Edit tour

Windows Analysis Report
https://www.concordegroup.ca/

Overview

General Information

Sample URL:	https://www.concordegroup.ca/
Analysis ID:	1500622
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=724 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.concordegroup.ca/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4710Host: login.live.com

Source: https://www.concordegroup.ca/	HTTP Parser: No favicon
Source: https://www.concordegroup.ca/careers	HTTP Parser: No favicon
Source: https://www.concordegroup.ca/careers	HTTP Parser: No favicon
Source: https://www.concordegroup.ca/wildhorse	HTTP Parser: No favicon
Source: https://www.concordegroup.ca/wildhorse	HTTP Parser: No favicon

Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="author".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="author".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="author".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="author".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="author".. found

Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.concordegroup.ca/contact-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.150.241:443 -> 192.168.2.6:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.183.220.149:443 -> 192.168.2.6:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49337 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49340 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49341 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49338 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49339 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.6:59226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59303 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49835 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:59128 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49274 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 20.49.150.241
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74

Source: chromecache_759.2.dr, chromecache_508.2.dr, chromecache_578.2.dr, chromecache_571.2.dr, chromecache_598.2.dr	String found in binary or memory: </a><a href="https://www.facebook.com/concordegroup" target="_blank" class="sqs-svg-icon--wrapper facebook-unauth" aria-label="facebook-unauth"> equals www.facebook.com (Facebook)
Source: chromecache_759.2.dr, chromecache_508.2.dr, chromecache_578.2.dr, chromecache_571.2.dr, chromecache_598.2.dr	String found in binary or memory: <html xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en-US" > equals www.facebook.com (Facebook)
Source: chromecache_759.2.dr, chromecache_508.2.dr, chromecache_578.2.dr, chromecache_571.2.dr, chromecache_598.2.dr	String found in binary or memory: <script async src="https://www.googletagmanager.com/gtag/js?id=G-X03VWZF5R3"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());gtag('set', 'developer_id.dZjQwMz', true);gtag('config', 'G-X03VWZF5R3');</script><script>!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';n.agent='plsquarespace';n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,'script','https://connect.facebook.net/en_US/fbevents.js');fbq('init', '581161913551437');fbq('track', "PageView");</script><!-- End of Squarespace Headers --> equals www.facebook.com (Facebook)
Source: chromecache_749.2.dr, chromecache_567.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},md:function(){d()}}};var hc=ja(["data-gtm-yt-inspected-"]),sC=["www.youtube.com","www.youtube-nocookie.com"],tC,uC=!1; equals www.youtube.com (Youtube)
Source: chromecache_749.2.dr, chromecache_567.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=aA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Mb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},dA=function(){var a=[],b=function(c){return rb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_749.2.dr, chromecache_567.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Bb:b},q=E.YT;if(q)return q.ready&&q.ready(d),b;var r=E.onYouTubeIframeAPIReady;E.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=F.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(DC(w,"iframe_api")\|\|DC(w,"player_api"))return b}for(var x=F.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!uC&&BC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_588.2.dr, chromecache_620.2.dr, chromecache_612.2.dr, chromecache_454.2.dr	String found in binary or memory: return b}qC.J="internal.enableAutoEventOnTimer";var hc=ja(["data-gtm-yt-inspected-"]),sC=["www.youtube.com","www.youtube-nocookie.com"],tC,uC=!1; equals www.youtube.com (Youtube)
Source: chromecache_465.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_465.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_465.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_749.2.dr, chromecache_567.2.dr	String found in binary or memory: var FB=function(a,b,c,d,e){var f=yz("fsl",c?"nv.mwt":"mwt",0),g;g=c?yz("fsl","nv.ids",[]):yz("fsl","ids",[]);if(!g.length)return!0;var k=Dz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!my(k,ny(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.concordegroup.ca
Source: global traffic	DNS traffic detected: DNS query: images.squarespace-cdn.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: assets.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: static1.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: concordecatering.ca
Source: global traffic	DNS traffic detected: DNS query: performance.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: 56.126.166.20.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: video.squarespace-cdn.com

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\manifest.fingerprint	Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.concordegroup.ca/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=724 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=724 --field-trial-handle=2312,i,8700881795085422093,12838002082708365105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.concordegroup.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/1614561982693-VIMU0V7DSWYXJSC5K0XY/CG_PrimaryLogo_Black.png?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/commerce-5af416c534ff65a9fbac-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/user-account-core-b6e8cafbf34b05da5c2b-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/versioned-site-css/5fcadab8cb1c8a2efc380b58/104/5c5a519771c10ba3470d8101/5fcadab8cb1c8a2efc380b72/1558/site.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/versioned-assets/1724699511106-97QCRUAFPMMNVU6ZHBWJ/static.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/1607130368952-X8WMOY0WVO6CYSVDTM4K/Homepage_Lulu1.jpg?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/63c9ba02da48f523a9257e3f/1674164738686/VenueLogos_Barbarella.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/603409e794a01556876fa9a6/1614023143356/VenueLogos_Bridgette.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/1614561982693-VIMU0V7DSWYXJSC5K0XY/CG_PrimaryLogo_Black.png?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/63c9ba02da48f523a9257e3f/1674164738686/VenueLogos_Barbarella.png HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/603409e794a01556876fa9a6/1614023143356/VenueLogos_Bridgette.png HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-effbab9ddc4d7097e0f1-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/6034098d1b19fc0192ac7855/1614023053490/VenueLogos_Bourbon+Room.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6c569122bfa66a51a056-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/cldr-resource-pack-e85130cf44bc2d365b8b-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60340b05505b8810c5842670/1614023429613/VenueLogos_Clive.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-b03dd66b7c78e5e40bc7-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/63c9bb39e06c367e95945f2c/1674165049869/VenueLogos_Catering.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-1b88f4e074f355d03593-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-38c15f3cdda1c007775a-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60340e61bb7ca06c0001fe23/1614024289311/VenueLogos_Double+Zero.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60340e7db517a119a1ba2545/1614024317987/VenueLogos_Goro%2BGun.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/commerce-588f73df52d6d11b6054-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/user-account-core-cfb81efc1e3912c467cb-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/a48b9aea-b0d4-47f8-a131-b3c9a6fb8f6d/VenueLogos_lonelymouth.png HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/performance-eb022691e09e39c54c48-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concordegroup.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/603412c52740af0a4861e5e1/1614025413974/VenueLogos_Lulu.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/1607130368952-X8WMOY0WVO6CYSVDTM4K/Homepage_Lulu1.jpg?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/6034147adb343d7f89741799/1614025850897/VenueLogos_Major+Tom.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60341485bb7ca06c0002f2bc/1614025861837/VenueLogos_Model+Milk.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60341489e5d5944dda2bb411/1614025865869/VenueLogos_National.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/5fcadab8cb1c8a2efc380b58/9b3ec388-1364-47af-951c-c24043f126c3/NTNL_SaloonBK.png?content-type=image%2Fpng HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/60341555e47a5b5c994c7919/1614026069939/VenueLogos_Palomino.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/6034155ec4e3f860a96ef5ec/1614026078384/VenueLogos_Pigeonhole.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/5fcadab8cb1c8a2efc380b58/7b836d80-1799-435d-a78d-096534b743b6/VenueLogos_surfysurfy.png HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/5fcadab8cb1c8a2efc380b58/788c17f6-84ec-43f3-ac61-269c4180477d/VenueLogos_SweetLoretta.png? HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/603415692987470c9bcbf0da/1614026089127/VenueLogos_Ricardo%27s.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/5fcadab8cb1c8a2efc380b58/t/6034157214481458f00a78c7/1614026098310/VenueLogos_sky360.png HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concordegroup.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://github.com/noureddinem	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=581161913551437&ev=PageView&dl=https%3A%2F%2Fwww.concordegroup.ca%2Fwildhorse&rl=&if=false&ts=1724863413846&sw=1280&sh=1024&v=2.9.166&r=stable&a=plsquarespace&ec=0&o=4126&fbp=fb.1.1724863358299.397420365637478&ler=empty&cdl=API_unavailable&it=1724863412853&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://concordecatering.ca	0%	Avira URL Cloud	safe
https://tse1.mm.bing.net/th?id=OADD2.10239354941507_1IKXGMO7QA3RV5DUV&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	0%	Avira URL Cloud	safe
https://github.com/ebraminio	0%	Avira URL Cloud	safe
https://github.com/jonashdown	0%	Avira URL Cloud	safe
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/603415692987470c9bcbf0da/1614026089127/VenueLogos_Ricardo%27s.png	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=581161913551437&ev=PageView&dl=https%3A%2F%2Fwww.concordegroup.ca%2Fcontact-us&rl=&if=false&ts=1724863382739&sw=1280&sh=1024&v=2.9.166&r=stable&a=plsquarespace&ec=0&o=4126&fbp=fb.1.1724863358299.397420365637478&ler=empty&cdl=API_unavailable&it=1724863382654&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/f30dde05-dec1-4719-a7dc-d5685	0%	Avira URL Cloud	safe
https://assets.squarespace.com/universal/scripts-compressed/80445-594065dafe60e0653724-min.en-US.js	0%	Avira URL Cloud	safe
https://github.com/ryanhart2	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607543567935-QVHQBULE19B50R2	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607452754229-P5XGXGM5X1OWGOVOWPEN/OB_PP_11_N_07_18_110.jpg?format=1500w	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607452670061-RV9AKH6Y3RS8030	0%	Avira URL Cloud	safe
https://static1.squarespace.com/static/5fc91625d98c1a7115f1f7ed/t/660594c4320eed0063e049d7/171164179	0%	Avira URL Cloud	safe
http://yuilibrary.com/license/	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/fd455c07-0dfc-48fb-b7e2-b8cbdf499f85/ConcordePerks-04.png?format=300w	0%	Avira URL Cloud	safe
https://github.com/Manfre98	0%	Avira URL Cloud	safe
https://tse1.mm.bing.net/th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	0%	Avira URL Cloud	safe
https://github.com/vnathalye	0%	Avira URL Cloud	safe
https://hearty.app	0%	Avira URL Cloud	safe
https://desimartini.com	0%	Avira URL Cloud	safe
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607543561157-7YH7XCMTRA17LF4FEHLR/13_Pigeonhole.jpg?format=1500w	0%	Avira URL Cloud	safe
https://github.com/narainsagar	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/603415692987470c9bcbf0da/1614026089127/VenueLogos_Ricardo%27s.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=581161913551437&ev=PageView&dl=https%3A%2F%2Fwww.concordegroup.ca%2Fwildhorse&rl=&if=false&ts=1724863413846&sw=1280&sh=1024&v=2.9.166&r=stable&a=plsquarespace&ec=0&o=4126&fbp=fb.1.1724863358299.397420365637478&ler=empty&cdl=API_unavailable&it=1724863412853&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239354941507_1IKXGMO7QA3RV5DUV&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/scripts-compressed/80445-594065dafe60e0653724-min.en-US.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=581161913551437&ev=PageView&dl=https%3A%2F%2Fwww.concordegroup.ca%2Fcontact-us&rl=&if=false&ts=1724863382739&sw=1280&sh=1024&v=2.9.166&r=stable&a=plsquarespace&ec=0&o=4126&fbp=fb.1.1724863358299.397420365637478&ler=empty&cdl=API_unavailable&it=1724863382654&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607452754229-P5XGXGM5X1OWGOVOWPEN/OB_PP_11_N_07_18_110.jpg?format=1500w	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/fd455c07-0dfc-48fb-b7e2-b8cbdf499f85/ConcordePerks-04.png?format=300w	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/scripts-compressed/99401-a4dea24da7ac412088e4-min.en-US.js	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607543561157-7YH7XCMTRA17LF4FEHLR/13_Pigeonhole.jpg?format=1500w	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607130368952-X8WMOY0WVO6CYSVDTM4K/Homepage_Lulu1.jpg?format=1500w	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/scripts-compressed/common-vendors-1b88f4e074f355d03593-min.en-US.js	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/images-v6/icons/cover-pages-map-marker-pin-dark-2x.png	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/ae3a3e48-3702-4259-94a8-a514d1f6dad8/Concorde_Team.jpg?format=1500w	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/60341485bb7ca06c0002f2bc/1614025861837/VenueLogos_Model+Milk.png	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/versioned-assets/1724699511106-97QCRUAFPMMNVU6ZHBWJ/static.css	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/user-account-link.ebcfaf0db367f03f76d6.js	false	Avira URL Cloud: safe	unknown
https://www.concordegroup.ca/careers	false		unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/63c9bb39e06c367e95945f2c/1674165049869/VenueLogos_Catering.png	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	Avira URL Cloud: safe	unknown
https://video.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/231804b8-24ca-4345-9d6a-0d9c4af6e570/segments/mpegts-h264-1920:1080	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607452732096-5M9R073CUYZ06I8SX3X1/IMG_3697.jpg?format=1500w	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/styles-compressed/39feb82c78cc47d56464-min.en-US.css	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/versioned-site-css/5fcadab8cb1c8a2efc380b58/104/5c5a519771c10ba3470d8101/5fcadab8cb1c8a2efc380b72/1558/site.css	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/581161913551437?v=2.9.166&r=stable&domain=www.concordegroup.ca&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/6034155ec4e3f860a96ef5ec/1614026078384/VenueLogos_Pigeonhole.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LdDFQwjAAAAAPigEvvPgEVbb7QBm-TkVJdDTlAv&co=aHR0cHM6Ly93d3cuY29uY29yZGVncm91cC5jYTo0NDM.&hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV&size=invisible&cb=x1g1d5ry3x5a	false	Avira URL Cloud: safe	unknown
https://assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-effbab9ddc4d7097e0f1-min.en-US.js	false	Avira URL Cloud: safe	unknown

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
performance.squarespace.com	35.186.236.0	true	false	unknown
static.squarespace.map.fastly.net	151.101.192.237	true	false	unknown
squarespace.map.fastly.net	151.101.0.238	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
concordecatering.ca	198.185.159.145	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.71.155	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
analytics.google.com	142.250.185.142	true	false	unknown
td.doubleclick.net	142.250.186.34	true	false	unknown
bg.download.windowsupdate.com.mwcname.com	138.113.27.176	true	false	unknown
ext-cust.squarespace.com	198.185.159.144	true	false	unknown
prod.squarespace.map.fastly.net	151.101.192.238	true	false	unknown
use.typekit.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
images.squarespace-cdn.com	unknown	unknown	false	unknown
assets.squarespace.com	unknown	unknown	false	unknown
tse1.mm.bing.net	unknown	unknown	false	unknown
56.126.166.20.in-addr.arpa	unknown	unknown	false	unknown
static1.squarespace.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
www.concordegroup.ca	unknown	unknown	false	unknown
video.squarespace-cdn.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://concordecatering.ca	chromecache_598.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/f30dde05-dec1-4719-a7dc-d5685	chromecache_759.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/noureddinem	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_484.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://github.com/ebraminio	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jonashdown	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ryanhart2	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607543567935-QVHQBULE19B50R2	chromecache_571.2.dr	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fc91625d98c1a7115f1f7ed/t/660594c4320eed0063e049d7/171164179	chromecache_734.2.dr	false	Avira URL Cloud: safe	unknown
http://yuilibrary.com/license/	chromecache_611.2.dr, chromecache_455.2.dr, chromecache_584.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607452670061-RV9AKH6Y3RS8030	chromecache_578.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Manfre98	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/vnathalye	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.app	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_696.2.dr, chromecache_483.2.dr, chromecache_453.2.dr	false	URL Reputation: safe	unknown
https://github.com/le0tan	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/narainsagar	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ElFadiliY	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ashwoolford	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jbleduigou	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/muminoff	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_552.2.dr, chromecache_596.2.dr, chromecache_624.2.dr, chromecache_695.2.dr, chromecache_475.2.dr, chromecache_562.2.dr	false	URL Reputation: safe	unknown
https://recruiting.ultipro.ca/CON5100CNPD/JobBoard/14f6bfd5-47bb-479f-b7bd-c7e5c8b1a206/?q=&o=posted	chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_484.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://github.com/jatinag22	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_453.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_484.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_484.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://github.com/hehachris	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/a48b9aea-b0d4-47f8-a131-b3c9a	chromecache_759.2.dr, chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jarcoal	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jcfranco	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/andela-batolagbe	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/60341489e5d5944dda2bb411/161402586	chromecache_759.2.dr, chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://www.ricardoshideaway.ca	chromecache_759.2.dr, chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bleadof	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/6034157214481458f00a78c7/161402609	chromecache_759.2.dr, chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000012d66	chromecache_716.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000012d67	chromecache_716.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000012d65	chromecache_716.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607543518293-0CZPGTAPLD6JI9B	chromecache_571.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607544030598-UOKWN2NKII8RYH2	chromecache_571.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000012d68	chromecache_716.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_552.2.dr, chromecache_596.2.dr, chromecache_624.2.dr, chromecache_695.2.dr, chromecache_475.2.dr, chromecache_562.2.dr	false	URL Reputation: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/2886aa8b-ed13-4276-9653-90523	chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/1607361445320-5V7LOIO8HV8S05V	chromecache_759.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/6d7ab111-9280-4db2-b3ad-16e39	chromecache_571.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/suvash	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/c21e27b239b942cc80b5dca54	chromecache_709.2.dr, chromecache_693.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/andrewhood125	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://static1.squarespace.com/static/5fcadab8cb1c8a2efc380b58/t/63c9ba02da48f523a9257e3f/167416473	chromecache_759.2.dr, chromecache_508.2.dr	false	Avira URL Cloud: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/ShahramMebashar	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/skakri	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jalex79	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/kraz	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/sampathsris	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ulmus	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/orif-jr	chromecache_705.2.dr, chromecache_667.2.dr, chromecache_540.2.dr, chromecache_645.2.dr	false	Avira URL Cloud: safe	unknown
https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/a96c7799001f1534dff55f0e6	chromecache_697.2.dr, chromecache_471.2.dr	false	Avira URL Cloud: safe	unknown
https://images.squarespace-cdn.com/content/v1/5fcadab8cb1c8a2efc380b58/66464adb-bbc0-4314-acf1-f307c	chromecache_571.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/ed9e57/000000000000000000012d65/27/	chromecache_716.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
151.101.128.238	unknown	United States	54113	FASTLYUS	false
198.185.159.145	concordecatering.ca	United States	53831	SQUARESPACEUS	false
198.185.159.144	ext-cust.squarespace.com	United States	53831	SQUARESPACEUS	false
142.250.185.142	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
151.101.64.238	unknown	United States	54113	FASTLYUS	false
74.125.71.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.0.237	unknown	United States	54113	FASTLYUS	false
151.101.0.238	squarespace.map.fastly.net	United States	54113	FASTLYUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
151.101.192.237	static.squarespace.map.fastly.net	United States	54113	FASTLYUS	false
151.101.192.238	prod.squarespace.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
35.186.236.0	performance.squarespace.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500622
Start date and time:	2024-08-28 18:41:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.concordegroup.ca/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@31/503@71/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://concordecatering.ca/ Browse: https://www.concordegroup.ca/contact-us Browse: https://www.concordegroup.ca/book-an-event Browse: https://www.concordegroup.ca/careers Browse: https://www.concordegroup.ca/wildhorse

Input	Output
URL: https://www.concordegroup.ca/ Model: jbxai	{ "brand":["Concorde Entertainment Group"], "contains_trigger_text":false, "prominent_button_name":"Gift Cards", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/ Model: jbxai	{ "brand":["Concorde Entertainment Group"], "contains_trigger_text":false, "prominent_button_name":"Gift Cards", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/contact-us Model: jbxai	{ "brand":["Concorde Entertainment Group"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["Name", "Last Name", "First Name", "Email", "Subject", "Message"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/book-an-event Model: jbxai	{ "brand":["Concorde Entertainment Group"], "contains_trigger_text":false, "prominent_button_name":"GET MORE INFORMATION", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/contact-us Model: jbxai	{ "brand":["CONCORDE ENTERTAINMENT GROUP"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["Name (required), Last Name, First Name, Email (required), Subject (required), Message (required)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/contact-us Model: jbxai	{ "phishing_score":2, "brand_name":"Concorde Entertainment Group", "reasons":"The URL matches the identified brand name, but the visual LLM did not provide any information about the website's SSL certificate or any other security features. Additionally, the URL does not seem to be a well-known or popular domain for the brand, which could be a potential red flag."}

URL: https://www.concordegroup.ca/careers Model: jbxai	{ "brand":["CONCORDE ENTERTAINMENT GROUP"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/wildhorse Model: jbxai	{ "brand":["CONCORDE ENTERTAINMENT GROUP"], "contains_trigger_text":false, "prominent_button_name":"GIFT CARDS", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.concordegroup.ca/wildhorse Model: jbxai	{ "brand":["CONCORDE ENTERTAINMENT GROUP"], "contains_trigger_text":false, "prominent_button_name":"GIFT CARDS", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 18:42:29.179917097 CEST	192.168.2.6	1.1.1.1	0x2950	Standard query (0)	www.concordegroup.ca	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:29.180133104 CEST	192.168.2.6	1.1.1.1	0xa550	Standard query (0)	www.concordegroup.ca	65	IN (0x0001)	false
Aug 28, 2024 18:42:30.183721066 CEST	192.168.2.6	1.1.1.1	0xc291	Standard query (0)	images.squarespace-cdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:30.184465885 CEST	192.168.2.6	1.1.1.1	0x6879	Standard query (0)	images.squarespace-cdn.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:30.193427086 CEST	192.168.2.6	1.1.1.1	0xd1a6	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:30.193738937 CEST	192.168.2.6	1.1.1.1	0xbbba	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:30.196235895 CEST	192.168.2.6	1.1.1.1	0x237d	Standard query (0)	assets.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:30.196445942 CEST	192.168.2.6	1.1.1.1	0xa55a	Standard query (0)	assets.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:30.262943983 CEST	192.168.2.6	1.1.1.1	0x9f60	Standard query (0)	static1.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:30.263251066 CEST	192.168.2.6	1.1.1.1	0xb07a	Standard query (0)	static1.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:30.815593958 CEST	192.168.2.6	1.1.1.1	0xc8c3	Standard query (0)	images.squarespace-cdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:30.816061020 CEST	192.168.2.6	1.1.1.1	0x390e	Standard query (0)	images.squarespace-cdn.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:31.078151941 CEST	192.168.2.6	1.1.1.1	0xf7f9	Standard query (0)	static1.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:31.078651905 CEST	192.168.2.6	1.1.1.1	0x78f5	Standard query (0)	static1.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:31.859644890 CEST	192.168.2.6	1.1.1.1	0x807c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:31.860155106 CEST	192.168.2.6	1.1.1.1	0xcabc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:34.705719948 CEST	192.168.2.6	1.1.1.1	0x28f3	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:34.706207037 CEST	192.168.2.6	1.1.1.1	0x167e	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:35.780158043 CEST	192.168.2.6	1.1.1.1	0x5986	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:35.781297922 CEST	192.168.2.6	1.1.1.1	0x2eed	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:35.905998945 CEST	192.168.2.6	1.1.1.1	0x502c	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:35.906209946 CEST	192.168.2.6	1.1.1.1	0xd33f	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:35.982208967 CEST	192.168.2.6	1.1.1.1	0xf1f1	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:35.982395887 CEST	192.168.2.6	1.1.1.1	0x5bd5	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:36.001070976 CEST	192.168.2.6	1.1.1.1	0xe835	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:36.177748919 CEST	192.168.2.6	1.1.1.1	0x1aa3	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:36.177936077 CEST	192.168.2.6	1.1.1.1	0xb2b7	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:37.678615093 CEST	192.168.2.6	1.1.1.1	0x61d5	Standard query (0)	assets.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:37.678988934 CEST	192.168.2.6	1.1.1.1	0x93d0	Standard query (0)	assets.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:38.189356089 CEST	192.168.2.6	1.1.1.1	0x9117	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:38.189488888 CEST	192.168.2.6	1.1.1.1	0x42bd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:38.374726057 CEST	192.168.2.6	1.1.1.1	0xd80d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:38.374918938 CEST	192.168.2.6	1.1.1.1	0x6dad	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:38.425410986 CEST	192.168.2.6	1.1.1.1	0x4759	Standard query (0)	www.concordegroup.ca	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:38.425585032 CEST	192.168.2.6	1.1.1.1	0xe204	Standard query (0)	www.concordegroup.ca	65	IN (0x0001)	false
Aug 28, 2024 18:42:39.160857916 CEST	192.168.2.6	1.1.1.1	0xb36f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:39.161190033 CEST	192.168.2.6	1.1.1.1	0x136e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:39.486556053 CEST	192.168.2.6	1.1.1.1	0xee9a	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:39.486821890 CEST	192.168.2.6	1.1.1.1	0x78b	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:39.621818066 CEST	192.168.2.6	1.1.1.1	0x799d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:39.622174025 CEST	192.168.2.6	1.1.1.1	0x9485	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:40.778037071 CEST	192.168.2.6	1.1.1.1	0x61b6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:40.778249025 CEST	192.168.2.6	1.1.1.1	0x27a8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:41.364509106 CEST	192.168.2.6	1.1.1.1	0x950a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:41.365089893 CEST	192.168.2.6	1.1.1.1	0xa7dc	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:41.384941101 CEST	192.168.2.6	1.1.1.1	0x27b1	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:41.385792971 CEST	192.168.2.6	1.1.1.1	0x337e	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:49.008636951 CEST	192.168.2.6	1.1.1.1	0x9baa	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:58.088541985 CEST	192.168.2.6	1.1.1.1	0x3db	Standard query (0)	concordecatering.ca	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:58.098860979 CEST	192.168.2.6	1.1.1.1	0x4401	Standard query (0)	concordecatering.ca	65	IN (0x0001)	false
Aug 28, 2024 18:42:58.118730068 CEST	192.168.2.6	1.1.1.1	0xab8f	Standard query (0)	performance.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:58.119474888 CEST	192.168.2.6	1.1.1.1	0x5633	Standard query (0)	performance.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:58.137705088 CEST	192.168.2.6	1.1.1.1	0x23fe	Standard query (0)	56.126.166.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Aug 28, 2024 18:42:59.071290970 CEST	192.168.2.6	1.1.1.1	0xfd38	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:59.071579933 CEST	192.168.2.6	1.1.1.1	0xdcf5	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Aug 28, 2024 18:42:59.123296976 CEST	192.168.2.6	1.1.1.1	0xe553	Standard query (0)	images.squarespace-cdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:59.123646975 CEST	192.168.2.6	1.1.1.1	0x2d5f	Standard query (0)	images.squarespace-cdn.com	65	IN (0x0001)	false
Aug 28, 2024 18:42:59.149689913 CEST	192.168.2.6	1.1.1.1	0xd1ea	Standard query (0)	static1.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:42:59.149689913 CEST	192.168.2.6	1.1.1.1	0x4ec2	Standard query (0)	static1.squarespace.com	65	IN (0x0001)	false
Aug 28, 2024 18:43:01.370090008 CEST	192.168.2.6	1.1.1.1	0x9dc8	Standard query (0)	assets.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:01.393012047 CEST	192.168.2.6	1.1.1.1	0x28f3	Standard query (0)	images.squarespace-cdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:02.324399948 CEST	192.168.2.6	1.1.1.1	0xf042	Standard query (0)	www.concordegroup.ca	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:03.783723116 CEST	192.168.2.6	1.1.1.1	0x2ecb	Standard query (0)	static1.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:04.029552937 CEST	192.168.2.6	1.1.1.1	0xa5cb	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:04.056864023 CEST	192.168.2.6	1.1.1.1	0x7586	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:05.409435987 CEST	192.168.2.6	1.1.1.1	0xf216	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:06.015285969 CEST	192.168.2.6	1.1.1.1	0x9456	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:12.971298933 CEST	192.168.2.6	1.1.1.1	0x12c3	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:13.003659010 CEST	192.168.2.6	1.1.1.1	0xcdc5	Standard query (0)	performance.squarespace.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:23.887876034 CEST	192.168.2.6	1.1.1.1	0xb6aa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 18:43:24.624629974 CEST	192.168.2.6	1.1.1.1	0x78e6	Standard query (0)	video.squarespace-cdn.com	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4b 70 7a 78 4a 6b 56 50 36 55 61 2f 63 30 63 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 38 30 39 33 33 39 35 64 34 31 38 35 35 33 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: KpzxJkVP6Ua/c0cH.1Context: f8093395d4185533
2024-08-28 16:42:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 16:42:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4b 70 7a 78 4a 6b 56 50 36 55 61 2f 63 30 63 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 38 30 39 33 33 39 35 64 34 31 38 35 35 33 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4f 34 5a 73 75 54 6d 73 4b 58 39 59 50 72 45 35 31 58 4c 4b 55 38 74 59 57 79 6b 56 36 45 79 61 6d 76 69 42 38 62 76 7a 67 65 55 78 51 43 30 6e 35 76 44 6c 48 6e 77 63 33 79 51 69 2f 44 43 6a 47 32 59 78 74 4f 53 65 51 43 4c 78 32 5a 37 78 43 61 53 62 63 57 78 4c 54 6e 54 4d 41 6f 4f 74 74 7a 78 6b 56 37 65 6b 42 63 56 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: KpzxJkVP6Ua/c0cH.2Context: f8093395d4185533<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdO4ZsuTmsKX9YPrE51XLKU8tYWykV6EyamviB8bvzgeUxQC0n5vDlHnwc3yQi/DCjG2YxtOSeQCLx2Z7xCaSbcWxLTnTMAoOttzxkV7ekBcV/
2024-08-28 16:42:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4b 70 7a 78 4a 6b 56 50 36 55 61 2f 63 30 63 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 38 30 39 33 33 39 35 64 34 31 38 35 35 33 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: KpzxJkVP6Ua/c0cH.3Context: f8093395d4185533<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-28 16:42:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 16:42:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 7a 67 77 75 4b 42 4d 67 6b 36 4b 6f 55 6a 4f 67 39 56 74 30 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: MzgwuKBMgk6KoUjOg9Vt0g.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:29 UTC	663	OUT	GET / HTTP/1.1 Host: www.concordegroup.ca Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	493	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 18798 Content-Type: text/html;charset=utf-8 Date: Wed, 28 Aug 2024 11:29:11 GMT Etag: W/"834a081c1732cc776b3a9b3634ed4e27" Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Squarespace Set-Cookie: crumb=BQuroCChyLicMTcwNDJjNTY0NTZjZDZlYzZlNGEwYmRmMzdhNDk5;Secure;Path=/ Strict-Transport-Security: max-age=0 Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Contextid: JceUhHEW/TRtqLHf6 Connection: close Transfer-Encoding: chunked
2024-08-28 16:42:30 UTC	693	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 20 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 Data Ascii: 8000<!doctype html><html xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en-US" > <head> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta name="viewport" content="width=d
2024-08-28 16:42:30 UTC	2372	IN	Data Raw: 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 6f 72 64 65 67 72 6f 75 70 2e 63 61 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6e 63 6f 72 64 65 20 47 72 6f 75 70 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6e 63 6f 72 64 65 20 47 72 6f 75 70 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 6f 72 64 65 67 72 6f 75 70 2e 63 61 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 Data Ascii: ical" href="https://www.concordegroup.ca"/><meta property="og:site_name" content="Concorde Group"/><meta property="og:title" content="Concorde Group"/><meta property="og:url" content="https://www.concordegroup.ca"/><meta property="og:type" content="we
2024-08-28 16:42:30 UTC	538	IN	Data Raw: 49 4d 4d 6a 67 6b 4d 66 48 36 71 4a 74 6b 47 62 4d 67 36 46 4a 4d 4a 37 66 62 4b 77 4d 73 4d 4d 65 67 49 36 4d 54 4d 67 6b 72 56 56 36 62 6a 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 54 79 70 65 6b 69 74 2e 6c 6f 61 64 28 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 48 61 6d 6d 65 72 73 6d 69 74 68 2b 4f 6e 65 3a 77 67 68 74 40 34 30 30 26 66 61 6d 69 6c 79 3d 50 6f 70 70 Data Ascii: IMMjgkMfH6qJtkGbMg6FJMJ7fbKwMsMMegI6MTMgkrVV6bj.js"></script><script type="text/javascript">try{Typekit.load();}catch(e){}</script><link rel="stylesheet" type="text/css" href="https://fonts.googleapis.com/css2?family=Hammersmith+One:wght@400&family=Popp
2024-08-28 16:42:30 UTC	4744	IN	Data Raw: 73 2e 73 71 75 61 72 65 73 70 61 63 65 2e 63 6f 6d 2f 40 73 71 73 2f 70 6f 6c 79 66 69 6c 6c 65 72 2f 31 2e 36 2f 6d 6f 64 65 72 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 53 51 55 41 52 45 53 50 41 43 45 5f 52 4f 4c 4c 55 50 53 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6c 6c 75 70 73 2c 20 6e 61 6d 65 29 20 7b 20 69 66 20 28 21 72 6f 6c 6c 75 70 73 5b 6e 61 6d 65 5d 29 20 7b 20 72 6f 6c 6c 75 70 73 5b 6e 61 6d 65 5d 20 3d 20 7b 7d 3b 20 7d 20 72 6f 6c 6c 75 70 73 5b 6e 61 6d 65 5d 2e 6a 73 20 3d 20 5b 22 2f 2f 61 73 73 65 74 73 2e 73 71 75 61 72 65 73 70 61 63 65 2e 63 6f 6d 2f 75 6e 69 76 65 Data Ascii: s.squarespace.com/@sqs/polyfiller/1.6/modern.js"></script><script type="text/javascript">SQUARESPACE_ROLLUPS = {};</script><script>(function(rollups, name) { if (!rollups[name]) { rollups[name] = {}; } rollups[name].js = ["//assets.squarespace.com/unive
2024-08-28 16:42:30 UTC	5930	IN	Data Raw: 65 73 70 61 63 65 2e 63 6f 6d 2f 75 6e 69 76 65 72 73 61 6c 2f 73 63 72 69 70 74 73 2d 63 6f 6d 70 72 65 73 73 65 64 2f 70 65 72 66 6f 72 6d 61 6e 63 65 2d 65 62 30 32 32 36 39 31 65 30 39 65 33 39 63 35 34 63 34 38 2d 6d 69 6e 2e 65 6e 2d 55 53 2e 6a 73 22 20 64 65 66 65 72 20 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6e 61 6d 65 3d 22 73 74 61 74 69 63 2d 63 6f 6e 74 65 78 74 22 3e 53 74 61 74 69 63 20 3d 20 77 69 6e 64 6f 77 2e 53 74 61 74 69 63 20 7c 7c 20 7b 7d 3b 20 53 74 61 74 69 63 2e 53 51 55 41 52 45 53 50 41 43 45 5f 43 4f 4e 54 45 58 54 20 3d 20 7b 22 62 65 74 61 46 65 61 74 75 72 65 46 6c 61 67 73 22 3a 5b 22 6f 76 65 72 72 69 64 65 5f 62 6c 6f 63 6b 5f 73 74 79 6c 65 73 22 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 Data Ascii: espace.com/universal/scripts-compressed/performance-eb022691e09e39c54c48-min.en-US.js" defer ></script><script data-name="static-context">Static = window.Static \|\| {}; Static.SQUARESPACE_CONTEXT = {"betaFeatureFlags":["override_block_styles","collection_t
2024-08-28 16:42:30 UTC	7116	IN	Data Raw: 6d 2d 76 32 2d 36 35 35 66 30 65 33 35 39 34 66 63 63 65 35 38 36 65 34 34 2d 6d 69 6e 2e 65 6e 2d 55 53 2e 6a 73 22 7d 2c 22 73 71 75 61 72 65 73 70 61 63 65 2d 70 72 6f 64 75 63 74 73 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 6c 69 73 74 2d 76 32 22 3a 7b 22 63 73 73 22 3a 22 2f 2f 61 73 73 65 74 73 2e 73 71 75 61 72 65 73 70 61 63 65 2e 63 6f 6d 2f 75 6e 69 76 65 72 73 61 6c 2f 73 74 79 6c 65 73 2d 63 6f 6d 70 72 65 73 73 65 64 2f 70 72 6f 64 75 63 74 73 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 6c 69 73 74 2d 76 32 2d 38 65 63 38 34 31 63 61 63 66 62 37 35 64 34 32 38 32 66 34 2d 6d 69 6e 2e 65 6e 2d 55 53 2e 63 73 73 22 2c 22 6a 73 22 3a 22 2f 2f 61 73 73 65 74 73 2e 73 71 75 61 72 65 73 70 61 63 65 2e 63 6f 6d 2f 75 6e 69 76 65 72 73 61 6c 2f 73 63 72 69 70 74 Data Ascii: m-v2-655f0e3594fcce586e44-min.en-US.js"},"squarespace-products-collection-list-v2":{"css":"//assets.squarespace.com/universal/styles-compressed/products-collection-list-v2-8ec841cacfb75d4282f4-min.en-US.css","js":"//assets.squarespace.com/universal/script
2024-08-28 16:42:30 UTC	8302	IN	Data Raw: 65 73 70 61 63 65 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 54 77 65 61 6b 61 62 6c 65 22 3a 74 72 75 65 2c 22 74 77 65 61 6b 4a 53 4f 4e 22 3a 7b 22 66 6f 72 6d 2d 75 73 65 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 73 22 3a 22 66 61 6c 73 65 22 2c 22 68 65 61 64 65 72 2d 6c 6f 67 6f 2d 68 65 69 67 68 74 22 3a 22 38 37 70 78 22 2c 22 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 2d 6d 61 78 2d 68 65 69 67 68 74 22 3a 22 34 30 70 78 22 2c 22 68 65 61 64 65 72 2d 76 65 72 74 2d 70 61 64 64 69 6e 67 22 3a 22 33 76 77 22 2c 22 68 65 61 64 65 72 2d 77 69 64 74 68 22 3a 22 46 75 6c 6c 22 2c 22 6d 61 78 50 61 67 65 57 69 64 74 68 22 3a 22 31 32 30 30 70 78 22 2c 22 70 61 67 65 50 61 64 64 69 6e 67 22 3a 22 34 76 77 22 2c 22 74 77 65 61 6b 2d 62 6c 6f 67 2d Data Ascii: espace.com","templateTweakable":true,"tweakJSON":{"form-use-theme-colors":"false","header-logo-height":"87px","header-mobile-logo-max-height":"40px","header-vert-padding":"3vw","header-width":"Full","maxPageWidth":"1200px","pagePadding":"4vw","tweak-blog-
2024-08-28 16:42:30 UTC	3079	IN	Data Raw: 61 62 6f 76 65 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 64 65 6c 69 6d 69 74 65 72 2d 62 75 6c 6c 65 74 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 72 65 61 64 2d 6d 6f 72 65 2d 73 74 79 6c 65 2d 73 68 6f 77 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 70 72 69 6d 61 72 79 2d 6d 65 74 61 2d 64 61 74 65 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 74 61 2d 63 61 74 65 67 6f 72 69 65 73 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 6d 65 74 61 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e Data Ascii: above tweak-blog-single-column-delimiter-bullet tweak-blog-single-column-read-more-style-show tweak-blog-single-column-primary-meta-date tweak-blog-single-column-secondary-meta-categories tweak-blog-single-column-meta-position-top tweak-blog-single-column
2024-08-28 16:42:30 UTC	4096	IN	Data Raw: 0d 0a 38 30 30 30 0d 0a 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 61 6c 74 65 72 6e 61 74 69 6e 67 2d 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 70 72 69 6d 61 72 79 2d 6d 65 74 61 2d 63 61 74 65 67 6f 72 69 65 73 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 61 6c 74 65 72 6e 61 74 69 6e 67 2d 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 74 61 2d 64 61 74 65 20 74 77 65 61 6b 2d 62 6c 6f 67 2d 61 6c 74 65 72 6e 61 74 69 6e 67 2d 73 69 64 65 2d 62 79 2d 73 69 64 65 2d 65 78 63 65 72 70 74 2d 73 68 6f 77 20 20 74 77 65 61 6b 2d 67 6c 6f 62 61 6c 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 6f 6d 70 6c 65 78 69 74 79 2d 6c 65 76 65 6c 2d 64 65 74 61 69 6c 65 64 20 74 77 65 61 6b 2d 67 6c 6f 62 61 6c 2d 61 6e 69 6d Data Ascii: 8000-position-top tweak-blog-alternating-side-by-side-primary-meta-categories tweak-blog-alternating-side-by-side-secondary-meta-date tweak-blog-alternating-side-by-side-excerpt-show tweak-global-animations-complexity-level-detailed tweak-global-anim
2024-08-28 16:42:30 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 71 75 6f 74 3b 75 6e 69 74 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 70 78 26 71 75 6f 74 3b 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 71 75 6f 74 3b 76 61 6c 75 65 26 71 75 6f 74 3b 3a 20 31 2e 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 71 75 6f 74 3b 73 65 63 74 69 6f 6e 54 68 65 6d 65 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 0a 20 20 20 Data Ascii: "unit": "px", "value": 1.0 } }, "sectionTheme": "",

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	698	OUT	GET /content/v1/5fcadab8cb1c8a2efc380b58/1614561982693-VIMU0V7DSWYXJSC5K0XY/CG_PrimaryLogo_Black.png?format=1500w HTTP/1.1 Host: images.squarespace-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12495 timing-allow-origin: * access-control-expose-headers: Content-Length, Timing-Allow-Origin x-sqsp-is-public: true content-type: image/png access-control-allow-origin: * etag: COav+ov4je8CEAE= cache-control: max-age=31536000,s-maxage=31536000 via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 996309 Date: Wed, 28 Aug 2024 16:42:30 GMT X-Served-By: cache-iad-kcgs7200095-IAD, cache-ewr-kewr1740043-EWR X-Cache: HIT, HIT X-Cache-Hits: 5, 0 X-Timer: S1724863351.738243,VS0,VE1 Vary: Accept-Encoding Tracepoint: Fastly
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 01 c2 08 04 00 00 00 bd 6a 65 43 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 07 74 49 4d 45 07 e5 03 01 01 1a 17 47 7d 28 0f 00 00 2f b2 49 44 41 54 78 da ed dd ef 99 e2 46 b6 c0 e1 e3 7d f6 fb ea 46 b0 da 08 2c 47 30 ea 08 96 89 c0 4c 04 a6 23 18 3a 02 7a 22 a0 1d 41 e3 08 90 23 68 39 02 70 04 b0 11 70 3f 00 8d 00 e9 54 49 aa 52 09 e9 f7 f2 dc bb e3 16 aa 7f 40 1d 49 a5 2a 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR jeCgAMAa cHRMz&u0`:pQ<bKGDtIMEG}(/IDATxF}F,G0L#:z"A#h9pp?TIR@I*
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 1f 56 0b 34 02 00 06 e5 fa 36 de 59 8d 10 52 0c 37 76 6b fc 02 00 06 63 76 15 3e 44 ec 6f c8 bd 3d 5b b9 84 90 24 74 a5 00 00 be a5 a5 f3 d0 6d 42 c8 e5 b2 d7 e5 3d e7 10 b2 e3 6e 2c 00 18 b6 e8 34 ef e3 3e 50 98 42 48 d5 02 28 f1 69 8a e1 7b e8 aa 01 00 7c 5a 28 b7 ed 6a 21 44 5b 82 31 65 24 04 00 86 ee dc d5 4f 2a b6 5f 42 48 7c f5 77 d3 0a be 0b 2e 63 01 c0 b0 ad 4f 63 18 d5 ca 56 d7 35 3f d0 f6 7c 61 6c 1e ba 82 00 00 1f ce e7 1f b1 fa ae db 10 62 f3 3c f4 f3 5e f5 66 b4 03 00 1e c4 da 22 10 88 14 43 48 7a da c7 66 af 35 e7 20 00 30 4c 89 d5 f9 c7 d1 e4 e6 c1 52 e6 f0 21 32 61 1c 04 00 86 69 69 1d 0a 44 8a cf 45 b7 df 67 c3 bd 58 00 30 44 bb 5a ab e7 46 85 15 77 13 cb 7d de 8d 43 f4 00 80 87 33 f9 0c 07 0b 8b 77 17 c3 87 ed f3 ce 2f ab fb c6 a1 2b 0b Data Ascii: V46YR7vkcv>Do=[$tmB=n,4>PBH(i{\|Z(j!D[1e$O*_BH\|w.cOcV5?\|alb<^f"CHzf5 0LR!2aiiDEgX0DZFw}C3w/+
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 2d 1a e7 35 37 a6 9e 36 48 35 75 9e 62 d7 ad 2f 32 91 a5 ec ac 72 5b b7 cc cd 26 0f bb d7 4e e6 77 61 b5 ca ba 65 5e 1b 59 ca a4 45 ad cd df bc e6 af b4 e5 67 0f 38 16 c9 d4 b2 f3 ba ee 5a a6 9d e5 f5 d1 28 2f f3 cf 78 d3 20 55 d7 01 24 92 59 a3 d6 9f 34 fa ac 63 99 5b 86 8e e2 eb bd 71 b7 e5 b6 f3 dc c9 cc 2a d7 b6 01 e4 fc ed 98 37 0c 9e 04 10 8c 44 d4 a8 43 b9 fc c4 a6 3d cd 4b c4 ee 67 3c af dd 62 2e 03 48 b7 2d 12 cb b2 45 c7 d5 ec b2 90 fb 0e f4 dd e2 3c 64 ed 30 bf 65 83 20 42 00 c1 28 4c 1a 1c fb de be 3e 2c bf d2 5d e6 75 64 f3 33 de d5 ee 1e dc 05 90 69 8b e0 51 bf 5b 6f 13 aa 2e b9 d5 6d 2d 1f 5d e8 c7 e7 cd 1d 55 d6 8e 73 b4 bf 78 66 ff cd 6b fa aa f3 0d 03 bc 89 1c fe cc 16 86 1f 58 97 79 5d d8 fd 8c df 6b b6 9b 9b 00 12 77 da 22 89 7c 38 ca Data Ascii: -576H5ub/2r[&Nwae^YEg8Z(/x U$Y4c[q*7DC=Kg<b.H-E<d0e B(L>,]ud3iQ[o.m-]UsxfkXy]kw"\|8
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 77 6e f8 29 4f ac 52 b9 a8 9e c3 9c 38 9a c9 6d 6a fd 55 cd 49 70 ba d4 70 0e f0 da 70 e2 db d9 37 c3 f6 7a 01 bc 9e c4 63 da ba bd b1 de 9c 83 a0 27 dc 07 90 d4 b0 dd f4 e3 70 99 57 fb 45 27 f4 73 90 a8 e6 a5 a7 95 d2 a1 7e 77 72 41 66 e2 bd 45 8a f4 0e 7c df 72 06 b4 c8 d6 90 82 a9 b6 6d 7c 51 cb e5 57 66 08 f3 3e eb 0d d4 e0 3e 80 7c 51 b7 ae 9c fe f8 f4 bc 9a 2e fc 50 64 5a 6a 24 ad 99 5e 75 f8 74 b3 c0 bb de 22 ae 17 4e d1 6b ff c3 c1 58 cb 6b ab 12 34 a7 9f db 6e 3d e5 7a a1 07 ce 98 e5 dd d1 0f 5d 9f 81 98 16 b3 ab 27 e9 20 2f fd a7 fc 73 cd d4 b4 63 6a 17 43 e9 5d b4 88 6d 6e 6f 0e 72 d8 1b 52 49 1d d7 e8 6c a6 6c cb 3d e5 79 9d 87 9e 4b d2 41 19 00 23 f7 8b 29 c6 ca b6 bd d3 2b f0 7a f7 61 ea 7a 6c ad d4 9b 6c 93 da e9 bd ca af 95 6d b4 90 5f 5a Data Ascii: wn)OR8mjUIppp7zc'pWE's~wrAfE\|rm\|QWf>>\|Q.PdZj$^ut"NkXk4n=z]' /scjC]mnorRIll=yKA#)+zazllm_Z
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: d6 56 79 25 35 f2 b2 29 bd fb 0b 09 13 8b 5c 6d 02 88 5d eb af 6b b5 fe b4 72 9b 79 a4 e8 20 07 79 af 11 c2 a7 56 29 ce 2b f6 6e 13 40 96 8d c3 80 8b 00 62 57 ef f2 4f 82 00 82 41 b1 39 2f 38 c8 4e e6 16 1d 4b 74 fa 61 2f 5b e5 75 b0 cc 6b 61 99 5a 52 b2 77 db 9f f1 da 32 6f 53 00 b1 39 07 39 b6 be d9 b9 f5 a7 95 ef b0 bb f8 b6 b3 ba 94 15 5b b6 c1 ae f2 b3 6c 13 40 f4 76 6b fa c9 d9 04 10 db 7a 6f 2a f6 27 80 60 60 6c 3b 43 3d 88 c4 b2 28 1c 97 55 85 90 f7 1a 79 c5 96 79 e9 af f2 92 b4 fd 19 9b 6f 09 b0 0b 20 f6 ad bf 91 99 da fa cb 42 8b 4c 2b df b7 b1 ce 6d aa de 2a bb b4 ae 75 75 59 da 04 10 bd fd 53 65 cf 36 01 24 a9 51 ef aa 32 10 40 30 30 b1 75 67 7c fc 91 cd ae d6 6a 8a 24 95 79 c9 48 44 79 c7 6d 77 19 e5 fc fa 90 f9 55 5e 71 45 5e d5 af aa e3 df Data Ascii: Vy%5)\m]kry yV)+n@bWOA9/8NKta/[ukaZRw2oS99[l@vkzo'``l;C=(Uyyo BL+muuYSe6$Q2@00ug\|j$yHDymwU^qE^
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: b6 2d 87 5e 82 5d eb c3 18 53 1d d3 9a ef 77 fb cd a8 5b ba f6 75 be ee 55 dc fc f2 aa 5f f3 96 9f de 8d 7f b8 4d ae 57 16 a1 0b 30 7a b1 4c e5 5d 36 ad ce 66 fc 97 71 2d 6b eb 8e 79 2a 6b 59 7b 3e f3 d4 2c 3c 1e 8d db 89 e4 7b ab fd 27 de cf 37 fd 5a 86 2e 40 bf 0c 39 80 a4 bd ee b8 c6 23 96 a5 6c 7a da 6d cc 1b 94 2c 95 8d eb e3 38 6b b1 cc 02 e5 7c 31 6d f1 59 46 0f 7f 58 17 07 fb ec 7b 69 c8 01 a4 0f c7 6b 38 8a 65 dd bb 1f 5e 2c 1f 8d 8f a6 bf cb 47 a0 ef d6 f7 80 e7 3f 67 cd 83 c0 ac 07 a5 6f eb b7 01 d4 c1 99 61 07 90 b6 a7 db 70 e9 7b af 4e ff 13 f9 68 35 5c 99 c8 c6 f3 70 67 95 f0 ad 98 34 3c 0f 8a 07 f1 7b 7c fc b3 28 87 86 1d 40 44 66 81 7e e4 28 33 95 f7 d0 45 38 49 64 dd fa 0c 22 92 75 90 6f 57 da 70 28 dd a5 ef 8d 5a 2f 7c e8 73 e3 d1 c7 71 Data Ascii: -^]Sw[uU_MW0zL]6fq-ky*kY{>,<{'7Z.@9#lzm,8k\|1mYFX{ik8e^,G?goap{Nh5\pg4<{\|(@Df~(3E8Id"uoWp(Z/\|sq
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 25 1e d8 b3 4c 2a ba 69 f7 cb 8b 97 db cb b3 bc d7 dc e7 65 40 1d eb b3 a4 81 3f 81 9e 18 7e 00 c9 e5 b5 f2 1e 79 d7 0b bc 8f 85 8b f1 a3 c7 9d 0b 10 de 5e 5e 2a 3f 03 d7 cb 8b 57 59 49 56 6b c8 78 ab 3e 35 e4 d1 6c e5 47 e5 b9 4f 57 9f 40 2f 0c 7b 10 fd 88 a1 f4 fe c9 08 dc ad f4 7b 28 bd cc 10 86 cf 8b 18 4a 17 91 71 04 90 3d b3 d2 7b e7 d1 6f e6 0c 4f 9b 95 3e ef a4 04 db 1a 9f 62 36 c0 4b 96 cc 4a 97 71 04 10 66 a5 f7 cd 6a 3c a7 f8 de f4 61 4e f4 ab f5 a8 46 f7 cf 8b f7 af 0f 9f 40 70 e3 08 20 cc 4a ef 93 3d b7 2e 38 11 7e 4e b4 ed 27 39 a4 e1 f3 a2 f0 9f 40 70 63 09 20 cc 4a ef 0f f3 c3 63 61 a3 0f 73 a2 6d ce 25 b7 83 bd a0 d3 87 4f 20 b0 e1 df 85 75 f6 22 d3 ca 8b 55 0b 79 0a 5d bc d1 78 ed e1 f4 cd 3a d7 ac e3 d0 85 2d 98 2b b3 31 96 f2 9f 4e ca Data Ascii: %Lie@?~y^^?WYIVkx>5lGOW@/{{(Jq={oO>b6KJqfj<aNF@p J=.8~N'9@pc Jcasm%O u"Uy]x:-+1N
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 3c af 5f 1b 59 48 dc 28 1f 97 dd d9 41 0e f2 ee a0 43 8b 65 2e 9b 5a 79 4e 1a b6 f1 a3 07 90 e3 67 df ac f6 00 06 69 5a ab fb 6c 77 06 e0 ba 3b 3b c8 ae d5 19 51 2a ef 0d bb d1 59 ed d0 35 8c 00 72 90 83 2c 5a b4 38 80 c1 68 1a 3c 9a 06 11 1f dd d9 4e a6 8d ea 1e 1b ba 62 d7 f9 0e 27 80 1c 64 d9 f2 7b 07 e0 c1 25 2d 3b d0 4b 67 12 59 e7 e9 a7 3b 3b d4 be ac 12 c9 c2 49 be 1f 35 ce 7f 86 14 40 08 21 c0 a8 cd 1d 76 26 3b eb 0e dc 57 77 56 ef 42 56 d2 f2 bc ab 59 d7 3f ac 00 42 08 01 46 2a 72 74 ee 51 7c d9 5d 17 f7 d7 9d 6d ac cf 83 66 ce f3 fe b0 ca 7b 68 01 e4 d0 f0 d2 21 80 07 e6 f6 f8 bb 5e 77 e2 b3 3b b3 0b 61 4b 2f 79 db 9c 01 0d 2f 80 ec 1a de 8b 07 e0 41 25 35 6e d7 ad f3 b2 bb a0 e1 b3 3b 3b 18 07 f4 a3 86 f7 5c b9 09 21 c3 0b 20 5c c6 02 46 25 6c Data Ascii: <_YH(ACe.ZyNgiZlw;;QY5r,Z8h<Nb'd{%-;KgY;;I5@!v&;WwVBVY?BFrtQ\|]mf{h!^w;aK/y/A%5n;;\! \F%l
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 8d fa ce 33 a0 a7 dc 9f 81 e4 ca b6 a8 93 10 92 b7 4e c1 a4 6a ae 85 3e 59 d0 cd f3 02 e3 07 5b 2e a6 ad bd bc c8 2f 03 3d af 02 1e 9c eb a5 4c 44 72 b5 83 fb cd b0 0c c5 ef 16 cb 9d fc db f0 ec 6f 77 73 be ab a4 15 7f cf d4 65 17 a7 f2 e2 60 10 58 7f e6 7a ee bd ee 5d da cb 9b fc 60 e0 1c 18 8f a9 f7 65 46 96 86 1c 92 ab 77 bb 58 1a c5 94 87 6d 6e 8b d6 75 8f 64 57 23 87 54 7d ef da 3a 57 7d 81 99 a8 56 1b d8 bd 3e 64 31 a8 a7 2b 02 b0 12 1b ba 06 fb 6e ab 59 fa 9b 9b f7 6b ef 9d ab 39 ed 1a ec 69 5a cb 2b 6e 59 7b 53 f0 9c 5c bd 5b 0f 20 f6 e1 cc 5d 00 99 5b e7 09 a0 f7 dc 8f 81 98 96 2d 4f 65 d6 2a 7d 53 b7 b7 72 56 13 2d a5 aa 51 10 d3 42 e3 4b 69 23 35 5c bc db df 94 39 57 df 1d b5 2a 4b 31 57 00 a3 e4 e3 36 5e d3 6a a9 df 5b cc 64 98 1a 2f 6c b8 5b Data Ascii: 3Nj>Y[./=LDrowse`Xz]`eFwXmnudW#T}:W}V>d1+nYk9iZ+nY{S\[ ][-Oe}SrV-QBKi#5\9WK1W6^j[d/l[
2024-08-28 16:42:30 UTC	93	IN	Data Raw: 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 32 31 2d 30 33 2d 30 31 54 30 31 3a 32 36 3a 32 33 2b 30 30 3a 30 30 9c fe a0 55 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: EXtdate:modify2021-03-01T01:26:23+00:00UtEXtSoftwareAdobe ImageReadyqe<IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.concordegroup.ca/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6284_1663569100\sets.json

Chrome Cache Entry: 449

Chrome Cache Entry: 450

Chrome Cache Entry: 451

Chrome Cache Entry: 452

Chrome Cache Entry: 453

Chrome Cache Entry: 454

Chrome Cache Entry: 455

Chrome Cache Entry: 456

Chrome Cache Entry: 457

Chrome Cache Entry: 458

Chrome Cache Entry: 459

Chrome Cache Entry: 460

Chrome Cache Entry: 461

Chrome Cache Entry: 462

Chrome Cache Entry: 463

Chrome Cache Entry: 464

Chrome Cache Entry: 465

Chrome Cache Entry: 466

Chrome Cache Entry: 467

Chrome Cache Entry: 468

Chrome Cache Entry: 469

Chrome Cache Entry: 470

Chrome Cache Entry: 471

Windows Analysis Report
https://www.concordegroup.ca/

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	611	OUT	GET /universal/styles-compressed/commerce-5af416c534ff65a9fbac-min.en-US.css HTTP/1.1 Host: assets.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18234 Cache-Control: public, max-age=31536000 Expires: Wed, 20 Aug 2025 16:25:57 GMT Last-Modified: Tue, 20 Aug 2024 12:56:58 GMT ETag: W/"84e4954567bee6b188d49564be961c74" Content-Type: text/css Warning: 214 UploadServer gunzipped Server: UploadServer Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 692193 Date: Wed, 28 Aug 2024 16:42:30 GMT X-Served-By: cache-iad-kcgs7200101-IAD, cache-nyc-kteb1890082-NYC X-Cache: HIT, HIT X-Cache-Hits: 31, 0 X-Timer: S1724863351.749358,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: *
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 2e 75 70 70 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 74 65 6d 70 6c 61 74 65 2d 63 61 72 74 2d 69 74 65 6d 2d 61 64 64 65 64 2d 70 6f 70 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 43 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 36 70 78 20 32 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 30 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 38 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6c 65 66 74 3a 75 6e 73 65 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 31 70 78 Data Ascii: .uppercase{text-transform:uppercase}.template-cart-item-added-popover{background-color:var(--navigationLinkColor);box-shadow:0 6px 24px 0 rgba(0,0,0,.12),0 0 1px 0 rgba(0,0,0,.08);display:flex;left:unset;line-height:22px;max-width:300px;padding-right:11px
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 73 73 69 6f 6e 2d 68 74 6d 6c 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 2c 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 73 73 69 6f 6e 2d 74 65 78 74 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e Data Ascii: ntent .form-wrapper .form-submission-html:focus:not(:focus-visible),.sqs-async-form-content .form-wrapper .form-submission-text:focus:not(:focus-visible){outline:none}.sqs-async-form-content .form-wrapper .field-list{line-height:normal}.sqs-async-form-con
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 69 65 6c 64 2d 65 6c 65 6d 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 20 2e 66 69 65 6c 64 2d 65 6c 65 6d 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e Data Ascii: ield-element{font-size:14px}.sqs-async-form-content .form-wrapper .field-list .field .field-element{background:#fafafa;border:1px solid #ccc;border-radius:2px;box-sizing:border-box;color:#000;font-family:sans-serif;font-size:12px;line-height:normal;margin
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 31 33 70 78 3b 6d 61 72 67 69 6e 3a 36 70 78 20 30 20 34 70 78 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 2e 6c 69 6b 65 72 74 20 2e 69 74 65 6d 7b 6d 61 72 67 69 6e 3a 31 2e 36 65 6d 20 30 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 2e 6c 69 6b 65 72 74 20 2e 71 75 65 73 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 30 20 2e 35 65 6d 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c Data Ascii: 13px;margin:6px 0 4px}.sqs-async-form-content .form-wrapper .field-list .field.likert .item{margin:1.6em 0}.sqs-async-form-content .form-wrapper .field-list .field.likert .question{font-size:.9em;margin:0 0 .5em}.sqs-async-form-content .form-wrapper .fiel
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 20 2e 66 69 65 6c 64 2e 66 6f 75 72 2d 64 69 67 69 74 73 7b 77 69 64 74 68 3a 34 2e 38 65 6d 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 73 20 2e 66 69 65 6c 64 2e 61 6d 70 6d 7b 77 69 64 74 68 3a 34 2e 35 65 6d 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 73 2e 6e 61 6d 65 20 2e 66 69 65 6c 64 7b 77 69 64 74 68 3a 34 38 25 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 2d 6c 69 73 74 20 2e 66 69 65 6c 64 73 2e 61 64 64 Data Ascii: .field.four-digits{width:4.8em}.sqs-async-form-content .form-wrapper .field-list .fields .field.ampm{width:4.5em}.sqs-async-form-content .form-wrapper .field-list .fields.name .field{width:48%}.sqs-async-form-content .form-wrapper .field-list .fields.add
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 61 72 65 61 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 39 32 39 32 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 2d 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 2d 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 71 73 2d 61 73 79 6e 63 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 62 75 74 Data Ascii: area{border:1px solid #e99292}.sqs-async-form-content .form-wrapper .form-button-wrapper--align-left{text-align:left}.sqs-async-form-content .form-wrapper .form-button-wrapper--align-center{text-align:center}.sqs-async-form-content .form-wrapper .form-but
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 33 29 7d 7d 2e 61 62 73 6f 6c 75 74 65 2d 63 61 72 74 2d 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 31 31 70 78 3b 74 6f 70 3a 31 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 35 30 30 30 7d 2e 73 71 73 2d 70 69 6c 6c 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 7b 66 6f 6e 74 3a 34 30 30 20 6e 6f 72 6d 61 6c 20 31 32 70 78 2f 32 32 70 78 20 43 6c 61 72 6b 73 6f 6e 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 7d 2e 73 71 73 2d 70 69 6c 6c 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2e 73 71 73 2d 73 63 61 6c 61 62 6c 65 2d 68 69 64 Data Ascii: :0;transform:scale(.3)}}.absolute-cart-box{position:fixed;right:11px;top:11px;z-index:15000}.sqs-pill-shopping-cart{font:400 normal 12px/22px Clarkson,Helvetica Neue,Helvetica,Arial,sans-serif;letter-spacing:normal}.sqs-pill-shopping-cart.sqs-scalable-hid
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 2e 35 64 70 70 78 29 7b 2e 73 71 73 2d 70 69 6c 6c 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 2e 64 61 72 6b 20 2e 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 61 73 73 65 74 73 2e 73 71 75 61 72 65 73 70 61 63 65 2e 63 6f 6d 2f 75 6e 69 76 65 72 73 61 6c 2f 69 6d 61 67 65 73 2d 76 36 2f 64 61 6d 61 73 6b 2f 63 61 72 74 2d 33 32 2d 6c 69 67 68 74 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 36 70 78 7d 7d 2e 73 71 73 2d 70 69 6c 6c 2d 73 68 6f 70 70 69 Data Ascii: 50% no-repeat}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:1.5dppx){.sqs-pill-shopping-cart-content.dark .icon{background-image:url(//assets.squarespace.com/universal/images-v6/damask/cart-32-light.png);background-size:16px}}.sqs-pill-shoppi
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 31 32 38 2e 34 33 20 32 33 36 2e 38 38 27 25 33 45 25 33 43 67 20 64 61 74 61 2d 6e 61 6d 65 3d 27 4c 61 79 65 72 20 32 27 25 33 45 25 33 43 67 20 64 61 74 61 2d 6e 61 6d 65 3d 27 4c 61 79 65 72 20 31 27 25 33 45 25 33 43 72 65 63 74 20 77 69 64 74 68 3d 27 31 31 32 38 2e 34 33 27 20 68 65 69 67 68 74 3d 27 32 33 36 2e 38 38 27 20 72 78 3d 27 31 31 38 2e 34 34 27 20 73 74 79 6c 65 3d 27 66 69 6c 6c 3a 25 32 33 30 31 30 31 30 31 27 2f 25 Data Ascii: d:transparent url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 1128.43 236.88'%3E%3Cg data-name='Layer 2'%3E%3Cg data-name='Layer 1'%3E%3Crect width='1128.43' height='236.88' rx='118.44' style='fill:%23010101'/%
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 2d 31 37 2e 34 37 20 30 2d 32 35 2e 37 20 35 2e 37 31 2d 32 35 2e 37 20 32 33 2e 31 38 76 31 31 2e 32 31 48 32 35 37 56 31 30 31 68 31 31 2e 37 36 76 36 35 2e 36 38 68 32 31 2e 31 37 56 31 30 31 68 32 37 2e 32 37 76 34 31 2e 31 35 63 30 20 31 37 2e 31 34 20 36 2e 35 35 20 32 34 2e 35 33 20 32 33 2e 36 39 20 32 34 2e 35 33 68 31 30 2e 39 32 56 31 34 38 5a 6d 37 35 2e 39 33 2d 33 30 2e 38 38 63 2d 31 2e 35 34 2d 31 30 2e 39 32 2d 31 30 2e 34 32 2d 31 37 2e 34 37 2d 32 30 2e 38 33 2d 31 37 2e 34 37 73 2d 31 39 20 36 2e 33 38 2d 32 31 2e 31 37 20 31 37 2e 34 37 5a 6d 2d 34 32 2e 31 37 20 31 33 2e 31 31 63 31 2e 35 32 20 31 32 2e 34 33 20 31 30 2e 34 32 20 31 39 2e 34 38 20 32 31 2e 36 38 20 31 39 2e 34 38 20 38 2e 39 20 30 20 31 35 2e 37 39 2d 34 2e 32 20 31 Data Ascii: -17.47 0-25.7 5.71-25.7 23.18v11.21H257V101h11.76v65.68h21.17V101h27.27v41.15c0 17.14 6.55 24.53 23.69 24.53h10.92V148Zm75.93-30.88c-1.54-10.92-10.42-17.47-20.83-17.47s-19 6.38-21.17 17.47Zm-42.17 13.11c1.52 12.43 10.42 19.48 21.68 19.48 8.9 0 15.79-4.2 1

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	620	OUT	GET /universal/styles-compressed/user-account-core-b6e8cafbf34b05da5c2b-min.en-US.css HTTP/1.1 Host: assets.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2356 Cache-Control: public, max-age=31536000 Expires: Wed, 20 Aug 2025 15:07:06 GMT Last-Modified: Tue, 20 Aug 2024 12:57:12 GMT ETag: W/"b5b71cfbb0e2e64f293988d2668ab1c6" Content-Type: text/css Warning: 214 UploadServer gunzipped Server: UploadServer Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 696924 Date: Wed, 28 Aug 2024 16:42:30 GMT X-Served-By: cache-iad-kiad7000118-IAD, cache-nyc-kteb1890062-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1724863351.750193,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: *
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 68 69 76 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 31 70 78 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 31 70 78 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 69 6d 6d 79 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 33 70 78 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 Data Ascii: @keyframes shiver{0%{transform:translateX(0)}25%{transform:translateX(11px)}75%{transform:translateX(-11px)}to{transform:translateX(0)}}@keyframes shimmy{0%{transform:translateX(0)}50%{transform:translateX(-33px)}to{transform:translateX(0)}}@keyframes spi
2024-08-28 16:42:30 UTC	978	IN	Data Raw: 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 5a 4a 78 30 36 39 42 75 77 4c 76 63 63 44 35 37 43 75 6f 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 6f 75 74 7d 2e 6a 33 72 33 7a 58 54 77 70 45 42 30 66 69 79 62 57 52 50 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 69 6e 7d 2e 76 62 33 56 41 36 30 46 4c 5f 52 67 69 75 65 39 77 4c 69 4a 7b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 69 73 65 61 6e 64 66 61 Data Ascii: imation-timing-function:ease-in-out}.ZJx069BuwLvccD57Cuot{animation-iteration-count:1;animation-name:fadeout}.j3r3zXTwpEB0fiybWRPt{animation-iteration-count:1;animation-name:fadein}.vb3VA60FL_Rgiue9wLiJ{animation-iteration-count:1;animation-name:riseandfa

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	659	OUT	GET /static/versioned-site-css/5fcadab8cb1c8a2efc380b58/104/5c5a519771c10ba3470d8101/5fcadab8cb1c8a2efc380b72/1558/site.css HTTP/1.1 Host: static1.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	555	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1300558 Cache-Control: public, max-age=94608000 Content-Type: text/css; charset=UTF-8 Pragma: cache Server: Squarespace Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Contextid: mqNP4su6/KDk2LlOq Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 467 Date: Wed, 28 Aug 2024 16:42:30 GMT X-Served-By: cache-dfw-kdfw8210172-DFW, cache-ewr-kewr1740043-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1724863351.793054,VS0,VE1 Vary: Accept-Encoding Tracepoint: Fastly
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 61 63 63 65 6e 74 2d 68 73 6c 3a 32 35 2e 38 31 30 30 35 35 38 37 2c 38 34 2e 38 33 34 31 32 33 32 32 25 2c 35 38 2e 36 32 37 34 35 30 39 38 25 3b 2d 2d 64 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 3a 37 37 2e 35 2c 39 2e 38 33 36 30 36 35 35 37 25 2c 34 37 2e 38 34 33 31 33 37 32 35 25 3b 2d 2d 6c 69 67 68 74 41 63 63 65 6e 74 2d 68 73 6c 3a 31 39 31 2e 32 30 38 37 39 31 32 31 2c 35 39 2e 34 37 37 31 32 34 31 38 25 2c 33 30 25 3b 2d 2d 73 61 66 65 4c 69 67 68 74 41 63 63 65 6e 74 2d 68 73 6c 3a 32 35 2e 38 31 30 30 35 35 38 37 2c 38 34 2e 38 33 34 31 32 33 32 32 25 2c 35 38 2e 36 32 37 34 35 30 39 38 25 3b 2d 2d 73 61 66 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 3a 32 35 2e 38 31 30 30 35 35 38 37 2c 38 34 2e 38 33 34 31 32 33 32 Data Ascii: :root{--accent-hsl:25.81005587,84.83412322%,58.62745098%;--darkAccent-hsl:77.5,9.83606557%,47.84313725%;--lightAccent-hsl:191.20879121,59.47712418%,30%;--safeLightAccent-hsl:25.81005587,84.83412322%,58.62745098%;--safeDarkAccent-hsl:25.81005587,84.8341232
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 72 61 70 68 4c 61 72 67 65 43 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 73 75 6d 6d 61 72 79 2d 62 6c 6f 63 6b 2d 70 72 69 6d 61 72 79 2d 6d 65 74 61 64 61 74 61 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 62 6c 6f 67 2d 69 74 65 6d 2d 63 6f 6d 6d 65 6e 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 73 75 6d 6d 61 72 79 2d 62 6c 6f 63 6b 2d 72 65 61 64 2d 6d 6f 72 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 6c 69 73 74 Data Ascii: raphLargeColor:hsla(var(--black-hsl),1);--tweak-summary-block-primary-metadata-color-on-background:hsla(var(--black-hsl),1);--tweak-blog-item-comment-text-color:hsla(var(--black-hsl),1);--tweak-summary-block-read-more-color:hsla(var(--black-hsl),1);--list
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 6c 65 74 74 65 72 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 63 6f 6c 6c 61 67 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 6e 65 77 73 6c 65 74 74 65 72 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 70 72 6f 64 75 63 74 2d 62 61 73 69 63 2d 69 74 65 6d 2d 62 72 65 61 64 63 75 6d 62 2d 6e 61 76 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 Data Ascii: letter-block-title-color:hsla(var(--black-hsl),1);--image-block-collage-inline-link-color:hsla(var(--black-hsl),1);--tweak-newsletter-block-button-background-color-on-background:hsla(var(--black-hsl),1);--tweak-product-basic-item-breadcumb-nav-color:hsla(
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 61 63 63 6f 72 64 69 6f 6e 2d 62 6c 6f 63 6b 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 6c 69 67 68 74 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 68 65 61 64 69 6e 67 4c 69 6e 6b 43 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 73 61 66 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 68 65 61 64 65 72 42 6f 72 64 65 72 43 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 Data Ascii: eDarkAccent-hsl),1);--tweak-accordion-block-icon-color-on-background:hsla(var(--black-hsl),1);--announcement-bar-background-color:hsla(var(--lightAccent-hsl),1);--headingLinkColor:hsla(var(--safeDarkAccent-hsl),1);--headerBorderColor:hsla(var(--black-hsl)
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 77 65 61 6b 2d 73 75 6d 6d 61 72 79 2d 62 6c 6f 63 6b 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 74 61 64 61 74 61 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 6c 69 73 74 2d 73 65 63 74 69 6f 6e 2d 63 61 72 6f 75 73 65 6c 2d 64 65 73 63 72 69 70 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 62 6c 6f 67 2d 6d 61 73 6f 6e 72 79 2d 6c 69 73 74 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 66 6f 72 6d 2d 62 6c 6f 63 6b 2d 63 61 70 74 69 6f 6e 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 Data Ascii: weak-summary-block-secondary-metadata-color-on-background:hsla(var(--black-hsl),1);--list-section-carousel-description-color:hsla(var(--black-hsl),1);--tweak-blog-masonry-list-title-color:hsla(var(--black-hsl),1);--tweak-form-block-caption-color-on-backgr
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 67 65 2d 62 6c 6f 63 6b 2d 63 61 72 64 2d 69 6d 61 67 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 73 61 66 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 61 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 6e 65 77 73 6c 65 74 74 65 72 2d 62 6c 6f 63 6b 2d 64 65 73 63 72 69 70 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 66 6f 72 6d 2d 62 6c 6f 63 6b 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c Data Ascii: ge-block-card-image-button-bg-color:hsla(var(--safeDarkAccent-hsl),1);--secondaryButtonBackgroundColor:hsla(var(--accent-hsl),1);--tweak-newsletter-block-description-color:hsla(var(--black-hsl),1);--tweak-form-block-field-border-color:hsla(var(--black-hsl
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 67 65 2d 62 6c 6f 63 6b 2d 6f 76 65 72 6c 61 70 2d 69 6d 61 67 65 2d 6f 76 65 72 6c 61 79 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 64 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 6c 69 6e 65 2d 62 6c 6f 63 6b 2d 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 62 6c 6f 67 2d 69 74 65 6d 2d 61 75 74 68 6f 72 2d 70 72 6f 66 69 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 66 6f 72 6d 2d 62 6c 6f 63 6b 2d 73 75 72 76 65 79 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d Data Ascii: ge-block-overlap-image-overlay-color:hsla(var(--darkAccent-hsl),1);--tweak-line-block-line-color:hsla(var(--black-hsl),1);--tweak-blog-item-author-profile-color:hsla(var(--black-hsl),1);--tweak-form-block-survey-title-color-on-background:hsla(var(--black-
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 61 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 63 6f 75 72 73 65 2d 69 74 65 6d 2d 6e 61 76 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 6c 69 67 68 74 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 70 6f 72 74 66 6f 6c 69 6f 2d 69 6e 64 65 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 70 6f 72 74 66 6f 6c 69 6f 2d 68 6f 76 65 72 2d 66 6f 6c 6c 6f 77 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 62 6c 6f 67 2d 62 61 73 69 63 2d 67 72 69 64 2d 6c 69 73 74 Data Ascii: a-color:hsla(var(--black-hsl),1);--course-item-nav-background-color:hsla(var(--lightAccent-hsl),1);--portfolio-index-background-title-color:hsla(var(--black-hsl),1);--portfolio-hover-follow-title-color:hsla(var(--black-hsl),1);--tweak-blog-basic-grid-list
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 65 2d 6c 69 73 74 2d 67 72 69 64 2d 6c 61 79 6f 75 74 2d 63 6f 75 72 73 65 2d 69 74 65 6d 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 6c 69 67 68 74 41 63 63 65 6e 74 2d 68 73 6c 29 2c 2e 37 35 29 3b 2d 2d 6c 69 73 74 2d 73 65 63 74 69 6f 6e 2d 73 69 6d 70 6c 65 2d 63 61 72 64 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 66 6f 72 6d 2d 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 2d 63 6f 6c 6f 72 2d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 68 73 Data Ascii: e-list-grid-layout-course-item-hover-background-color:hsla(var(--lightAccent-hsl),.75);--list-section-simple-card-title-color:hsla(var(--black-hsl),1);--tweak-form-block-option-color-on-background:hsla(var(--black-hsl),1);--primaryButtonBackgroundColor:hs
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 79 2d 73 69 64 65 2d 6c 69 73 74 2d 72 65 61 64 2d 6d 6f 72 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 73 61 66 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 54 65 78 74 43 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 73 61 66 65 49 6e 76 65 72 73 65 44 61 72 6b 41 63 63 65 6e 74 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 73 75 6d 6d 61 72 79 2d 62 6c 6f 63 6b 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 74 61 64 61 74 61 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 68 73 6c 29 2c 31 29 3b 2d 2d 74 77 65 61 6b 2d 62 6c 6f 67 2d 73 69 6e 67 6c 65 2d 63 6f 6c 75 6d 6e 2d 6c 69 73 74 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 76 61 72 28 2d 2d Data Ascii: y-side-list-read-more-color:hsla(var(--safeDarkAccent-hsl),1);--primaryButtonTextColor:hsla(var(--safeInverseDarkAccent-hsl),1);--tweak-summary-block-secondary-metadata-color:hsla(var(--black-hsl),1);--tweak-blog-single-column-list-title-color:hsla(var(--

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	639	OUT	GET /static/vta/5c5a519771c10ba3470d8101/versioned-assets/1724699511106-97QCRUAFPMMNVU6ZHBWJ/static.css HTTP/1.1 Host: static1.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:30 UTC	575	IN	HTTP/1.1 200 OK Connection: close Content-Length: 230410 Access-Control-Allow-Origin: * Cache-Control: public, max-age=94608000 Content-Type: text/css Pragma: cache Server: Squarespace Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Contextid: sLC5JvoR/d6pThdl5 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 28 Aug 2024 16:42:30 GMT Age: 163818 X-Served-By: cache-dfw-kdal2120075-DFW, cache-ewr-kewr1740056-EWR X-Cache: HIT, HIT X-Cache-Hits: 676, 1 X-Timer: S1724863351.810997,VS0,VE1 Vary: Accept-Encoding Tracepoint: Fastly
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 2f 2a 20 42 75 74 74 6f 6e 20 42 6c 6f 63 6b 20 42 61 73 65 20 53 74 79 6c 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 2e 73 71 73 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 71 73 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 73 71 73 2d 73 74 72 65 74 63 68 65 64 20 2e 73 71 73 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 73 71 73 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 73 71 73 2d 73 74 72 65 74 63 68 65 64 20 2e 73 71 73 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d Data Ascii: /* Button Block Base Style=================================================*/.sqs-block-button-container { text-align: center;}.sqs-block-button.sqs-stretched .sqs-block-content,.sqs-block-button.sqs-stretched .sqs-block-button-element { padding-
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 23 73 69 74 65 57 72 61 70 70 65 72 2e 73 69 74 65 2d 77 72 61 70 70 65 72 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 2c 0a 62 6f 64 79 20 2e 73 71 73 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 6c 69 67 68 74 62 6f 78 20 2e 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: s=================================================*/#siteWrapper.site-wrapper .sqs-button-element--primary,body .sqs-block-form-lightbox .form-button-wrapper .sqs-button-element--primary { padding: var(--primary-button-padding-y) var(--primary-button
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 65 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 73 65 63 6f 6e 64 61 72 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 29 3b 0a 7d 0a 23 73 69 74 65 57 72 61 70 70 65 72 2e 73 69 74 65 2d 77 72 61 70 70 65 72 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 74 65 72 74 69 61 72 79 2c 0a 62 6f 64 79 20 2e 73 71 73 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 6c 69 67 68 74 62 6f 78 20 2e 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 74 65 72 74 69 61 72 79 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 74 65 72 74 69 61 72 79 2d 62 75 74 74 6f Data Ascii: e.sqs-button-element--secondary { border-width: var(--secondary-button-stroke);}#siteWrapper.site-wrapper .sqs-button-element--tertiary,body .sqs-block-form-lightbox .form-button-wrapper .sqs-button-element--tertiary { padding: var(--tertiary-butto
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 74 6f 6e 2d 77 72 61 70 70 65 72 20 2e 74 6f 63 6b 2d 62 6c 6f 63 6b 20 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 69 64 67 65 74 57 72 61 70 70 65 72 20 2e 54 6f 63 6b 42 75 74 74 6f 6e 2d 62 6c 75 65 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 2c 0a 23 73 69 74 65 57 72 61 70 70 65 72 2e 73 69 74 65 2d 77 72 61 70 70 65 72 20 2e 74 6f 63 6b 2d 62 6c 6f 63 6b 20 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 69 64 67 65 74 57 72 61 70 70 65 72 20 2e 54 6f 63 6b 42 75 74 74 6f 6e 2d 62 6c 75 65 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 73 65 63 6f 6e 64 61 72 79 2c Data Ascii: ton-wrapper .tock-block div#Tock_widget_container > div.TockWidgetWrapper .TockButton-blue.sqs-button-element--primary,#siteWrapper.site-wrapper .tock-block div#Tock_widget_container > div.TockWidgetWrapper .TockButton-blue.sqs-button-element--secondary,
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 70 65 72 20 2e 54 6f 63 6b 53 65 61 72 63 68 42 61 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 73 69 74 65 57 72 61 70 70 65 72 2e 73 69 74 65 2d 77 72 61 70 70 65 72 20 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 69 64 67 65 74 57 72 61 70 70 65 72 20 2e 54 6f 63 6b 49 6e 6c 69 6e 65 42 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 Data Ascii: per .TockSearchBar-container { align-items: center;}#siteWrapper.site-wrapper div#Tock_widget_container > div.TockWidgetWrapper .TockInlineButton-container { overflow: hidden; display: flex; align-items: center; justify-content: center; heig
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 73 74 79 6c 65 2d 73 6f 6c 69 64 20 2e 73 71 73 2d 65 64 69 74 61 62 6c 65 2d 62 75 74 74 6f 6e 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 7d 0a 7d 0a 2f 2a 20 42 75 74 74 6f 6e 20 42 6c 6f 63 6b 20 53 74 79 6c 65 20 54 77 65 61 6b 3a 20 4f 75 74 6c 69 6e 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 2c 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 Data Ascii: style-solid .sqs-editable-button.sqs-button-element--primary:hover { opacity: 0.8; }}/* Button Block Style Tweak: Outline=================================================*/.primary-button-style-outline .sqs-button-element--primary,.primary-butt
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 6c 69 6e 65 20 2e 73 71 73 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 20 2e 73 71 73 2d 65 64 69 74 61 62 6c 65 2d 62 75 74 74 6f 6e 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 2c 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 63 74 61 20 2e 62 74 6e 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 2c 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 20 2e 74 6f 63 6b 2d 62 6c 6f 63 6b 20 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 Data Ascii: line .sqs-block-form .sqs-editable-button.sqs-button-element--primary:not(:hover),.primary-button-style-outline .header-menu-cta .btn.sqs-button-element--primary:not(:hover),.primary-button-style-outline .tock-block div#Tock_widget_container > div.TockW
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 61 72 79 2e 54 6f 63 6b 42 75 74 74 6f 6e 2d 62 6c 75 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 30 70 78 3b 0a 7d 0a 2f 2a 20 50 72 69 6d 61 72 79 20 42 75 74 74 6f 6e 20 53 68 61 70 65 20 54 77 65 61 6b 3a 20 4f 76 61 6c 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 68 61 70 65 2d 6f 76 61 6c 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 2c 0a 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 68 61 70 65 2d 6f 76 61 6c 20 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d Data Ascii: ary.TockButton-blue { border-radius: 300px;}/* Primary Button Shape Tweak: Oval=================================================*/.primary-button-shape-oval .sqs-button-element--primary,.primary-button-shape-oval #Tock_widget_container .sqs-button-
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 69 64 67 65 74 57 72 61 70 70 65 72 20 2e 54 6f 63 6b 42 75 74 74 6f 6e 2d 62 6c 75 65 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 73 Data Ascii: div#Tock_widget_container > div.TockWidgetWrapper .TockButton-blue.sqs-button-element--primary { border-top: none; border-right: none; border-left: none; border-bottom-style: solid; border-radius: 0; border-bottom-width: var(--primary-button-s
2024-08-28 16:42:30 UTC	1378	IN	Data Raw: 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 2c 0a 2e 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 73 6f 6c 69 64 20 2e 74 6f 63 6b 2d 62 6c 6f 63 6b 20 64 69 76 23 54 6f 63 6b 5f 77 69 64 67 65 74 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 54 6f 63 6b 57 69 64 67 65 74 57 72 61 70 70 65 72 20 2e 54 6f 63 6b 42 75 74 74 6f 6e 2d 62 6c 75 65 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2e 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 20 2e 73 71 73 2d 62 75 74 74 6f 6e 2d 65 6c 65 6d 65 6e 74 2d 2d 73 65 63 6f 6e 64 61 72 Data Ascii: on-element--secondary:hover,.secondary-button-style-solid .tock-block div#Tock_widget_container > div.TockWidgetWrapper .TockButton-blue.sqs-button-element--secondary:hover { opacity: 0.8;}.secondary-button-style-outline .sqs-button-element--secondar

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	692	OUT	GET /content/v1/5fcadab8cb1c8a2efc380b58/1607130368952-X8WMOY0WVO6CYSVDTM4K/Homepage_Lulu1.jpg?format=1500w HTTP/1.1 Host: images.squarespace-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:31 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 377322 timing-allow-origin: * access-control-expose-headers: Content-Length, Timing-Allow-Origin x-sqsp-is-public: true content-type: image/jpeg access-control-allow-origin: * etag: CMn7lJfTte0CEAE= cache-control: max-age=31536000,s-maxage=31536000 via: 1.1 google, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Wed, 28 Aug 2024 16:42:31 GMT X-Served-By: cache-iad-kiad7000097-IAD, cache-ewr-kewr1740068-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1724863351.960442,VS0,VE202 Vary: Accept-Encoding Tracepoint: Fastly
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 58 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 1f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 74 00 0b 4a 61 6d 69 65 20 48 79 61 74 74 00 38 42 49 4d 04 25 00 00 00 00 00 10 5d ac 4e f2 bb 66 0e 84 50 72 84 df d9 9f 0a 18 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 0f 1e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 20 78 3a 78 Data Ascii: JFIFXPhotoshop 3.08BIMZ%GtJamie Hyatt8BIM%]NfPrDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/' x:x
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 27 3e 0a 20 20 3c 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3e 54 72 75 65 3c 2f 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 3c 2f 72 64 66 3a 52 44 46 3e 0a 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n> <rdf:Description rdf:about='' xmlns:xmpRights='http://ns.adobe.com/xap/1.0/rights/'> <xmpRights:Marked>True</xmpRights:Marked> </rdf:Description></rdf:RDF></x:xmpmeta>
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 1e 1e 1e 1e 1e ff c0 00 11 08 03 e8 05 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 68 10 00 01 02 04 04 02 05 05 09 07 10 06 09 02 02 0b 01 02 03 00 04 05 11 06 12 21 31 07 41 13 22 51 61 71 14 32 81 91 b1 08 15 23 42 72 a1 b2 c1 d1 16 24 33 52 62 92 93 17 25 26 34 35 36 43 53 63 73 74 82 83 a2 d2 e1 44 54 64 94 b3 c2 27 37 45 55 65 75 84 a3 f0 18 56 f1 46 c3 e2 85 86 95 a4 d3 47 66 76 96 ff c4 00 1b 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 41 11 00 02 01 02 04 05 02 05 02 05 03 02 07 00 01 05 00 01 02 03 11 04 12 21 31 13 22 32 41 51 05 71 14 23 33 61 81 42 52 15 34 91 a1 b1 06 24 c1 43 f0 07 44 62 72 d1 e1 f1 53 16 25 35 Data Ascii: h!1A"Qaq2#Br$3Rb%&456CScstDTd'7EUeuVFGfvA!1"2AQq#3aBR4$CDbrS%5
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 25 a9 59 95 61 d9 89 b6 e5 5b 49 2e ad 41 21 23 99 8b bd 8f 45 b4 a3 98 d0 31 ba d9 a5 d0 65 b0 fc b1 4a 93 2e d5 dc 50 1b b8 75 27 ea 8c d5 db 38 21 3b cd 19 ec b3 ce be bc a9 21 29 4e a4 c6 87 7b 8d 87 4c 84 17 72 67 52 f5 eb c0 28 ae e8 95 4b ac 3e 72 01 aa 05 c1 06 c5 3e 1d f0 1b 25 71 74 38 e9 69 52 af 12 a4 ba 08 42 ed cf b0 f7 c0 4b 42 f2 af ac ba d4 c8 3f c0 5d 69 1c c0 36 30 9a d4 96 3e 52 f2 37 32 b5 1e a7 4a 97 47 6e 51 61 78 e6 af 57 f4 a3 8b 11 5b f4 a1 fd 22 59 12 12 4a 25 4a 53 cb 51 24 9e 42 fa 01 1b 42 31 71 b9 bd 1a 70 cb 7b 11 15 29 f5 4d d6 db 97 ba 83 68 cb b9 bd fb ed 05 93 7a 17 95 20 ad 38 9e 86 4d d4 32 1c 71 39 d6 54 7b af 6f 6c 44 9a 89 32 d4 68 99 64 a9 c2 e3 82 e6 f7 23 b7 fc a3 07 27 bb 25 45 6c 72 59 c8 a2 5a 19 75 eb 27 91 Data Ascii: %Ya[I.A!#E1eJ.Pu'8!;!)N{LrgR(K>r>%qt8iRBKB?]i60>R72JGnQaxW["YJ%JSQ$BB1qp{)Mhz 8M2q9T{olD2hd#'%ElrYZu'
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 08 dc 4d 46 18 01 00 d8 66 77 86 84 38 48 80 68 f4 2f b8 d1 85 b9 5d af 16 9d 08 58 90 45 92 b1 d4 5f c2 6c 4e e3 b8 8d bb e1 ec 86 96 a6 a5 c5 8e 1b 49 e2 e6 5c a9 53 d2 24 6b ec 00 09 58 ca 1d d3 44 3b 6f 99 7c fb c6 cb 72 ac 79 d2 76 5a 6e 42 75 ea 75 42 59 c9 59 c6 14 52 eb 2e 0b 10 47 d5 08 04 42 60 10 06 e9 25 49 ff 00 f1 80 60 68 46 74 fa 47 64 03 39 3b 40 03 b9 19 b7 e5 26 5b 98 97 79 c6 5e 69 61 6d b8 85 65 52 54 36 20 f6 c0 23 d4 3c 28 e2 e4 b6 2e c3 ae e1 fa f3 cd b3 5e 43 56 6d 67 aa 99 c0 39 a7 b1 7d a9 e7 b8 89 b6 a5 29 69 a9 a7 e1 16 ed 4b 48 ef 81 84 49 75 a7 48 48 6c 66 f8 ca e2 3c 62 e2 67 2e c3 4a f7 ed 05 1b 8f 38 7d 15 45 c7 71 3d 8f 1d f1 e4 66 e2 85 b7 fb d2 5b da 60 9e e0 8f 5d b7 20 87 65 f3 04 f5 ac 3e 88 88 29 0c 5f 94 52 09 b8 Data Ascii: MFfw8Hh/]XE_lNI\S$kXD;o\|ryvZnBuuBYYR.GB`%I`hFtGd9;@&[y^iameRT6 #<(.^CVmg9})iKHIuHHlf<bg.J8}Eq=f[`] e>)_R
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 35 30 fb 41 c9 77 73 b6 75 1d 91 b4 4a 4e dd 81 9c 2a 12 eb 69 02 ca 5a 0a 01 ef 3c e1 b4 6b 0d c9 d9 5a 4c 97 bd f2 a4 c9 4b ab e0 11 72 5b 17 3a 6f 19 9d 77 14 66 91 4d 2a 20 d3 e5 4f f6 62 18 31 eb 34 5a 5d ff 00 73 25 3f 44 20 12 63 c6 a8 74 93 ff 00 66 4a e9 f9 10 58 77 16 45 0a 8f ff 00 75 ca 9f ea 40 49 7a c6 d4 da 7c 97 b9 66 75 c9 49 19 69 75 ae 65 b2 56 db 61 2a 26 e7 9e fc a3 9e ef 2b f7 3a 94 56 65 ec 63 ec d3 e5 15 c3 16 27 55 2e df 95 66 41 2f 5b ae 7a f6 de 35 a7 d2 63 35 66 59 69 f8 5a 8a f5 32 55 d7 64 c9 71 6c a5 4b 50 70 8b 93 15 62 2e 2d f7 21 41 b1 b4 b3 c9 f0 79 50 ec 2d c1 fb 8e a1 5b f0 33 17 fe 7d 50 58 34 04 60 da 11 d0 b5 34 3f b7 30 58 61 d1 83 e8 69 16 0d 4c fe 98 c1 60 b8 a0 c2 34 3b 7e 01 ef 4b c6 0b 0a e4 36 33 c3 b4 a9 2c Data Ascii: 50AwsuJNiZ<kZLKr[:owfM Ob14Z]s%?D ctfJXwEu@Iz\|fuIiueVa*&+:Vec'U.fA/[z5c5fYiZ2UdqlKPpb.-!AyP-[3}PX4`4?0XaiL`4;~K63,
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 23 14 4a e8 a3 75 90 32 f6 90 62 e5 d0 c2 9f 59 b2 71 0c 7e cb e9 df f9 4b bb 7f 3a 20 c3 ec fd cb ab d8 c7 38 f9 61 45 94 bf f1 e3 d8 62 eb 74 18 c3 73 cf 0b 02 e7 c4 fb 63 85 1d 28 49 5b c3 10 17 80 2e 28 d7 28 68 a4 38 40 bc 0c 48 f4 67 b8 c9 3f ae f8 80 82 00 f2 26 86 bf ce 46 53 95 8e bc 3d 25 34 cf 4b 38 84 bb 97 3a b2 b8 91 95 0e 81 7b 0f c5 50 e6 93 d9 e9 1a c5 46 57 44 54 a4 e0 51 b8 a1 c3 c9 0c 5f 25 67 92 24 ea ec 23 ef 79 a0 2f a7 20 af c6 6f e7 4c 51 89 e6 8a dd 2a a7 41 ab bd 48 ac ca aa 5e 6d ae df 35 63 92 92 79 83 db 00 ec 32 22 d0 00 50 08 39 86 86 01 86 b0 3a 8d 3b 44 02 38 18 01 0a b0 e2 db 71 2b 6d 6a 42 d0 42 92 a4 9b 14 91 a8 20 f2 30 05 8f 54 7b 9d f8 a1 2f 5f 94 46 1c ad 3c 96 eb 2d a7 e0 5d 56 82 71 23 d8 b1 cc 73 dc 44 bd 75 1c Data Ascii: #Ju2bYq~K: 8aEbtsc(I[.((h8@Hg?&FS=%4K8:{PFWDTQ_%g$#y/ oLQ*AH^m5cy2"P9:;D8q+mjBB 0T{/_F<-]Vq#sDu
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 95 66 48 ad 20 05 01 cd 45 5b 7c d1 ce a3 77 6b 17 c5 8d b5 21 71 43 a6 5b a1 58 48 49 71 6a 00 03 70 00 1a 47 45 1a 59 d3 66 91 6e fa 08 4a 4c b0 e3 8d 3c 8c e0 14 85 75 4e b6 3f e7 0a 9a 70 95 99 ab 77 2d d4 f9 54 a9 c2 e3 2e a9 2a 3b 92 dd 94 7c 79 18 ef 24 92 6e 5d c5 24 29 c2 93 63 96 e3 63 07 62 a3 b8 ed bc 5d 42 6e 4d b6 49 98 cc d3 69 41 b2 39 81 6d 23 2d 4e 9d 0e 67 16 d0 c2 ff 00 d2 7f 46 3e d8 35 f0 3f c8 f1 ac 67 87 93 e7 3b 34 3f b3 ff 00 38 05 64 3c 94 c6 98 71 77 ca fc c7 e8 a1 dc 2c 3c 6b 15 61 f5 aa c9 98 7e fc be 04 c2 ba 19 a2 71 0a 61 a7 7d c9 ce cc b4 a2 59 72 61 a2 92 a1 62 41 26 39 da b4 1b fb 9d 5d d7 b1 8e 33 51 91 57 0d 58 a6 87 55 e5 65 28 39 32 e9 e7 df 7f 08 d6 9e c6 35 37 2e 14 fa e5 11 ba 7c ab 4b a9 32 95 a5 84 25 49 20 e8 Data Ascii: fH E[\|wk!qC[XHIqjpGEYfnJL<uN?pw-T.*;\|y$n]$)ccb]BnMIiA9m#-NgF>5?g;4?8d<qw,<ka~qa}YrabA&9]3QWXUe(9257.\|K2%I
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 90 29 b0 87 d2 4a 01 b8 52 77 41 ed 07 ff 00 97 8d a3 24 f4 38 6a 51 71 d5 15 4e 22 e0 9a 56 2c a5 09 49 f4 00 e2 41 32 b3 6d 0e bb 47 b5 3d dd a8 3e 22 34 30 3c c3 8b 30 e5 57 0a d6 55 4b ac 35 62 7a d2 ef a7 56 df 47 e3 24 fd 5b 88 42 b1 12 45 89 80 2c 16 c6 fb fa 60 00 6d 71 71 bf 30 20 1a 38 40 31 c4 94 c3 b2 cf b6 fb 2e ad b7 1b 50 5a 16 85 59 49 50 3a 10 79 18 04 cf 58 f0 1b 8b 0d 62 b9 66 e8 35 d7 90 dd 75 a4 59 b7 0e 89 9c 48 1b 8e c5 8e 63 9e e2 25 ae e5 45 dc d3 6a da 04 10 7b 4c 5d 32 66 46 62 03 fa ca a3 f9 63 e8 98 a5 d4 47 63 c8 dc 6a 19 b8 b0 47 f2 32 a2 1c b7 1c 76 3d 99 2a 9f 82 57 88 f6 08 ce e5 c4 39 4c 03 10 71 b0 41 80 43 19 89 71 62 44 00 47 bc cf 74 02 19 b8 d5 af 00 84 16 de 90 00 dd 68 b4 21 8c 9c 9b 60 b8 b9 17 af b0 b1 3c 81 8a Data Ascii: )JRwA$8jQqN"V,IA2mG=>"40<0WUK5bzVG$[BE,`mqq0 8@1.PZYIP:yXbf5uYHc%Ej{L]2fFbcGcjG2v=*W9LqACqbDGth!`<

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:30 UTC	685	OUT	GET /static/5fcadab8cb1c8a2efc380b58/t/63c9ba02da48f523a9257e3f/1674164738686/VenueLogos_Barbarella.png HTTP/1.1 Host: static1.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:31 UTC	668	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2633 Access-Control-Allow-Origin: , Access-Control-Expose-Headers: Content-Length, Timing-Allow-Origin Cache-Control: public, max-age=94608000 Content-Type: image/png Pragma: cache Server: Squarespace Timing-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Contextid: onobFOYM/oOARASMg Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 554476 Date: Wed, 28 Aug 2024 16:42:31 GMT X-Served-By: cache-dfw-kdfw8210132-DFW, cache-ewr-kewr1740021-EWR X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1724863351.975265,VS0,VE37 Vary: Accept-Encoding Tracepoint: Fastly
2024-08-28 16:42:31 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 96 08 06 00 00 00 f7 da 95 1c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 09 fb 49 44 41 54 78 9c ed 9d ed 71 1b 37 10 86 0f 99 fc 97 3a 10 3b 10 3b 10 3b b0 52 81 d9 81 95 0a 2c 55 60 a5 82 d0 15 84 ae c0 54 07 54 05 a1 3a a0 2a b8 0c 3c cb 09 7d 06 70 38 7c 1c 8f dc e7 99 e1 8c 46 24 81 bb 25 5e ec 62 f1 71 a6 6d db 06 00 2e 9b df f8 7d 01 2e 1f 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 00 84 0e a0 Data Ascii: PNGIHDRpHYs~IDATxq7:;;;R,U`TT:*<}p8\|F$%^bqm.}.
2024-08-28 16:42:31 UTC	1255	IN	Data Raw: 79 72 fd a9 42 ef f9 9e af a1 fd f4 83 c7 de bc 7c 76 eb 29 2f e6 90 83 a0 d0 03 df bb ee f1 58 f7 b9 f6 92 3a 56 81 3a 96 09 42 cf f2 0c 21 a1 f7 7c 6f 1e f8 9d f6 c7 8e 01 a1 07 db ba af cd 6d 53 eb af 32 46 6f db d6 7a e0 3f 3d 6f a7 66 63 47 cf 2a db 84 60 db b6 f7 81 15 7e d9 e3 5e a9 63 59 b2 8e 9e 44 66 b5 bd cf 92 10 5c 04 a6 fa c8 c4 c7 51 7c c6 a9 5a 32 4e e6 76 5d 73 e1 57 29 c2 3c 65 56 59 84 e8 4a 72 dd 96 12 8d d4 e1 4a 3c de 24 da 6b ec b5 08 87 7a f7 12 7e ba e0 30 8a 08 6a cc 38 d5 ce ba fb 96 2c 26 79 e0 13 67 95 7d e5 97 dc 6c 53 ba 8e 93 ac 45 90 6d 96 ae 08 e5 8a 23 a6 e2 28 3d e3 54 55 e8 32 65 e0 ba d8 1c 2f 58 75 be d1 87 18 de d5 c9 14 ab b3 b4 bd 4e bc 16 c1 d7 91 5c e2 32 d6 5a f8 3a ea c1 fb 18 c6 98 47 77 6d 6e 48 3e 59 a5 6f Data Ascii: yrB\|v)/X:V:B!\|omS2Foz?=ofcG*`~^cYDf\Q\|Z2Nv]sW)<eVYJrJ<$kz~0j8,&yg}lSEm#(=TU2e/XuN\2Z:GwmnH>Yo

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:31 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-28 16:42:31 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 16:42:32 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 16:41:32 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_BL2 x-ms-request-id: 3c555c36-df25-4beb-8ada-48dfcf68dc96 PPServer: PPV: 30 H: BL02EPF0001DA2D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 16:42:31 GMT Connection: close Content-Length: 10173
2024-08-28 16:42:32 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:32 UTC	590	OUT	GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1 Host: assets.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.concordegroup.ca sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:32 UTC	591	IN	HTTP/1.1 200 OK Connection: close Content-Length: 117609 Server: UploadServer Expires: Sat, 05 Oct 2024 20:54:21 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 31 Oct 2022 21:19:57 GMT Content-Type: text/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 28 Aug 2024 16:42:32 GMT Age: 1854654 X-Served-By: cache-iad-kcgs7200066-IAD, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 9481, 1 X-Timer: S1724863352.269420,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: *
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 2c 72 3d 7b 34 38 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 38 38 30 37 29 2c 6f 3d 65 28 38 34 32 37 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 69 28 6f 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 32 34 32 30 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 37 35 38 29 2c 6f 3d 65 28 38 34 32 37 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 69 28 6f 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 Data Ascii: (()=>{var t,r={481:(t,r,e)=>{var n=e(8807),o=e(8427),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a function")}},2420:(t,r,e)=>{var n=e(1758),o=e(8427),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 2c 6a 3d 78 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 4d 3d 77 28 22 54 59 50 45 44 5f 41 52 52 41 59 5f 54 41 47 22 29 2c 43 3d 61 26 26 21 21 62 26 26 22 4f 70 65 72 61 22 21 3d 3d 70 28 75 2e 6f 70 65 72 61 29 2c 55 3d 21 31 2c 44 3d 7b 49 6e 74 38 41 72 72 61 79 3a 31 2c 55 69 6e 74 38 41 72 72 61 79 3a 31 2c 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 3a 31 2c 49 6e 74 31 36 41 72 72 61 79 3a 32 2c 55 69 6e 74 31 36 41 72 72 61 79 3a 32 2c 49 6e 74 33 32 41 72 72 61 79 3a 34 2c 55 69 6e 74 33 32 41 72 72 61 79 3a 34 2c 46 6c 6f 61 74 33 32 41 72 72 61 79 3a 34 2c 46 6c 6f 61 74 36 34 41 72 72 61 79 3a 38 7d 2c 4e 3d 7b 42 69 67 49 6e 74 36 34 41 72 72 61 79 3a 38 2c 42 69 67 55 69 6e 74 36 34 41 72 72 61 79 3a 38 7d 2c 46 3d 66 75 6e 63 Data Ascii: ,j=x("toStringTag"),M=w("TYPED_ARRAY_TAG"),C=a&&!!b&&"Opera"!==p(u.opera),U=!1,D={Int8Array:1,Uint8Array:1,Uint8ClampedArray:1,Int16Array:2,Uint16Array:2,Int32Array:4,Uint32Array:4,Float32Array:4,Float64Array:8},N={BigInt64Array:8,BigUint64Array:8},F=func
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 6f 3b 69 66 28 73 29 7b 69 66 28 62 29 7b 69 66 28 65 29 66 6f 72 28 6e 20 69 6e 20 44 29 69 66 28 28 6f 3d 75 5b 6e 5d 29 26 26 6c 28 6f 2c 74 29 29 74 72 79 7b 64 65 6c 65 74 65 20 6f 5b 74 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 6b 5b 74 5d 26 26 21 65 29 72 65 74 75 72 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 28 6b 2c 74 2c 65 3f 72 3a 43 26 26 6b 5b 74 5d 7c 7c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 6f 72 28 6e 20 69 6e 20 44 29 21 28 6f 3d 75 5b 6e 5d 29 7c 7c 6f 5b 74 5d 26 26 21 65 7c 7c 67 28 6f 2c 74 2c 72 29 7d 7d 2c 67 65 74 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3a 46 2c 69 73 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 66 Data Ascii: function(t,r,e){var n,o;if(s){if(b){if(e)for(n in D)if((o=u[n])&&l(o,t))try{delete o[t]}catch(t){}if(k[t]&&!e)return;try{return g(k,t,e?r:C&&k[t]\|\|r)}catch(t){}}for(n in D)!(o=u[n])\|\|o[t]&&!e\|\|g(o,t,r)}},getTypedArrayConstructor:F,isView:function(t){if(!f
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 28 73 2e 62 75 66 66 65 72 29 2e 62 79 74 65 73 2c 63 3d 61 2b 73 2e 62 79 74 65 4f 66 66 73 65 74 2c 66 3d 6e 28 2b 6f 29 2c 6c 3d 30 3b 6c 3c 72 3b 6c 2b 2b 29 75 5b 63 2b 6c 5d 3d 66 5b 69 3f 6c 3a 72 2d 6c 2d 31 5d 7d 3b 69 66 28 61 29 7b 76 61 72 20 51 3d 52 26 26 50 2e 6e 61 6d 65 21 3d 3d 49 3b 69 66 28 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 28 31 29 7d 29 29 26 26 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 50 28 2d 31 29 7d 29 29 26 26 21 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 2c 6e 65 77 20 50 28 31 2e 35 29 2c 6e 65 77 20 50 28 4e 61 4e 29 2c 31 21 3d 50 2e 6c 65 6e 67 74 68 7c 7c 51 26 26 21 41 7d 29 29 29 51 26 26 41 26 26 75 28 50 2c 22 6e 61 6d 65 22 2c 49 29 3b 65 6c 73 65 7b 28 4c 3d Data Ascii: (s.buffer).bytes,c=a+s.byteOffset,f=n(+o),l=0;l<r;l++)u[c+l]=f[i?l:r-l-1]};if(a){var Q=R&&P.name!==I;if(f((function(){P(1)}))&&f((function(){new P(-1)}))&&!f((function(){return new P,new P(1.5),new P(NaN),1!=P.length\|\|Q&&!A})))Q&&A&&u(P,"name",I);else{(L=
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 20 72 5b 31 5d 3c 3c 38 7c 72 5b 30 5d 7d 2c 67 65 74 49 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 47 28 4b 28 74 68 69 73 2c 34 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 29 7d 2c 67 65 74 55 69 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 47 28 4b 28 74 68 69 73 2c 34 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 29 3e 3e 3e 30 7d 2c 67 65 74 46 6c 6f 61 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 48 28 4b 28 74 68 69 73 2c 34 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: oid 0);return r[1]<<8\|r[0]},getInt32:function(t){return G(K(this,4,t,arguments.length>1?arguments[1]:void 0))},getUint32:function(t){return G(K(this,4,t,arguments.length>1?arguments[1]:void 0))>>>0},getFloat32:function(t){return H(K(this,4,t,arguments.len
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 6f 6e 28 74 29 7b 76 61 72 20 72 3d 69 28 74 29 2c 65 3d 75 28 74 68 69 73 29 2c 76 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 67 3d 76 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 3d 76 6f 69 64 20 30 21 3d 3d 67 3b 64 26 26 28 67 3d 6e 28 67 2c 76 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 29 29 3b 76 61 72 20 79 2c 6d 2c 62 2c 78 2c 77 2c 45 2c 53 3d 70 28 72 29 2c 52 3d 30 3b 69 66 28 21 53 7c 7c 74 68 69 73 3d 3d 3d 68 26 26 73 28 53 29 29 66 6f 72 28 79 3d 63 28 72 29 2c 6d 3d 65 3f 6e 65 77 20 74 68 69 73 28 79 29 3a 68 28 79 29 3b 79 3e 52 3b 52 2b 2b 29 45 3d 64 3f 67 28 72 5b 52 5d 2c 52 29 3a 72 5b 52 5d 2c 66 28 6d 2c 52 2c 45 29 3b 65 6c 73 65 20 66 6f 72 28 77 3d 28 78 3d 6c 28 72 Data Ascii: on(t){var r=i(t),e=u(this),v=arguments.length,g=v>1?arguments[1]:void 0,d=void 0!==g;d&&(g=n(g,v>2?arguments[2]:void 0));var y,m,b,x,w,E,S=p(r),R=0;if(!S\|\|this===h&&s(S))for(y=c(r),m=e?new this(y):h(y);y>R;R++)E=d?g(r[R],R):r[R],f(m,R,E);else for(w=(x=l(r
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 6c 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 4f 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 65 6a 65 63 74 3a 66 28 37 29 7d 7d 2c 34 37 38 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 32 32 32 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 65 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 65 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: l?-1:o\|\|f?f:O}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filterReject:f(7)}},4789:(t,r,e)=>{"use strict";var n=e(2229);t.exports=function(t,r){var e=[][t];return!!e&&n((function(){e.call(null,r\|\|function()
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 75 72 6e 20 65 3c 38 3f 61 28 74 2c 72 29 3a 73 28 74 2c 69 28 6e 28 74 2c 30 2c 75 29 2c 72 29 2c 69 28 6e 28 74 2c 75 29 2c 72 29 2c 72 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 2c 6f 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 31 3b 69 3c 6f 3b 29 7b 66 6f 72 28 6e 3d 69 2c 65 3d 74 5b 69 5d 3b 6e 26 26 72 28 74 5b 6e 2d 31 5d 2c 65 29 3e 30 3b 29 74 5b 6e 5d 3d 74 5b 2d 2d 6e 5d 3b 6e 21 3d 3d 69 2b 2b 26 26 28 74 5b 6e 5d 3d 65 29 7d 72 65 74 75 72 6e 20 74 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 6f 3d 72 2e 6c 65 6e 67 74 68 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 30 2c 73 3d 30 3b 61 3c 6f 7c 7c 73 3c 69 3b 29 74 5b 61 2b 73 5d 3d 61 3c 6f 26 26 73 3c 69 3f Data Ascii: urn e<8?a(t,r):s(t,i(n(t,0,u),r),i(n(t,u),r),r)},a=function(t,r){for(var e,n,o=t.length,i=1;i<o;){for(n=i,e=t[i];n&&r(t[n-1],e)>0;)t[n]=t[--n];n!==i++&&(t[n]=e)}return t},s=function(t,r,e,n){for(var o=r.length,i=e.length,a=0,s=0;a<o\|\|s<i;)t[a+s]=a<o&&s<i?
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 5b 72 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 72 3d 73 28 74 29 2c 61 29 29 3f 65 3a 75 3f 69 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 6e 3d 69 28 72 29 29 26 26 6f 28 72 2e 63 61 6c 6c 65 65 29 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 6e 7d 7d 2c 32 32 38 33 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 38 35 34 29 2c 6f 3d 65 28 32 39 32 39 29 2c 69 3d 65 28 38 30 39 38 29 2c 61 3d 65 28 31 38 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 Data Ascii: urn void 0===t?"Undefined":null===t?"Null":"string"==typeof(e=function(t,r){try{return t[r]}catch(t){}}(r=s(t),a))?e:u?i(r):"Object"==(n=i(r))&&o(r.callee)?"Arguments":n}},2283:(t,r,e)=>{var n=e(1854),o=e(2929),i=e(8098),a=e(189);t.exports=function(t,r,e)
2024-08-28 16:42:32 UTC	1378	IN	Data Raw: 6f 62 61 6c 29 75 3f 74 5b 72 5d 3d 65 3a 61 28 72 2c 65 29 3b 65 6c 73 65 7b 74 72 79 7b 73 2e 75 6e 73 61 66 65 3f 74 5b 72 5d 26 26 28 75 3d 21 30 29 3a 64 65 6c 65 74 65 20 74 5b 72 5d 7d 63 61 74 63 68 28 74 29 7b 7d 75 3f 74 5b 72 5d 3d 65 3a 6f 2e 66 28 74 2c 72 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 73 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 73 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 37 35 37 30 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 39 33 37 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 28 Data Ascii: obal)u?t[r]=e:a(r,e);else{try{s.unsafe?t[r]&&(u=!0):delete t[r]}catch(t){}u?t[r]=e:o.f(t,r,{value:e,enumerable:!1,configurable:!s.nonConfigurable,writable:!s.nonWritable})}return t}},7570:(t,r,e)=>{var n=e(9379);t.exports=function(t,r,e){for(var o in r)n(

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:33 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4791 Host: login.live.com
2024-08-28 16:42:33 UTC	4791	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 16:42:33 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 16:41:33 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 7c279286-8e0f-4e1d-b9dc-fac386e3d487 PPServer: PPV: 30 H: SN1PEPF0002FA75 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 16:42:33 GMT Connection: close Content-Length: 11177
2024-08-28 16:42:33 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Timestamp	Bytes transferred	Direction	Data
2024-08-28 16:42:33 UTC	643	OUT	GET /universal/scripts-compressed/extract-css-runtime-effbab9ddc4d7097e0f1-min.en-US.js HTTP/1.1 Host: assets.squarespace.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.concordegroup.ca sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.concordegroup.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 16:42:33 UTC	668	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45042 Cache-Control: public, max-age=31536000 Expires: Thu, 28 Aug 2025 09:29:25 GMT Last-Modified: Wed, 28 Aug 2024 09:17:55 GMT ETag: W/"ac7bb10a74dbb86cbf978a608f7f1b74" Content-Type: text/javascript Warning: 214 UploadServer gunzipped Server: UploadServer Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 25988 Date: Wed, 28 Aug 2024 16:42:33 GMT X-Served-By: cache-iad-kiad7000098-IAD, cache-nyc-kteb1890034-NYC X-Cache: HIT, HIT X-Cache-Hits: 185, 0 X-Timer: S1724863354.893504,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: *
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 75 5b 65 5d 3b 69 66 28 74 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 75 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6d 5b 65 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 63 29 2c 61 2e 6c 6f 61 64 65 64 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 6d 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 5b 5d 3b 63 2e 4f 3d 28 74 2c 61 2c 6e 2c 62 29 3d 3e 7b 69 66 28 61 29 7b 62 3d 62 7c 7c 30 3b 66 6f 72 Data Ascii: (()=>{"use strict";var m={},u={};function c(e){var t=u[e];if(t!==void 0)return t.exports;var a=u[e]={id:e,loaded:!1,exports:{}};return m[e].call(a.exports,a,a.exports,c),a.loaded=!0,a.exports}c.m=m,c.amdO={},(()=>{var e=[];c.O=(t,a,n,b)=>{if(a){b=b\|\|0;for
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 73 2d 6d 61 72 6b 65 74 69 6e 67 2d 70 69 6e 69 74 62 75 74 74 6f 6e 73 22 2c 39 33 30 3a 22 61 73 79 6e 63 2d 67 6f 6f 67 6c 65 77 6f 72 6b 73 70 61 63 65 2d 69 6e 69 74 69 61 6c 2d 70 75 72 63 68 61 73 65 22 2c 39 35 32 3a 22 61 73 79 6e 63 2d 63 68 65 63 6b 6f 75 74 2d 64 6f 6d 61 69 6e 2d 74 65 72 6d 2d 65 78 74 65 6e 73 69 6f 6e 2d 75 6e 69 76 65 72 73 61 6c 2d 63 68 65 63 6b 6f 75 74 22 2c 31 33 34 37 3a 22 61 73 79 6e 63 2d 61 70 70 73 2d 63 6f 76 65 72 70 61 67 65 63 6f 6e 66 69 67 2d 6c 61 79 6f 75 74 63 68 6f 6f 73 65 72 22 2c 31 33 39 31 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 72 6d 73 2d 6f 70 74 69 6f 6e 73 2d 72 61 64 69 6f 22 2c 32 31 32 33 3a 22 61 73 79 6e 63 2d 70 72 69 6e 74 2d 6f 6e 2d 64 65 6d 61 6e 64 22 2c 32 32 35 39 3a Data Ascii: s-marketing-pinitbuttons",930:"async-googleworkspace-initial-purchase",952:"async-checkout-domain-term-extension-universal-checkout",1347:"async-apps-coverpageconfig-layoutchooser",1391:"async-design-forms-options-radio",2123:"async-print-on-demand",2259:
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 73 2d 70 6f 73 74 6f 72 64 65 72 65 6d 61 69 6c 73 70 61 6e 65 6c 22 2c 39 34 31 36 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 6e 74 73 2d 62 75 74 74 6f 6e 73 22 2c 39 35 39 38 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 72 6d 73 2d 65 66 66 65 63 74 73 22 2c 31 30 30 39 31 3a 22 61 73 79 6e 63 2d 73 68 61 72 65 64 2d 73 73 6f 2d 6d 61 6e 61 67 65 72 22 2c 31 30 39 32 32 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 6e 74 73 2d 6d 69 73 63 22 2c 31 30 39 32 34 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 73 74 61 74 75 73 2d 6c 69 6d 69 74 65 64 73 74 6f 63 6b 70 61 6e 65 6c 22 2c 31 31 32 36 38 3a 22 61 73 79 6e 63 2d 73 76 67 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 22 2c 31 31 36 39 38 3a 22 61 73 79 6e Data Ascii: s-postorderemailspanel",9416:"async-design-fonts-buttons",9598:"async-design-forms-effects",10091:"async-shared-sso-manager",10922:"async-design-fonts-misc",10924:"async-commerce-productstatus-limitedstockpanel",11268:"async-svg-compatibility",11698:"asyn
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 67 22 2c 31 39 31 33 35 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 62 61 73 69 63 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 31 39 36 30 36 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 70 61 79 6d 65 6e 74 73 65 74 74 69 6e 67 73 2d 74 65 73 74 6d 6f 64 65 70 61 6e 65 6c 22 2c 32 30 31 38 36 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 74 77 65 61 6b 2d 63 6f 76 65 72 70 61 67 65 22 2c 32 30 38 38 32 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 6f 72 64 65 72 73 70 61 6e 65 6c 22 2c 32 31 31 34 32 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 6d 61 72 6b 65 74 69 6e 67 2d 73 68 61 72 65 62 75 74 74 6f 6e 73 22 2c 32 32 38 35 35 3a 22 61 73 79 6e 63 2d 6c 61 6e 67 75 61 67 65 2d 72 65 67 69 6f 6e 2d 70 61 6e 65 6c 22 2c 32 32 38 37 31 Data Ascii: g",19135:"async-settings-basicinformation",19606:"async-commerce-paymentsettings-testmodepanel",20186:"async-design-tweak-coverpage",20882:"async-commerce-orderspanel",21142:"async-settings-marketing-sharebuttons",22855:"async-language-region-panel",22871
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 2d 70 61 67 65 73 2d 63 6f 76 65 72 70 61 67 65 2d 6d 65 64 69 61 22 2c 33 32 39 34 32 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 77 61 69 74 6c 69 73 74 73 22 2c 33 33 37 38 38 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 65 78 74 65 6e 73 69 6f 6e 73 2d 65 78 74 65 6e 73 69 6f 6e 22 2c 33 34 30 38 33 3a 22 61 73 79 6e 63 2d 63 6f 6e 74 65 6e 74 2d 62 72 6f 77 73 65 72 2d 64 72 61 66 74 2d 73 65 74 74 69 6e 67 73 22 2c 33 34 33 36 30 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 6c 6f 63 6b 62 72 61 6e 64 69 6e 67 74 65 78 74 22 2c 33 34 38 35 35 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 6e 74 73 2d 61 73 73 69 67 6e 2d 73 74 79 6c 65 73 2d 64 65 66 69 6e 69 74 69 6f 6e 22 2c 33 35 37 31 34 3a 22 61 73 79 6e 63 2d 63 6f 6e 74 65 6e Data Ascii: -pages-coverpage-media",32942:"async-commerce-waitlists",33788:"async-settings-extensions-extension",34083:"async-content-browser-draft-settings",34360:"async-design-lockbrandingtext",34855:"async-design-fonts-assign-styles-definition",35714:"async-conten
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 72 65 73 70 61 63 65 62 61 64 67 65 22 2c 34 34 39 33 32 3a 22 61 73 79 6e 63 2d 63 75 73 74 6f 6d 65 72 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 65 6d 61 69 6c 67 72 6f 75 70 73 70 61 6e 65 6c 22 2c 34 35 33 30 31 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 6c 61 62 73 2d 69 6e 74 65 72 6e 61 6c 6c 61 62 73 22 2c 34 35 34 38 38 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 74 77 65 61 6b 2d 63 6f 6c 6f 72 73 22 2c 34 36 30 32 32 3a 22 61 73 79 6e 63 2d 63 65 6e 73 75 73 2d 75 69 2d 74 72 61 66 66 69 63 2d 6f 76 65 72 76 69 65 77 22 2c 34 36 30 35 35 3a 22 61 73 79 6e 63 2d 63 6f 6e 74 65 6e 74 2d 62 72 6f 77 73 65 72 22 2c 34 36 31 31 38 3a 22 61 73 79 6e 63 2d 73 68 61 72 65 64 2d 62 61 73 69 63 73 65 74 74 69 6e 67 73 22 2c 34 36 33 30 33 3a Data Ascii: respacebadge",44932:"async-customer-notifications-emailgroupspanel",45301:"async-settings-labs-internallabs",45488:"async-design-tweak-colors",46022:"async-census-ui-traffic-overview",46055:"async-content-browser",46118:"async-shared-basicsettings",46303:
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 22 2c 35 34 30 33 38 3a 22 61 73 79 6e 63 2d 63 65 6e 73 75 73 2d 75 69 2d 72 73 73 2d 73 75 62 73 63 72 69 62 65 72 73 22 2c 35 34 31 37 33 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 72 6d 73 2d 63 6f 6c 6f 72 73 22 2c 35 35 32 32 31 3a 22 61 73 79 6e 63 2d 63 75 73 74 6f 6d 65 72 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 65 6d 61 69 6c 73 65 74 74 69 6e 67 73 70 61 6e 65 6c 22 2c 35 35 32 32 34 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 64 6f 6d 61 69 6e 73 2d 62 75 69 6c 74 2d 69 6e 2d 70 61 6e 65 6c 22 2c 35 35 34 32 32 3a 22 61 73 79 6e 63 2d 70 61 67 65 2d 61 64 6d 69 6e 22 2c 35 35 34 37 31 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 62 61 72 22 2c 35 36 Data Ascii: tion-settings",54038:"async-census-ui-rss-subscribers",54173:"async-design-forms-colors",55221:"async-customer-notifications-emailsettingspanel",55224:"async-settings-domains-built-in-panel",55422:"async-page-admin",55471:"async-design-announcementbar",56
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 70 61 67 65 63 6f 6e 66 69 67 2d 72 6f 6f 74 22 2c 36 31 39 32 37 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 70 69 63 6b 75 70 22 2c 36 32 32 35 37 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 6c 61 6e 64 69 6e 67 2d 70 65 72 6d 69 73 73 69 6f 6e 73 2d 6f 77 6e 65 72 73 68 69 70 22 2c 36 32 35 30 34 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 61 64 76 61 6e 63 65 64 2d 34 30 34 2d 77 72 61 70 70 65 64 22 2c 36 32 38 32 32 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 70 61 79 6d 65 6e 74 73 65 74 74 69 6e 67 73 2d 73 74 6f 72 65 63 75 72 72 65 6e 63 79 70 61 6e 65 6c 22 2c 36 32 38 35 33 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 72 6d 73 2d 6f 70 74 69 6f 6e 73 2d 73 75 72 76 65 79 22 2c 36 33 31 31 30 3a 22 61 73 79 6e Data Ascii: pageconfig-root",61927:"async-commerce-pickup",62257:"async-settings-landing-permissions-ownership",62504:"async-settings-advanced-404-wrapped",62822:"async-commerce-paymentsettings-storecurrencypanel",62853:"async-design-forms-options-survey",63110:"asyn
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 6e 63 2d 73 65 74 74 69 6e 67 73 2d 6d 61 72 6b 65 74 69 6e 67 2d 75 72 6c 62 75 69 6c 64 65 72 22 2c 37 30 31 32 37 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 2d 70 61 67 65 22 2c 37 30 35 34 30 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 6e 2d 66 6f 6e 74 73 2d 66 6f 6e 74 2d 70 61 63 6b 22 2c 37 31 37 30 38 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 6c 61 6e 64 69 6e 67 2d 63 6f 76 65 72 2d 70 61 67 65 2d 67 65 6e 65 72 61 6c 22 2c 37 31 37 33 31 3a 22 61 73 79 6e 63 2d 63 6f 6e 74 65 6e 74 2d 62 72 6f 77 73 65 72 2d 62 6c 6f 67 2d 70 6f 73 74 2d 73 65 74 74 69 6e 67 73 22 2c 37 31 38 33 35 3a 22 61 73 79 6e 63 2d 63 65 6e 73 75 73 2d 75 69 2d 67 65 6f 67 72 61 70 68 79 22 2c 37 32 31 32 32 3a 22 61 73 79 6e 63 2d 64 65 73 69 67 Data Ascii: nc-settings-marketing-urlbuilder",70127:"async-commerce-cart-page",70540:"async-design-fonts-font-pack",71708:"async-settings-landing-cover-page-general",71731:"async-content-browser-blog-post-settings",71835:"async-census-ui-geography",72122:"async-desig
2024-08-28 16:42:33 UTC	1378	IN	Data Raw: 63 61 72 74 22 2c 38 33 36 30 35 3a 22 61 73 79 6e 63 2d 64 69 67 69 74 61 6c 2d 70 72 6f 64 75 63 74 73 2d 63 75 73 74 6f 6d 69 7a 65 2d 70 61 79 77 61 6c 6c 22 2c 38 34 34 36 37 3a 22 61 73 79 6e 63 2d 67 64 70 72 2d 63 6f 6f 6b 69 65 2d 62 61 6e 6e 65 72 22 2c 38 34 37 31 34 3a 22 61 73 79 6e 63 2d 63 6f 6d 6d 65 72 63 65 2d 64 69 73 63 6f 75 6e 74 73 22 2c 38 34 38 37 39 3a 22 61 73 79 6e 63 2d 73 65 74 74 69 6e 67 73 2d 61 64 76 61 6e 63 65 64 2d 61 70 69 6b 65 79 73 22 2c 38 35 33 36 34 3a 22 69 6d 61 67 65 2d 65 66 66 65 63 74 2d 72 65 66 72 61 63 74 65 64 2d 63 69 72 63 6c 65 73 22 2c 38 35 33 37 36 3a 22 61 73 79 6e 63 2d 63 65 6e 73 75 73 2d 75 69 2d 73 61 6c 65 73 2d 6f 76 65 72 76 69 65 77 22 2c 38 35 35 35 30 3a 22 61 73 79 6e 63 2d 70 61 67 Data Ascii: cart",83605:"async-digital-products-customize-paywall",84467:"async-gdpr-cookie-banner",84714:"async-commerce-discounts",84879:"async-settings-advanced-apikeys",85364:"image-effect-refracted-circles",85376:"async-census-ui-sales-overview",85550:"async-pag