54 22 3d 3d 3d 75 26 26 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e 3d 30 3f 69 Data Ascii: ,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="";Object.keys(o).forEach((function(t){return s+=o[t].toLowerCase()}));var l=zt.some((function(t){return s.indexOf(t)>=0}));r.privacy="INPUT"===u&&Ht.indexOf(c)>=0?i
2024-04-23 20:28:25 UTC	16384	IN	Data Raw: 3e 3d 30 7c 7c 72 2e 69 6e 64 65 78 4f 66 28 22 70 6f 73 74 69 6e 67 22 29 3e 3d 30 3f 22 61 72 74 69 63 6c 65 22 3a 72 29 7b 63 61 73 65 22 61 72 74 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 43 72 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 43 72 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 43 72 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 57 28 31 31 2c 72 61 28 74 2e 72 Data Ascii: >=0\|\|r.indexOf("posting")>=0?"article":r){case"article":case"recipe":Cr(5,t[a]),Cr(8,t.creator),Cr(18,t.headline);break;case"product":Cr(5,t[a]),Cr(10,t.name),Cr(12,t.sku),t.brand&&Cr(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(W(11,ra(t.r
2024-04-23 20:28:25 UTC	13885	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 72 29 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 2c 75 3d 72 3b 6f 3c 75 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 6f 5d 3b 69 66 28 77 72 28 63 2c 61 2e 63 6f 6e 64 69 74 69 6f 6e 29 29 7b 76 61 72 20 73 3d 79 72 28 74 2c 63 29 3b 73 26 26 69 2e 70 75 73 68 28 73 29 7d 7d 6e 3d 69 7d 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 74 2c 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 6e 5b 30 5d 5d 3d 3d 6e 5b 31 5d 3a 74 5b 6e 5b 30 5d 5d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 29 7b 76 61 72 20 65 3d 5b 73 28 29 2c 74 5d Data Ascii: .isArray(r)){for(var i=[],o=0,u=r;o<u.length;o++){var c=u[o];if(wr(c,a.condition)){var s=yr(t,c);s&&i.push(s)}}n=i}return n}return null}function wr(t,e){if(e){var n=e.split(":");return n.length>1?t[n[0]]==n[1]:t[n[0]]}return!0}function kr(t){var e=[s(),t]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49920	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:26 UTC	2362	OUT	GET /favicon.ico HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
2024-04-23 20:28:27 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close ETag: "0f8d8b89f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:32 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202827Z-16f7b4795d4gnpqthyae4e8q5n00000005e0000000006xta X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:27 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 12 0c 73 ff 93 9f bc ff ce e2 de ff ce e2 de ff ce e2 de ff ce e2 de ff ce e2 de ff b7 c8 d1 ff 2b 29 82 ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a Data Ascii: 00 %6 % h6(0` $ooooooooooos+)oooooooooooooooooooo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49925	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:26 UTC	366	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:27 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Tue, 23 Apr 2024 02:35:12 GMT ETag: 0x8DC633E006B73BC x-ms-request-id: 26092cb0-c01e-001f-452d-958a87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5482 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790999def7e4515-ATL
2024-04-23 20:28:27 UTC	541	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-04-23 20:28:27 UTC	110	IN	Data Raw: 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 3 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49927	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:26 UTC	472	OUT	GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/d3be8f9e-1328-4432-981a-700d22c98729/af8b8ffa-721b-4a44-b983-b8844991da31/logo-small.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:27 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/png Content-Length: 1479 Connection: close Content-MD5: em1quVSl+84f9dv39l4MMQ== Last-Modified: Tue, 15 Aug 2023 09:31:44 GMT ETag: 0x8DB9D7270C04EB5 x-ms-request-id: 59fbd166-901e-0012-3a47-234253000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 77872 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790999decb77bbd-ATL
2024-04-23 20:28:27 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 05 5c 49 44 41 54 78 5e ed 9a 7b 88 95 45 18 87 cf 6a 69 76 bf 17 05 85 25 b6 86 95 14 14 15 45 57 2b d2 ae 90 22 45 89 15 99 e6 1f 59 9a 2d d8 56 90 74 27 0a a3 ac fe 50 2a 42 b4 2c a3 0b 95 45 26 11 62 48 51 66 56 84 76 93 2e 66 64 76 dd 9e e7 3b 33 1f 7b ce ee 7a f6 98 05 39 f3 83 c7 f7 fb 66 e6 9b 33 f3 ce 3b 37 b5 a5 03 55 12 56 9f 60 93 55 76 40 b0 c9 2a 3b 20 d8 64 95 1d 10 6c b2 ca 0e 08 36 59 65 07 04 9b ac b2 03 82 4d 56 d9 01 c1 26 ab ec 80 60 93 55 76 40 b0 c9 aa 25 d8 52 ed 83 5a f7 c3 5c 02 Data Ascii: PNGIHDR@@iqsRGBgAMAapHYsod\IDATx^{Ejiv%EW+"EY-Vt'PB,E&bHQfVv.fdv;3{z9f3;7UV`Uv@; dl6YeMV&`Uv@%RZ\
2024-04-23 20:28:27 UTC	936	IN	Data Raw: ca 39 92 46 90 a3 39 98 b2 8e 76 21 f2 8c c6 b3 61 2d e9 6f 86 34 fb 71 38 9c 41 9a 4e 2b 45 de b9 98 67 60 01 5c 48 fe 9f a6 3b 42 86 b3 8b dd 93 24 36 ec bc a2 dc e7 98 d9 d5 b7 ca 78 2a 37 d4 1c 81 c1 f0 a2 89 9d 45 79 d7 93 a9 d5 b7 42 31 ac 1b fd a3 4c 5f 70 1a 59 ce d0 2e 45 9d 46 e3 3c 88 9d df 16 63 59 55 46 65 14 e5 ec f8 43 a0 23 5c cf 0a e9 80 91 d5 c7 ca 1b c1 f6 56 7a 53 0d 81 a1 e0 8f 1b 5e a3 a0 8b 68 c0 2f e1 f1 df 54 97 5d ad 4e 4b 82 75 a0 0a e9 00 57 f5 8d 50 b3 98 f5 42 1f c3 37 e0 28 19 9e 6b b1 3a b1 8d d1 98 03 ae 07 5b 52 b6 b1 10 75 f7 85 81 d0 a8 c3 f5 32 4a 95 ed 2e a4 03 0c 17 17 11 69 46 2e 2e eb ab 8f 65 78 3a c7 df 83 8b 61 19 0d 5c 04 13 c1 b5 62 73 65 f8 db c6 c9 d4 73 0b 38 9d 96 c1 0c 9c de eb 7f d7 e4 3b 77 08 d7 9b 35 Data Ascii: 9F9v!a-o4q8AN+Eg`\H;B$6x*7EyB1L_pY.EF<cYUFeC#\VzS^h/T]NKuWPB7(k:[Ru2J.iF..ex:a\bses8;w5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49926	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:26 UTC	466	OUT	GET /logos/38631fdf-9644-4fbd-9d51-548bf27f58b4/766c27fe-9d62-4742-8d14-c7025e4ea83d/b6e90325-7b68-4e30-bbe6-25167c632d2c/logo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:27 UTC	825	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/png Content-Length: 4052 Connection: close Content-MD5: 0jIJB44M7yRG9AY3Xos+cA== Last-Modified: Tue, 15 Aug 2023 09:23:45 GMT ETag: 0x8DB9D71531C7E83 x-ms-request-id: cc2d2718-d01e-004e-5b58-79170b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5438 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790999dfcc453d4-ATL
2024-04-23 20:28:27 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 31 08 06 00 00 00 a8 0b 29 7b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDR1){tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-04-23 20:28:27 UTC	1369	IN	Data Raw: 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 46 36 43 37 33 37 36 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 46 36 43 37 33 37 37 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 46 36 43 37 33 37 34 37 31 39 30 31 31 45 34 42 37 38 37 45 45 41 46 33 34 38 37 32 35 36 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 46 36 43 37 33 37 35 37 31 39 30 31 31 45 34 42 37 Data Ascii: (Windows)" xmpMM:InstanceID="xmp.iid:FF6C7376719011E4B787EEAF34872569" xmpMM:DocumentID="xmp.did:FF6C7377719011E4B787EEAF34872569"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF6C7374719011E4B787EEAF34872569" stRef:documentID="xmp.did:FF6C7375719011E4B7
2024-04-23 20:28:27 UTC	1369	IN	Data Raw: 95 1d 5b d7 60 0c 2f f7 04 5a 3c d8 15 c1 48 4d fa bd 45 31 95 e4 f4 c6 f9 86 e4 71 a8 6f 47 43 da 30 cb df 8f 04 dd 9c c0 7b 7f 42 70 8a ca d9 a8 9d a8 18 0e 3f 8d 11 f4 37 d5 b1 5b 5c 1e db 15 72 99 8d b2 48 de 63 4b 9a ee 36 9b e6 25 ed 48 31 5b 58 69 8b 87 41 8b 92 a6 1b e2 db 3b 98 9c 7a 59 fe ae 2f b0 53 29 69 bf a3 fe 4f 48 54 80 b8 cb 5c af 59 60 13 b0 97 7b 01 ed 65 9a b4 a5 9c 2e 8b d8 89 59 31 3b e9 68 84 21 be ab e5 ef cf 85 50 87 d4 79 27 7a 9a ef 32 63 ee 0f 5a 88 e2 9e 62 9a b0 d3 53 09 68 90 c9 52 70 22 ea 5d a2 89 6f 65 f9 bb 4f 8a 87 26 41 ab 35 8b cb 72 37 49 5b 61 48 7b 21 01 0d e2 4a d3 64 02 39 4b 13 b7 c3 f2 f7 70 00 bb 3c c5 44 e2 d5 12 8e af dd 8c d7 1a 63 d7 ca 09 b4 bd 34 f1 1f 22 b3 cd 09 68 d0 7b 08 5e f7 a0 bf e6 c9 6a 96 e1 Data Ascii: [`/Z<HME1qoGC0{Bp?7[\rHcK6%H1[XiA;zY/S)iOHT\Y`{e.Y1;h!Py'z2cZbShRp"]oeO&A5r7I[aH{!Jd9Kp<Dc4"h{^j
2024-04-23 20:28:27 UTC	770	IN	Data Raw: b6 01 f7 8e 40 da 72 13 c8 64 e6 a2 5f c9 b4 50 40 2b 85 71 31 c2 e3 29 6b 35 12 77 21 1a 38 17 dc 36 84 ce 6a 01 9e 21 80 b5 d6 e7 45 70 5f d4 63 a3 87 8e a1 0e ca a9 88 57 ed dc 5d 20 70 7f a2 fe d7 35 f3 06 e4 ff 6e 8c e0 e1 76 e7 4a a5 bf 8b 22 aa 32 29 a0 78 ab 4e 24 1f 0a fa 6f 01 82 87 0d c9 57 fb bd 35 31 e3 52 18 25 1c b7 51 ef d1 24 d3 5b aa 0e 05 5e 22 3f d1 14 a4 b3 06 ca 47 61 fd 12 a9 57 d3 b1 65 00 2f 4c f3 91 5d de 81 86 bf be f3 58 10 33 1d de 19 21 d3 59 9e 68 6b bc 23 26 29 c7 c5 6e ad 80 87 be a6 1d 22 2e b3 0b f8 2a 30 1d a6 78 93 10 5d 38 a3 3c 37 76 85 32 5f 72 b7 40 ee 61 f3 44 cd 3d 7c 25 dc d6 1c 25 fb f3 3c c6 52 66 49 e6 a1 34 fa 70 4e 42 3a ed 72 8b dc 8e 9e cb 8f e5 51 22 f2 9a 4c fb 2e 13 1b 45 b3 d6 b3 01 3a c5 7a 81 1a fd Data Ascii: @rd_P@+q1)k5w!86j!Ep_cW] p5nvJ"2)xN$oW51R%Q$[^"?GaWe/L]X3!Yhk#&)n".*0x]8<7v2_r@aD=\|%%<RfI4pNB:rQ"L.E:z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49929	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:26 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:27 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 22 Apr 2024 06:06:21 GMT ETag: 0x8DC62925540D275 x-ms-request-id: 2cddd7bb-e01e-0018-53e8-94e6e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 83766 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790999df8d553d3-ATL
2024-04-23 20:28:27 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-23 20:28:27 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-23 20:28:27 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-23 20:28:27 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-23 20:28:27 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49928	104.19.178.52	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:27 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:27 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Mon, 22 Apr 2024 02:31:47 GMT ETag: 0x8DC62745BF921F4 x-ms-request-id: 34a9fc26-401e-004c-2c66-94a9b3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 78976 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8790999dfe1753c2-ATL
2024-04-23 20:28:27 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49924	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:27 UTC	2136	OUT	GET /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
2024-04-23 20:28:27 UTC	494	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 20:28:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close Allow: POST Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:27 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202827Z-16f56cb894fkl2jqzdqzzfp6ys00000000dg00000000r4v8 X-Cache: CONFIG_NOCACHE
2024-04-23 20:28:27 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49933	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:27 UTC	2121	OUT	GET /favicon.ico HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0
2024-04-23 20:28:28 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:28 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close ETag: "0f8d8b89f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:32 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202828Z-16f7b4795d4nbvvttx1cz5p6e4000000066g000000003x4z X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:28 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 12 0c 73 ff 93 9f bc ff ce e2 de ff ce e2 de ff ce e2 de ff ce e2 de ff ce e2 de ff b7 c8 d1 ff 2b 29 82 ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a 03 6f ff 0a Data Ascii: 00 %6 % h6(0` $ooooooooooos+)oooooooooooooooooooo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49940	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:31 UTC	1208	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904101416&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=0&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&_s=2&tfd=12102 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:31 UTC	228	OUT	Data Raw: 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 31 30 26 5f 65 74 3d 32 31 37 37 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 31 30 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 31 30 26 5f 65 74 3d 32 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 32 35 26 5f 65 74 3d 31 35 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 32 35 26 5f 65 74 3d 31 Data Ascii: en=scroll_depth%25&epn.percentage=10&_et=2177en=scroll_depth&epn.scroll_threshold=10&epn.percent_scroll=10&_et=2en=scroll_depth%25&epn.percentage=25&_et=15en=scroll_depth&epn.scroll_threshold=25&epn.percent_scroll=25&_et=1
2024-04-23 20:28:31 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:28:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49948	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:36 UTC	2480	OUT	GET /en/home HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0; _clsk=1me437r%7C1713904107231%7C1%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:37 UTC	787	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 35610 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:37 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=Edge X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET set-cookie: ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; Path=/; Secure; HttpOnly; set-cookie: ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; SameSite=none; Path=/; Secure; HttpOnly; x-azure-ref: 20240423T202836Z-16f56cb894fqzbbqtg9rp3gtgg00000001dg000000005sep X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:37 UTC	15597	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4f 73 6c 65 72 2c 20 48 6f 73 6b 69 6e 20 26 61 6d 70 3b 20 48 61 72 63 6f 75 72 74 20 4c 4c 50 20 7c 20 42 75 73 69 6e 65 73 73 20 4c 61 77 20 46 69 72 6d 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 73 6c 65 72 20 69 73 20 61 20 6c 65 61 64 69 6e 67 20 62 75 73 69 6e 65 73 73 20 6c 61 77 20 66 69 72 6d 20 70 72 61 63 74 69 73 69 6e 67 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 6c 79 20 66 72 6f 6d 20 6f 66 66 69 63 65 73 20 61 63 72 6f 73 73 Data Ascii: <!DOCTYPE html><html lang="en" xml:lang="en"><head id="head"><title>Osler, Hoskin & Harcourt LLP \| Business Law Firm</title><meta name="description" content="Osler is a leading business law firm practising internationally from offices across
2024-04-23 20:28:37 UTC	1958	IN	Data Raw: 2f 63 61 72 65 65 72 73 22 3e 43 61 72 65 65 72 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 35 5f 4d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 5f 72 70 74 49 74 65 6d 73 5f 63 74 6c 31 31 5f 6c 6e 6b 4d 65 6e 75 22 20 63 6c 61 73 73 3d 22 22 20 68 72 65 66 3d 22 2f 65 6e 2f 65 76 65 6e 74 73 22 3e 45 76 65 6e 74 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 09 09 09 3c 21 2d 2d 20 4c 61 6e 67 75 61 67 65 20 74 6f 67 67 6c 65 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 35 5f 4d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 5f 6c 61 6e 67 75 61 67 65 54 6f 67 67 6c 65 5f 6c 6e 6b Data Ascii: /careers">Careers</a> <a id="p_lt_ctl05_MobileNavigation_rptItems_ctl11_lnkMenu" class="" href="/en/events">Events</a> ... Language toggle --> <a id="p_lt_ctl05_MobileNavigation_languageToggle_lnk
2024-04-23 20:28:37 UTC	16384	IN	Data Raw: 22 70 5f 6c 74 5f 63 74 6c 30 36 5f 70 61 67 65 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 5f 6c 74 5f 63 74 6c 30 31 5f 54 69 6c 65 4c 69 73 74 5f 72 70 74 49 74 65 6d 73 5f 63 74 6c 30 30 5f 47 72 69 64 50 61 6e 65 6c 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 75 6d 6e 73 20 67 72 69 64 2d 69 74 65 6d 22 3e 0d 0a 09 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 2d 63 6f 6e 74 65 6e 74 20 67 72 69 64 2d 69 6d 61 67 65 20 4d 65 64 69 75 6d 20 72 69 67 68 74 22 3e 3c 70 69 63 74 75 72 65 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 6f 73 6c 65 72 2f 6d 65 64 69 61 2f 4f 73 6c 65 72 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 54 Data Ascii: "p_lt_ctl06_pageplaceholder_p_lt_ctl01_TileList_rptItems_ctl00_GridPanel" class="col-xs-12 columns grid-item"> <div class="grid-content grid-image Medium right"><picture><img src="/osler/media/Osler/Content/Images/T
2024-04-23 20:28:37 UTC	1671	IN	Data Raw: 4f 73 6c 65 72 2f 6a 73 2f 64 69 73 74 2f 72 65 6d 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 31 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 4f 73 6c 65 72 2f 6a 73 2f 64 69 73 74 2f 69 65 2f 4f 73 6c 65 72 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 Data Ascii: Osler/js/dist/rem.min.js"></script><script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script> ...[if lt IE 9]> <script src="/Osler/js/dist/ie/Osler.js"></script> <![endif]-->...[if gt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49951	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:36 UTC	713	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:36 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:36 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,542123b6b559237f48aad8e19f7c46a1,10.0.0.127,7640,89.187.171.132,,231692694749,1,1713904116.871,0.002,,.,0,0,0.000,0.000,-,0,0,203,196,98,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49952	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:37 UTC	480	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&tag=DwellTime&ts=1713904115967&i=gtm&dwt=10239&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:37 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:37 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,a7f825acfbfa28ea86332cd1521caa4b,10.0.0.207,29300,89.187.171.132,,231692699013,1,1713904117.561,0.002,,.,0,0,0.000,0.004,-,0,0,203,125,62,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49953	104.18.32.137	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:37 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:38 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:38 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 879099e2abfb4578-ATL
2024-04-23 20:28:38 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49949	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:38 UTC	2474	OUT	POST /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive Content-Length: 72 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/en/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; __utmb=48214201.1.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSUserPage={"TimeStamp":"2024-04-23T16:28:24.7137934-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; CMSLandingPageLoaded=true; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.0.1713904105.58.0.0; _clsk=1me437r%7C1713904107231%7C1%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:38 UTC	72	OUT	Data Raw: 7b 22 4e 6f 64 65 41 6c 69 61 73 50 61 74 68 22 3a 22 2f 48 6f 6d 65 22 2c 22 44 6f 63 75 6d 65 6e 74 43 75 6c 74 75 72 65 43 6f 64 65 22 3a 22 65 6e 2d 43 41 22 2c 22 55 72 6c 52 65 66 65 72 72 65 72 22 3a 22 22 7d Data Ascii: {"NodeAliasPath":"/Home","DocumentCultureCode":"en-CA","UrlReferrer":""}
2024-04-23 20:28:38 UTC	877	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:38 GMT; path=/; HttpOnly Set-Cookie: VisitorStatus=11064158108; expires=Sat, 23-Apr-2044 20:28:38 GMT; path=/; HttpOnly Set-Cookie: CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; expires=Tue, 23-Apr-2024 20:48:38 GMT; path=/; HttpOnly Set-Cookie: CMSLandingPageLoaded=true; expires=Tue, 23-Apr-2024 20:48:38 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Robots-Tag: none X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202838Z-16f56cb894fljwv72mzt8bkz1c00000001h0000000002xy9 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49954	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:39 UTC	682	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:39 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:39 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,8e5e26f6abdf2bb47efd01d087ea2610,10.0.0.127,3496,89.187.171.132,,231443056707,1,1713904119.419,0.002,,.,0,0,0.000,0.004,-,0,0,203,199,99,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49958	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:39 UTC	632	OUT	GET /tag/uet/134024834 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-23 20:28:39 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:39 GMT Content-Type: application/x-javascript Content-Length: 709 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:e55edbbe-e22b-46b4-8313-9ee2a4e71d12 x-azure-ref: 20240423T202839Z-16f56cb894fdm9r7z8wfs1qqw000000001gg000000004tk7 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:39 UTC	709	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 75 65 74 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 31 33 34 30 32 34 38 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","uet")}),!1);a[c]("metadata",(function(){a[c]("set","_u","134024834")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49960	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:40 UTC	634	OUT	GET /s/0.7.31/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-23 20:28:41 UTC	619	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:41 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 62389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 22 Apr 2024 19:19:24 GMT ETag: "0x8DC63011F10BC93" x-ms-request-id: 82c9acf7-701e-0001-520b-957107000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240423T202841Z-16f7b4795d4nbvvttx1cz5p6e4000000062g000000008317 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-23 20:28:41 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 33 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 48 61 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.31: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Ua},get start(){return qa},get stop(){return Fa},get track(){return Ha}}),e=Object.freeze({__pro
2024-04-23 20:28:41 UTC	16384	IN	Data Raw: 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2b 3d 6f 5b 74 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 6c 3d 7a 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 72 2e 70 72 69 76 61 63 79 3d 22 49 4e 50 55 54 22 3d 3d 3d 75 26 26 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e 3d 30 3f 69 3a 6c 3f 34 3a 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 74 Data Ascii: =a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="";Object.keys(o).forEach((function(t){return s+=o[t].toLowerCase()}));var l=zt.some((function(t){return s.indexOf(t)>=0}));r.privacy="INPUT"===u&&Ht.indexOf(c)>=0?i:l?4:2;break;case"dat
2024-04-23 20:28:41 UTC	16384	IN	Data Raw: 6e 67 22 29 3e 3d 30 3f 22 61 72 74 69 63 6c 65 22 3a 72 29 7b 63 61 73 65 22 61 72 74 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 49 72 28 35 2c 74 5b 61 5d 29 2c 49 72 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 49 72 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 49 72 28 35 2c 74 5b 61 5d 29 2c 49 72 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 49 72 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 49 72 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 57 28 31 31 2c 72 61 28 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 2c 31 30 30 29 29 2c 57 28 31 38 Data Ascii: ng")>=0?"article":r){case"article":case"recipe":Ir(5,t[a]),Ir(8,t.creator),Ir(18,t.headline);break;case"product":Ir(5,t[a]),Ir(10,t.name),Ir(12,t.sku),t.brand&&Ir(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(W(11,ra(t.ratingValue,100)),W(18
2024-04-23 20:28:41 UTC	13856	IN	Data Raw: 75 73 68 28 6e 2e 64 61 74 61 2e 73 63 72 6f 6c 6c 54 69 6d 65 29 2c 55 61 28 65 2c 21 31 29 29 2c 78 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 35 3a 65 2e 70 75 73 68 28 52 2e 67 61 70 29 2c 55 61 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 65 2e 70 75 73 68 28 61 72 2e 63 68 65 63 6b 29 2c 55 61 28 65 2c 21 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 65 2e 70 75 73 68 28 74 74 2e 6b 65 79 29 2c 55 61 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 65 2e 70 75 73 68 28 48 61 2e 73 65 71 75 65 6e 63 65 29 2c 65 2e 70 75 73 68 28 48 61 2e 61 74 74 65 6d 70 74 73 29 2c 65 2e 70 75 73 68 28 48 61 2e 73 74 61 74 75 73 29 2c 55 61 28 65 2c 21 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 34 3a 41 2e 6b 65 79 26 26 65 2e 70 75 73 68 28 41 2e Data Ascii: ush(n.data.scrollTime),Ua(e,!1)),x();break;case 25:e.push(R.gap),Ua(e);break;case 35:e.push(ar.check),Ua(e,!1);break;case 3:e.push(tt.key),Ua(e);break;case 2:e.push(Ha.sequence),e.push(Ha.attempts),e.push(Ha.status),Ua(e,!1);break;case 24:A.key&&e.push(A.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49962	172.64.155.119	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:41 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:41 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:41 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 879099f6fb13ad86-ATL
2024-04-23 20:28:41 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49964	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:41 UTC	449	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:41 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:41 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,b74e4d94803d9aea914101c0cd8606a4,10.0.0.207,58558,89.187.171.132,,7905964530,1,1713904121.496,0.002,,.,0,0,0.000,0.004,-,0,0,203,164,82,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49961	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:41 UTC	2199	OUT	GET /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _clsk=1me437r%7C1713904107231%7C1%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904118.45.0.0; _ga=GA1.1.1593841297.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false
2024-04-23 20:28:41 UTC	494	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 20:28:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close Allow: POST Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:41 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202841Z-16f56cb894f8ffkn2s0gcrypvn00000001a000000000cr8z X-Cache: CONFIG_NOCACHE
2024-04-23 20:28:41 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49976	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:43 UTC	719	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:43 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:43 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,69aa6e11fc27e843969dd46d810f5995,10.0.0.127,17050,89.187.171.132,,7905974700,1,1713904123.735,0.002,,.,0,0,0.000,0.000,-,0,0,203,96,48,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49975	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:43 UTC	2483	OUT	GET /en/about-us HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:44 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 29245 Connection: close Cache-Control: no-cache, must-revalidate Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:43 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202843Z-16f56cb894fdm9r7z8wfs1qqw000000001fg000000006sza X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:44 UTC	13524	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 41 62 6f 75 74 20 4f 73 6c 65 72 20 7c 20 43 61 6e 61 64 69 61 6e 20 42 75 73 69 6e 65 73 73 20 4c 61 77 20 46 69 72 6d 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 73 6c 65 72 20 68 61 73 20 6f 6e 65 20 66 6f 63 75 73 20 e2 80 93 20 79 6f 75 72 20 62 75 73 69 6e 65 73 73 2e 20 57 65 20 68 61 76 65 20 74 68 65 20 64 65 70 74 68 20 61 6e 64 20 62 72 65 61 64 74 68 20 6f 66 20 65 78 70 65 72 69 65 6e 63 65 20 74 6f 20 68 65 6c 70 20 73 6f 6c 76 Data Ascii: <!DOCTYPE html><html lang="en" xml:lang="en"><head id="head"><title>About Osler \| Canadian Business Law Firm</title><meta name="description" content="Osler has one focus your business. We have the depth and breadth of experience to help solv
2024-04-23 20:28:44 UTC	4096	IN	Data Raw: 74 68 65 20 73 69 74 65 3a 3c 2f 6c 61 62 65 6c 3e 0d 0a 0d 0a 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 70 24 6c 74 24 63 74 6c 30 35 24 4d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 24 73 69 74 65 53 65 61 72 63 68 24 6f 66 66 63 61 6e 76 61 73 54 78 74 53 65 61 72 63 68 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 69 64 3d 22 6f 66 66 63 61 6e 76 61 73 54 78 74 53 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 53 65 61 72 63 68 22 20 2f 3e 0d 0a 20 20 20 0d 0a 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 6e 61 6d 65 3d 22 70 24 6c 74 24 63 74 6c 30 35 24 4d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 24 73 Data Ascii: the site:</label> <input name="p$lt$ctl05$MobileNavigation$siteSearch$offcanvasTxtSearch" type="text" id="offcanvasTxtSearch" class="site-header--search-input" placeholder="Search" /> <input type="submit" name="p$lt$ctl05$MobileNavigation$s
2024-04-23 20:28:44 UTC	11625	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 34 20 67 72 69 64 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 36 5f 70 61 67 65 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 5f 6c 74 5f 63 74 6c 30 32 5f 42 6c 6f 63 6b 43 54 41 4c 69 73 74 5f 72 70 74 49 74 65 6d 73 5f 63 74 6c 30 30 5f 70 6e 6c 49 6d 61 67 65 22 20 63 6c 61 73 73 3d 22 67 72 69 64 2d 63 6f 6e 74 65 6e 74 20 67 72 69 64 2d 69 6d 61 67 65 20 53 6d 61 6c 6c 22 3e 0d 0a 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 36 5f Data Ascii: <div class="col-xs-12 col-sm-4 grid-item"> <div id="p_lt_ctl06_pageplaceholder_p_lt_ctl02_BlockCTAList_rptItems_ctl00_pnlImage" class="grid-content grid-image Small"> <img id="p_lt_ctl06_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49977	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	486	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904122825&i=gtm&dwt=1928&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:44 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:44 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,17f28f28133374eb7d3fcd4c0c987037,10.0.0.207,59528,89.187.171.132,,231692729668,1,1713904124.255,0.002,,.,0,0,0.000,0.000,-,0,0,203,130,65,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49974	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	2562	OUT	GET /ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvug_UjKcAMuKcGN8K2MSXvgT8udzBVsAGOX4k6Oho8RiVMLgg2hTvzAoKKNsGU3y41Pm0SAg0I5SZXrYqLVEQaekg7Cme_6oN-lmYvn2GmxCA-qA1Y07nny7f5N0qGzmfL9ohu_66SpKXL72MfWHq8I1&t=722fe453 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:46 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:46 GMT Content-Type: application/x-javascript Content-Length: 25609 Connection: close Cache-Control: public Content-Encoding: gzip Expires: Wed, 23 Apr 2025 20:28:46 GMT Last-Modified: Tue, 23 Apr 2024 20:28:46 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202844Z-16f56cb894f6f2tcp7uf29qkh4000000017g00000000c4yq X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:46 UTC	15805	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd d9 72 1b 49 92 28 fa 3e 66 f3 0f 64 8e 8a 42 36 92 20 29 55 2f 05 28 c5 d1 da a5 1e 6d 47 52 75 77 0d c9 96 e5 06 20 49 10 c9 42 02 92 58 04 be ec 3c dc 4f ba bf 70 7d 89 3d 23 01 50 aa 3e 73 8f 59 97 95 a4 44 2c 1e 11 1e 1e 1e 1e 1e ee 1e ff ef ff fe 7f 0e 0e f6 bf fa bf 7f ff b7 83 83 9d 27 d5 d5 f5 ac 1c 8d e7 3b 9d 27 e1 ce ab 32 9b 55 75 35 9c 43 fa ec aa 9a 25 f3 b2 9a f6 76 1e 4d 26 3b 54 a8 de 99 15 75 31 fb 54 e4 3d ac fd 8d 6d ab d6 1e 9d 27 5f 7a e7 f5 bf ff db f3 c5 34 a3 26 3f 7e 9c 5f 5f 15 af 93 cb 22 0e 64 62 30 30 b2 b3 49 52 d7 f1 7c b6 28 74 6a 36 2b 92 79 f1 24 99 4c d2 24 bb 88 87 22 bd 93 46 49 78 33 2b e6 8b d9 74 47 25 86 37 9f 92 d9 4e 11 27 b3 d1 e2 b2 98 ce eb de a4 98 8e e6 e3 41 39 ec 14 0f Data Ascii: rI(>fdB6 )U/(mGRuw IBX<Op}=#P>sYD,';'2Uu5C%vM&;Tu1T=m'_z4&?~__"db00IR\|(tj6+y$L$"FIx3+tG%7N'A9
2024-04-23 20:28:46 UTC	9804	IN	Data Raw: c3 b0 f5 6c 25 e2 c1 bc 9f 5f 4f c8 14 4c 2e f6 79 32 c2 9d ef 58 7d d9 61 0c fb 92 8e 3b b2 25 5e 85 f2 17 ae aa bd 3d 3a 0f 05 8f df 3c fd 19 68 9a e4 e1 51 ef 8a a2 85 b0 0e 30 49 eb 6a b2 98 17 68 be 78 93 77 63 13 d6 a0 d0 bf 71 0e f9 21 02 0f 9d 3f 8c ef 53 65 fd ec 0d 50 33 ae 1b 84 42 b4 19 22 ac 46 36 00 e5 dc d5 6a 2b e4 64 8c 9c 71 9c 1e a7 6a 14 0a 0f bb b0 2f 8f ed 31 89 89 31 38 31 cc 11 4e 8d 4e 80 63 d7 2d 70 ad b1 c9 26 ee c1 8f 1f 5e bd 84 ef 4e 62 71 c2 c4 e0 6c 80 99 fd d8 ce 3e 1c 14 3a 89 58 e1 e1 76 08 10 d4 51 fa 11 50 ee ed 95 b1 35 7e 96 75 db 28 1b a3 f8 ae d4 65 e4 36 0b 2a 67 03 61 b5 a0 72 bd a0 f2 e5 32 bf e5 82 c2 c5 34 a4 05 55 da 0b 8a 8f 31 3c 79 39 cc 58 b9 66 55 49 fd cb 56 33 b8 2d 92 37 ad aa 5d 7a b3 4f 12 c2 a6 65 Data Ascii: l%_OL.y2X}a;%^=:<hQ0Ijhxwcq!?SeP3B"F6j+dqj/1181NNc-p&^Nbql>:XvQP5~u(e6*gar24U1<y9XfUIV3-7]zOe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49979	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	2562	OUT	GET /ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OIraOhbH8dYmWuMx72NLg2J7X3NEA8pv5VQtFEWqTHEExepx7TUwZUeh0E-QDGbdH3gkHL4W7gJp3pm-xvAmoJCGu3YZyrY-30LLifE0byyBTuPNqmgSURntMKtPYO44DzjA-DbwqKN9rbzZh4zDZLA1&t=722fe453 HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:44 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:44 GMT Content-Type: application/x-javascript Content-Length: 9984 Connection: close Cache-Control: public Content-Encoding: gzip Expires: Wed, 23 Apr 2025 20:28:44 GMT Last-Modified: Tue, 23 Apr 2024 20:28:44 GMT X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202844Z-16f7b4795d4d49mrgyqqa182d000000005hg0000000048n8 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:44 UTC	9984	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 7d 6b 73 db 48 92 e0 f7 89 98 ff 40 61 7b 65 62 55 86 e4 de bd b8 08 d2 68 85 5e 9e d6 9e 5f 61 cb d3 33 21 6b 15 05 a0 48 42 02 01 1a 00 6d ab 25 fe b2 fb b0 3f 69 ff c2 65 d6 0b 55 40 81 a4 e4 9e bd 8b b8 89 1e 99 a8 77 65 66 65 66 65 66 55 fd d7 ff fe cf fd fd e7 4f fe df 9f ff b4 bf 3f 38 29 16 77 65 3a 9d d5 83 e1 89 3f 78 93 c6 65 51 15 93 1a d2 cb 45 51 d2 3a 2d f2 60 70 94 65 03 5e a8 1a 94 ac 62 e5 57 96 04 58 fb 07 fb d6 bd 1d dd d0 ef bf b1 e8 55 51 ce ab e0 a6 fa f3 9f 2e ee 16 2c b8 2e d9 34 ad 6a 56 7e 8c cb 74 51 0f bd be f2 1e b9 b4 f3 60 f0 8c a7 db c9 1f 59 99 d2 2c fd 5d cc aa 9b ff 96 d5 df 8a f2 d6 91 73 52 cc 17 45 ce f2 fa 4d 91 b0 0c 0b 5c f9 63 3e 48 35 c6 b7 74 ce aa 05 8d d9 d0 fb 78 57 05 6a 74 Data Ascii: }ksH@a{ebUh^_a3!kHBm%?ieU@wefefefUO?8)we:?xeQEQ:-`pe^bWXUQ.,.4jV~tQ`Y,]sREM\c>H5txWjt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49978	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	2515	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:44 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:44 GMT Content-Type: image/jpeg Content-Length: 63917 Connection: close ETag: "f1a51c4fb529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:47 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202844Z-16f56cb894fdm9r7z8wfs1qqw000000001fg000000006t1a X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:44 UTC	16008	IN	Data Raw: ff d8 ff e1 12 ba 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 16 11 00 00 01 01 03 00 01 00 00 00 7d 0a 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 63 01 00 00 d4 00 00 00 0f 01 02 00 06 00 00 00 37 02 00 00 10 01 02 00 0d 00 00 00 3d 02 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 4a 02 00 00 1b 01 05 00 01 00 00 00 52 02 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 5a 02 00 00 32 01 02 00 14 00 00 00 79 02 00 00 3b 01 02 00 0e 00 00 00 8d 02 00 00 69 87 04 00 01 00 00 00 9c 02 00 00 e4 04 00 00 08 00 08 00 08 00 57 69 64 65 20 61 6e 67 6c 65 20 63 6f 6c 6f 72 20 69 6d 61 67 65 20 64 65 70 69 63 74 69 6e Data Ascii: ExifII*}c7=JR(1Z2y;iWide angle color image depictin
2024-04-23 20:28:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-23 20:28:44 UTC	3788	IN	Data Raw: 57 ad 05 ac e9 e8 97 51 6e d6 57 67 1c a2 58 aa a3 a6 b8 d3 d2 d5 4d 6d 83 86 72 86 9c c5 b2 b4 e5 fe d3 ca a8 24 d3 15 8a 78 33 eb 7a 79 bf 48 a4 3b 45 57 a7 af cc ac 05 b4 6a 69 ea a8 5c 52 14 26 93 99 95 38 84 cc 75 42 65 a5 3c db 3a 72 57 9c 33 8c 51 6e bd 5d cd aa 49 1a dd 00 cd 63 43 cc e5 a2 ec d2 d7 dc db e9 4a bd 70 eb 7a 4e 74 f5 f0 29 af fc e0 ad a7 67 dd ee 7a 4b 51 da 90 ac 1c 75 ea 61 54 da 46 fc 5a 51 9c 74 ac 5c 84 71 75 fa 26 0b 96 e6 dd 3b be b0 3e ab 98 bc 99 b8 27 81 5f ee e1 c5 60 e0 af a0 53 4b 27 a4 a8 b7 fd 68 e5 ee ee 5c 9c ab 15 a5 1e a3 69 2d 94 61 a5 b8 c9 fc 29 69 ff 00 81 2a cf cb 6e 43 ea 80 a7 12 f5 a8 0d b9 68 ae 09 61 d1 da 85 ab 0f b3 19 d5 db 8b ff 00 a1 93 73 fc bb 7d 84 51 6a 5e 4b 68 7a 2a 82 8d 3d 78 b8 37 29 4b 83 Data Ascii: WQnWgXMmr$x3zyH;EWji\R&8uBe<:rW3Qn]IcCJpzNt)gzKQuaTFZQt\qu&;>'_`SK'h\i-a)inChas}Qj^Khz=x7)K
2024-04-23 20:28:44 UTC	8192	IN	Data Raw: 17 14 6c 9a 17 f7 05 63 ac a4 e0 3f 4c e2 1d 48 f2 65 43 c3 b8 ab c5 14 e6 b8 89 8d b7 16 fa 0b aa ce 64 e9 d7 1c 4a 9e 4b 94 a6 73 4a d6 c3 cd 19 f6 a6 68 85 eb 4c d9 16 a8 17 69 ad 59 65 aa a3 0b a5 ba bc 57 f3 1e 69 e0 0f d0 58 0a 10 c8 22 4f 13 ca cb 90 7d d5 a9 ea e6 9f 48 c0 22 ba 8f 3a 7d 2d 93 07 11 37 5d 0a b6 28 68 2b 2a 92 4d b6 d5 58 95 1f 09 a1 7d 74 4e fa 08 4f f3 c0 dc 96 26 db 56 e9 6a a5 f9 b6 bf 48 d8 29 63 50 51 a3 6a 5b a4 ab 45 62 07 60 71 6e 9f bb 05 16 62 99 06 e5 7c b8 d2 30 b5 3b a9 2e 14 09 48 9a 53 70 b3 95 10 65 81 e2 34 86 fd 33 8d 76 e0 ba 22 fe 71 8e e4 da f8 df 44 10 a8 ba d5 5c d1 37 6a b4 9e a0 0e 13 33 56 da e9 df 5f 6a 56 1f 09 57 56 58 ad d5 c4 b0 c8 e9 72 ed bd 63 5c 24 a5 f4 88 14 3a 26 cd 5b 56 5f ab e5 de 08 c7 de Data Ascii: lc?LHeCdJKsJhLiYeWiX"O}H":}-7](h+*MX}tNO&VjH)cPQj[Eb`qnb\|0;.HSpe43v"qD\7j3V_jVWVXrc\$:&[V_
2024-04-23 20:28:44 UTC	8192	IN	Data Raw: a7 dd 07 35 1e 08 b5 1f 90 bc fe 86 56 63 55 b7 d9 9f 53 11 35 da 87 59 9f 72 ef 1d 59 5b 81 9a 2d 34 be b4 20 fc 30 16 9e 1f 47 f4 9c bb 7f df dc f0 7f fa cd 05 f3 3b 15 9d 3f 29 f5 1f 46 78 9f 0e 5d 47 4d 65 1e b6 17 b5 83 48 fa 23 d9 18 4d a0 ed 6a 73 dc 54 3f db 27 f9 a3 4d cf bb 42 61 df 65 fa 70 e3 1e b3 fc a2 11 d0 34 6a 97 68 ec 83 98 10 24 2c c2 d0 6c 17 d3 24 2b 53 5e 97 d0 52 21 f7 b2 42 ed e6 c9 1a ab 1a db 42 7f f5 33 f5 42 ed 97 70 b5 bd 09 da ea 47 4a 08 84 cb 21 ab 33 03 d1 34 e1 3c d9 5c b7 3f d3 d0 44 0e d9 e0 fa 8f 31 cf 17 f5 5b 7f e3 1a 6f 38 5b e2 e9 f6 11 d2 e9 c3 ea c6 2e 62 fb 28 f7 fc 8f ef fd 47 38 72 fe 9f 85 af da 13 c5 2e 2b db 0b af 77 c5 13 5e c1 7d b4 bc 33 0f 79 f4 b5 4a c6 80 48 9b b3 38 c7 43 78 fe d5 f5 1c 8b ae 9b 4a Data Ascii: 5VcUS5YrY[-4 0G;?)Fx]GMeH#MjsT?'MBaep4jh$,l$+S^R!BB3BpGJ!34<\?D1[o8[.b(G8r.+w^}3yJH8CxJ
2024-04-23 20:28:44 UTC	11353	IN	Data Raw: c7 74 b0 c4 46 4b af 13 d9 72 fc 22 81 1b 87 0c 92 27 bf a2 06 dc b1 19 bc 65 6c d8 99 99 c7 76 07 74 68 94 8e 1c 9a 1a 61 6d a0 ac 9c 50 4e 38 6c 85 36 54 25 89 30 21 82 70 f8 60 4d 71 65 c5 a5 b6 82 80 c3 d7 00 d9 aa db 0c d8 28 f7 79 03 ba 29 33 4b cc 1e b8 25 05 f3 35 01 de 62 d3 17 75 e2 4e b0 36 8f 78 04 11 84 44 f1 33 dd 78 1a 3d a6 59 06 31 b2 d9 c4 be 59 cb 18 79 91 8e 4b c3 14 08 2d ac 5a 2b a7 97 fa 6c 8b d5 44 3a da 32 bb d5 12 ca 72 c8 62 61 13 96 26 9b 62 28 29 94 96 36 19 4a 53 90 85 36 74 62 fb 05 c5 86 82 6d 83 29 e2 77 75 c1 54 e7 b7 89 a2 d8 d9 0d d3 25 20 43 60 c5 4f 22 ed a1 b2 1a 67 48 71 bf cd 9c 02 2e e6 43 e4 c9 97 0f 51 f6 41 2c c4 3c 8c cb 55 28 9d 3f 54 06 d5 2f 6f 7c 77 ed e7 ea 39 17 31 5e b3 35 b4 d3 39 ef cd 1c 24 09 f6 45 Data Ascii: tFKr"'elvthamPN8l6T%0!p`Mqe(y)3K%5buN6xD3x=Y1YyK-Z+lD:2rba&b()6JS6tbm)wuT% C`O"gHq.CQA,<U(?T/o\|w91^59$E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49981	104.18.32.137	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:45 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:45 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a0d6b001359-ATL
2024-04-23 20:28:45 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49983	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	1207	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904117139&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome&dt=Osler%2C%20Hoskin%20%26%20Harcourt%20LLP%20%7C%20Business%20Law%20Firm&_s=1&tfd=8300 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 242 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:44 UTC	242	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 31 30 26 5f 65 74 3d 32 30 30 37 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 31 30 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 31 30 26 5f 65 74 3d 32 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 32 35 26 5f 65 74 3d 32 36 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 32 35 26 5f 65 74 3d 34 Data Ascii: en=page_viewen=scroll_depth%25&epn.percentage=10&_et=2007en=scroll_depth&epn.scroll_threshold=10&epn.percent_scroll=10&_et=2en=scroll_depth%25&epn.percentage=25&_et=26en=scroll_depth&epn.scroll_threshold=25&epn.percent_scroll=25&_et=4
2024-04-23 20:28:45 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:28:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49980	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:44 UTC	2508	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-red-blue-Optical-Fibers.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:45 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:45 GMT Content-Type: image/jpeg Content-Length: 59879 Connection: close ETag: "6f98e64db529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:45 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202845Z-16f7b4795d4h54m2ae5y2wchuw000000054g000000009qt7 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:45 UTC	16008	IN	Data Raw: ff d8 ff e1 13 45 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 11 00 00 01 03 00 01 00 00 00 a0 10 00 00 01 01 03 00 01 00 00 00 10 0b 00 00 02 01 03 00 03 00 00 00 da 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 69 00 00 00 e0 00 00 00 0f 01 02 00 12 00 00 00 49 01 00 00 10 01 02 00 0b 00 00 00 5b 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 66 01 00 00 1b 01 05 00 01 00 00 00 6e 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 76 01 00 00 32 01 02 00 14 00 00 00 95 01 00 00 3b 01 02 00 11 00 00 00 a9 01 00 00 98 82 02 00 0d 00 00 00 ba 01 00 00 69 87 04 00 01 00 00 00 c8 01 00 00 5c 04 00 00 08 00 08 00 08 00 41 62 73 74 72 61 63 74 20 6e 65 6f 6e 20 63 6f 6c 6f 72 Data Ascii: EExifII*iI[fn(1v2;i\Abstract neon color
2024-04-23 20:28:45 UTC	1440	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-23 20:28:45 UTC	16384	IN	Data Raw: 0c 00 00 00 24 74 65 63 68 00 00 04 30 00 00 00 0c 72 54 52 43 00 00 04 3c 00 00 08 0c 67 54 52 43 00 00 04 3c 00 00 08 0c 62 54 52 43 00 00 04 3c 00 00 08 0c 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 39 39 38 20 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 43 6f 6d 70 61 6e 79 00 00 64 65 73 63 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 Data Ascii: $tech0rTRC<gTRC<bTRC<textCopyright (c) 1998 Hewlett-Packard CompanydescsRGB IEC61966-2.1sRGB IEC61966-2.1XYZ QXYZ XY
2024-04-23 20:28:45 UTC	12288	IN	Data Raw: 12 62 bc 7b 7d 94 11 f4 08 00 00 54 29 1a 09 34 18 03 8f f2 fb 4b 79 08 b5 ba 1a 8c a9 39 58 9f 0f 30 6c 62 62 94 5d 41 37 b1 f1 15 e7 fd e3 b7 fe d6 77 01 7a 85 2f 8f c8 5c 3e ea 44 d2 38 13 3f b0 be b2 aa e6 71 e3 e4 30 65 8d c0 33 46 a5 e1 7f 10 c0 5e df 23 50 f0 b2 4a 19 19 f8 4b 64 d5 67 7b c3 0c dc 62 02 6f c4 01 73 88 b9 4c 7e f6 e9 2f 3c 23 5a d4 bb 2f 15 45 ab 94 5d 49 6a e5 10 8b 51 44 22 8a 21 16 ae 51 09 2d 5c a2 ea 4a e5 10 8b 57 28 84 94 9a 2e af ff d3 f9 7b 0e 55 87 2e 09 98 5d 63 91 5c 8f 82 90 69 d7 1a 8b b7 ce ce 9e c4 99 a3 98 0d f5 01 89 fc 25 72 f6 c8 65 4c 8c 68 a6 84 87 8d 94 10 47 95 aa c0 19 e5 84 1c 78 47 a6 4d c8 60 bd f6 39 04 99 88 5e a2 5b 42 5c c2 4a 87 be 73 20 c7 e0 db 1a 53 fd cc 96 55 44 f1 b2 9d c4 db e1 6a 4c 8d 68 b0 Data Ascii: b{}T)4Ky9X0lbb]A7wz/\>D8?q0e3F^#PJKdg{bosL~/<#Z/E]IjQD"!Q-\JW(.{U.]c\i%reLhGxGM`9^[B\Js SUDjLh
2024-04-23 20:28:45 UTC	4096	IN	Data Raw: 1c a1 52 18 1b 10 74 b5 a8 b2 ed 5a 59 d5 54 80 51 93 89 b5 a4 3b c2 9e c7 c7 55 3b 8e a6 a5 e3 c0 cd a5 d4 79 0e aa 6a ba a0 b9 36 51 e2 6a c1 8d 87 4b a8 ee d5 50 66 c9 93 26 5f 6a 15 24 13 a0 1d 4d 56 4b 90 53 15 a0 ca 48 c6 c0 d5 75 ff d0 f9 99 94 6b a5 88 ea 0d 5f b8 55 ff 00 8a 8a ce b9 db 48 70 5d aa 43 1d e9 2f 1d 51 72 bf ec 8c d8 70 79 e8 5a 62 16 39 41 88 b1 f0 2d d2 a6 60 9b 45 23 13 f0 ba d2 7a 57 30 21 cc 6b 9e 8d 20 bc 7e f1 6e af 50 92 17 2f b5 41 3e 23 ca c6 b7 b7 31 33 3b 2f 4b 38 8a ea 33 2a 2e f7 c1 ce 9f 82 10 c3 8e 72 24 59 56 46 d9 62 55 54 1b 9b 75 f8 69 55 5d dd 9c e3 61 66 bb ec aa 4f 52 61 4d 26 1d a2 3d 42 bd 8f 67 84 47 89 79 95 ad a8 e9 59 37 17 65 e5 29 1d 6e 2f 4e c6 48 67 44 2e 55 ad 53 05 d3 f1 9d 1d 48 92 00 eb b9 7a d3 Data Ascii: RtZYTQ;U;yj6QjKPf&_j$MVKSHuk_UHp]C/QrpyZb9A-`E#zW0!k ~nP/A>#13;/K83*.r$YVFbUTuiU]afORaM&=BgGyY7e)n/NHgD.USHz
2024-04-23 20:28:45 UTC	9663	IN	Data Raw: 52 bb d1 89 20 ad fa db f1 55 3c 51 8b 55 c1 d8 80 8a eb 85 7a 5f a5 3b cc 39 38 c3 0b 13 75 a1 af e1 ee 99 06 f5 c3 f6 95 a2 a8 4f ee 39 d9 1a 7a 9d db 40 00 eb 4a 77 a3 2d 78 8d 36 9f 64 47 68 88 97 9a 65 4d 1c dc 96 44 d1 e9 1c 92 33 a7 c8 9d 2a 96 48 9e 33 71 75 e6 53 4e 32 cc 72 0e e9 99 10 ff 00 c5 6f bf 69 93 0d fb 9e 23 91 b4 ca b1 b1 c4 56 b5 8c d6 3b 7a e9 7b fd 3f e2 a8 7d e1 e4 6c 33 b3 e6 6b ad fd 2a fe 27 d1 fa 2a 6b dd fb 79 1c 77 98 7f f4 ee fc 5f a1 f4 57 b6 e1 3e 43 64 2a d8 bb 39 db 22 36 bb 81 fa 83 03 d4 7e 6b d7 9e 55 99 aa da 29 bb 6f d9 59 cb ad 6a b6 cb 8e e9 0f d1 b5 78 3f 74 c1 87 07 71 72 11 61 90 71 92 77 11 6d d4 5a fe 15 e9 62 e4 42 2e 5b f6 8d fe 7b 76 96 fe 46 7a b5 74 15 a3 7f fc c2 1d bf a4 aa ca d2 99 93 6e ca 16 5a e8 Data Ascii: R U<QUz_;98uO9z@Jw-x6dGheMD3H3quSN2roi#V;z{?}l3k'kyw_W>Cd9"6~kU)oYjx?tqraqwmZbB.[{vFztnZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49985	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	2511	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:45 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:45 GMT Content-Type: image/jpeg Content-Length: 78968 Connection: close ETag: "e8463d4db529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:44 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202845Z-16f7b4795d4zv6vn3f4pau5h6400000005fg000000003b98 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:45 UTC	3750	IN	Data Raw: ff d8 ff e1 15 5f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 04 00 01 00 00 00 10 1f 00 00 01 01 04 00 01 00 00 00 b8 14 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 1e 00 00 00 ec 00 00 00 0f 01 02 00 05 00 00 00 0a 01 00 00 10 01 02 00 0a 00 00 00 0f 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 19 01 00 00 1b 01 05 00 01 00 00 00 21 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 29 01 00 00 32 01 02 00 14 00 00 00 48 01 00 00 3b 01 02 00 07 00 00 00 5c 01 00 00 69 87 04 00 01 00 00 00 64 01 00 00 e4 03 00 00 08 00 08 00 08 00 61 62 73 74 72 61 63 Data Ascii: _ExifII*!(1)2H;\idabstrac
2024-04-23 20:28:45 UTC	12288	IN	Data Raw: c7 06 30 34 17 38 b6 5c 6e b0 b7 e9 7f c4 a0 b3 2e 8a a9 7d 93 24 80 08 60 1a c7 f2 9e ae 74 3e b0 cb ef 7c b5 ad 71 86 89 f7 71 f7 37 fe 8a 93 18 80 e2 e0 14 65 a9 24 f1 9f d2 4e 41 2b 89 9c b8 a3 0d a2 07 b7 1f d1 ff 00 1b e4 75 71 ba 15 7e eb 6b a4 56 df 52 5a e7 4d 8e 32 c7 33 8f 65 6d e5 5b b3 2f ab e0 62 b9 83 31 b4 d6 20 b0 b5 a2 74 af 6e cf 4e a1 fb cd dc aa e6 7d 62 a7 1e 8f b3 65 58 58 7e 93 1c 01 73 74 fc d7 0a fe 8a c0 cb fa d0 cb 62 ba 2b 36 b5 91 0e b0 40 9d 46 95 fe ef bb fc 22 10 c9 90 4a 50 c9 1e 28 92 4c 6c 7a 5a 53 12 39 fd 20 c6 35 f3 8d 23 a7 f5 a4 eb e4 66 37 2f a8 33 d6 17 f5 47 81 21 a4 0a ab 07 7b f7 7e 87 1f d5 b3 f9 3e a7 ac cf 62 e9 f0 dc ca 43 7d d4 62 68 d2 59 4b 43 ec e3 f3 9e 0d 8f f6 ff 00 2f 21 79 9b fa b6 46 49 6b 2e c8 Data Ascii: 048\n.}$`t>\|qq7e$NA+uq~kVRZM23em[/b1 tnN}beXX~stb+6@F"JP(LlzZS9 5#f7/3G!{~>bC}bhYKC/!yFIk.
2024-04-23 20:28:45 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-23 20:28:45 UTC	16384	IN	Data Raw: 00 d9 2a 41 3a 97 1a 8a 60 60 04 99 f6 a4 9d 0d 63 6f fa 2c b4 fc 2e 0d 77 43 13 47 48 af 37 b7 a1 9a fe c3 14 63 e1 d4 57 8a 08 d4 de 30 e2 2b 2a 3c df 07 cb e2 dd f1 ee d6 fc 51 f5 fb 54 d1 28 22 79 b7 58 9f 46 fb 51 3c 5c ce 64 0e 22 cc 84 dc 1d 4d 8a 9f b5 4d 52 9b 82 38 cc ec fd 39 1b 55 32 cd c3 e4 71 d9 20 6d 65 62 7f 0f 8f dc 68 db 20 69 10 db be 33 1a 3f 09 87 27 ae 21 ed c9 f9 97 4f e1 52 b6 30 66 86 2d db af 1d 67 ff d1 f9 eb 23 1a 68 9c 2c a8 63 24 06 01 85 b4 3d 0d 50 c8 47 18 84 70 46 86 b2 34 b0 24 1f 0a e0 84 66 18 de b8 4c e8 9b 46 b7 b5 78 4e 13 09 d0 5a 9d 17 24 16 27 53 5d d2 72 0f 38 5b 75 a5 bd 21 ad 64 71 91 e0 75 a1 59 d6 91 cb a3 57 1b 8c ea f0 9b 45 21 da 47 85 12 b6 90 58 43 b1 f2 76 00 2a 85 68 87 5a cc c7 9c ea c4 03 60 69 75 Data Ascii: A:``co,.wCGH7cW0+<QT("yXFQ<\d"MMR89U2q mebh i3?'!OR0f-g#h,c$=PGpF4$fLFxNZ$'S]r8[u!dquYWE!GXCv*hZ`iu
2024-04-23 20:28:45 UTC	12288	IN	Data Raw: 6b 2b 27 19 72 8a 88 17 23 1e ec 37 f0 b5 88 a4 37 08 78 fb d1 16 db 38 3e 22 96 1b 59 49 12 9d fb 95 c6 c5 26 5e 3c d6 1e e4 d1 d8 9f 1d 29 59 32 58 f5 96 6c f8 11 38 9f 74 e1 7b 64 b6 db 32 9d 6b 5b 6d 96 a2 4f d4 b0 69 74 49 0c ba 0d 2b 5b 1b 4f 9f 75 92 4d 3b ed 20 53 99 cd 22 82 88 09 91 ef af 4a 90 93 1d 49 bb bc 84 29 f1 f0 a6 12 69 03 49 1a ef dc 45 fe 74 a0 0d 61 d4 42 18 b6 c5 37 d3 c2 8d 81 d2 79 08 9f 50 7e de 63 ac 1d 97 c7 46 a7 ea 8f 7b 11 e2 4f d9 5f 9b 75 46 2f 9d ea 67 da 60 5a 22 d3 d9 1f a5 ae a6 fa 56 20 c7 af 19 41 98 91 d0 03 af ca bb 91 45 27 94 19 18 74 24 5c 9b 78 fc ea 75 55 ae b0 e8 66 56 54 de 96 bd ef 73 f2 a6 95 50 3e 79 ca 19 c2 ff 00 75 7f 4c 3b db 37 62 7a 98 a9 bd fa 1b 0b d7 e9 9f f1 ba 7e 54 69 3e 5b ab d7 d4 5d 7c 32 Data Ascii: k+'r#77x8>"YI&^<)Y2Xl8t{d2k[mOitI+[OuM; S"JI)iIEtaB7yP~cF{O_uF/g`Z"V AE't$\xuUfVTsP>yuL;7bz~Ti>[]\|2
2024-04-23 20:28:45 UTC	4096	IN	Data Raw: 34 bb 70 fc 6f 27 c4 e1 72 11 e6 4d 8d 14 d8 78 d0 e7 46 a4 ef f7 21 9c fa 40 e9 ea 41 f5 54 ce 01 1a 76 9b 61 07 25 aa 74 b5 43 db e6 be 5b 7b 74 71 18 f9 b9 b8 90 e7 b7 25 26 2b c3 ed b4 56 d8 f0 38 df 27 4b ae 84 9f c5 59 c1 0f b2 6a e5 7d 35 fb 3e 28 c7 3b ba 38 dc 4c 8c 79 71 f1 43 b0 95 9a 37 62 01 f6 ca ed db e2 45 27 2a 1d 23 b6 e4 35 69 c2 0d 27 77 64 a2 2c 28 e8 80 23 a0 da 3f 0b 9b f8 fe 5f c3 51 bd 46 92 b4 40 45 64 1d c5 ce 3c 59 18 97 9a f1 bc 71 36 8c 48 6b 1e a7 fc b4 39 0f 08 58 94 10 d2 af de 3d d3 83 85 97 9c c1 93 d5 0c 84 02 42 90 34 37 16 a6 36 32 49 a7 b2 0e 23 a0 af 98 4e 5d c9 f7 26 4f 28 f8 44 49 78 5a 19 0a 6b 72 15 48 f4 db e7 f8 69 f8 71 5b 4a c6 bb 0a 30 1e d5 91 63 61 c9 26 7f b8 89 e8 fd 31 5d e4 5b a7 80 fe 5a 73 56 f0 7e Data Ascii: 4po'rMxF!@ATva%tC[{tq%&+V8'KYj}5>(;8LyqC7bE'*#5i'wd,(#?_QF@Ed<Yq6Hk9X=B4762I#N]&O(DIxZkrHiq[J0ca&1][ZsV~
2024-04-23 20:28:45 UTC	16384	IN	Data Raw: e5 82 f3 15 b6 e8 6f 2d 1c 0d 0b 31 bb b1 b1 0c 75 37 f9 d1 86 ac 8f 0a 15 23 b2 21 c7 85 cf 23 09 45 b5 8f a4 db a9 a5 64 27 b2 6b 61 51 5d 65 9e 6c 69 1f 1f 6b 9e ad a8 a4 b9 d2 3f 15 03 69 1a 63 e2 44 31 94 5a e0 5b 5f 88 a5 69 38 cc 6b 19 47 c6 89 24 0c a9 6d ab a8 f8 79 d4 7b c2 6d a0 ed 8a 47 a6 a6 58 38 ae 3b 6c 80 03 72 46 95 95 8b 0d 0c cf dd 66 a8 90 67 e0 cc d9 7e d4 30 b4 b2 b8 3b 51 45 c9 23 53 6a 52 12 bb 95 a0 e2 22 89 ae 23 36 83 14 c8 b0 34 b2 a4 31 4e af b2 42 7f 27 81 1e 17 35 f4 ca 09 a1 26 81 a6 40 ca 28 40 17 5b 37 c2 4e 3d 76 92 cd 21 78 9b dd 5e 9b 5f f0 d8 f9 53 90 a4 5e 50 ff 00 e3 cb 06 32 c3 bc c3 14 11 c4 93 40 21 95 8e a4 90 6f bc 79 35 3f 0e 61 51 48 2f 88 d2 a4 93 46 b9 7f 86 20 ee 7e 6b 2c a4 9f a9 9d 9a 52 ea 24 b6 81 fd Data Ascii: o-1u7#!#Ed'kaQ]elik?icD1Z[_i8kG$my{mGX8;lrFfg~0;QE#SjR"#641NB'5&@(@[7N=v!x^_S^P2@!oy5?aQH/F ~k,R$
2024-04-23 20:28:45 UTC	5586	IN	Data Raw: 29 f3 f5 0d 2b 8a d5 00 8e 10 4a da 4a 93 cc bc bc bc cb f5 a1 59 00 c9 11 3e df b7 b5 40 21 6e 41 20 5a e6 fe 7d 69 43 43 a9 96 e5 5b d3 45 b6 df 95 d2 c1 db 7d 89 cc 67 67 e1 43 3e de 36 1c f8 5e 5c 5c a9 fe 97 08 2e 6c 2f d6 a0 dc f5 6c 78 d5 8a fe 23 63 36 ba ac af 69 d1 72 31 17 f2 ab 2d c3 c4 df 56 30 c2 c3 e3 38 e8 b0 b9 18 e1 ff 00 70 ce c2 c8 94 72 18 b3 d8 e2 c9 1a 12 b1 ec 20 5c ee fa ab 77 6f b9 c3 6a 30 04 e4 f1 ab 4c 4d ef 4a de 33 66 46 2b 8f 6f 41 e8 66 c7 fd 6b bf d4 98 83 91 cb 9b 12 3c 57 90 8c 25 99 e6 8b 10 68 91 bc 86 ec 54 7f 0a 56 7c e4 8a 78 6b c2 51 b5 db 2a b5 c0 73 95 0a cf e6 b6 5a 78 99 0b 60 c9 10 51 ea 6d 1c f5 04 d4 9e ad 50 89 a0 71 8b c1 8c 78 8c 35 30 c8 e0 dd 96 f7 1e 07 ca a2 db 9e 52 63 b3 b6 a0 43 71 70 64 96 1f 69 Data Ascii: )+JJY>@!nA Z}iCC[E}ggC>6^\\.l/lx#c6ir1-V08pr \woj0LMJ3fF+oAfk<W%hTV\|xkQ*sZx`QmPqx50RcCqpdi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49986	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	2270	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/GettyImages-917750358-400x350px-lights.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect
2024-04-23 20:28:45 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:45 GMT Content-Type: image/jpeg Content-Length: 63917 Connection: close ETag: "f1a51c4fb529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:47 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202845Z-16f7b4795d4w5k2vcg2ruzx0fc000000067g000000000g1n X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:45 UTC	15904	IN	Data Raw: ff d8 ff e1 12 ba 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 16 11 00 00 01 01 03 00 01 00 00 00 7d 0a 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 63 01 00 00 d4 00 00 00 0f 01 02 00 06 00 00 00 37 02 00 00 10 01 02 00 0d 00 00 00 3d 02 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 4a 02 00 00 1b 01 05 00 01 00 00 00 52 02 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 5a 02 00 00 32 01 02 00 14 00 00 00 79 02 00 00 3b 01 02 00 0e 00 00 00 8d 02 00 00 69 87 04 00 01 00 00 00 9c 02 00 00 e4 04 00 00 08 00 08 00 08 00 57 69 64 65 20 61 6e 67 6c 65 20 63 6f 6c 6f 72 20 69 6d 61 67 65 20 64 65 70 69 63 74 69 6e Data Ascii: ExifII*}c7=JR(1Z2y;iWide angle color image depictin
2024-04-23 20:28:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-23 20:28:45 UTC	12288	IN	Data Raw: 9a ac f7 22 6c 39 05 46 84 5d c5 50 97 74 d6 76 36 ed ca 4d e2 d7 71 65 84 89 15 d7 da de 79 a1 da a4 21 f4 c2 5d 4d 36 e2 92 a1 9a d7 53 f2 3f 50 57 06 f8 36 3e 3a 8e 05 4d a6 81 c0 7e b0 a6 54 e2 ab 24 3d c6 0c 29 a3 e5 0e 8e 45 08 7a cf 74 ba d0 90 26 17 68 bc d4 94 03 d4 85 38 fb 7e a8 bd 4f 89 34 ae 0d 94 57 ad 05 ac e9 e8 97 51 6e d6 57 67 1c a2 58 aa a3 a6 b8 d3 d2 d5 4d 6d 83 86 72 86 9c c5 b2 b4 e5 fe d3 ca a8 24 d3 15 8a 78 33 eb 7a 79 bf 48 a4 3b 45 57 a7 af cc ac 05 b4 6a 69 ea a8 5c 52 14 26 93 99 95 38 84 cc 75 42 65 a5 3c db 3a 72 57 9c 33 8c 51 6e bd 5d cd aa 49 1a dd 00 cd 63 43 cc e5 a2 ec d2 d7 dc db e9 4a bd 70 eb 7a 4e 74 f5 f0 29 af fc e0 ad a7 67 dd ee 7a 4b 51 da 90 ac 1c 75 ea 61 54 da 46 fc 5a 51 9c 74 ac 5c 84 71 75 fa 26 0b 96 Data Ascii: "l9F]Ptv6Mqey!]M6S?PW6>:M~T$=)Ezt&h8~O4WQnWgXMmr$x3zyH;EWji\R&8uBe<:rW3Qn]IcCJpzNt)gzKQuaTFZQt\qu&
2024-04-23 20:28:45 UTC	4096	IN	Data Raw: f7 fc 8f ef fd 47 38 72 fe 9f 85 af da 13 c5 2e 2b db 0b af 77 c5 13 5e c1 7d b4 bc 33 0f 79 f4 b5 4a c6 80 48 9b b3 38 c7 43 78 fe d5 f5 1c 8b ae 9b 4a f8 c1 ab e3 d5 0b a3 a2 1c 65 e6 e2 00 4e 63 b3 08 0d fc e9 06 bd 03 3f c4 2f 52 bd 29 76 8e 9b d2 80 a7 4d 5b 01 33 3e ee 89 9e e8 ad b7 72 3d 40 f3 27 fd 44 fc 6c 7a a1 52 54 74 a0 8e 54 99 cb fc c8 a9 5a b5 65 62 92 b3 e2 aa 50 db 86 06 5b 36 46 df 7a a3 4e 5f 69 7e 19 1e c7 fc 5b 15 27 bc 97 ef 63 f5 63 32 ff 00 94 f3 5e b9 a5 9a b3 65 50 91 26 7b a7 1f 3e e5 55 a9 e8 fd ec c3 6c bd 66 af ce 95 a9 3a 06 b4 a5 45 0a 2a 44 94 0c 8e de 98 ee 6e 9e 0b ac f9 cd 9c df 51 84 72 41 55 0b d6 d4 85 4f ac 80 16 4a 4a 89 1e 53 ba 3a 3b 0f 85 e1 17 bb 5d 95 e2 2e b9 ac 5f 5f 31 69 d0 85 a8 66 5b 69 c3 a2 62 30 f3 Data Ascii: G8r.+w^}3yJH8CxJeNc?/R)vM[3>r=@'DlzRTtTZebP[6FzN_i~['cc2^eP&{>Ulf:E*DnQrAUOJJS:;].__1if[ib0
2024-04-23 20:28:45 UTC	15245	IN	Data Raw: d4 f1 1e f1 de 71 c1 71 30 3b c9 9b c7 b4 fb 04 70 fd fe 7d bb 6b e4 bf 68 fb 7f f8 8e 34 e5 2f f8 f3 f6 6d 9a 5f ed e0 7f f2 55 6e f0 39 3e bf 08 8f 1d b1 58 a3 5f bf 2f 18 af 93 fa 43 6f dc 61 cd a5 ed ec ff 00 ac ac 40 8d f7 9f 6d 7a cf 01 67 ba fd 44 7d 19 46 1a b8 38 e4 a5 e1 90 ec 12 11 af 95 e6 c6 6f 3b 9e b0 1e de 03 bc f5 47 55 62 89 ee 6e 33 f3 67 5d ca 5f 26 27 d0 36 5d 9e 41 f3 7f 5c 99 cf 72 46 a8 42 81 91 45 2a 08 ed 99 31 ee fd cc 58 5c f1 47 f3 1e 67 96 c3 54 17 88 ff d7 b8 d5 b7 5b da 92 94 57 3c f2 82 07 81 2f a6 64 63 b8 ca 11 bb 8c 6b 81 ed b9 12 70 82 6b bd f0 8c e6 e7 a9 ee 6d 54 97 12 fb 6e 2f 2a 90 78 a9 0a 05 2b 12 52 4c fa 44 22 d3 d1 25 35 9c 4d bc c7 79 3f 2d db ec e8 9e 12 8d 05 e8 de 67 bb a6 ae 2b ab 7e de 2b 90 e2 38 6a e1 Data Ascii: qq0;p}kh4/m_Un9>X_/Coa@mzgD}F8o;GUbn3g]_&'6]A\rFBE1X\GgT[W</dckpkmTn/x+RLD"%5My?-g+~+8j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49987	172.64.155.119	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:45 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:45 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a10ea936753-ATL
2024-04-23 20:28:45 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49989	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	679	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:45 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:45 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,17690d1a59a729c5262fd217ad7c365f,10.0.0.127,10458,89.187.171.132,,360366791643,1,1713904125.671,0.002,,.,0,0,0.000,0.000,-,0,0,203,224,112,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49991	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	2263	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-red-blue-Optical-Fibers.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.2.10.1713904103; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904121.42.0.0; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A44+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false
2024-04-23 20:28:46 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:46 GMT Content-Type: image/jpeg Content-Length: 59879 Connection: close ETag: "6f98e64db529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:45 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202845Z-16f56cb894fhr8rcrxcb44u4s4000000015000000000qauk X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:46 UTC	15904	IN	Data Raw: ff d8 ff e1 13 45 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 11 00 00 01 03 00 01 00 00 00 a0 10 00 00 01 01 03 00 01 00 00 00 10 0b 00 00 02 01 03 00 03 00 00 00 da 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 69 00 00 00 e0 00 00 00 0f 01 02 00 12 00 00 00 49 01 00 00 10 01 02 00 0b 00 00 00 5b 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 66 01 00 00 1b 01 05 00 01 00 00 00 6e 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 76 01 00 00 32 01 02 00 14 00 00 00 95 01 00 00 3b 01 02 00 11 00 00 00 a9 01 00 00 98 82 02 00 0d 00 00 00 ba 01 00 00 69 87 04 00 01 00 00 00 c8 01 00 00 5c 04 00 00 08 00 08 00 08 00 41 62 73 74 72 61 63 74 20 6e 65 6f 6e 20 63 6f 6c 6f 72 Data Ascii: EExifII*iI[fn(1v2;i\Abstract neon color
2024-04-23 20:28:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-23 20:28:46 UTC	12288	IN	Data Raw: ab d5 f5 2d 17 1d 97 2e 23 a6 44 20 31 45 31 cb 13 7d 2c 87 aa 9b 7f 03 56 50 4c e0 f5 f6 29 7d cb b5 86 64 0c 0e f6 90 6e 97 21 7d d4 b9 dd df c5 46 c4 c3 8b 23 e4 af d2 8e ca 63 0d f1 20 5d ad 53 9f bd 44 cd 46 77 27 fe 5f 69 62 3f ec b3 01 5a 44 34 f0 2c 36 6e 4c 99 19 32 4d 2b 6e 91 d8 b3 37 99 35 e7 dd d3 2d e7 9c 8d d5 ec 51 b0 0b 33 6a 64 c5 56 ba 71 25 72 88 45 ab 88 49 42 ea 2b 94 42 2d 5c 5d 49 49 a2 12 5a b8 85 ff d1 f9 5e da 52 e8 b8 92 d4 51 0a 54 68 23 5f 89 d4 9a 78 5a 8a 50 35 ac 96 e4 1a 52 2a 98 99 00 3b 87 43 4d 48 3e d4 cc 8d 47 4d d3 74 4d a4 ae 2e a5 ae a1 14 2e 22 8a 21 14 2e a5 14 a5 c4 57 50 96 bb 45 c5 d2 53 b1 a4 ba 76 d5 28 52 51 6a e3 b2 17 16 b1 a6 a9 a5 75 77 e1 4e 32 e2 7f 17 ca 9c a2 9d 8c e9 f7 5d 2b 8a 51 36 85 b0 ec 98 Data Ascii: -.#D 1E1},VPL)}dn!}F#c ]SDFw'_ib?ZD4,6nL2M+n75-Q3jdVq%rEIB+B-\]IIZ^RQTh#_xZP5R*;CMH>GMtM.."!.WPESv(RQjuwN2]+Q6
2024-04-23 20:28:46 UTC	4096	IN	Data Raw: 8d 52 57 4a 76 90 7e fa 48 b5 17 40 a8 ea 54 38 93 4f 2a a6 3a 99 19 fe 95 15 36 36 72 d0 cd 57 52 03 1c 8c 99 81 ae aa b5 4e df cf 88 6e 26 36 bf 54 07 5f bf a5 5c e2 62 4f 01 b4 8c cd e2 1a f0 a9 a7 da 8d c6 95 15 16 78 1e 36 da c3 d5 7b 11 e3 7a d1 b4 9d 4d 4a 8e 68 1e 37 a3 ab 0c 4e da e6 a6 8c 4c b8 ae 61 61 7b 90 45 fe 55 4d dc 62 c7 27 b4 e4 8e 39 39 48 99 43 29 c7 d9 57 f2 b2 8d 95 c7 c9 0b 10 ca 55 87 50 45 8d 52 e5 76 f2 8f 5e a4 47 33 16 a5 0d 96 d5 5a e2 9f 67 5c 32 fa 4d 76 3d 69 4c 98 8c 95 94 1f 23 56 02 ca 44 65 47 67 56 e8 01 00 8f 1a 7d 5d 0b 29 49 d4 53 6e ca 70 22 54 b1 06 90 ec 94 63 a5 48 8b e9 a4 3b 29 71 3e 84 84 7a a9 ba 21 f5 a4 61 a8 a7 23 d6 9b 35 17 34 68 2a d0 15 5e 63 2a 73 fe a9 f9 d7 27 d4 b3 c7 ad d4 85 35 46 da d3 0e b8 Data Ascii: RWJv~H@T8O:66rWRNn&6T_\bOx6{zMJh7NLaa{EUMb'99HC)WUPERv^G3Zg\2Mv=iL#VDeGgV}])ISnp"TcH;)q>z!a#54h^c*s'5F
2024-04-23 20:28:46 UTC	11207	IN	Data Raw: 0d 39 13 38 bd 59 58 76 bc cf db 64 04 ae d5 60 7d af 2f 12 f5 df f7 9e 0b 2f 1b f5 f1 66 c7 1c 4c 0b ba b9 f5 03 d4 8b 55 e4 79 a1 6d 5d 7a bc 39 b0 94 6c 42 61 d3 e7 bb 87 c4 1b d7 0f d2 54 b3 f6 57 72 73 d0 64 77 16 3e 0b ae 04 84 88 59 85 99 96 31 b6 f6 eb f3 b7 d3 59 09 bb e0 49 2b d8 24 7b 56 f0 f0 fe 98 ff 00 73 e5 6d cb 3f 9d 04 73 e4 3b 9c 91 c1 2c b4 e9 c1 27 e6 59 fd be af 0c 45 26 f0 89 ac 5e 4e 3b 43 2b 29 1b 59 4d 88 3e 62 ac 60 98 64 16 21 7a 89 2c f6 5e 29 42 6e 24 d6 90 a4 89 c1 fe b4 fd 53 40 f5 4e 95 b7 ce 9d 02 4e 10 d1 75 0b d9 fe 07 ad 2d 8e 8e 88 df 4a 94 4d bd 43 c3 ad 5d 62 4c ff 00 ea c8 98 69 a5 12 aa ca 9e 1d 34 bd 5b b1 33 b2 89 28 31 32 a1 c8 84 c5 2b 01 d0 1a a9 ce c0 e3 1f 79 50 c8 36 93 b2 b9 ed de d5 ff 00 74 8d b2 f2 64 Data Ascii: 98YXvd`}//fLUym]z9lBaTWrsdw>Y1YI+${Vsm?s;,'YE&^N;C+)YM>b`d!z,^)Bn$S@NNu-JMC]bLi4[3(12+yP6td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49995	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:45 UTC	446	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:46 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:46 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,8f5d96234da91b17c508436d8418cf18,10.0.0.207,15676,89.187.171.132,,7905986257,1,1713904126.223,0.002,,.,0,0,0.000,0.000,-,0,0,203,162,81,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49994	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:46 UTC	632	OUT	GET /tag/uet/134024834 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-23 20:28:46 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:46 GMT Content-Type: application/x-javascript Content-Length: 709 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2 x-azure-ref: 20240423T202846Z-16f56cb894fff7nsaw34vw5a9w000000018g00000000f63m X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:46 UTC	709	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 75 65 74 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 31 33 34 30 32 34 38 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","uet")}),!1);a[c]("metadata",(function(){a[c]("set","_u","134024834")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49996	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:46 UTC	2266	OUT	GET /osler/media/Osler/Content/Images/Tile-400x350/400x350-abstract-lines-blue-yellow.jpg?ext=.jpg HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A44+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; __utmb=48214201.3.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904125.38.0.0; _ga=GA1.1.1593841297.1713904103
2024-04-23 20:28:48 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:48 GMT Content-Type: image/jpeg Content-Length: 78968 Connection: close ETag: "e8463d4db529d91:0" Last-Modified: Mon, 16 Jan 2023 14:17:44 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202846Z-16f7b4795d4shqjdw1uzvqg8cs0000000570000000009r19 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:48 UTC	2340	IN	Data Raw: ff d8 ff e1 15 5f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 04 00 01 00 00 00 10 1f 00 00 01 01 04 00 01 00 00 00 b8 14 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 1e 00 00 00 ec 00 00 00 0f 01 02 00 05 00 00 00 0a 01 00 00 10 01 02 00 0a 00 00 00 0f 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 19 01 00 00 1b 01 05 00 01 00 00 00 21 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 29 01 00 00 32 01 02 00 14 00 00 00 48 01 00 00 3b 01 02 00 07 00 00 00 5c 01 00 00 69 87 04 00 01 00 00 00 64 01 00 00 e4 03 00 00 08 00 08 00 08 00 61 62 73 74 72 61 63 Data Ascii: _ExifII*!(1)2H;\idabstrac
2024-04-23 20:28:48 UTC	12288	IN	Data Raw: d0 6b fc b8 98 e7 86 51 00 9c 93 a2 74 d2 27 fe e1 2e 3e 37 4f 1b 8f da df a7 8d 31 f9 c3 fe 15 c8 b8 b5 61 36 e7 fe b3 30 f0 75 a8 8e 0f f5 92 e8 fd 2b f6 a6 73 30 6a bd 8c 75 9b 8b df b5 e4 35 8d 1b ac 7c 6d 66 ef e4 7f 2d 74 dd 4b ea 3e 0e 36 0d d7 e1 65 5c eb e9 61 b0 b6 d0 c2 d7 86 0d d6 34 06 0a fd 37 ec 1e cf 72 87 3f 3f 83 14 b1 e2 c9 c2 25 22 2b 5b f9 bd 37 2f 52 fc 5c a6 59 89 e4 8c e7 43 c2 23 fc 5f d5 bb 78 9d 47 0a ea 1b b2 f0 1e 5c c6 ed 2d 70 d4 8f 6a ea ba 7e 35 ac a1 83 79 76 9a cc f8 af 36 e8 4f a5 ed 63 dd 61 d1 ec 31 00 7e 77 f5 8a f5 3c 4b 6a 35 00 d2 aa 8c 70 f7 4c 48 e1 02 fa ff 00 59 b5 29 48 40 10 4c b8 aa ec 78 3c cf d7 2c 7b c6 05 97 8c d3 8e 2a 73 1c 41 2f 0d 32 e0 cf 76 c6 59 fb cb 8d c7 ba c6 17 39 d9 f8 cf d6 07 a8 27 c7 bd Data Ascii: kQt'.>7O1a60u+s0ju5\|mf-tK>6e\a47r??%"+[7/R\YC#_xG\-pj~5yv6Oca1~w<Kj5pLHY)H@Lx<,{*sA/2vY9'
2024-04-23 20:28:48 UTC	8192	IN	Data Raw: 61 61 62 2d 36 34 32 39 2d 62 66 34 66 2d 61 31 38 65 2d 63 39 62 65 63 35 62 36 30 37 39 39 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 31 39 33 31 37 43 45 35 35 36 32 39 38 44 46 35 44 31 37 41 43 45 39 30 39 41 32 32 41 31 33 45 22 3e 20 3c 64 63 3a 74 69 74 6c 65 3e 20 3c 72 64 66 3a 41 6c 74 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 31 31 34 31 34 36 36 34 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 4e 69 6b 61 64 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 64 63 3a 63 72 65 61 74 Data Ascii: aab-6429-bf4f-a18e-c9bec5b60799" xmpMM:OriginalDocumentID="19317CE556298DF5D17ACE909A22A13E"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">1141466414</rdf:li> </rdf:Alt> </dc:title> <dc:creator> <rdf:Seq> <rdf:li>Nikada</rdf:li> </rdf:Seq> </dc:creat
2024-04-23 20:28:48 UTC	16384	IN	Data Raw: f1 d7 e2 2a a4 55 69 97 93 26 5c 47 4a ca 07 35 da 12 b1 66 c3 98 8f 25 7d 47 d8 c2 9b e8 53 84 f2 75 60 74 71 02 e1 93 9f e3 67 0b 92 18 c2 08 da 5b d4 3e c6 14 96 76 59 49 c5 83 36 ab de 9d 2f 83 e4 60 9d 42 4a 06 eb 0d 0d 2c e5 0d 14 76 67 19 a8 9f ff d0 f9 d1 c7 a8 d3 cc 58 92 46 de 9a 35 30 08 9a c9 40 d0 84 d9 24 3a 57 43 4e 15 84 a1 05 81 34 c0 62 cc 9c 3a 8b dc 5e 9a 1a 05 24 12 e5 4c ae 92 2c 8c 24 88 de 26 04 dd 6d f9 7c a9 6f 90 f1 86 b8 c5 29 4d 0c 2f 03 b8 b9 9c 2c 97 cb 83 25 bf 55 2a 7b 6e ef ea f4 5e f6 b1 f8 d1 26 e1 c1 ad 75 93 e6 d8 e2 c8 a1 59 79 47 34 2f 1b bd f9 dc 58 32 31 d2 55 79 32 5d a5 93 2a 45 bc 81 98 6d 36 f9 0f a7 f2 d1 7e 69 86 9f 6a 25 fa 56 17 21 88 d1 05 b6 2f 76 39 8b f7 1a 46 e1 f0 78 96 c2 54 c1 83 db 5c d7 0c 59 e4 Data Ascii: Ui&\GJ5f%}GSu`tqg[>vYI6/`BJ,vgXF50@$:WCN4b:^$L,$&m\|o)M/,%U{n^&uYyG4/X21Uy2]*Em6~ij%V!/v9FxT\Y
2024-04-23 20:28:48 UTC	8192	IN	Data Raw: 97 db 0f fb 3e 0f 64 27 fd 9b 8d 22 e7 1d 37 8e 83 5d bf 6f 8d 08 ea 39 7d b3 a7 a3 e0 f2 c0 f2 b0 71 11 bd b6 c4 8e 37 3f 49 05 b6 9a ef f7 0c 9e d9 ef ed 38 7c b1 5e 57 1d 39 b9 c6 b4 53 0d 7d a6 bb 2b 7c 9a 8b fb 9e 4f 9a 0f f6 5c 15 ed 80 ae 4f 28 84 a1 c7 02 45 d0 a9 56 eb 5c 3b ec 87 51 18 bd 33 08 34 92 1c 8e 79 87 f4 e0 00 f9 95 ff 00 13 5c 1b ac c7 b2 34 ec f6 e3 b6 2e ca 93 ba 6e 6d 12 0f 03 71 4e 5c d9 bd 91 4d b6 db 76 93 02 61 dd 27 ea 30 af fc 24 d5 0b 93 29 f6 49 1f 06 d8 70 ba 4b 87 0f 70 07 05 f2 90 29 f0 09 d3 f8 d3 48 c8 47 19 38 38 01 d1 4f ed 96 5c 18 79 32 ab bf 26 ff 00 25 02 a7 60 de d9 40 6c 7d 8b 3f ff d6 ec 69 c2 93 92 f0 ac cb e8 d4 b9 a9 6c ab 11 59 e2 f4 5a d2 2f cb ed c8 4c d2 4a 32 12 28 c7 d4 6d e3 f0 f9 d0 26 30 49 e6 e1 Data Ascii: >d'"7]o9}q7?I8\|^W9S}+\|O\O(EV\;Q34y\4.nmqN\Mva'0$)IpKp)HG88O\y2&%`@l}?ilYZ/LJ2(m&0I
2024-04-23 20:28:48 UTC	8192	IN	Data Raw: c8 95 6f 31 f7 c4 8d 26 d3 b5 89 48 c1 51 7b 6d 75 fc ab 50 fe 63 70 fd d5 a7 ea fe 29 a2 76 9b 54 a5 ee 5a 9e f7 ee a4 33 0b bb bb 06 1c 74 1c 1e 20 96 18 c3 b2 98 60 11 a5 81 b7 d5 27 5f cc b5 1e 41 94 93 71 d7 f4 cd 4c 38 b1 2a 8b 54 50 fc bc 50 1e e1 fd ca 32 e2 2c 18 f8 41 42 b3 11 24 cc 09 fa 76 8b 28 1f 94 eb 5c c2 e7 13 5d 28 7d a8 cc a5 4e 91 37 6e f3 7d c1 ca f7 06 14 02 78 e1 c6 67 dd b5 23 b1 3b 46 eb 6e 24 fe 5a 7f 50 eb 79 06 17 a7 2b 58 6d f8 a4 9b 6f f8 f6 0c 4c 1b bf 69 f1 4e a1 c8 e4 67 e4 c8 60 f7 1d e3 60 18 c6 3e 91 70 0d 7e 6d bc cb 97 21 a5 6e a8 ff 00 d2 7d 26 04 45 17 50 03 0b c3 e1 f3 64 ca f7 44 6d b0 ad b7 1d 05 f6 db c6 ab c1 d3 b3 be 5b c2 9b 6d ef 7d 18 8c bb a4 0b 4a c6 f8 1d bc f1 c4 b1 4d 20 5b 29 dc 17 53 ad 68 60 e8 2e Data Ascii: o1&HQ{muPcp)vTZ3t `'_AqL8*TPP2,AB$v(\](}N7n}xg#;Fn$ZPy+XmoLiNg``>p~m!n}&EPdDm[m}JM [)Sh`.
2024-04-23 20:28:48 UTC	16384	IN	Data Raw: 39 9e d3 e2 60 7e 6f 1b 93 e4 ff 00 eb 30 a3 57 c2 31 9b 2c ec c2 f6 75 fc 44 1f 4e da 2b 06 b5 32 4c 19 72 72 1c 6b a3 1b 4f 8b ea bf 81 7d ff 00 a3 36 c2 e4 7f 6c b8 ae 6f b7 33 30 78 c7 cb 55 c5 92 3e 63 1d 94 10 67 75 01 58 ac be 87 91 5b 7e eb 7a 36 32 fe 2a cd 6f 58 86 15 09 e4 b7 cb 3e 8d 76 c9 55 ad d9 3c f7 79 be 5e 08 5e 57 74 e6 e2 76 e6 3e 06 06 2c 58 c3 03 92 fd 76 14 a2 ec c8 59 d9 92 3b 1d 3d 1b b6 16 fc 69 e9 a4 65 c3 75 49 24 dc b6 cb f6 a0 07 00 01 6e b2 19 f9 7e 63 3b 2f 27 2f 33 21 8b e5 ca 92 65 c6 ba 24 8c 05 97 d2 34 f4 8f a6 bc 82 c5 b4 47 64 c4 ae 6a 46 a0 51 7d d9 0f 2e 04 e7 d2 a4 fa 00 4b 69 ea a5 65 6d 2a 61 6d 92 dd 3e 78 67 6c f0 33 7b ac ce b6 2c 3e 9f 85 64 8d fb 16 2a a2 06 f7 22 d3 58 ee 5c 0c 78 65 43 b4 17 8f 4b db c2 Data Ascii: 9`~o0W1,uDN+2LrrkO}6lo30xU>cguX[~z62oX>vU<y^^Wtv>,XvY;=ieuI$n~c;/'/3!e$4GdjFQ}.Kiemam>xgl3{,>d*"X\xeCK
2024-04-23 20:28:48 UTC	6996	IN	Data Raw: c5 97 29 db 10 ca f3 ae 20 36 8d 59 c9 2c 54 7d b5 f4 38 76 78 d1 83 01 cf 4b 2e f1 4f 99 cf d4 72 65 46 15 d0 f3 48 a7 ca f7 38 e0 a0 5b d2 37 0f 2b 51 26 3a 39 9e dc 6e 2e c0 07 6d 20 98 64 2c 9a fa ae ba 7c ea ba 6b 31 f1 98 e1 32 9f d9 88 48 fb 54 02 01 1d 6d 7a f2 a6 b5 96 36 e1 8a 85 96 0e 17 03 3b 3a 6c 38 e1 8f 60 ca 93 d9 8b 26 5f 4c 26 4f 22 e7 d3 a5 35 31 31 a5 3b 7c 51 59 37 48 a1 89 35 b0 5c c8 bd fb 7e 19 70 e1 70 78 9c 6e 39 25 9c fe af 27 1b 21 d3 33 05 b4 89 91 3a 6d 71 d7 79 a6 29 55 5d 75 a7 7a 2b 27 aa ef 41 c8 ae 83 d3 c9 e3 bb e1 f7 66 98 19 93 cb c6 7e 94 93 16 3c 13 49 36 2a 47 e9 68 cc 9d 75 1e a3 61 e9 15 9e bb 9a a1 1c 02 93 6c d3 6d a8 5c 97 71 66 55 57 bb c7 6c d1 31 c9 c3 60 a2 c4 b1 bc 87 c6 b3 db 29 b0 cb 6d e6 80 4b 80 b6 Data Ascii: ) 6Y,T}8vxK.OreFH8[7+Q&:9n.m d,\|k12HTmz6;:l8`&_L&O"511;\|QY7H5\~ppxn9%'!3:mqy)U]uz+'Af~<I6*Ghualm\qfUWl1`)mK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49998	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:46 UTC	721	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:46 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:46 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,a1725d8f67adac3debf5cc8313f9dfa9,10.0.0.127,15314,89.187.171.132,,360366797156,1,1713904126.890,0.002,,.,0,0,0.000,0.000,-,0,0,203,178,89,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50000	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:46 UTC	716	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:46 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:46 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,c88cd995114a79da22a95c71910ba6fa,10.0.0.127,30468,89.187.171.132,,7905989421,1,1713904126.903,0.002,,.,0,0,0.000,0.000,-,0,0,203,86,43,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50001	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:46 UTC	2477	OUT	POST /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/en/about-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; CMSUserPage={"TimeStamp":"2024-04-23T16:28:38.7419531-04:00","LastPageDocumentID":3,"LastPageNodeID":3,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _clsk=1me437r%7C1713904121758%7C2%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A44+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; __utmb=48214201.3.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904125.38.0.0; _ga=GA1.1.1593841297.1713904103
2024-04-23 20:28:46 UTC	76	OUT	Data Raw: 7b 22 4e 6f 64 65 41 6c 69 61 73 50 61 74 68 22 3a 22 2f 41 62 6f 75 74 2d 55 73 22 2c 22 44 6f 63 75 6d 65 6e 74 43 75 6c 74 75 72 65 43 6f 64 65 22 3a 22 65 6e 2d 43 41 22 2c 22 55 72 6c 52 65 66 65 72 72 65 72 22 3a 22 22 7d Data Ascii: {"NodeAliasPath":"/About-Us","DocumentCultureCode":"en-CA","UrlReferrer":""}
2024-04-23 20:28:47 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:47 GMT; path=/; HttpOnly Set-Cookie: VisitorStatus=11064158108; expires=Sat, 23-Apr-2044 20:28:47 GMT; path=/; HttpOnly Set-Cookie: CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; expires=Tue, 23-Apr-2024 20:48:47 GMT; path=/; HttpOnly Set-Cookie: CMSLandingPageLoaded=true; expires=Tue, 23-Apr-2024 20:48:47 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Robots-Tag: none X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202847Z-16f7b4795d4xckz44h8yg7a8u800000005fg000000008xnz X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50004	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:47 UTC	488	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904125971&i=gtm&dwt=5&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:47 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:47 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,2278e72c1c8ad91a61fc94120f10b1de,10.0.0.207,20524,89.187.171.132,,7905991654,1,1713904127.421,0.002,,.,0,0,0.000,0.004,-,0,0,203,136,68,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50005	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:47 UTC	483	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fhome%23main&tag=DwellTime&ts=1713904125990&i=gtm&dwt=4&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:47 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:47 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,e465b975c753eb22efc02c8f3752ade0,10.0.0.207,20868,89.187.171.132,,7905991945,1,1713904127.497,0.002,,.,0,0,0.000,0.004,-,0,0,203,123,61,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50006	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:47 UTC	2205	OUT	GET /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904125.38.0.0; _ga=GA1.1.1593841297.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}
2024-04-23 20:28:48 UTC	494	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 20:28:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close Allow: POST Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:47 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202847Z-16f56cb894fjdrtxgas6zynh6n00000001fg00000000663w X-Cache: CONFIG_NOCACHE
2024-04-23 20:28:48 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50014	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:49 UTC	716	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:49 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:49 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,31713294e38f8a7eae42e57b83cfae4c,10.0.0.127,51936,89.187.171.132,,231443102237,1,1713904129.670,0.002,,.,0,0,0.000,0.000,-,0,0,203,221,110,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50012	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:49 UTC	2491	OUT	GET /en/contact-us HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904126.37.0.0
2024-04-23 20:28:52 UTC	787	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 25092 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:51 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=Edge X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET set-cookie: ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; Path=/; Secure; HttpOnly; set-cookie: ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; SameSite=none; Path=/; Secure; HttpOnly; x-azure-ref: 20240423T202849Z-16f56cb894f4hxjjs88cmwhuqs00000001b0000000006asw X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:52 UTC	15597	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 43 6f 6e 74 61 63 74 20 55 73 20 7c 20 4f 73 6c 65 72 2c 20 48 6f 73 6b 69 6e 20 26 61 6d 70 3b 20 48 61 72 63 6f 75 72 74 20 4c 4c 50 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 20 0a 3c 21 2d 2d 20 4f 6e 65 54 72 75 73 74 20 43 6f 6f 6b 69 65 73 20 43 6f 6e 73 65 6e 74 20 4e 6f 74 69 63 65 20 73 74 61 72 74 20 66 6f 72 20 6f 73 6c 65 72 2e 63 6f 6d 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 Data Ascii: <!DOCTYPE html><html lang="en" xml:lang="en"><head id="head"><title>Contact Us \| Osler, Hoskin & Harcourt LLP</title><meta charset="UTF-8" /> ... OneTrust Cookies Consent Notice start for osler.com --><script src="https://cdn.cookielaw
2024-04-23 20:28:52 UTC	146	IN	Data Raw: 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 73 6c 65 72 2e 63 6f 6d 2f 66 72 2f 63 6f 6e 74 61 63 74 65 7a 2d 6e 6f 75 73 22 3e 46 72 61 6e c3 a7 61 69 73 3c 2f 61 3e 0d 0a 0d 0a 20 20 20 20 20 20 3c 2f 6e 61 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 53 4f 43 49 41 4c 20 41 4e 44 20 53 55 42 53 43 52 49 42 45 20 4c 49 4e 4b 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 64 69 Data Ascii: href="https://www.osler.com/fr/contactez-nous">Franais</a> </nav> ... SOCIAL AND SUBSCRIBE LINK--> <di
2024-04-23 20:28:52 UTC	9349	IN	Data Raw: 76 20 63 6c 61 73 73 3d 22 6f 66 66 63 61 6e 76 61 73 2d 2d 73 75 62 73 63 72 69 62 65 2d 73 6f 63 69 61 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 4f 43 49 41 4c 20 49 43 4f 4e 53 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 6f 73 6c 65 72 2d 68 6f 73 6b 69 6e 2d 26 2d 68 61 72 63 6f 75 72 74 2d 6c 6c 70 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4f 73 6c 65 72 20 6f 6e 20 4c 69 6e 6b 65 64 49 6e 22 20 63 6c 61 73 73 3d 22 6f 66 66 63 61 6e 76 61 73 2d 2d 73 6f 63 69 61 6c 20 6d 6f 62 69 6c 65 2d 6e 61 76 2d 6c 69 6e 6b 65 64 69 6e 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 20 20 20 Data Ascii: v class="offcanvas--subscribe-social"> ... SOCIAL ICONS --> <a href="https://www.linkedin.com/company/osler-hoskin-&-harcourt-llp" aria-label="Osler on LinkedIn" class="offcanvas--social mobile-nav-linkedin" target="_blank">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50015	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:49 UTC	483	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904128765&i=gtm&dwt=2792&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:50 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:50 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,d4328282d7b9e6a3aaf9f1d4b2e219e0,10.0.0.207,47760,89.187.171.132,,360366811329,1,1713904130.203,0.004,,.,0,0,0.004,0.004,-,0,0,203,139,69,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50019	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:52 UTC	1195	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904124141&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&dt=About%20Osler%20%7C%20Canadian%20Business%20Law%20Firm&_s=1&tfd=8351 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 235 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:52 UTC	235	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 31 30 26 5f 65 74 3d 31 36 33 35 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 31 30 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 31 30 26 5f 65 74 3d 32 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 32 35 26 5f 65 74 3d 38 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 32 35 Data Ascii: en=page_viewen=scroll_depth%25&epn.percentage=10&_et=1635en=scroll_depth&epn.scroll_threshold=10&epn.percent_scroll=10&_et=2en=scroll_depth%25&epn.percentage=25&_et=8en=scroll_depth&epn.scroll_threshold=25&epn.percent_scroll=25
2024-04-23 20:28:52 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:28:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50013	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:52 UTC	2432	OUT	GET /Osler/js/dist/datepicker/wet/css/event-cal-style.css HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.osler.com/en/contact-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904126.37.0.0
2024-04-23 20:28:53 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:52 GMT Content-Type: text/css Content-Length: 3237 Connection: close ETag: "09e76b69f86da1:0" Last-Modified: Thu, 04 Apr 2024 14:52:28 GMT X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202852Z-16f56cb894fdm9r7z8wfs1qqw000000001ag00000000k5nf X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:53 UTC	3237	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 2f 2a 0d 0a 20 2a 20 57 65 62 20 45 78 70 65 72 69 65 6e 63 65 20 54 6f 6f 6c 6b 69 74 20 28 57 45 54 29 20 2f 20 42 6f ee 74 65 20 e0 20 6f 75 74 69 6c 73 20 64 65 20 6c 27 65 78 70 e9 72 69 65 6e 63 65 20 57 65 62 20 28 42 4f 45 57 29 0d 0a 20 2a 20 77 65 74 2d 62 6f 65 77 2e 67 69 74 68 75 62 2e 69 6f 2f 77 65 74 2d 62 6f 65 77 2f 4c 69 63 65 6e 73 65 2d 65 6e 2e 68 74 6d 6c 20 2f 20 77 65 74 2d 62 6f 65 77 2e 67 69 74 68 75 62 2e 69 6f 2f 77 65 74 2d 62 6f 65 77 2f 4c 69 63 65 6e 63 65 2d 66 72 2e 68 74 6d 6c 0d 0a 20 2a 2f 0d 0a 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 2f 2a 0d 0a 20 2a 20 57 65 62 20 45 78 70 65 72 69 65 6e 63 65 20 54 6f 6f 6c 6b 69 74 20 28 57 45 54 29 20 Data Ascii: @charset "UTF-8";/* * Web Experience Toolkit (WET) / Bote outils de l'exprience Web (BOEW) * wet-boew.github.io/wet-boew/License-en.html / wet-boew.github.io/wet-boew/Licence-fr.html / @charset "UTF-8";/ * Web Experience Toolkit (WET)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50020	104.18.32.137	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:53 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:53 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:53 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a42e8846733-ATL
2024-04-23 20:28:53 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50022	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:54 UTC	2485	OUT	POST /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive Content-Length: 78 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/en/contact-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; __utmb=48214201.3.10.1713904103; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A46+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; CMSUserPage={"TimeStamp":"2024-04-23T16:28:47.2397139-04:00","LastPageDocumentID":1181,"LastPageNodeID":1109,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904126.37.0.0
2024-04-23 20:28:54 UTC	78	OUT	Data Raw: 7b 22 4e 6f 64 65 41 6c 69 61 73 50 61 74 68 22 3a 22 2f 43 6f 6e 74 61 63 74 2d 55 73 22 2c 22 44 6f 63 75 6d 65 6e 74 43 75 6c 74 75 72 65 43 6f 64 65 22 3a 22 65 6e 2d 43 41 22 2c 22 55 72 6c 52 65 66 65 72 72 65 72 22 3a 22 22 7d Data Ascii: {"NodeAliasPath":"/Contact-Us","DocumentCultureCode":"en-CA","UrlReferrer":""}
2024-04-23 20:28:54 UTC	885	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:54 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:54 GMT; path=/; HttpOnly Set-Cookie: VisitorStatus=11064158108; expires=Sat, 23-Apr-2044 20:28:54 GMT; path=/; HttpOnly Set-Cookie: CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; expires=Tue, 23-Apr-2024 20:48:54 GMT; path=/; HttpOnly Set-Cookie: CMSLandingPageLoaded=true; expires=Tue, 23-Apr-2024 20:48:54 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Robots-Tag: none X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202854Z-16f56cb894f8ffkn2s0gcrypvn000000018g00000000taer X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50024	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:54 UTC	681	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:55 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:55 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,46ec98b2d5d7faea78367198b5c47984,10.0.0.127,48566,89.187.171.132,,360366832938,1,1713904135.071,0.002,,.,0,0,0.000,0.000,-,0,0,203,171,85,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50028	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:55 UTC	632	OUT	GET /tag/uet/134024834 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-23 20:28:55 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:55 GMT Content-Type: application/x-javascript Content-Length: 709 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0 x-azure-ref: 20240423T202855Z-16f7b4795d45gcwcnfmc7gcw3g00000002sg000000000tdz X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:28:55 UTC	709	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 75 65 74 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 31 33 34 30 32 34 38 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","uet")}),!1);a[c]("metadata",(function(){a[c]("set","_u","134024834")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50029	172.64.155.119	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:55 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:55 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:28:55 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a50ea6a1385-ATL
2024-04-23 20:28:55 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50030	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:55 UTC	2207	OUT	GET /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; _clsk=1me437r%7C1713904126621%7C3%7C1%7Cn.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904134.29.0.0; _ga=GA1.1.1593841297.1713904103; __utmb=48214201.4.10.1713904103
2024-04-23 20:28:56 UTC	494	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 20:28:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close Allow: POST Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:28:56 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202856Z-16f56cb894fcps2fa8agb63e8w000000014000000000mhwb X-Cache: CONFIG_NOCACHE
2024-04-23 20:28:56 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50036	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:57 UTC	448	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:57 UTC	373	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:57 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,e17c135d47574decff842091501fbb8b,10.0.0.207,35286,89.187.171.132,,7906036371,1,1713904137.780,0.003,,.,0,0,0.000,0.000,-,0,0,203,173,86,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50039	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:57 UTC	717	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:58 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,b36d39961cc0ad51ea54220048fca38c,10.0.0.127,60778,89.187.171.132,,360366846117,1,1713904138.131,0.002,,.,0,0,0.000,0.000,-,0,0,203,165,82,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50040	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:57 UTC	724	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:58 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,35e9df960d2404f625ac561e240e28cb,10.0.0.127,43640,89.187.171.132,,231692791308,1,1713904138.163,0.002,,.,0,0,0.000,0.004,-,0,0,203,159,79,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50042	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:58 UTC	715	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904137554&i=gtm&dwt=614&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:58 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,1220f4964c906adc2dd535ba1b5a79c8,10.0.0.127,2656,89.187.171.132,,231443141680,1,1713904138.454,0.002,,.,0,0,0.000,0.000,-,0,0,203,253,126,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50047	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:58 UTC	484	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137168&i=gtm&dwt=530&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:58 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,3e61c10b7741884d451d605d8339e924,10.0.0.207,56930,89.187.171.132,,360366848474,1,1713904138.657,0.003,,.,0,0,0.000,0.004,-,0,0,203,154,77,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50048	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:58 UTC	491	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904137183&i=gtm&dwt=12&ive=webkitHidden HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:58 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,2ceefecd8927f69bb6a6466d5e8e8ee5,10.0.0.207,64526,89.187.171.132,,231692794295,1,1713904138.725,0.002,,.,0,0,0.000,0.000,-,0,0,203,140,70,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50049	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:28:58 UTC	482	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fabout-us&tag=DwellTime&ts=1713904137554&i=gtm&dwt=614&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:28:59 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:28:58 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,fb58582ba46f72318d9afbcad5f1cccb,10.0.0.207,20984,89.187.171.132,,231443144623,1,1713904138.975,0.002,,.,0,0,0.000,0.004,-,0,0,203,225,112,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:28:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50051	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:00 UTC	1205	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904132806&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&dt=Contact%20Us%20%7C%20Osler%2C%20Hoskin%20%26%20Harcourt%20LLP&_s=1&tfd=10646 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 356 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:00 UTC	356	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 31 30 26 5f 65 74 3d 32 33 37 30 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 31 30 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 31 30 26 5f 65 74 3d 33 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 32 35 26 5f 65 74 3d 31 32 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 32 35 26 5f 65 74 3d 33 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 Data Ascii: en=page_viewen=scroll_depth%25&epn.percentage=10&_et=2370en=scroll_depth&epn.scroll_threshold=10&epn.percent_scroll=10&_et=3en=scroll_depth%25&epn.percentage=25&_et=12en=scroll_depth&epn.scroll_threshold=25&epn.percent_scroll=25&_et=3en=scroll_d
2024-04-23 20:29:00 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:29:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50055	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:01 UTC	718	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:01 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:29:01 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,1b43d9ead20d506fbcb684bd0c39de23,10.0.0.127,62432,89.187.171.132,,7906049865,1,1713904141.635,0.002,,.,0,0,0.000,0.000,-,0,0,203,86,43,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:29:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50052	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:01 UTC	2515	OUT	GET /en/offices HTTP/1.1 Host: www.osler.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.4.10.1713904103; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904136.27.0.0; _clsk=1me437r%7C1713904137534%7C4%7C1%7Cn.clarity.ms%2Fcollect; __utmli=two-column-main
2024-04-23 20:29:01 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:29:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26679 Connection: close Cache-Control: no-cache, must-revalidate Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:29:01 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET x-azure-ref: 20240423T202901Z-16f7b4795d4hbs9nymf33py59c00000005xg000000001b6g X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:29:01 UTC	13524	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4f 66 66 69 63 65 20 4c 6f 63 61 74 69 6f 6e 73 20 2d 20 4f 73 6c 65 72 2c 20 48 6f 73 6b 69 6e 20 26 61 6d 70 3b 20 48 61 72 63 6f 75 72 74 20 4c 4c 50 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 20 0a 3c 21 2d 2d 20 4f 6e 65 54 72 75 73 74 20 43 6f 6f 6b 69 65 73 20 43 6f 6e 73 65 6e 74 20 4e 6f 74 69 63 65 20 73 74 61 72 74 20 66 6f 72 20 6f 73 6c 65 72 2e 63 6f 6d 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f Data Ascii: <!DOCTYPE html><html lang="en" xml:lang="en"><head id="head"><title>Office Locations - Osler, Hoskin & Harcourt LLP</title><meta charset="UTF-8" /> ... OneTrust Cookies Consent Notice start for osler.com --><script src="https://cdn.coo
2024-04-23 20:29:01 UTC	4096	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 53 75 62 6d 69 74 20 53 65 61 72 63 68 22 20 2f 3e 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 50 52 49 4d 41 52 59 20 41 4e 44 20 53 45 43 4f 4e 44 41 52 59 20 4e 41 56 20 43 4f 4d 42 49 4e 45 44 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 6e 61 76 20 69 64 3d 22 70 5f 6c 74 5f 63 74 6c 30 35 5f 4d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 5f 6d 6f 62 69 6c 65 4e 61 76 69 67 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6f 66 66 63 61 6e 76 61 73 2d 2d 6e 61 76 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 72 69 6d 61 72 79 20 4e 61 76 69 67 61 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 Data Ascii: -label="Submit Search" /></div> </div> ... PRIMARY AND SECONDARY NAV COMBINED--> <nav id="p_lt_ctl05_MobileNavigation_mobileNavigation" class="offcanvas--nav" aria-label="Primary Navigation"> <a id="
2024-04-23 20:29:01 UTC	9059	IN	Data Raw: 74 20 57 65 73 74 3c 62 72 20 2f 3e 0d 0a 31 20 46 69 72 73 74 20 43 61 6e 61 64 69 61 6e 20 50 6c 61 63 65 3c 62 72 20 2f 3e 0d 0a 53 75 69 74 65 20 36 32 30 30 2c 20 50 2e 4f 2e 20 42 6f 78 20 35 30 3c 62 72 20 2f 3e 0d 0a 54 6f 72 6f 6e 74 6f 20 4f 4e 26 6e 62 73 70 3b 20 4d 35 58 20 31 42 38 3c 62 72 20 2f 3e 0d 0a 3c 73 74 72 6f 6e 67 3e 52 65 63 65 70 74 69 6f 6e 20 4c 6f 63 61 74 65 64 20 6f 6e 20 74 68 65 20 36 33 3c 73 75 70 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 22 32 22 3e 72 64 3c 2f 66 6f 6e 74 3e 3c 2f 73 75 70 3e 20 46 6c 6f 6f 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 0d 0a 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 54 65 6c 3a 20 34 31 36 2e 33 36 32 2e 32 31 31 31 3c 2f 73 70 61 6e 3e 3c 62 72 20 2f 3e 0d 0a 20 Data Ascii: t West<br />1 First Canadian Place<br />Suite 6200, P.O. Box 50<br />Toronto ON  M5X 1B8<br /><strong>Reception Located on the 63<sup><font size="2">rd</font></sup> Floor</strong></p></p> <span>Tel: 416.362.2111</span><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50056	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:01 UTC	485	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?j=1&u=https%3A%2F%2Fwww.osler.com%2Fen%2Fcontact-us&tag=DwellTime&ts=1713904140732&i=gtm&dwt=3548&ive=blur HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:02 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:29:02 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,c05ec5df998c9869c0e29ba0fa9444b0,10.0.0.207,10730,89.187.171.132,,360366865055,1,1713904142.171,0.008,,.,0,0,0.000,0.008,-,0,0,203,167,83,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:29:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50053	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:02 UTC	2509	OUT	POST /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive Content-Length: 75 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/en/offices Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; VisitorStatus=11064158108; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; CMSUserPage={"TimeStamp":"2024-04-23T16:28:54.5932594-04:00","LastPageDocumentID":23074,"LastPageNodeID":14884,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; __utmb=48214201.4.10.1713904103; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904136.27.0.0; _clsk=1me437r%7C1713904137534%7C4%7C1%7Cn.clarity.ms%2Fcollect; __utmli=two-column-main
2024-04-23 20:29:02 UTC	75	OUT	Data Raw: 7b 22 4e 6f 64 65 41 6c 69 61 73 50 61 74 68 22 3a 22 2f 4f 66 66 69 63 65 73 22 2c 22 44 6f 63 75 6d 65 6e 74 43 75 6c 74 75 72 65 43 6f 64 65 22 3a 22 65 6e 2d 43 41 22 2c 22 55 72 6c 52 65 66 65 72 72 65 72 22 3a 22 22 7d Data Ascii: {"NodeAliasPath":"/Offices","DocumentCultureCode":"en-CA","UrlReferrer":""}
2024-04-23 20:29:03 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:29:02 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:29:02 GMT; path=/; HttpOnly Set-Cookie: VisitorStatus=11064158109; expires=Sat, 23-Apr-2044 20:29:02 GMT; path=/; HttpOnly Set-Cookie: CMSUserPage={"TimeStamp":"2024-04-23T16:29:02.9769474-04:00","LastPageDocumentID":1182,"LastPageNodeID":1110,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; expires=Tue, 23-Apr-2024 20:49:02 GMT; path=/; HttpOnly Set-Cookie: CMSLandingPageLoaded=true; expires=Tue, 23-Apr-2024 20:49:02 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-Robots-Tag: none X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202902Z-16f7b4795d4hbs9nymf33py59c00000005rg00000000c43p X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50057	104.18.32.137	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:02 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.osler.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:03 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:29:02 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a7d7839b0b5-ATL
2024-04-23 20:29:03 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50059	52.45.52.13	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	678	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:03 UTC	372	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:29:03 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,c6f0e0dc3a54da7569a390a159a79a41,10.0.0.127,40490,89.187.171.132,,7906057204,1,1713904143.253,0.001,,.,0,0,0.000,0.000,-,0,0,203,85,42,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:29:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50063	172.64.155.119	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:03 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:29:03 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87909a8099e06785-ATL
2024-04-23 20:29:03 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50066	13.107.213.51	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	632	OUT	GET /tag/uet/134024834 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=f6d1e9bb216b487b8202329181413844.20240423.20250423; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-23 20:29:03 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 20:29:03 GMT Content-Type: application/x-javascript Content-Length: 709 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64 x-azure-ref: 20240423T202903Z-16f56cb894fx9zr8vpqekagkqw00000001c0000000003qbq X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-23 20:29:03 UTC	709	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 75 65 74 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 31 33 34 30 32 34 38 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","uet")}),!1);a[c]("metadata",(function(){a[c]("set","_u","134024834")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50067	13.107.246.41	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	2205	OUT	GET /cmsapi/webanalytics/LogHit HTTP/1.1 Host: www.osler.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMSPreferredCulture=en-CA; lang=en-ca; ARRAffinity=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ARRAffinitySameSite=a46222d174c7a4c9d75efbc2f711104d8aca19111fb596d3f24e68bf8f7552fd; ASLBSA=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASLBSACORS=0003a097cf7d2980e237bcf076b1a44d5f982803db454ed49f448e10ec6f1531e70c; ASP.NET_SessionId=wxt4gdhqkvddfgmpog4lnvg3; _gcl_au=1.1.1586521870.1713904103; _gid=GA1.2.51695240.1713904103; _gat_UA-44058441-1=1; __utma=48214201.1593841297.1713904103.1713904103.1713904103.1; __utmc=48214201; __utmz=48214201.1713904103.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt_UA-3837444-1=1; CurrentContact=37ec3b9a-1c25-4aee-af98-a7ec528e2a11; CMSLandingPageLoaded=true; _hjSession_139501=eyJpZCI6ImMzNWIwMTJjLTc0YmItNDI5Mi1hZjliLTYyZDFlYzFlODFmNSIsImMiOjE3MTM5MDQxMDQ1MDQsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _clck=upmekr%7C2%7Cfl6%7C0%7C1574; _hjSessionUser_139501=eyJpZCI6IjYwYzM0YWZlLWQ2ZDItNWJmMC1iOTZjLTY5ZTg0Y2JmYjM0YSIsImNyZWF0ZWQiOjE3MTM5MDQxMDQ0OTgsImV4aXN0aW5nIjp0cnVlfQ==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+23+2024+22%3A28%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0&AwaitingReconsent=false; _ga=GA1.2.1593841297.1713904103; _ga_2XYX2S797K=GS1.1.1713904103.1.1.1713904136.27.0.0; _clsk=1me437r%7C1713904137534%7C4%7C1%7Cn.clarity.ms%2Fcollect; _uetsid=084a5ee001b011ef88b71f1374bb47ad; _uetvid=084aa1a001b011efb9fcf5db7f6b2865; VisitorStatus=11064158109; CMSUserPage={"TimeStamp":"2024-04-23T16:29:02.9769474-04:00","LastPageDocumentID":1182,"LastPageNodeID":1110,"Identifier":"08c5726e-213b-4603-94b0-d470fe6d082b"}; __utmb=48214201.5.10.1713904103
2024-04-23 20:29:03 UTC	494	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 20:29:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 72 Connection: close Allow: POST Cache-Control: no-cache Expires: -1 Pragma: no-cache Set-Cookie: lang=en-ca; expires=Wed, 23-Apr-2025 20:29:03 GMT; path=/; HttpOnly X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET x-azure-ref: 20240423T202903Z-16f7b4795d4b8mmb4gwx3fz9p000000006600000000067as X-Cache: CONFIG_NOCACHE
2024-04-23 20:29:03 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50068	99.84.191.81	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	550	OUT	GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:03 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 5259 Connection: close Date: Wed, 24 Jan 2024 14:32:41 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "fb9f7dae39619642ed5890e40763ef2e" Last-Modified: Wed, 24 Jan 2024 14:31:37 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c37f72766931ae9c3f146ffa54018d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C2 X-Amz-Cf-Id: hqvDkKn4ZWZO6Rx02_tOC-BStrxQi0WkW1QfflUYZWRd4AZwFRameQ== Age: 7797382
2024-04-23 20:29:03 UTC	5259	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 65 28 74 29 7d Data Ascii: !function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50070	52.200.166.19	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:03 UTC	445	OUT	GET /_/ad/1d539869a4ba46ddbd0c2051a332bce8/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:03 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 23 Apr 2024 20:29:03 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,59f0a5d3e41b1290fc1582f01715aa2d,10.0.0.207,41284,89.187.171.132,,231443166589,1,1713904143.833,0.006,,.,0,0,0.000,0.004,-,0,0,203,203,101,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-23 20:29:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50085	142.251.15.138	443	5788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 20:29:08 UTC	1205	OUT	POST /g/collect?v=2&tid=G-2XYX2S797K&gtm=45je44h0v898263613z8898501896za200&_p=1713904141699&gcd=13l3l3l3l1&npa=0&dma=0&cid=1593841297.1713904103&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1713904103&sct=1&seg=1&dl=https%3A%2F%2Fwww.osler.com%2Fen%2Foffices&dt=Office%20Locations%20-%20Osler%2C%20Hoskin%20%26%20Harcourt%20LLP&_s=1&tfd=7071 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.osler.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.osler.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 20:29:08 UTC	354	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 31 30 26 5f 65 74 3d 36 32 39 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 31 30 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 31 30 26 5f 65 74 3d 31 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 25 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 61 67 65 3d 32 35 26 5f 65 74 3d 39 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 74 68 26 65 70 6e 2e 73 63 72 6f 6c 6c 5f 74 68 72 65 73 68 6f 6c 64 3d 32 35 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 3d 32 35 26 5f 65 74 3d 31 0d 0a 65 6e 3d 73 63 72 6f 6c 6c 5f 64 65 70 Data Ascii: en=page_viewen=scroll_depth%25&epn.percentage=10&_et=629en=scroll_depth&epn.scroll_threshold=10&epn.percent_scroll=10&_et=1en=scroll_depth%25&epn.percentage=25&_et=9en=scroll_depth&epn.scroll_threshold=25&epn.percent_scroll=25&_et=1en=scroll_dep
2024-04-23 20:29:08 UTC	447	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.osler.com Date: Tue, 23 Apr 2024 20:29:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	22:27:45
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:27:48
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1936,i,16160523055122430416,7819649957933225674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:27:51
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Windows Analysis Report
https://na2.docusign.net/Member/EmailStart.aspx?a=a80ac213-4c4b-4d94-8447-7b8ec8afda1c&r=2c2e6bab-d126-49a4-9fae-66272ce3bf00