Edit tour

Windows Analysis Report
http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg

Overview

General Information

Sample URL:	http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg
Analysis ID:	1448263
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Posts data to a JPG file (protocol mismatch)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML page contains hidden URLs or javascript code

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6532 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4864 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/hotel/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/hotel/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/hotel/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas
Source: https://www.campobahia.com/hotel/	HTTP Parser: Form action: https://paginas.rocks/pages/index/593579 campobahia paginas

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: https://www.campobahia.com/hotel/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg

HTTP Parser: Base64 decoded: https://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg/

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	HTTP Parser: Has password / email / username input fields
Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	HTTP Parser: Has password / email / username input fields

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	HTTP Parser: No <meta name="author".. found
Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="author".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="author".. found

Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	HTTP Parser: No <meta name="copyright".. found
Source: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/en/home-en/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.campobahia.com/hotel/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2

Networking

Posts data to a JPG file (protocol mismatch)

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-J2E85P7SPT&gtm=45je45m0v872729742za200&_p=1716873250250&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZTNiMT&cid=648733769.1716873252&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_s=1&sid=1716873252&sct=1&seg=0&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Campo%20Bahia&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=7557 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: http://www.campobahia.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

TCP traffic: 192.168.2.5:62516 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1Host: campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1Host: campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/4.0.0/cookie-consent.js HTTP/1.1Host: www.cookieconsent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1Host: campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1Host: www.termsfeed.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1Host: campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js?v=next HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /signals/plugins/openbridge3.js?v=next HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1Host: www.termsfeed.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=195528-195528If-Range: "5eefb438a570c1ac15e2deee89dc27ef"
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ob=open-bridge/events HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: http://www.campobahia.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1Host: www.termsfeed.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=195528-206908If-Range: "5eefb438a570c1ac15e2deee89dc27ef"
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /en/home-en/ HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=1.6.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1Host: campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.29.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/swiper/swiper.min.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-6.css?ver=1694545246 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-5031.css?ver=1694547618 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/ouibounce.js?ver=1.6.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/popupCustom.js?ver=1.6.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/scrollspy.js?ver=1.6.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.campobahia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.campobahia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.campobahia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve-child-master/BiloxiScript.woff2 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.campobahia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.campobahia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.29.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/wp-content/uploads/elementor/css/post-5031.css?ver=1694547618Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /releases/4.0.0/cookie-consent.js HTTP/1.1Host: www.cookieconsent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1Host: campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/fontello/css/tss-font.min.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.css?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1Host: www.termsfeed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js?v=next HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.js?ver=1.13.2 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.js?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /signals/plugins/openbridge3.js?v=next HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.8.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/isotope/imagesloaded.pkgd.min.js?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/js/wptestimonial.js?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/images/close_modal.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=1.6.5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/09/Pop-up-Julho-atualizado-2-copiar-2.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96xc55dwvl3hw0hl1s9289njj34.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvbdgxpl9ga6k.jpeg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/SaveInsta.App-2876484693686955359_6076186385.mp4 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.campobahia.com/en/home-en/Accept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/video.57bb05ea17924bda3c02.bundle.js HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.campobahia.com/en/home-en/Accept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cm-pop-up-banners/shared/assets/images/close_modal.png HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/09/Pop-up-Julho-atualizado-2-copiar-2.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /?ob=open-bridge/events HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96xc55dwvl3hw0hl1s9289njj34.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/en/home-en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
Source: global traffic	HTTP traffic detected: GET /?ob=open-bridge%2Fevents HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvbdgxpl9ga6k.jpeg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. HTTP/1.1Host: api.whatsapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yI/l/0,cross/C2fHuK6eV5E.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/l/0,cross/rBt2u2pvsTD.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y9/l/0,cross/58P2v5ZIoPt.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/IAsbxbxXkof.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yq/r/mdQNdcFMi0p.png HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.8562-34/435524640_1127495198676263_4923359980655354883_n.png?ccb=1-7&_nc_sid=73b08c&_nc_ohc=5pgnz3LNoTkQ7kNvgGoc6H_&_nc_ht=scontent.whatsapp.net&oh=01_Q5AaIG1qZp1y_B84Ex9VEc53d0TuOf1_RBZGe8G9e3ljYLbl&oe=665B55A1 HTTP/1.1Host: scontent.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101 HTTP/1.1Host: pps.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.8562-34/435524640_1127495198676263_4923359980655354883_n.png?ccb=1-7&_nc_sid=73b08c&_nc_ohc=5pgnz3LNoTkQ7kNvgGoc6H_&_nc_ht=scontent.whatsapp.net&oh=01_Q5AaIG1qZp1y_B84Ex9VEc53d0TuOf1_RBZGe8G9e3ljYLbl&oe=665B55A1 HTTP/1.1Host: scontent.whatsapp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yq/r/mdQNdcFMi0p.png HTTP/1.1Host: static.whatsapp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yJ/r/Qhrnh5evyPV.png HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yz/r/JU3TMHT_W2V.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101 HTTP/1.1Host: pps.whatsapp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yJ/r/Qhrnh5evyPV.png HTTP/1.1Host: static.whatsapp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i7M54/yu/l/en_US/CMbvlktGnP3.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yV/r/HzxD9aAXSyD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/Rn_Qb5J-qbY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yV/r/vjbKCjVd5OR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ihVQ4/y6/l/en_US/6m6v2_nvObo.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.whatsapp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://api.whatsapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://api.whatsapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hotel/5659?currencyId=16&lang=pt-BR HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=1&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1Host: api.whatsapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/css/fonts_v3_css.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/vendor/bootstrap.min.css HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/header.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/footer.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/zcalendar_css.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /BEImages/5643.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/css/main_css.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/cookieConsent.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/index.css?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/vendor/fotorama.css HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/fonts/roboto-v20-latin_latin-ext-300.woff2 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://book.omnibees.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff2 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://book.omnibees.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/fonts/roboto-v20-latin_latin-ext-500.woff2 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://book.omnibees.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/css/fonts/roboto-v20-latin_latin-ext-700.woff2 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://book.omnibees.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /BEImages/5643.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDark/iconGreyDark_ArrowDown.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/v3/css/index.css?version=1.0.0.395Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyLight/iconGreyLight_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/685202.jpeg HTTP/1.1Host: media.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Information.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/922170.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/oidc-client/1.11.3/oidc-client.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://book.omnibees.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/hamburger_menu_desktop_icon.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/926105.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/lang_pt-br_v4.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1863763.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_ArrowRight.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDark/iconGreyDark_ArrowDown.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery.min.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Information.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyLight/iconGreyLight_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/js/vendor/bootstrap/bootstrap.bundle.min.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/vendor/moment.min.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/hamburger_menu_desktop_icon.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/lang_pt-br_v4.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/vendor/moment.tz.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/vendor/fotorama.js HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /modules.3b9efc26f753310c2bd8.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/js/main.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/685202.jpeg HTTP/1.1Host: media.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_ArrowRight.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/922170.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/js/autocomplete-hotels.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/js/zcalendar.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/js/occupancy-select.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/js/myreservation.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /Images/5659/Packages/701x390/926105.jpg HTTP/1.1Host: media.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/js/ajax-search.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v3/js/cookie.js?version=1.0.0.395 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/v3/css/header.css?version=1.0.0.395Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /timezone/3090/8 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/indexIcons/iconPerson.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/indexIcons/iconPromo.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/information_v3.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v4/icons/meals/breakfast_v4_green.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/checked_index.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/indexIcons/iconPerson.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/Group%2022069.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icon_Modal_Warning.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/indexIcons/iconPromo.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icon_Circle_Left.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icon_Circle_Right.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /gethotelstyle?hotel_id=5659&currency_id=16&language_id=8 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-CSRF-TOKEN: nMF0wEmtRD7U7U5PSV5wsNpcZy5gdK2KGj0eoXV2X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-E6QPTJ9TK6&gacid=748051113.1716873311&gtm=45je45m0v884784337z8832375478za200zb832375478&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1683724995 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/1863763?s=0.25&r=0.14067140413800816 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://book.omnibees.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://book.omnibees.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0 HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/envelope-icon.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /timezone/3090/8 HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Footer_Contact.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/Group%2022069.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/Grupo%2015348.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/session_modal_imgv4.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/icon_Modal_Warning.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/information_v3.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /v4/icons/meals/breakfast_v4_green.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/checked_index.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Checkbox_Selected.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/v3/css/header.css?version=1.0.0.395Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6Im9lVmdKUlV3TXREcDFEalNCd1BpWWc9PSIsInZhbHVlIjoiTlJqTzZQenhwckx2R2QvVSs5c2IwSEpBTXJGcmFpd21OaDFZNTBaUVFKbTBYdDlyQXV4MzNnWHBoYzh1eDVQd2liL2JIK2VrSExZRXk1bjJJNWJRZ2w5U1dEN3V1YVhkeVRuUUl3VXBvLzlMMjF4NStzSFlhdUMvQ2UwbnF2VysiLCJtYWMiOiIxYzZiZWRkNTg2OWM3YzFhOTE5MmVjNmVmZjlkMTQ4YTcyNWZmYTBkYzRjZDNiMWUzYTYxMWE2NjI2ZTU1ODVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdMUFhjNUJXdWwwS1hWcy9peUdmYXc9PSIsInZhbHVlIjoiOW1SVXV4NmRRQXVEYzZnWFJTakY5QlJRTXVHOXJVekxBZWhxRlJycko5N090ZWJDOGQwR2ZOQXFTdEk3RXRKT05ZdmljL2Z0TWVpemowTk1PaXgvN0tsRTRGVDdhTjNKWStUS0taL0wxVDl0TmZZN3kzaThiNkczZEJrbHY1cFIiLCJtYWMiOiJiZjgxNzMyOWZlYmE3M2U4ODc5YjY4ZGI2OTJhM2M0ZmQ4NzFhZjZiZDdiMWZiZTBmYTAyYjRmN2NkMDE3ZmI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6Im9lVmdKUlV3TXREcDFEalNCd1BpWWc9PSIsInZhbHVlIjoiTlJqTzZQenhwckx2R2QvVSs5c2IwSEpBTXJGcmFpd21OaDFZNTBaUVFKbTBYdDlyQXV4MzNnWHBoYzh1eDVQd2liL2JIK2VrSExZRXk1bjJJNWJRZ2w5U1dEN3V1YVhkeVRuUUl3VXBvLzlMMjF4NStzSFlhdUMvQ2UwbnF2VysiLCJtYWMiOiIxYzZiZWRkNTg2OWM3YzFhOTE5MmVjNmVmZjlkMTQ4YTcyNWZmYTBkYzRjZDNiMWUzYTYxMWE2NjI2ZTU1ODVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdMUFhjNUJXdWwwS1hWcy9peUdmYXc9PSIsInZhbHVlIjoiOW1SVXV4NmRRQXVEYzZnWFJTakY5QlJRTXVHOXJVekxBZWhxRlJycko5N090ZWJDOGQwR2ZOQXFTdEk3RXRKT05ZdmljL2Z0TWVpemowTk1PaXgvN0tsRTRGVDdhTjNKWStUS0taL0wxVDl0TmZZN3kzaThiNkczZEJrbHY1cFIiLCJtYWMiOiJiZjgxNzMyOWZlYmE3M2U4ODc5YjY4ZGI2OTJhM2M0ZmQ4NzFhZjZiZDdiMWZiZTBmYTAyYjRmN2NkMDE3ZmI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icon_Circle_Left.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0
Source: global traffic	HTTP traffic detected: GET /icons/x-close.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/v3/css/zcalendar_css.css?version=1.0.0.395Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icon_Circle_Right.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /gethotelstyle?hotel_id=5659&currency_id=16&language_id=8 HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/session_modal_imgv4.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/Grupo%2015348.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0 HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Footer_Contact.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=2&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1Host: api.whatsapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/envelope-icon.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/logo_Omnibees.svg HTTP/1.1Host: book.omnibees.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_White/iconWhite_Checkbox_Selected.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/icons_GreyDarkest/iconGreyDarkest_Xclose.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/x-close.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /icons/logo_Omnibees.svg HTTP/1.1Host: book.omnibees.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlFacXNZckd0UkRoUmNTUElITzdpd3c9PSIsInZhbHVlIjoicEkyMnFtTUdNNDZzTTNYU2VOblZOWWZ2OHF5bHJrVWVtcUVGV2ZGRkRqU0VxaVhQNEllMmw5WXBIZGM3d016dmx1QlhxM0R2UlRnWEIyM3hYQkkzQ09xSUExRU02bWxHaCthSms5Um9aZThNN0RrMUVUZTNnQlVzbSsvbE5Bc1MiLCJtYWMiOiI2Nzk5OTI5MDU5MDE2MmUzZGQ2MGFmZGNjM2M3ZWJiZjU5NWRmZDQxY2ZiNDM2YjMzNGIzN2M3NDI0ZjBiYzhkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imx2d3kvSFVnVHhlQkx1KytocUE3UXc9PSIsInZhbHVlIjoiYmJseEFoclRmQ0c0RnBrZDJOcDMvM2t1Rit4b09EaUZNS1E2b2dEWURLYlNSUVJMRjRDMEF1ZjQ1SDhZeWdoakdzY08xb2I5aW1FQjgxRWVqL3JibW1tSERSQTFFU2JER053UUxDZVJsNXFVWGJKeDdscXV5MXNQaFM3YmdObVYiLCJtYWMiOiI1NDk2M2ZiZGMwYWViNWM5NDExYzkxZmUzMTZlZjA4NmE5MTc3YTZkMTU5Yjg1YjliNTAzNmY2MDU2ZDYyNGY4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hotel/ HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-411.css?ver=1694546287 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/00-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/01-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/03-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/04-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/12-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/13-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
Source: global traffic	HTTP traffic detected: GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1Host: www.termsfeed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "5eefb438a570c1ac15e2deee89dc27ef"If-Modified-Since: Mon, 27 May 2024 21:38:15 GMT
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/15-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/16-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/17-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/18-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/19-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.campobahia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1Host: llimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/00-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/04-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/13-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/12-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/03-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-06-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-009-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-10-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/0hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/00hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/001.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/02-hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/01-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/002.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/003.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /?ob=open-bridge%2Fevents HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/15-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/004.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/16-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/19-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/17-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/05-hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/005.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/18-hotel-desktop.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/006.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/007.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/008.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/009.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/010.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-06-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/001.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-009-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-10-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/011.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/0hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/00hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-05.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-10.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/02-hotel.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/photel-mobile-01.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/005.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/002.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/003.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/004.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/Vista-aerea-02-1536x1151.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/image-carousel.9399f19d95d7300cbc2e.bundle.js HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/006.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/009.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/007.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/008.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/010.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js?ver=8.4.5 HTTP/1.1Host: www.campobahia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.campobahia.com/hotel/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/011.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-05.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-10.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/photel-mobile-01.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/Vista-aerea-02-1536x1151.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1Host: www.campobahia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0

Source: chromecache_567.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-fef4170 elementor-widget elementor-widget-video" data-id="fef4170" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=rg80L332F4U","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/www.campobahia.com\/wp-content\/uploads\/2023\/07\/capa-hotel-copiar-2.jpg","id":9047,"size":"","alt":"","source":"library"},"mute":"yes","loop":"yes","video_type":"youtube"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr	String found in binary or memory: <div id="media_image-5" class="widget widget_media_image"><a href="https://www.instagram.com/campobahiahotel/"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png" class="image wp-image-2625 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-6" class="widget widget_media_image"><a href="https://www.spotify.com/br/campobahia/"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/spotify.png" class="image wp-image-2626 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-8" class="widget widget_media_image"><a href="https://www.youtube.com/channel/UCvnDkmEhf2YZKGxghX5LH0w"><img width="35" height="35" src="https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png" class="image wp-image-2627 attachment-35x35 size-35x35" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-9" class="widget widget_media_image"><a href="http://www.facebook.com/campobahia"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/facebook.png" class="image wp-image-2628 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div></div> equals www.facebook.com (Facebook)
Source: chromecache_567.2.dr	String found in binary or memory: <div id="media_image-5" class="widget widget_media_image"><a href="https://www.instagram.com/campobahiahotel/"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png" class="image wp-image-2625 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-6" class="widget widget_media_image"><a href="https://www.spotify.com/br/campobahia/"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/spotify.png" class="image wp-image-2626 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-8" class="widget widget_media_image"><a href="https://www.youtube.com/channel/UCvnDkmEhf2YZKGxghX5LH0w"><img width="35" height="35" src="https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png" class="image wp-image-2627 attachment-35x35 size-35x35" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div><div id="media_image-9" class="widget widget_media_image"><a href="http://www.facebook.com/campobahia"><img width="64" height="64" src="https://www.campobahia.com/wp-content/uploads/2021/08/facebook.png" class="image wp-image-2628 attachment-full size-full" alt="" style="max-width: 100%; height: auto;" decoding="async" /></a></div></div> equals www.youtube.com (Youtube)
Source: chromecache_631.2.dr	String found in binary or memory: src: '//www.youtube.com/embed/%id%?autoplay=1' equals www.youtube.com (Youtube)
Source: chromecache_533.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ equals www.facebook.com (Facebook)
Source: chromecache_446.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_390.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_567.2.dr	String found in binary or memory: <html lang="en-US" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" > equals www.facebook.com (Facebook)
Source: chromecache_415.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_415.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){OC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(RC(w,"iframe_api")\|\|RC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!IC&&PC(y[B],n.xe))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_357.2.dr, chromecache_387.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=215059717349806&ev=PageView&noscript=1" /> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.campobahia.com
Source: global traffic	DNS traffic detected: DNS query: s7.addthis.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: campobahia.com
Source: global traffic	DNS traffic detected: DNS query: llimages.com
Source: global traffic	DNS traffic detected: DNS query: www.cookieconsent.com
Source: global traffic	DNS traffic detected: DNS query: www.termsfeed.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: api.whatsapp.com
Source: global traffic	DNS traffic detected: DNS query: static.whatsapp.net
Source: global traffic	DNS traffic detected: DNS query: scontent.whatsapp.net
Source: global traffic	DNS traffic detected: DNS query: pps.whatsapp.net
Source: global traffic	DNS traffic detected: DNS query: book.omnibees.com
Source: global traffic	DNS traffic detected: DNS query: pixel.asksuite.com
Source: global traffic	DNS traffic detected: DNS query: media.omnibees.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io

Source: unknown

HTTP traffic detected: POST /report/v4?s=IpRoVym7QUrDSJ2RkUo6N44LsmVsKgJ7s9NlV9VU7x1b3knDnAlPTyAbbZ%2F6eFCIsVb8%2FXVK2M%2BrvnXZ2sQhGZ7pMjG6urxdYp8854nblpIkDn0P9oWmS6cgIAg8njA%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 454Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 28 May 2024 05:14:45 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 28 May 2024 05:14:07 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipKeep-Alive: timeout=5, max=75Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 b2 ed 72 db 48 b6 2d f8 5b 7a 8a 6d 56 54 91 72 11 e0 87 be 6c ca 72 7d d8 ae ee 3a 5d 5d 55 d7 72 9d ba e7 b8 7c 14 49 60 03 48 2b 91 89 ce 4c 90 a2 75 f4 0e f3 7f 7e 4c dc 98 88 89 98 88 79 8b f3 26 f3 04 f3 08 b3 33 01 f0 4b a4 24 cb ee be 7d 65 93 04 32 f7 5e 7b ed b5 d6 b3 47 2f 7f 79 f1 e6 df 7e 7d 05 99 cd c5 f3 dd 67 ee 07 04 93 e9 69 ab b0 c1 f7 af 5b 70 99 0b 69 46 c9 f8 b4 95 59 5b 98 51 af 37 9d 4e c3 84 45 38 56 ea 22 8c 54 de 1b f6 fb 4f 7a c9 38 17 4d 35 8b 63 9b 71 b3 da 52 1f fa 8e 0c 45 d1 63 05 0f 4c 81 51 0b 9e ef d2 64 64 f1 f3 dd 9d 67 39 5a 06 92 e5 78 da 4a 95 4a 05 06 86 5b 0c 26 a8 79 c2 23 66 b9 92 2d 88 94 b4 28 ed 69 2b 60 d9 f7 b3 0f f1 df d4 2f bf fc e9 c5 bf bf ff 73 fe a7 89 f9 e5 fd 4f fc c3 bf fe f5 a8 c0 a1 fe d7 ff a6 ff 1b fb f3 77 22 e9 4f 5b d0 9b e3 47 19 d3 06 a9 ff b7 37 3f 04 4f 5a 6b 73 27 1c a7 85 d2 76 69 ce 94 13 f9 d3 18 27 3c c2 c0 bf 74 81 4b 6e 39 13 81 89 98 c0 d3 41 17 72 3a c9 cb bc 39 f0 b0 82 cb 0b d0 28 48 4f ad 12 2e b0 05 99 c6 a4 92 86 94 49 f3 22 0d 95 4e 7b 97 89 ec 0d 7c cf 32 97 b6 56 63 65 4d 7b ce a4 2d 15 97 31 5e 76 21 51 42 a8 69 db 6d 45 73 1e 05 01 bc 21 79 c1 a9 05 f4 ab 0a cb 73 fe 01 63 98 72 9b 81 cd 10 fe 4d 31 63 e1 ec d5 2f 50 88 32 e5 12 26 c3 61 78 0c 01 34 36 cd 5c 81 37 68 aa 74 5c 68 34 a6 57 95 9a 9e 41 d5 83 20 70 3b 59 6e 05 3e ff f5 bf fe 07 5d 10 cf ff fa 3f 15 a0 74 04 35 8b 19 c1 bd 60 79 a1 e0 7b 96 71 f6 ac 57 15 37 02 93 08 05 6a 3b 3b 6d a9 74 24 94 13 6a 49 e5 c2 9e bb c8 f5 36 97 7b a4 a5 ea 7b 11 d8 8a e6 74 3a 77 1a 2f 21 de ec 33 91 e6 85 05 3b 2b 28 17 ac 28 44 1d c1 9e 88 bf 7e 6f 7c 14 05 33 94 74 2f 1d 39 9f 61 ce 82 54 b3 22 6b 3d bf 6a 7d eb a1 2f 6d 6b d4 6a 34 ae 4a 9c e5 ad 6e eb db aa 72 f4 96 4a dd 0c aa fb 1d c7 67 44 cd 5d f2 78 a9 6f 3a 9d 86 91 e3 37 76 f4 bc 49 5f 4c 71 6c aa da 52 8b db 6b a9 c6 2f 3b 5a 59 b2 db 8a b1 5a 91 76 a2 bb 3f 2b 8b 82 04 fc 57 2e 68 2d 7a 38 2b 9c 9e 67 4c 5a 05 df c9 58 ff d7 ff 4d af 4d 6f 51 8e 05 37 19 ea d6 e8 ea 1e 6c 69 65 26 f9 07 af 5f eb 9a da 95 53 9d 33 f1 5d 54 8d 5f 52 e1 0c 99 8e b2 fa a2 db b2 4c a7 68 fd 98 ba e0 15 99 3d fb 55 71 69 ab ed df 60 5e 08 66 f1 76 0e df 98 d3 2b e3 a1 cf 2d ea fc dc 58 cd 65 7a ed d8 fc ad 44 3d 0b b8 2c 4a e7 96 c6 bf 95 5c 63 0c 4e b4 d3 9b 2d ad eb 77 dd 16 97 3f 31 99 96 2c 75 53 0b 1b 50 76 af bb 0b 8a bf Data Ascii: 1faarH-[zmVTrlr}:]]Ur\|I`H+Lu~Ly&3K$}e2^{G/y~}gi[piFY
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 28 May 2024 05:14:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipKeep-Alive: timeout=5, max=75Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 b2 ed 72 db 48 b6 2d f8 5b 7a 8a 6d 56 54 91 72 11 e0 87 be 6c ca 72 7d d8 ae ee 3a 5d 5d 55 d7 72 9d ba e7 b8 7c 14 49 60 03 48 2b 91 89 ce 4c 90 a2 75 f4 0e f3 7f 7e 4c dc 98 88 89 98 88 79 8b f3 26 f3 04 f3 08 b3 33 01 f0 4b a4 24 cb ee be 7d 65 93 04 32 f7 5e 7b ed b5 d6 b3 47 2f 7f 79 f1 e6 df 7e 7d 05 99 cd c5 f3 dd 67 ee 07 04 93 e9 69 ab b0 c1 f7 af 5b 70 99 0b 69 46 c9 f8 b4 95 59 5b 98 51 af 37 9d 4e c3 84 45 38 56 ea 22 8c 54 de 1b f6 fb 4f 7a c9 38 17 4d 35 8b 63 9b 71 b3 da 52 1f fa 8e 0c 45 d1 63 05 0f 4c 81 51 0b 9e ef d2 64 64 f1 f3 dd 9d 67 39 5a 06 92 e5 78 da 4a 95 4a 05 06 86 5b 0c 26 a8 79 c2 23 66 b9 92 2d 88 94 b4 28 ed 69 2b 60 d9 f7 b3 0f f1 df d4 2f bf fc e9 c5 bf bf ff 73 fe a7 89 f9 e5 fd 4f fc c3 bf fe f5 a8 c0 a1 fe d7 ff a6 ff 1b fb f3 77 22 e9 4f 5b d0 9b e3 47 19 d3 06 a9 ff b7 37 3f 04 4f 5a 6b 73 27 1c a7 85 d2 76 69 ce 94 13 f9 d3 18 27 3c c2 c0 bf 74 81 4b 6e 39 13 81 89 98 c0 d3 41 17 72 3a c9 cb bc 39 f0 b0 82 cb 0b d0 28 48 4f ad 12 2e b0 05 99 c6 a4 92 86 94 49 f3 22 0d 95 4e 7b 97 89 ec 0d 7c cf 32 97 b6 56 63 65 4d 7b ce a4 2d 15 97 31 5e 76 21 51 42 a8 69 db 6d 45 73 1e 05 01 bc 21 79 c1 a9 05 f4 ab 0a cb 73 fe 01 63 98 72 9b 81 cd 10 fe 4d 31 63 e1 ec d5 2f 50 88 32 e5 12 26 c3 61 78 0c 01 34 36 cd 5c 81 37 68 aa 74 5c 68 34 a6 57 95 9a 9e 41 d5 83 20 70 3b 59 6e 05 3e ff f5 bf fe 07 5d 10 cf ff fa 3f 15 a0 74 04 35 8b 19 c1 bd 60 79 a1 e0 7b 96 71 f6 ac 57 15 37 02 93 08 05 6a 3b 3b 6d a9 74 24 94 13 6a 49 e5 c2 9e bb c8 f5 36 97 7b a4 a5 ea 7b 11 d8 8a e6 74 3a 77 1a 2f 21 de ec 33 91 e6 85 05 3b 2b 28 17 ac 28 44 1d c1 9e 88 bf 7e 6f 7c 14 05 33 94 74 2f 1d 39 9f 61 ce 82 54 b3 22 6b 3d bf 6a 7d eb a1 2f 6d 6b d4 6a 34 ae 4a 9c e5 ad 6e eb db aa 72 f4 96 4a dd 0c aa fb 1d c7 67 44 cd 5d f2 78 a9 6f 3a 9d 86 91 e3 37 76 f4 bc 49 5f 4c 71 6c aa da 52 8b db 6b a9 c6 2f 3b 5a 59 b2 db 8a b1 5a 91 76 a2 bb 3f 2b 8b 82 04 fc 57 2e 68 2d 7a 38 2b 9c 9e 67 4c 5a 05 df c9 58 ff d7 ff 4d af 4d 6f 51 8e 05 37 19 ea d6 e8 ea 1e 6c 69 65 26 f9 07 af 5f eb 9a da 95 53 9d 33 f1 5d 54 8d 5f 52 e1 0c 99 8e b2 fa a2 db b2 4c a7 68 fd 98 ba e0 15 99 3d fb 55 71 69 ab ed df 60 5e 08 66 f1 76 0e df 98 d3 2b e3 a1 cf 2d ea fc dc 58 cd 65 7a ed d8 fc ad 44 3d 0b b8 2c 4a e7 96 c6 bf 95 5c 63 0c 4e b4 d3 9b 2d ad eb 77 dd 16 97 3f 31 99 96 2c 75 53 0b 1b 50 76 af bb 0b 8a bf Data Ascii: 1faarH-[zmVTrlr}:]]Ur\|I`H+Lu~Ly&3K$}e2^{G/y~}gi[piFY

Source: chromecache_410.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11820
Source: chromecache_422.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/license.html
Source: chromecache_631.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_631.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/documentation.html#options
Source: chromecache_422.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_567.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-destroy
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-find-by-element
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-refresh
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy-all
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable-all
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable-all
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/first
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/group
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/last
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/next
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/previous
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/refresh-all
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-height
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-width
Source: chromecache_409.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/waypoint
Source: chromecache_595.2.dr, chromecache_508.2.dr	String found in binary or memory: http://jaysalvat.com/
Source: chromecache_388.2.dr, chromecache_566.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_388.2.dr, chromecache_566.2.dr	String found in binary or memory: http://stackoverflow.com/a/5624139/3493650
Source: chromecache_631.2.dr	String found in binary or memory: http://stackoverflow.com/questions/7264899/detect-css-transitions-using-javascript-and-without-moder
Source: chromecache_596.2.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_595.2.dr, chromecache_508.2.dr	String found in binary or memory: http://vegas.jaysalvat.com/
Source: chromecache_422.2.dr	String found in binary or memory: http://www-cs-students.stanford.edu/~tjw/jsbn/
Source: chromecache_703.2.dr	String found in binary or memory: http://www.unicode.org/Public/UNIDATA/EmojiSources.txt
Source: chromecache_723.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_415.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_415.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_567.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_567.2.dr	String found in binary or memory: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1
Source: chromecache_567.2.dr	String found in binary or memory: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1
Source: chromecache_567.2.dr	String found in binary or memory: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR
Source: chromecache_567.2.dr	String found in binary or memory: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_692.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_692.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_567.2.dr	String found in binary or memory: https://campobahia.com/wp-content/uploads/2021/07/whatsapp-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://campobahia.com/wp-content/uploads/2021/08/whatsapp-1.png
Source: chromecache_357.2.dr, chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_703.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/jdecked/twemoji
Source: chromecache_357.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_567.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css
Source: chromecache_567.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.css
Source: chromecache_567.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js
Source: chromecache_422.2.dr	String found in binary or memory: https://code.google.com/p/crypto-js/issues/detail?id=84
Source: chromecache_567.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js?v=next
Source: chromecache_710.2.dr	String found in binary or memory: https://core.trac.wordpress.org/ticket/30832.
Source: chromecache_422.2.dr	String found in binary or memory: https://crypto-js.googlecode.com/svn-history/r667/branches/3.x/src/core.js
Source: chromecache_692.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_607.2.dr, chromecache_711.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
Source: chromecache_692.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_692.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_692.2.dr	String found in binary or memory: https://drafts.csswg.org/selectors/#relational
Source: chromecache_422.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_364.2.dr, chromecache_637.2.dr, chromecache_592.2.dr, chromecache_439.2.dr, chromecache_719.2.dr, chromecache_570.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_364.2.dr, chromecache_637.2.dr, chromecache_592.2.dr, chromecache_439.2.dr, chromecache_719.2.dr, chromecache_570.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_567.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Raleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300itali
Source: chromecache_567.2.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_626.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_697.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_697.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_694.2.dr	String found in binary or memory: https://framework7.io/docs/dom7.html
Source: chromecache_607.2.dr, chromecache_711.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/svg/asimg.js
Source: chromecache_382.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_710.2.dr	String found in binary or memory: https://github.com/WordPress/dashicons
Source: chromecache_422.2.dr	String found in binary or memory: https://github.com/bitcoinjs/bitcoinjs-lib
Source: chromecache_660.2.dr	String found in binary or memory: https://github.com/carlsednaoui/ouibounce/issues/30
Source: chromecache_631.2.dr	String found in binary or memory: https://github.com/dimsemenov/Magnific-Popup/issues/2
Source: chromecache_409.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_353.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore
Source: chromecache_703.2.dr	String found in binary or memory: https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE
Source: chromecache_410.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/3.6.0/src/css.js#L212-L233
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/157)
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/299)
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_694.2.dr	String found in binary or memory: https://github.com/nolimits4web/ssr-window
Source: chromecache_353.2.dr	String found in binary or memory: https://github.com/thesmart
Source: chromecache_607.2.dr, chromecache_711.2.dr	String found in binary or memory: https://github.com/twitter/twemoji
Source: chromecache_692.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_692.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_692.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_692.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_692.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_692.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_567.2.dr	String found in binary or memory: https://llimages.com/redirect/redirect.aspx?A=V&p=19998811&m=593579
Source: chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_357.2.dr, chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_567.2.dr	String found in binary or memory: https://paginas.rocks/pages/index/593579
Source: chromecache_388.2.dr, chromecache_566.2.dr	String found in binary or memory: https://programmingthomas.wordpress.com/2013/04/03/n-sided-shapes/
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_692.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_353.2.dr	String found in binary or memory: https://raw.github.com/jashkenas/underscore/master/LICENSE
Source: chromecache_353.2.dr	String found in binary or memory: https://raw.github.com/thesmart/jquery-scrollspy/master/LICENSE
Source: chromecache_567.2.dr	String found in binary or memory: https://s7.addthis.com/js/300/addthis_widget.js?ver=6.5.3#pubid=ra-5151a3df367570fc
Source: chromecache_567.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_415.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_597.2.dr, chromecache_694.2.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_357.2.dr, chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_567.2.dr	String found in binary or memory: https://www.CookieConsent.com
Source: chromecache_567.2.dr	String found in binary or memory: https://www.CookieConsent.com/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/comments/feed/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/destiny/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/events/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/experiences/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/feed/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/gastronomy/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/helipoint/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/#/schema/logo/image/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/#breadcrumb
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/#organization
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/#primaryimage
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/#website
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/home-en/?s=
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/hotel-en/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/leisure/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/press-folder/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/sustainability/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/en/villas-en/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/es/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/e
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/an
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/ea
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/ic
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/pa
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/m
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/p
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/v
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.cs
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/ouibounce.js?ver=1.
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/popupCustom.js?ver=
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/scrollspy.js?ver=1.
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.21.8
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.21.8
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.21.8
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ve
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?v
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=2.3.10
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/c
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/j
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimoni
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/js/wptestimonia
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/fontello
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/isotope/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/swiper/s
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/angulo-da-seta-direita-300x300.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/angulo-da-seta-direita.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/favicon.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/ico-insta.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/logo-branca.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/logo-v1-300x88.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/logo-v1.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/tripadvisor-150x150.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/tripadvisor-300x300.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/06/tripadvisor.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/07/img-mapa-footer-mobile-240x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/blta-2-300x81.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/blta-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/campo-bahia-branca-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/flor_de_caju_restaurante-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/seta-direita-brown-desktop-3.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/seta-direita-mobile-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/seta-esquerda-brown-desktop-3.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/seta-esquerda-mobile-2.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/spotify.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/11/experiencias-bg2-300x295.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/11/experiencias-bg2-768x755.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2021/11/experiencias-bg2.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/01-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/01.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/02-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/02.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/03-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/03-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/03.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/04-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/04-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/04.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/05-1-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/05-1-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/05-1.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/06-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/06-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/06.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/07-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/07-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/07.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/08-2-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/08-2-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/08-2.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/09-1-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/09-1-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/09-1.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/10-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/10-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/10.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/11-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/11-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/11.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/12-150x150.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/12-300x300.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/12.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/vilasprivativas-bg2-300x295.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/vilasprivativas-bg2-768x756.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2022/04/vilasprivativas-bg2.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2023/07/SaveInsta.App-2876484693686955359_6076186385.m
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1024x585.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-2048x1170.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-300x171.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-768x439.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-scaled.jpg
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/elementor/css/post-5031.css?ver=1694547618
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/elementor/css/post-6.css?ver=1694545246
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvb
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/css/dashicons.css?ver=6.5.3
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/comment-reply.js?ver=6.5.3
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/jquery/ui/core.js?ver=1.13.2
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/underscore.min.js?ver=1.13.4
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-includes/js/wp-util.js?ver=6.5.3
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-json/
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/wp-json/wp/v2/pages/5031
Source: chromecache_567.2.dr	String found in binary or memory: https://www.campobahia.com/xmlrpc.php?rsd
Source: chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_357.2.dr, chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_357.2.dr, chromecache_415.2.dr, chromecache_387.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_567.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-J2E85P7SPT
Source: chromecache_567.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_567.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PW6X872K
Source: chromecache_567.2.dr	String found in binary or memory: https://www.instagram.com/campobahiahotel/
Source: chromecache_415.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_567.2.dr	String found in binary or memory: https://www.spotify.com/br/campobahia/
Source: chromecache_487.2.dr	String found in binary or memory: https://www.youtube-nocookie.com
Source: chromecache_567.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCvnDkmEhf2YZKGxghX5LH0w
Source: chromecache_415.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_567.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 62710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 62676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62719
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62711
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62726
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62727
Source: unknown	Network traffic detected: HTTP traffic on port 62550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62728
Source: unknown	Network traffic detected: HTTP traffic on port 62527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 62596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62739
Source: unknown	Network traffic detected: HTTP traffic on port 62574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62731
Source: unknown	Network traffic detected: HTTP traffic on port 62744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62732
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62744
Source: unknown	Network traffic detected: HTTP traffic on port 62722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62749
Source: unknown	Network traffic detected: HTTP traffic on port 62617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 62620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 62698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 62652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 62537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 62734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62709
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62704
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62705
Source: unknown	Network traffic detected: HTTP traffic on port 62525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 62598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 62662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62559
Source: unknown	Network traffic detected: HTTP traffic on port 62576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62552
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62556
Source: unknown	Network traffic detected: HTTP traffic on port 62742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62570
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62564
Source: unknown	Network traffic detected: HTTP traffic on port 62615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62565
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62566
Source: unknown	Network traffic detected: HTTP traffic on port 62707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62567
Source: unknown	Network traffic detected: HTTP traffic on port 62674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62581
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62578
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62590
Source: unknown	Network traffic detected: HTTP traffic on port 62696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 62640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62582
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62589
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62754
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62524
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62525
Source: unknown	Network traffic detected: HTTP traffic on port 62720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62529
Source: unknown	Network traffic detected: HTTP traffic on port 62684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62522
Source: unknown	Network traffic detected: HTTP traffic on port 62649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62539
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62534
Source: unknown	Network traffic detected: HTTP traffic on port 62650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62540
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62544
Source: unknown	Network traffic detected: HTTP traffic on port 62709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 62563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 62595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 62600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 62632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 62749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 62551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 62573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 62733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 62699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 62653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 62538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 62585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62601
Source: unknown	Network traffic detected: HTTP traffic on port 62745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62607
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62608
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 62561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62612
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62616
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 62631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2

Source: classification engine

Classification label: sus23.troj.win@30/675@106/27

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4864 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4864 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_443.2.dr

Binary or memory string: ;QEMUSK<

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
http://bugs.jquery.com/ticket/11820	0%	URL Reputation	safe
https://html.spec.whatwg.org/#nonce-attributes	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
http://gmpg.org/xfn/11	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://www.campobahia.com/en/home-en/#organization	0%	Avira URL Cloud	safe
https://www.campobahia.com/en/home-en/#/schema/logo/image/	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/themes/neve-child-master/BiloxiScript.woff2	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/icons_GreyDark/iconGreyDark_ArrowDown.svg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/an	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-scaled.jpg	0%	Avira URL Cloud	safe
https://media.omnibees.com/Images/5659/Packages/701x390/685202.jpeg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2	0%	Avira URL Cloud	safe
https://www.campobahia.com/en/home-en/#organization	0%	Virustotal		Browse
https://www.campobahia.com/en/home-en/#/schema/logo/image/	0%	Virustotal		Browse
https://github.com/thesmart	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/context	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/18-hotel-desktop.jpg	0%	Avira URL Cloud	safe
https://github.com/thesmart	0%	Virustotal		Browse
https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/04/vilasprivativas-bg2-768x756.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg	0%	Avira URL Cloud	safe
https://static.hotjar.com/c/hotjar-1863763.js?sv=6	0%	Avira URL Cloud	safe
https://www.cookieconsent.com/releases/4.0.0/cookie-consent.js	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/context	0%	Virustotal		Browse
https://www.campobahia.com/wp-content/uploads/2022/07/17-hotel-desktop.jpg	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ve	0%	Avira URL Cloud	safe
https://book.omnibees.com/v3/js/zcalendar.js?version=1.0.0.395	0%	Avira URL Cloud	safe
https://www.cookieconsent.com/releases/4.0.0/cookie-consent.js	0%	Virustotal		Browse
https://book.omnibees.com/icons/checked_index.svg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/16-hotel-desktop.jpg	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2023/01/00hotel.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/011.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/group	0%	Avira URL Cloud	safe
https://github.com/twitter/twemoji	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/information_v3.svg	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/group	0%	Virustotal		Browse
https://github.com/twitter/twemoji	0%	Virustotal		Browse
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/c	0%	Avira URL Cloud	safe
https://book.omnibees.com/v3/css/fonts_v3_css.css?version=1.0.0.395	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET	0%	Avira URL Cloud	safe
https://www.campobahia.com/en/events/	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/j	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2021/08/blta-2.png	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/04/03.jpg	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/icon_Circle_Left.svg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/15-hotel-desktop.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/02-hotel.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/04/11.jpg	0%	Avira URL Cloud	safe
https://book.omnibees.com/availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0	0%	Avira URL Cloud	safe
https://github.com/dimsemenov/Magnific-Popup/issues/2	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-2048x1170.jpg	0%	Avira URL Cloud	safe
https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/003.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-includes/js/jquery/ui/core.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/13-hotel-desktop.jpg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/photel-mobile-01.jpg	0%	Avira URL Cloud	safe
https://media.omnibees.com/BEImages/5643.jpg	0%	Avira URL Cloud	safe
https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1	0%	Avira URL Cloud	safe
https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/icons_White/iconWhite_Information.svg	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/first	0%	Avira URL Cloud	safe
https://www.campobahia.com/en/feed/	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22	0%	Avira URL Cloud	safe
https://www.campobahia.com/	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/04/10-150x150.jpg	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/Grupo%2015348.svg	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/04/12-150x150.jpg	0%	Avira URL Cloud	safe
https://vc.hotjar.io/sessions/1863763?s=0.25&r=0.14067140413800816	0%	Avira URL Cloud	safe
http://www.unicode.org/Public/UNIDATA/EmojiSources.txt	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/12-hotel-desktop.jpg	0%	Avira URL Cloud	safe
http://imakewebthings.com/waypoints/api/destroy-all	0%	Avira URL Cloud	safe
https://www.CookieConsent.com	0%	Avira URL Cloud	safe
http://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1	0%	Avira URL Cloud	safe
https://raw.github.com/thesmart/jquery-scrollspy/master/LICENSE	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/oidc-client/1.11.3/oidc-client.min.js	0%	Avira URL Cloud	safe
https://www.spotify.com/br/campobahia/	0%	Avira URL Cloud	safe
https://book.omnibees.com/js/vendor/moment.min.js	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg	0%	Avira URL Cloud	safe
https://book.omnibees.com/v3/css/vendor/fotorama.css	0%	Avira URL Cloud	safe
https://connect.facebook.net/en_US/fbevents.js?v=next	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.8	0%	Avira URL Cloud	safe
https://book.omnibees.com/icons/indexIcons/iconPerson.svg	0%	Avira URL Cloud	safe
https://www.campobahia.com/en/home-en/#primaryimage	0%	Avira URL Cloud	safe
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/p	0%	Avira URL Cloud	safe
https://www.campobahia.com/?ob=open-bridge%2Fevents	0%	Avira URL Cloud	safe
https://paginas.rocks/pages/index/593579	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
vc-live-cf.hotjar.io	18.66.112.79	true	false	unknown
llimages.com	188.114.97.3	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
media.omnibees.com	104.18.125.82	true	false	unknown
www.cookieconsent.com	188.114.96.3	true	false	unknown
www.termsfeed.com	172.67.75.149	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	142.250.110.157	true	false	unknown
mmx-ds.cdn.whatsapp.net	157.240.253.60	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
script.hotjar.com	13.32.27.107	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
analytics.google.com	142.250.185.142	true	false	unknown
book.omnibees.com	104.18.125.82	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
campobahia.com	50.116.87.228	true	true	unknown
static-cdn.hotjar.com	18.66.102.51	true	false	unknown
www.campobahia.com	unknown	unknown	true	unknown
scontent.whatsapp.net	unknown	unknown	true	unknown
pps.whatsapp.net	unknown	unknown	true	unknown
vc.hotjar.io	unknown	unknown	true	unknown
static.hotjar.com	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	true	unknown
api.whatsapp.com	unknown	unknown	true	unknown
s7.addthis.com	unknown	unknown	true	unknown
connect.facebook.net	unknown	unknown	true	unknown
pixel.asksuite.com	unknown	unknown	true	unknown
static.whatsapp.net	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://book.omnibees.com/icons/icons_GreyDark/iconGreyDark_ArrowDown.svg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/themes/neve-child-master/BiloxiScript.woff2	false	Avira URL Cloud: safe	unknown
https://media.omnibees.com/Images/5659/Packages/701x390/685202.jpeg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/18-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-1863763.js?sv=6	false	Avira URL Cloud: safe	unknown
https://www.cookieconsent.com/releases/4.0.0/cookie-consent.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/17-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/v3/js/zcalendar.js?version=1.0.0.395	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/checked_index.svg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/16-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2023/01/00hotel.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/011.jpg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/information_v3.svg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/v3/css/fonts_v3_css.css?version=1.0.0.395	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/icon_Circle_Left.svg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/15-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/02-hotel.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/003.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-includes/js/jquery/ui/core.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/13-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/photel-mobile-01.jpg	false	Avira URL Cloud: safe	unknown
https://media.omnibees.com/BEImages/5643.jpg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/icons_White/iconWhite_Information.svg	false	Avira URL Cloud: safe	unknown
http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content	false		unknown
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/Grupo%2015348.svg	false	Avira URL Cloud: safe	unknown
https://vc.hotjar.io/sessions/1863763?s=0.25&r=0.14067140413800816	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/12-hotel-desktop.jpg	false	Avira URL Cloud: safe	unknown
http://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/oidc-client/1.11.3/oidc-client.min.js	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/js/vendor/moment.min.js	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/v3/css/vendor/fotorama.css	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js?v=next	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.8	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/icons/indexIcons/iconPerson.svg	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/?ob=open-bridge%2Fevents	false	Avira URL Cloud: safe	unknown
http://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2021/06/favicon.png	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.campobahia.com/en/home-en/#/schema/logo/image/	chromecache_567.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/an	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/en/home-en/#organization	chromecache_567.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-scaled.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/thesmart	chromecache_353.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/context	chromecache_409.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_692.2.dr	false	URL Reputation: safe	unknown
https://swiperjs.com	chromecache_597.2.dr, chromecache_694.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/04/vilasprivativas-bg2-768x756.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ve	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_692.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/group	chromecache_409.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/twitter/twemoji	chromecache_607.2.dr, chromecache_711.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/11820	chromecache_410.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/c	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_692.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/j	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/en/events/	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2021/08/blta-2.png	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_692.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/04/03.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_567.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/04/11.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/dimsemenov/Magnific-Popup/issues/2	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-2048x1170.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE	chromecache_703.2.dr	false	Avira URL Cloud: safe	unknown
https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/first	chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/en/feed/	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/04/10-150x150.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/uploads/2022/04/12-150x150.jpg	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
http://www.unicode.org/Public/UNIDATA/EmojiSources.txt	chromecache_703.2.dr	false	Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/destroy-all	chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://www.CookieConsent.com	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_364.2.dr, chromecache_637.2.dr, chromecache_592.2.dr, chromecache_439.2.dr, chromecache_719.2.dr, chromecache_570.2.dr	false	URL Reputation: safe	unknown
https://raw.github.com/thesmart/jquery-scrollspy/master/LICENSE	chromecache_353.2.dr	false	Avira URL Cloud: safe	unknown
https://www.spotify.com/br/campobahia/	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_692.2.dr	false	URL Reputation: safe	unknown
https://www.campobahia.com/en/home-en/#primaryimage	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/p	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://paginas.rocks/pages/index/593579	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/m	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/v	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css	chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.157	unknown	United States	15169	GOOGLEUS	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
18.66.112.79	vc-live-cf.hotjar.io	United States	3	MIT-GATEWAYSUS	false
157.240.253.60	mmx-ds.cdn.whatsapp.net	United States	32934	FACEBOOKUS	false
142.250.185.142	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
104.18.125.82	media.omnibees.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.26.7.160	unknown	United States	13335	CLOUDFLARENETUS	false
13.32.27.107	script.hotjar.com	United States	7018	ATT-INTERNET4US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
50.116.87.228	campobahia.com	United States	46606	UNIFIEDLAYER-AS-1US	true
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	llimages.com	European Union	13335	CLOUDFLARENETUS	false
172.67.75.149	www.termsfeed.com	United States	13335	CLOUDFLARENETUS	false
157.240.252.60	unknown	United States	32934	FACEBOOKUS	false
188.114.96.3	www.cookieconsent.com	European Union	13335	CLOUDFLARENETUS	false
142.250.110.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
104.18.124.82	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.102.51	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448263
Start date and time:	2024-05-28 07:13:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.troj.win@30/675@106/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content Browse: https://www.campobahia.com/ Browse: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Browse: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Browse: https://www.campobahia.com/hotel/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.110.84, 142.250.181.227, 216.58.212.163, 172.217.18.14, 142.250.186.142, 173.194.76.84, 34.104.35.123, 23.215.20.4, 216.58.212.168, 142.250.185.170, 142.250.184.195, 142.250.185.136, 142.250.185.106, 142.250.184.234, 142.250.186.74, 142.250.181.234, 142.250.185.74, 216.58.206.74, 172.217.16.138, 172.217.16.202, 142.250.184.202, 142.250.185.138, 142.250.186.42, 142.250.185.234, 216.58.206.42, 142.250.185.202, 172.217.18.10, 40.68.123.157, 93.184.221.240, 192.229.221.95, 20.242.39.171, 13.85.23.206, 142.250.185.232, 142.250.186.138, 142.250.185.227, 142.250.185.200, 142.250.186.106, 142.250.74.202, 216.58.212.170, 172.217.18.106, 142.250.186.35, 104.22.2.100, 104.22.3.100, 172.67.14.155, 142.250.186.136, 172.217.23.106, 142.250.186.170, 142.250.186.78
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, ds-s7.addthis.com.edgekey.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, e4016.a.akamaiedge.net, pixel.asksuite.com.cdn.cloudflare.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, maps.gstatic.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Google Tag Manager, which is commonly used for tracking and analytics purposes. There are no indications of malicious behavior in this code." }
/* <![CDATA[ / ( function( w, d, s, l, i ) { w[l] = w[l] \|\| []; w[l].push( {'gtm.start': new Date().getTime(), event: 'gtm.js'} ); var f = d.getElementsByTagName( s )[0], j = d.createElement( s ), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore( j, f ); } )( window, document, 'script', 'dataLayer', 'GTM-PW6X872K' ); / */
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to cookie consent management and does not exhibit any malicious behavior. It does not contain any suspicious or harmful actions." }
document.addEventListener('DOMContentLoaded', function () { cookieconsent.run({"notice_banner_type":"simple","consent_type":"express","palette":"light","language":"pt","page_load_consent_levels":["strictly-necessary"],"notice_banner_reject_button_hide":false,"preferences_center_close_button_hide":false,"website_name":"Campo Bahia"}); });
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to Google Analytics tracking functionality. It sets up the dataLayer and configures Google Tag Manager with a tracking ID. There are no signs of malicious activity in this code." }
/* <![CDATA[ / window.dataLayer = window.dataLayer \|\| [];function gtag(){dataLayer.push(arguments);} gtag('set', 'linker', {"domains":["www.campobahia.com"]} ); gtag("js", new Date()); gtag("set", "developer_id.dZTNiMT", true); gtag("config", "G-J2E85P7SPT"); / */
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate WordPress plugin configuration. It includes URLs and a nonce for AJAX requests, which are common in WordPress sites. There are no indications of malicious activity such as obfuscated code, unauthorized data collection, or redirection to unknown domains." }
/* <![CDATA[ / var eae = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","current_url":"aHR0cHM6Ly93d3cuY2FtcG9iYWhpYS5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMjMvMDkvUG9wLXVwLU5vdmVtYnJvLUNhbXBvLUJhaGlhUHJhbmNoZXRhLTEtY29waWFyLTMuanBnLw==","nonce":"89fbd4fc56","plugin_url":"http:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; var eae_editor = {"plugin_url":"http:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; / */
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to UI changes based on the scroll position of the window. It adds or removes CSS classes to elements in the header and footer sections. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access." }
jQuery(window).scroll(function(){ /***scroll general/ if (jQuery(this).scrollTop() > 0) { jQuery('header.header').addClass('scroll'); jQuery(' .footer-fix.without-menu').addClass('scroll'); } else { jQuery('header.header').removeClass('scroll'); jQuery('.footer-fix.without-menu').removeClass('scroll'); } /*scroll home**/ if (jQuery(this).scrollTop() > 400) { jQuery('.home header.header').addClass('scroll-home'); jQuery('.home .footer-fix.without-menu').addClass('scroll-home'); } else { jQuery('.home header.header').removeClass('scroll-home'); jQuery('.home .footer-fix.without-menu').removeClass('scroll-home'); } });
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be part of a legitimate website's configuration. It includes properties related to AJAX URLs, nonces for security, infinite scroll settings, and language settings. There are no indications of malicious behavior such as data exfiltration, credential theft, or unauthorized access attempts." }
/* <![CDATA[ / var NeveProperties = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"7fa668614c","isRTL":"","isCustomize":"","infScroll":"enabled","maxPages":"1","endpoint":"https:\/\/www.campobahia.com\/wp-json\/nv\/v1\/posts\/page\/","query":"{\"error\":\"404\"}","lang":"pt"}; / */
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a standard Facebook Pixel tracking script. It is used for tracking user interactions and is commonly found on legitimate websites for analytics purposes. There are no indications of malicious behavior in this code." }
!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n; n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0; t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window, document,'script','https://connect.facebook.net/en_US/fbevents.js?v=next');
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be part of a legitimate WordPress plugin for handling emoji support. It includes functionality for detecting emoji support in the browser and loading necessary resources if needed. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code primarily interacts with sessionStorage to store and retrieve support test results, which is a common practice for performance optimization." }
/* <![CDATA[ / window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"wpemoji":"http:\/\/www.campobahia.com\/wp-includes\/js\/wp-emoji.js?ver=6.5.3","twemoji":"http:\/\/www.campobahia.com\/wp-includes\/js\/twemoji.js?ver=6.5.3"}}; /* * @output wp-includes/js/wp-emoji-loader.js / /* * Emoji Settings as exported in PHP via _print_emoji_detection_script(). * @typedef WPEmojiSettings * @type {object} * @property {?object} source * @property {?string} source.concatemoji * @property {?string} source.twemoji * @property {?string} source.wpemoji * @property {?boolean} DOMReady * @property {?Function} readyCallback / /* * Support tests. * @typedef SupportTests * @type {object} * @property {?boolean} flag * @property {?boolean} emoji / /* * IIFE to detect emoji support and load Twemoji if needed. * * @param {Window} window * @param {Document} document * @param {WPEmojiSettings} settings / ( function wpEmojiLoader( window, document, settings ) { if ( typeof Promise === 'undefined' ) { return; } var sessionStorageKey = 'wpEmojiSettingsSupports'; var tests = [ 'flag', 'emoji' ]; /* * Checks whether the browser supports offloading to a Worker. * * @since 6.3.0 * * @private * * @returns {boolean} / function supportsWorkerOffloading() { return ( typeof Worker !== 'undefined' && typeof OffscreenCanvas !== 'undefined' && typeof URL !== 'undefined' && URL.createObjectURL && typeof Blob !== 'undefined' ); } /* * @typedef SessionSupportTests * @type {object} * @property {number} timestamp * @property {SupportTests} supportTests / /* * Get support tests from session. * * @since 6.3.0 * * @private * * @returns {?SupportTests} Support tests, or null if not set or older than 1 week. / function getSessionSupportTests() { try { /* @type {SessionSupportTests} / var item = JSON.parse( sessionStorage.getItem( sessionStorageKey ) ); if ( typeof item === 'object' && typeof item.timestamp === 'number' && new Date().valueOf() < item.timestamp + 604800 && // Note: Number is a week in seconds. typeof item.supportTests === 'object' ) { return item.supportTests; } } catch ( e ) {} return null; } /* * Persist the supports in session storage. * * @since 6.3.0 * * @private * * @param {SupportTests} supportTests Support tests. / function setSessionSupportTests( supportTests ) { try { /* @type {SessionSupportTests} / var item = { supportTests: supportTests, timestamp: new Date().valueOf() }; sessionStorage.setItem( sessionStorageKey, JSON.stringify( item ) ); } catch ( e ) {} } /* * Checks if two sets of Emoji characters render the same visually. * * This function may be serialized to run in a Worker. Therefore,
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to the AddThis social sharing plugin for WordPress. It initializes various AddThis configurations and checks for the presence of certain AddThis objects, setting default values if they are undefined. The code also includes a function to periodically check if the AddThis library has loaded and then initializes AddThis layers. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code appears to be legitimate and related to social sharing functionality." }
if (window.addthis_product === undefined) { window.addthis_product = "wpp"; } if (window.wp_product_version === undefined) { window.wp_product_version = "wpp-6.2.7"; } if (window.addthis_share === undefined) { window.addthis_share = {}; } if (window.addthis_config === undefined) { window.addthis_config = {"data_track_clickback":true,"ui_atversion":"300"}; } if (window.addthis_plugin_info === undefined) { window.addthis_plugin_info = {"info_status":"enabled","cms_name":"WordPress","plugin_name":"Share Buttons by AddThis","plugin_version":"6.2.7","plugin_mode":"AddThis","anonymous_profile_id":"wp-05af53386c68bfd7f09dd2e9f48dd134","page_info":{"template":false,"post_type":""},"sharing_enabled_on_post_via_metabox":false}; } (function() { var first_load_interval_id = setInterval(function () { if (typeof window.addthis !== 'undefined') { window.clearInterval(first_load_interval_id); if (typeof window.addthis_layers !== 'undefined' && Object.getOwnPropertyNames(window.addthis_layers).length > 0) { window.addthis.layers(window.addthis_layers); } if (Array.isArray(window.addthis_layers_tools)) { for (i = 0; i < window.addthis_layers_tools.length; i++) { window.addthis.layers(window.addthis_layers_tools[i]); } } } },1000) }());
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to localization and configuration settings for a WordPress site. It includes URLs, nonce values, and text translations, which are typical for legitimate site functionality. There is no indication of malicious behavior." }
/* <![CDATA[ / var localize = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"1ec56aa5de","i18n":{"added":"Adicionado ","compare":"Comparar","loading":"Carregando..."},"eael_translate_text":{"required_text":"\u00e9 um campo obrigat\u00f3rio","invalid_text":"Inv\u00e1lido","billing_text":"Faturamento","shipping_text":"Envio","fg_mfp_counter_text":"de"},"page_permalink":"https:\/\/www.campobahia.com\/20-off-abril-maio-e-junho-2024\/","cart_redirectition":"","cart_page_url":"","el_breakpoints":{"mobile":{"label":"Dispositivos m\u00f3veis no modo retrato","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Dispositivos m\u00f3veis no modo paisagem","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet no modo retrato","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet no modo paisagem","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Notebook","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Tela ampla (widescreen)","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}}; / */
URL: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is not malicious. It simply checks if a form exists on the page and forces a reload if the back/forward button is clicked to prevent the submit button state from getting stuck. This is a common practice to ensure proper form functionality." }
( function() { window.onpageshow = function( event ) { // Defined window.wpforms means that a form exists on a page. // If so and back/forward button has been clicked, // force reload a page to prevent the submit button state stuck. if ( typeof window.wpforms !== 'undefined' && event.persisted ) { window.location.reload(); } }; }() );
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to a legitimate WordPress plugin for Elementor Page Builder. It includes URLs and a nonce for AJAX requests, which are common in WordPress plugins. There are no indications of malicious activity in this code." }
/* <![CDATA[ / var eae = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","current_url":"aHR0cHM6Ly93d3cuY2FtcG9iYWhpYS5jb20vZW4vaG9tZS1lbi8=","nonce":"89fbd4fc56","plugin_url":"https:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; var eae_editor = {"plugin_url":"https:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; / */
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to a WordPress site configuration and does not contain any malicious elements. It includes AJAX URL, nonce, and other properties for site functionality. There are no indications of phishing or harmful activities." }
/* <![CDATA[ / var NeveProperties = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"7fa668614c","isRTL":"","isCustomize":"","infScroll":"enabled","maxPages":"0","endpoint":"https:\/\/www.campobahia.com\/wp-json\/nv\/v1\/posts\/page\/","query":"{\"page\":\"\",\"pagename\":\"home-en\",\"lang\":\"en\"}","lang":"en"}; / */
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be manipulating the DOM to format text and initialize a carousel for a product list. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is focused on enhancing the user interface and does not pose any security risks." }
jQuery('.products-list h2.eael-entry-title a').html(function (i, t) { var hhNumber = 3; var words = t.split(/\s+/) return "<span>" + words.slice(0,hhNumber).join(" ") + "</span> " + words.slice(hhNumber).join(" ") }); jQuery(document).ready(function(){ jQuery('.products-list .eael-post-grid').addClass('owl-theme owl-carousel'); jQuery('.owl-carousel').owlCarousel({ loop:true, margin:0, responsive:{ 0:{ items:1 }, 600:{ items:2 }, 1000:{ items:4, margin:4, } } }) });
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to localization and configuration settings for a WordPress site. It includes AJAX URLs, nonce values, internationalization strings, and responsive design breakpoints. There are no indications of malicious behavior such as data exfiltration, credential theft, or unauthorized access attempts. The code is consistent with legitimate site functionality." }
/* <![CDATA[ / var localize = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"1ec56aa5de","i18n":{"added":"Added ","compare":"Compare","loading":"Loading..."},"eael_translate_text":{"required_text":"is a required field","invalid_text":"Invalid","billing_text":"Billing","shipping_text":"Shipping","fg_mfp_counter_text":"of"},"page_permalink":"https:\/\/www.campobahia.com\/en\/home-en\/","cart_redirectition":"","cart_page_url":"","el_breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Widescreen","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}}; / */
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be configuration data for the Elementor frontend, a popular WordPress page builder plugin. It contains settings for breakpoints, internationalization, and other frontend features. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access attempts." }
/* <![CDATA[ / var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":true},"i18n":{"shareOnFacebook":"Share on Facebook","shareOnTwitter":"Share on Twitter","pinIt":"Pin it","download":"Download","downloadImage":"Download image","fullscreen":"Fullscreen","zoom":"Zoom","share":"Share","playVideo":"Play Video","previous":"Previous","next":"Next","close":"Close","a11yCarouselWrapperAriaLabel":"Carousel \| Horizontal scrolling: Arrow Left & Right","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Widescreen","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}},"version":"3.21.8","is_static":false,"experimentalFeatures":{"e_optimized_assets_loading":true,"additional_custom_breakpoints":true,"e_swiper_latest":true,"container_grid":true,"home_screen":true,"ai-layout":true,"landing-pages":true},"urls":{"assets":"https:\/\/www.campobahia.com\/wp-content\/plugins\/elementor\/assets\/"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description"},"post":{"id":5031,"title":"Campo%20Bahia%20-%20Hotel%20-%20Villas%20-%20Spa%20-%20Santo%20Andr%C3%A9%20-%20Bahia","excerpt":"","featuredImage":false}}; / */
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to displaying a popup modal on a webpage. It includes configuration settings for the popup, such as content, display methods, and tracking clicks. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code primarily focuses on user interaction with the popup and tracking clicks, which is typical for marketing purposes. Therefore, the risk is minimal." }
/* <![CDATA[ / var WidgetConf = {"closeTime":null}; var popup_custom_data = {"content":"<div id=\"ouibounce-modal\" class=\"cm-popup-modal\">\n <div class=\"underlay\"><\/div>\n \n \n <div class=\"modal \">\n <div id=\"close_button\" class=\"popupflyin-close-button\"><\/div>\n <div class=\"modal-body popupflyin-clicks-area auto-size\"><p><img class='alignnone size-medium wp-image-9322' src='https:\/\/www.campobahia.com\/wp-content\/uploads\/2023\/09\/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg' alt='' width='1' height='1' \/><img class='alignnone size-medium wp-image-9322' src='https:\/\/www.campobahia.com\/wp-content\/uploads\/2023\/09\/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg' alt='' width='1' height='1' \/><img class='alignnone size-medium wp-image-9322' src='https:\/\/www.campobahia.com\/wp-content\/uploads\/2023\/09\/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg' alt='' width='1' height='1' \/><a href='https:\/\/www.campobahia.com\/ferias-de-julho2024-bahia\/'><img class='alignnone wp-image-9826' src='https:\/\/www.campobahia.com\/wp-content\/uploads\/2023\/09\/Pop-up-Julho-atualizado-2-copiar-2.jpg' alt='' width='750' height='856' \/><\/a><\/p><\/div>\n <\/div>\n <\/div>","showMethod":"always","resetTime":"7","secondsToShow":"0","minDeviceWidth":"0","maxDeviceWidth":"0","fireMethod":"pageload","ajaxClickUrl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php?action=cm_popupflyin_register_click","campaign_id":"9255","banner_id":"1 (203491564)","enableStatistics":"","countingMethod":"one","soundMethod":"none","customSoundPath":"","standardSound":"https:\/\/www.campobahia.com\/wp-content\/plugins\/cm-pop-up-banners\/shared\/assets\/media\/default_popup_sound.mp3","closeOnUnderlayClick":"","inactivityTime":"10","showFixedNumberOfTimes":"5"}; / */
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to the 'AddThis' social sharing plugin for WordPress. It initializes various configuration settings and checks for the presence of the 'AddThis' library before executing certain functions. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code appears to be legitimate and is commonly used for social sharing functionality on websites." }
if (window.addthis_product === undefined) { window.addthis_product = "wpp"; } if (window.wp_product_version === undefined) { window.wp_product_version = "wpp-6.2.7"; } if (window.addthis_share === undefined) { window.addthis_share = {}; } if (window.addthis_config === undefined) { window.addthis_config = {"data_track_clickback":true,"ui_atversion":"300"}; } if (window.addthis_plugin_info === undefined) { window.addthis_plugin_info = {"info_status":"enabled","cms_name":"WordPress","plugin_name":"Share Buttons by AddThis","plugin_version":"6.2.7","plugin_mode":"AddThis","anonymous_profile_id":"wp-05af53386c68bfd7f09dd2e9f48dd134","page_info":{"template":"home","post_type":["post","page","e-landing-page"]},"sharing_enabled_on_post_via_metabox":false}; } (function() { var first_load_interval_id = setInterval(function () { if (typeof window.addthis !== 'undefined') { window.clearInterval(first_load_interval_id); if (typeof window.addthis_layers !== 'undefined' && Object.getOwnPropertyNames(window.addthis_layers).length > 0) { window.addthis.layers(window.addthis_layers); } if (Array.isArray(window.addthis_layers_tools)) { for (i = 0; i < window.addthis_layers_tools.length; i++) { window.addthis.layers(window.addthis_layers_tools[i]); } } } },1000) }());
URL: https://www.campobahia.com/en/home-en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to emoji support and loading for a WordPress site. It includes functionality for detecting emoji support and loading appropriate resources if needed. There is no indication of malicious behavior such as phishing, data exfiltration, or unauthorized access. The code appears to be legitimate and safe." }
/* <![CDATA[ / window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"wpemoji":"https:\/\/www.campobahia.com\/wp-includes\/js\/wp-emoji.js?ver=6.5.3","twemoji":"https:\/\/www.campobahia.com\/wp-includes\/js\/twemoji.js?ver=6.5.3"}}; /* * @output wp-includes/js/wp-emoji-loader.js / /* * Emoji Settings as exported in PHP via _print_emoji_detection_script(). * @typedef WPEmojiSettings * @type {object} * @property {?object} source * @property {?string} source.concatemoji * @property {?string} source.twemoji * @property {?string} source.wpemoji * @property {?boolean} DOMReady * @property {?Function} readyCallback / /* * Support tests. * @typedef SupportTests * @type {object} * @property {?boolean} flag * @property {?boolean} emoji / /* * IIFE to detect emoji support and load Twemoji if needed. * * @param {Window} window * @param {Document} document * @param {WPEmojiSettings} settings / ( function wpEmojiLoader( window, document, settings ) { if ( typeof Promise === 'undefined' ) { return; } var sessionStorageKey = 'wpEmojiSettingsSupports'; var tests = [ 'flag', 'emoji' ]; /* * Checks whether the browser supports offloading to a Worker. * * @since 6.3.0 * * @private * * @returns {boolean} / function supportsWorkerOffloading() { return ( typeof Worker !== 'undefined' && typeof OffscreenCanvas !== 'undefined' && typeof URL !== 'undefined' && URL.createObjectURL && typeof Blob !== 'undefined' ); } /* * @typedef SessionSupportTests * @type {object} * @property {number} timestamp * @property {SupportTests} supportTests / /* * Get support tests from session. * * @since 6.3.0 * * @private * * @returns {?SupportTests} Support tests, or null if not set or older than 1 week. / function getSessionSupportTests() { try { /* @type {SessionSupportTests} / var item = JSON.parse( sessionStorage.getItem( sessionStorageKey ) ); if ( typeof item === 'object' && typeof item.timestamp === 'number' && new Date().valueOf() < item.timestamp + 604800 && // Note: Number is a week in seconds. typeof item.supportTests === 'object' ) { return item.supportTests; } } catch ( e ) {} return null; } /* * Persist the supports in session storage. * * @since 6.3.0 * * @private * * @param {SupportTests} supportTests Support tests. / function setSessionSupportTests( supportTests ) { try { /* @type {SessionSupportTests} / var item = { supportTests: supportTests, timestamp: new Date().valueOf() }; sessionStorage.setItem( sessionStorageKey, JSON.stringify( item ) ); } catch ( e ) {} } /* * Checks if two sets of Emoji characters render the same visually. * * This function may be serialized to run in a Worker. Therefor
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It appears to be setting some environment variables and configurations, which is typical for many web applications. The presence of tokens and configuration settings is common and does not inherently indicate malicious intent. However, without further context about the origin of the code, a minimal risk score is assigned." }
function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjAz2bRFbB4zwjKNKg","stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6H23vHfIlKosKEoV8","isCQuick":false});
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script appears to be related to WhatsApp API interactions and UI elements initialization. It includes functionality for sending messages via WhatsApp, which could be used for legitimate purposes. However, the presence of a phone number and the ability to send messages automatically could potentially be exploited for spam or phishing if not properly secured. No direct evidence of malicious behavior was found." }
requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"elements":[["__elem_4c2b90dc_0_0_4D","u_0_0_eu",1],["__elem_bb0debb2_0_0_zQ","u_0_1_ya",1],["__elem_7af142ae_0_0_G7","u_0_2_Wn",1],["__elem_bb0debb2_0_1_OG","u_0_3_BZ",1],["__elem_ded6210b_0_0_0I","u_0_4_1z",1],["__elem_11edcf69_0_0_si","u_0_5_i+",1],["__elem_11edcf69_0_1_vj","u_0_6_GB",1],["__elem_0cdc66ad_0_0_5E","u_0_7_ie",1],["__elem_ded6210b_0_1_MB","u_0_8_V2",1],["__elem_11edcf69_0_2_VJ","u_0_9_bZ",1],["__elem_11edcf69_0_3_eM","u_0_a_iz",1]],"require":[["UniversalMicroSiteTrackingController","init",["ImmutableServerCallableWrapper"],[false,"GH",{"__imm":{"module":{"__m":"ImmutableServerCallableWrapper"},"method":"Map","value":[]}},"1898HLOAKmuTwI5Fq",null,"https:\/\/api.whatsapp.com\/send--sanitized-S228802--",null,null,"emea",null,"0XfEF7BcUzRmvkOlo","whatsapp_www_api",{"__imm":{"module":{"__m":"ImmutableServerCallableWrapper"},"method":"Map","value":[["device_type","desktop"]]}},"",{"__imm":{"module":{"__m":"ImmutableServerCallableWrapper"},"method":"Map","value":[]}},null,"",""]],["WhatsAppApiOpenUrl","open_custom_url",[],[{"url":"whatsapp:\/\/send\/?phone=557331984210&text=Ol\u0025C3\u0025A1\u002521+Gostaria+de+consultar+disponibilidade+de+datas.","userAgentMetadata":{"browser":"Other","isMobile":false,"isTablet":false},"shouldAutoload":true}]],["WhatsAppWaMeBusinessClientListener","attach_click_listener",[],[{"sessionId":"","requestId":"AU8EFRhrFfDNlBmSr9NNQpM"}]],["ScriptPath","set",[],["WAXWhatsAppApiSendController","a1f3c513",{"imp_id":"1898HLOAKmuTwI5Fq","ef_page":null,"uri":"https:\/\/api.whatsapp.com\/send--sanitized-S228802--"}]],["WhatsAppFAQClientListener","attachGetInTouchClickListener",[],[""]],["WAUIHeader","init",["__elem_4c2b90dc_0_0_4D"],[{"root":{"__m":"__elem_4c2b90dc_0_0_4D"}}]],["WAUIHamburgerMenu","init",["__elem_bb0debb2_0_0_zQ","__elem_bb0debb2_0_1_OG","__elem_7af142ae_0_0_G7"],[{"openButton":{"__m":"__elem_bb0debb2_0_0_zQ"},"closeButton":{"__m":"__elem_bb0debb2_0_1_OG"},"container":{"__m":"__elem_7af142ae_0_0_G7"}}]],["WAUIAccordion","init",["__elem_ded6210b_0_0_0I"],[{"__m":"__elem_ded6210b_0_0_0I"},null]],["WAUILanguageSelectDropdown","init",["__elem_11edcf69_0_0_si"],[{"__m":"__elem_11edcf69_0_0_si"}]],["WAUILanguageSelectDropdown","init",["__elem_11edcf69_0_1_vj"],[{"__m":"__elem_11edcf69_0_1_vj"}]],["WAUINavItem","init",["__elem_0cdc66ad_0_0_5E","__elem_ded6210b_0_1_MB"],[{"button":{"__m":"__elem_0cdc66ad_0_0_5E"},"subNav":{"__m":"__elem_ded6210b_0_1_MB"}}]],["WAUILanguageSelectDropdown","init",["__elem_11edcf69_0_2_VJ"],[{"__m":"__elem_11edcf69_0_2_VJ"}]],["WAUILanguageSelectDropdown","init",["__elem_11edcf69_0_3_eM"],[{"__m":"__elem_11edcf69_0_3_eM"}]],["RequireDeferredReference","unblock",[],[["FbtLogging","IntlQtEventFalcoEvent"],"sd"]],["RequireDeferredReference","unblock",[],[["FbtLogging","IntlQtEventFalcoEvent"],"css"]],["TimeSliceImpl"],["HasteSupportData"],["ServerJS"],["Run"],["InitialJSLoader"]
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to the loading of page resources and does not contain any malicious elements. It involves the use of a function to handle pagelet arrivals, which is a common technique in web development for managing dynamic content loading. No suspicious or harmful operations were detected." }
requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["vRp9yOm","GjbBCpF","OCrZ1fK"],id:"first_response",phase:0,last_in_phase:true,tti_phase:0,hsrp:{hblp:{consistency:{rev:1013785789}}},allResources:["vRp9yOm","GjbBCpF","OCrZ1fK","GQcz58C","JOUMnNC","hJ4JOlo","IPejnBU","8TNZYzX"]});}));
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate web application framework, likely for managing configurations, handling cookies, and setting up various functionalities. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The presence of tracking and advertisement functionality is noted but considered no risk as per the given instructions." }
requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1838142":{"r":1,"s":1},"1958484":{"r":1,"s":1},"1963303":{"r":1,"s":1},"249":{"r":1,"s":1},"4883":{"r":1,"s":1},"1936894":{"r":1,"s":1},"1837559":{"r":1},"1848815":{"r":10000,"s":1}},"gkxData":{"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20935":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"21116":{"result":false,"hash":null},"25571":{"result":false,"hash":null},"25572":{"result":true,"hash":null},"20836":{"result":false,"hash":null},"20948":{"result":true,"hash":null}},"justknobxData":{"2269":{"r":false},"1354":{"r":true}}})});requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){(new ServerJS()).handle({"define":[["cr:310",["RunWWW"],{"__rc":["RunWWW",null]},-1],["cr:1126",["TimeSliceImpl"],{"__rc":["TimeSliceImpl",null]},-1],["cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",[],{"__rc":[null,null]},-1],["cr:1080",["unexpectedUseInComet"],{"__rc":["unexpectedUseInComet",null]},-1],["cr:6108",["CSS"],{"__rc":["CSS",null]},-1],["cr:7385",["clearIntervalWWW"],{"__rc":["clearIntervalWWW",null]},-1],["cr:7389",["setIntervalAcrossTransitionsWWW"],{"__rc":["setIntervalAcrossTransitionsWWW",null]},-1],["cr:7391",["setTimeoutAcrossTransitionsWWW"],{"__rc":["setTimeoutAcrossTransitionsWWW",null]},-1],["cr:7936",["BlueCompatRouter"],{"__rc":["BlueCompatRouter",null]},-1],["cr:8959",["DTSG"],{"__rc":["DTSG",null]},-1],["cr:8960",["DTSG_ASYNC"],{"__rc":["DTSG_ASYNC",null]},-1],["cr:696703",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"zCvyYJ6gdwwhLiFjM3Zz80"},141],["KSConfig",[],{"killed":{"__set":["POCKET_MONSTERS_CREATE","POCKET_MONSTERS_DELETE","POCKET_MONSTERS_UPDATE_NAME","TPA_SRT_TRANSLATION","WORKROOMS_REQUEST_TAGGING_TAG_NO_INIT_BY_VC_GALAXY"]},"ko":{"__set":["acrJTh9WGdp","1oOE64fL4wO","7r6mSP7ofr2","3sKizTQ6byg","6XsXQ2qHw8y"]}},2580],["InitialCookieConsent",[],{"deferCookies":false,"initialConsent":[],"noCookies":false,"shouldShowCookieBanner":true,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARbCXw8nV8EHpzlGsHIUg6_IznOLxrfm5W6aCCDSozA74hZp","allowlisted_iframes":[],"is_checkpointed":false},5540],["ServerTimeData",[],{"serverTime":1716873297932,"timeOfRequestStart":1716873297632.5,"timeOfResponseStart":1716873297632.5},5943],["URLFragmentPreludeConfig",[],{"hashtagRedirect":false,"fragBlacklist":["nonce","access_token","oauth_token","xs","checkpoi
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code sets up AJAX requests with CSRF protection and handles session timeout errors. This is standard practice for web security and does not indicate malicious behavior." }
$.ajaxSetup({ headers: { 'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content') },error: function(jqXHR, textStatus, errorThrown) { if (jqXHR.status === 419) { if ($('#session_timeout').length>0) { $('#session_timeout').modal('show'); }else if($('#session-expired').length>0) { $('#session-expired').modal('show'); } } } });
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 0, "reasons": "The code is a standard implementation of Hotjar, a legitimate website analytics and feedback tool. It does not exhibit any malicious behavior." }
(function(h,o,t,j,a,r){ h.hj=h.hj\|\|function(){(h.hj.q=h.hj.q\|\|[]).push(arguments)}; h._hjSettings={hjid:1863763,hjsv:6}; a=o.getElementsByTagName('head')[0]; r=o.createElement('script');r.async=1; r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv; a.appendChild(r); })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate web application, specifically WhatsApp, as indicated by the URLs pointing to 'static.whatsapp.net'. The code is primarily loading various JavaScript and CSS resources, which is typical for a web application. There are no immediate signs of malicious behavior such as obfuscated code, suspicious network requests, or attempts to steal user data. Therefore, the risk score is very low." }
requireLazy(["Bootloader"],function(m){m.handlePayload({"consistency":{"rev":1013785789},"rsrcMap":{"hJ4JOlo":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/y3\/r\/Rn_Qb5J-qbY.js?_nc_x=Ij3Wp8lg5Kz"},"akf99bT":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/y3\/r\/KT9j7-Pb0_5.js?_nc_x=Ij3Wp8lg5Kz"},"GQcz58C":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3i7M54\/yu\/l\/en_US\/CMbvlktGnP3.js?_nc_x=Ij3Wp8lg5Kz"},"RjTdZod":{"type":"css","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yL\/l\/0,cross\/G6tkHGk18x2.css?_nc_x=Ij3Wp8lg5Kz"},"x1gUGmp":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3iW4a4\/yB\/l\/en_US\/O1KACQazp4_.js?_nc_x=Ij3Wp8lg5Kz"},"4LqzygO":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yG\/r\/AICfWFSNpcE.js?_nc_x=Ij3Wp8lg5Kz"},"IPejnBU":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yz\/r\/JU3TMHT_W2V.js?_nc_x=Ij3Wp8lg5Kz"},"f+ygs2S":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yh\/r\/Wv0Cymz3vHm.js?_nc_x=Ij3Wp8lg5Kz"},"YKlPqMU":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3ibq14\/ym\/l\/en_US\/TJsl5RD9whX.js?_nc_x=Ij3Wp8lg5Kz"},"lGcuWFY":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3iTQy4\/yj\/l\/en_US\/Ch4jJb8EMfa.js?_nc_x=Ij3Wp8lg5Kz"},"Hno5JN6":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3ioVA4\/yj\/l\/en_US\/pNoVjbMXG1E.js?_nc_x=Ij3Wp8lg5Kz"},"3HdAXaS":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yl\/r\/9lDiey1l9HS.js?_nc_x=Ij3Wp8lg5Kz"},"Vjo38zo":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3i2kB4\/yH\/l\/en_US\/6PMYrIYEvru.js?_nc_x=Ij3Wp8lg5Kz"},"I8SLnoe":{"type":"css","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yM\/l\/0,cross\/lL76PpnAuPd.css?_nc_x=Ij3Wp8lg5Kz"},"OR65d30":{"type":"css","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/y8\/l\/0,cross\/BcydDniv0ry.css?_nc_x=Ij3Wp8lg5Kz"},"p4OJogK":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3iyjA4\/yc\/l\/en_US\/GGPGboyI3u3.js?_nc_x=Ij3Wp8lg5Kz"},"iP6Zd3H":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3ig1H4\/yR\/l\/en_US\/2yQwmau9s39.js?_nc_x=Ij3Wp8lg5Kz"},"hASYjHr":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/yZ\/r\/4igFof1Bmbn.js?_nc_x=Ij3Wp8lg5Kz"},"gIDnb7m":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3iF584\/y5\/l\/en_US\/uK48VXsbNB-.js?_nc_x=Ij3Wp8lg5Kz"},"y2JWLZm":{"type":"css","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/ya\/l\/0,cross\/wm09kKoi8Eh.css?_nc_x=Ij3Wp8lg5Kz"},"20549oV":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3iTfb4\/yk\/l\/en_US\/9VBsuWi-aoI.js?_nc_x=Ij3Wp8lg5Kz"},"8ELCBwH":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3\/ye\/r\/VRzSVH5iU-V.js?_nc_x=Ij3Wp8lg5Kz"},"8JoICoX":{"type":"js","src":"https:\/\/static.whatsapp.net\/rsrc.php\/v3i0Dy4\/yK\/l\/en_US\/CXiIdBfV9zA.js?_nc_x=Ij3Wp8lg5Kz"},"1tEzGmI":{"type":"js","src":"htt
URL: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be part of a legitimate web application, likely related to Facebook or WhatsApp, given the references to 'facebook.com' and 'whatsapp.com'. The code includes configurations for link handling, event listeners, and asynchronous requests, which are typical for such applications. There are no obvious signs of malicious behavior, such as data exfiltration or unauthorized access attempts. The presence of blocklisted domains and security features like 'always_use_https' and 'use_rel_no_referrer' further suggests a focus on security. However, without the full context of the application, a minimal risk score is assigned." }
requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["IPejnBU"],id:"last_response",phase:1,last_in_phase:true,the_end:true,jsmods:{define:[["cr:6016",["NavigationMetricsWWW"],{__rc:["NavigationMetricsWWW",null]},-1],["cr:3376",[],{__rc:[null,null]},-1],["cr:5695",["EventListenerWWW"],{__rc:["EventListenerWWW",null]},-1],["cr:7383",["BanzaiWWW"],{__rc:["BanzaiWWW",null]},-1],["cr:1083116",["XAsyncRequest"],{__rc:["XAsyncRequest",null]},-1],["cr:1083117",[],{__rc:[null,null]},-1],["LinkshimHandlerConfig",[],{supports_meta_referrer:true,default_meta_referrer_policy:"origin-when-crossorigin",switched_meta_referrer_policy:"origin",non_linkshim_lnfb_mode:null,link_react_default_hash:"AT07kfcday_QCZ7g-eIhqEXD8MZBgCHTDpNGLwg-Cs3SbzIlYJjwerSelloAln6oTYzCyBJMmve2Ti_5eVUhB9QrB-cLCBCZV_btAZhrhavTPmmusgROPJFiEUY",untrusted_link_default_hash:"AT0CpM9hotP-1m2eXskD36IwEfzlBnZ_Pr31aBxKpQJ_B9TXoo20gCHtH9TlEQtrDWjcSLrLj7VG7ZtlmNxSV-8xqJxiWPDLtffPFC5N9Cr9-rnDGMztYcy-lL8",linkshim_host:"l.facebook.com",linkshim_path:"/l.php",linkshim_enc_param:"h",linkshim_url_param:"u",use_rel_no_opener:true,use_rel_no_referrer:true,always_use_https:true,onion_always_shim:true,middle_click_requires_event:true,www_safe_js_mode:"asynclazy",m_safe_js_mode:"MLynx_asynclazy",ghl_param_link_shim:false,click_ids:null,is_linkshim_supported:false,current_domain:"whatsapp.com",blocklisted_domains:["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],is_mobile_device:false},27],["TimeSliceInteractionSV",[],{on_demand_reference_counting:true,on_demand_profiling_counters:true,default_rate:1000,lite_default_rate:100,interaction_to_lite_coinflip:{ADS_INTERFACES_INTERACTION:0,ads_perf_scenario:0,ads_wait_time:0,Event:1},interaction_to_coinflip:{ADS_INTERFACES_INTERACTION:1,ads_perf_scenario:1,ads_wait_time:1,Event:100},enable_heartbeat:false,maxBlockMergeDuration:0,maxBlockMergeDistance:0,enable_banzai_stream:true,user_timing_coinflip:50,banzai_stream_coinflip:0,compression_enabled:true,ref_counting_fix:false,ref_counting_cont_fix:false,also_record_new_timeslice_format:false,force_async_request_tracing_on:false},2609],["USIDMetadata",[],{browser_id:"?",tab_id:"",page_id:"Pse6jwxeenx7y",transition_id:0,version:6},5888],["cr:1353359",["EventListenerImplForBlue"],{__rc:["EventListenerImplForBlue",null]},-1],["cr:1642797",["BanzaiBase"],{__rc:["BanzaiBase",null]},-1],["cr:1042",["XAsyncRequestWWW"],{__rc:["XAsyncRequestWWW",null]},-1],["cr:5866",["BanzaiAdapterWWW"],{__rc:["BanzaiAdapterWWW",null]},-1],["cr:7384",["cancelIdleCallbackWWW"],{__rc:["cancelIdleCallbackWWW",null]},-1],["cr:692209",["cancelIdleCallbackBlue"],{__rc:["cancelIdleCallbackBlue",null]},-1],["BanzaiConfig",[],{MAX_SIZE:10000,MAX_WAIT:150000,MIN_WAIT:null,RESTORE_WAIT:150000,blacklist:["time_spent"],disabled:false,gks:{boosted_pagelikes:true,mercury_send_error_logging:true,platform
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a standard implementation of Google Tag Manager. It is used for tracking and analytics purposes and does not contain any malicious elements." }
(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-5SDMCJH');
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code interacts with localStorage to retrieve and remove items, which could potentially be used for tracking user actions. However, there is no indication of malicious behavior such as stealing sensitive information or performing unauthorized actions. The code appears to be related to event tracking or analytics, which is common in legitimate websites." }
let authSuccess = localStorage.getItem('authsuccess'); if (authSuccess == 'true' && typeof(authSuccess) != 'undefined' ) { let authAction = localStorage.getItem('authaction'); let chainId = "3090"; let propertyId = "5659"; let versionBE = "3"; let isRemark = ""; let lang = "pt-BR"; let chainName = ""; let hotelName = "Campo Bahia Hotel Villas Spa"; let body = {}; let dataLayer = window.dataLayer = window.dataLayer \|\| []; body.event = authAction; body.chainId = chainId; body.chainName = chainName; body.propertyId = propertyId; body.hotelName = hotelName; body.versionBE = versionBE; body.isRemark = isRemark; body.lang = lang; dataLayer.push(body); localStorage.removeItem('authsuccess'); localStorage.removeItem('authaction'); body = {}; }
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to e-commerce tracking and analytics, which is generally considered low risk. It does not contain any obvious malicious elements such as data exfiltration, credential harvesting, or unauthorized access attempts. The code primarily deals with tracking user interactions on an e-commerce homepage and pushing this data to a data layer for analytics purposes. Therefore, it is assessed as low risk." }
var body = { "event": "ecommerceHomepage", "chainId": "3090", "chainName": "", "HotelId": "5659", "hotelName": "Campo Bahia Hotel Villas Spa", "versionBE": "3", "isRemark": "", "isLoggedIn": "", "loyalty": { "loyalty": "", "loyalty_category": "", "loyalty_level": "", "loyalty_discount_value": "", "loyalty_discount_type": "" }, "lang": "pt-BR", "eventDetails": { "category": "Ecommerce", "action": "Home Page" }, "ecommerce": { "currency": "BRL", "items": [ { "item_id": "5659", "item_name": "Campo Bahia Hotel Villas Spa", "item_brand": "Campo Bahia Hotel Villas Spa", "item_list_name": "Hotel List", "index": 0 }] }, // Old Version Support "currencyCode": "BRL", "impressions": [ { "id": "5659", "name": "Campo Bahia Hotel Villas Spa", "brand": "Campo Bahia Hotel Villas Spa", "list": "Hotel List", "position": 1 }] }; var dataLayer = window.dataLayer = window.dataLayer \|\| []; dataLayer.push(body);
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be obfuscated, which can be a technique used to hide malicious intent. However, without further context or additional analysis, it is not possible to definitively determine if the code is malicious. The code primarily consists of a large array of numbers, which could be used for various legitimate purposes. The risk score is set to 2 due to the obfuscation, but no direct evidence of malicious activity is present." }
$(document).ready(function(c){var A=function(){var k=[];k.push(1,10031,10036,10039,10046,10053,10059,10090,10109,10128,10130,10131,10133,10134,10135,10136,10137,10138,10139,10140,10141,10142,10143,10144,10145,10146,10147,10148,10149,10150,10159,10169,10174,10185,10187,10188,10189,10190,10191,10192,10193,10194,10195,10196,10197,10198,102,10202,10203,10204,10205,10206,10207,10209,10210,10211,10216,10224,10228,10230,10231,10232,10242,10255,10256,10269,10272,10273,10274,10276,10285,10286,10287,10288, 10289,10290,10295,10296,10315,10316,10317,10318,10319,10330,10341,10342,10344,10345,10349,10350,10351,10352,10353,10356,1036,10366,10368,10369,1037,10370,10371,10372,10373,10374,10375,10376,10377,10379,1038,10380,10381,10382,10383,10384,10385,10386,10387,10388,10389,1039,10393,10398,1040,10400,10402,10403,10408,1041,10415,10418,1048,1049,10492,10493,10494,1050,10516,10518,10519,10520,10521,10544,10545,10546,10547,10548,10549,1055,10550,10551,10552,10553,10554,10555,10556,10557,10580,10581,10582,10583, 10584,10586,10587,106,1060,10604,10629,10634,10642,10644,10645,10646,10650,10663,10664,10666,10667,10668,10669,10670,10671,10672,10673,10676,10682,10683,10697,10702,10711,10716,10717,10737,10738,10767,10773,10780,10781,10787,10790,1080,10804,10805,10806,10807,1081,10812,10813,10815,10816,10817,10818,10843,10845,10851,10852,10853,10854,10874,1089,1090,1091,10912,1092,10946,10948,10953,10969,10970,10971,10972,10973,10974,10975,10976,10977,10978,10979,10980,10982,10983,10985,10986,10987,10988,10989, 10990,10991,10992,110,11013,11023,11035,11052,11053,11054,11055,11056,11057,11058,11059,11060,11061,11062,11067,11068,11069,11070,11071,11072,11073,11074,11075,1108,11088,11093,11096,11100,11101,11102,11103,11104,11105,11106,11107,11108,11109,11110,11111,11112,11113,11114,11115,11116,11117,11118,11119,11120,11121,11122,11123,11128,11129,11130,11131,11132,11142,11149,11151,11152,11153,11154,11155,11156,11157,11158,11159,11160,11162,11163,11164,11165,11166,11167,11168,11169,11170,11171,11172,11189, 11192,11193,11203,11204,11205,11206,11207,11208,11209,11210,11229,11231,11236,11244,11245,11246,11248,11249,11253,11254,11255,11256,11257,11259,1126,11261,11263,11264,11265,11266,11267,11268,11269,11270,11271,11272,11273,11274,11275,11276,11277,11278,11279,11282,11285,11286,11287,11288,11289,11290,11291,11292,11293,11294,11295,11296,11297,11298,11299,113,11300,11301,11310,11311,11312,11324,11325,11327,11328,11356,11357,11358,11359,11360,114,115,116,1167,118,1183,1184,120,1202,1209,1210,1211,1212, 1213,1214,1215,1218,122,1220,1221,12220,12221,12222,12231,12239,12240,12242,12271,12272,12275,12299,12300,12304,12340,12372,1238,1239,12393,12441,12466,12478,12488,12489,12499,1250,12500,12508,12509,12527,12590,1260,1263,12632,1264,1266,12660,12661,12662,12663,12664,12665,12670,12688,12689,1270,1271,1272,12723,12724,1273,12735,12737,12738,12739,1274,12740,12742,12744,12753,12754,12757,12768,12769,1277,12770,12771,12772,12773,12774,12775,12776,12777,12778,12779,1278,12784,1279,1279
URL: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code modifies the text content of elements on the page based on user input values. While this behavior is not inherently malicious, it could potentially be used to manipulate displayed information in a deceptive manner. However, there are no clear signs of phishing or data exfiltration. The risk is low but not zero due to the potential for misuse." }
var main=function(){var c=function(){var b=parseInt(document.querySelector("#guests_div #ad").value),a=parseInt(document.querySelector("#guests_div #ch").value)\|\|0;return b+=a},d=function(){var b=c();document.querySelectorAll(".rates-header-title.price-per-guest span").forEach(function(a){a.textContent=a.textContent.replace("1",b)})};d();console.log("CUSTOM FIX: AHA O-1831")};0<document.querySelectorAll(".rates-header-title").length&&main();
URL: https://www.campobahia.com/hotel/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to a WordPress plugin for Elementor page builder. It includes URLs, a nonce, and base64 encoded current URL, which are typical for such plugins. There are no indications of malicious behavior." }
/* <![CDATA[ / var eae = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","current_url":"aHR0cHM6Ly93d3cuY2FtcG9iYWhpYS5jb20vaG90ZWwv","nonce":"89fbd4fc56","plugin_url":"https:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; var eae_editor = {"plugin_url":"https:\/\/www.campobahia.com\/wp-content\/plugins\/addon-elements-for-elementor-page-builder\/"}; / */
URL: https://www.campobahia.com/hotel/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to the AddThis social sharing plugin for WordPress. It initializes various configuration settings and checks for the presence of certain objects before setting them up. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code appears to be legitimate and intended for enhancing social sharing functionality on a website." }
if (window.addthis_product === undefined) { window.addthis_product = "wpp"; } if (window.wp_product_version === undefined) { window.wp_product_version = "wpp-6.2.7"; } if (window.addthis_share === undefined) { window.addthis_share = {}; } if (window.addthis_config === undefined) { window.addthis_config = {"data_track_clickback":true,"ui_atversion":"300"}; } if (window.addthis_plugin_info === undefined) { window.addthis_plugin_info = {"info_status":"enabled","cms_name":"WordPress","plugin_name":"Share Buttons by AddThis","plugin_version":"6.2.7","plugin_mode":"AddThis","anonymous_profile_id":"wp-05af53386c68bfd7f09dd2e9f48dd134","page_info":{"template":"pages","post_type":["post","page","e-landing-page"]},"sharing_enabled_on_post_via_metabox":false}; } (function() { var first_load_interval_id = setInterval(function () { if (typeof window.addthis !== 'undefined') { window.clearInterval(first_load_interval_id); if (typeof window.addthis_layers !== 'undefined' && Object.getOwnPropertyNames(window.addthis_layers).length > 0) { window.addthis.layers(window.addthis_layers); } if (Array.isArray(window.addthis_layers_tools)) { for (i = 0; i < window.addthis_layers_tools.length; i++) { window.addthis.layers(window.addthis_layers_tools[i]); } } } },1000) }());
URL: https://www.campobahia.com/hotel/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be part of a legitimate website's localization and configuration settings. It includes localization strings, AJAX URLs, nonce values, and responsive design breakpoints. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts." }
/* <![CDATA[ / var localize = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"1ec56aa5de","i18n":{"added":"Adicionado ","compare":"Comparar","loading":"Carregando..."},"eael_translate_text":{"required_text":"\u00e9 um campo obrigat\u00f3rio","invalid_text":"Inv\u00e1lido","billing_text":"Faturamento","shipping_text":"Envio","fg_mfp_counter_text":"de"},"page_permalink":"https:\/\/www.campobahia.com\/hotel\/","cart_redirectition":"","cart_page_url":"","el_breakpoints":{"mobile":{"label":"Dispositivos m\u00f3veis no modo retrato","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Dispositivos m\u00f3veis no modo paisagem","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet no modo retrato","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet no modo paisagem","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Notebook","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Tela ampla (widescreen)","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}}; / */
URL: https://www.campobahia.com/hotel/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be configuration data for the Elementor frontend, a popular WordPress page builder plugin. It includes settings for breakpoints, internationalization (i18n), and other frontend features. There are no indications of malicious behavior such as data exfiltration, obfuscation, or unauthorized access attempts." }
/* <![CDATA[ / var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":true},"i18n":{"shareOnFacebook":"Compartilhar no Facebook","shareOnTwitter":"Compartilhar no Twitter","pinIt":"Fixar","download":"Baixar","downloadImage":"Baixar imagem","fullscreen":"Tela cheia","zoom":"Zoom","share":"Compartilhar","playVideo":"Reproduzir v\u00eddeo","previous":"Anterior","next":"Pr\u00f3ximo","close":"Fechar","a11yCarouselWrapperAriaLabel":"Carrossel \| Rolagem horizontal: Setas para esquerda e direita","a11yCarouselPrevSlideMessage":"Slide anterior","a11yCarouselNextSlideMessage":"Pr\u00f3ximo slide","a11yCarouselFirstSlideMessage":"Este \u00e9 o primeiro slide","a11yCarouselLastSlideMessage":"Este \u00e9 o \u00faltimo slide","a11yCarouselPaginationBulletMessage":"Ir para o slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Dispositivos m\u00f3veis no modo retrato","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Dispositivos m\u00f3veis no modo paisagem","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet no modo retrato","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet no modo paisagem","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Notebook","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Tela ampla (widescreen)","value":2400,"default_value":2400,"direction":"min","is_enabled":false}}},"version":"3.21.8","is_static":false,"experimentalFeatures":{"e_optimized_assets_loading":true,"additional_custom_breakpoints":true,"e_swiper_latest":true,"container_grid":true,"home_screen":true,"ai-layout":true,"landing-pages":true},"urls":{"assets":"https:\/\/www.campobahia.com\/wp-content\/plugins\/elementor\/assets\/"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description"},"post":{"id":411,"title":"Hotel%20-%20Campo%20Bahia","excerpt":"","featuredImage":false}}; / */
URL: https://www.campobahia.com/hotel/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate website's configuration settings. It includes URLs for AJAX requests and endpoints, a nonce for security, and other properties related to the site's functionality. There are no indications of malicious behavior such as obfuscated code, suspicious network requests, or attempts to steal user data. The risk score is set to 1 due to the presence of a nonce, which is a security feature, but it does not indicate any malicious intent." }
/* <![CDATA[ / var NeveProperties = {"ajaxurl":"https:\/\/www.campobahia.com\/wp-admin\/admin-ajax.php","nonce":"7fa668614c","isRTL":"","isCustomize":"","infScroll":"enabled","maxPages":"0","endpoint":"https:\/\/www.campobahia.com\/wp-json\/nv\/v1\/posts\/page\/","query":"{\"page\":\"\",\"pagename\":\"hotel\"}","lang":"pt"}; / */

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 04:14:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9836542282747343
Encrypted:	false
SSDEEP:	48:8ydFTNhWcHdidAKZdA19ehwiZUklqehQy+3:84nlvy
MD5:	B3272D3F4391D6772AC41B72DD789BF9
SHA1:	56F531DD0B778C75D55DEFEF66A825C7647D2648
SHA-256:	824148263FF9E266001218D213496A0C450A5BD3F4DD5FF14009041A8B6A7DE5
SHA-512:	B2D024FD804ADD3588BCF0BC42F2F26763AC1C1E2C1DA01052F54110C2328E957740B2243E8FA555B78EF0B16177AE355289AB0B352BBEB0F94E182114CA1734
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....=.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.)...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 04:14:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9984636552887807
Encrypted:	false
SSDEEP:	48:8/idFTNhWcHdidAKZdA1weh/iZUkAQkqehfy+2:8/on/9QWy
MD5:	F96184C4F0DD032152A6AD458195C5CE
SHA1:	E2B470166458FFB52A46E89A878CF96EC0828C84
SHA-256:	E98A2B55F12E859271BF787EFEE797BF53CF192551233FDCFF9F06DE8149CB28
SHA-512:	4DDB05D99A6E6D18C0E24347AD343C319FC2C7F8F49165BCF725A5D1ED92ACFAFC910EE2957B2AFD1A11586466C5ACCDFB59C5247B2725541C900380AB73B8C5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.)...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006724030793325
Encrypted:	false
SSDEEP:	48:8xydFTNhsHdidAKZdA14tseh7sFiZUkmgqeh7sVy+BX:8x4ngnjy
MD5:	473B082AE9849BFBFFB099FDFE86F0BC
SHA1:	B2134FB56C9D714A9DADF2904599101CF60BBFA4
SHA-256:	A9F7DED0D36E530966DF56684956AD67C02951CD70CA33DC9E5E3E6E77BD068E
SHA-512:	1337387024B04852D8258D6854C8E03A8D5D21D77B178F02987DB1DB1F96C4B945D6C1D960A82D46600AEAE7B06507216D371BEF82423C9AF241C4BBDE5295E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 04:14:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9983185821762333
Encrypted:	false
SSDEEP:	48:8KdFTNhWcHdidAKZdA1vehDiZUkwqehLy+R:8wn8dy
MD5:	0CB04C58FCF36A3D555E3C372F968941
SHA1:	20CC2FC7A117A3B1C44793B474B3681E0DEC1F77
SHA-256:	A7A53FF689382E16296591CA8778DD0F8E2D67E37955B57F3FCFFE378A9F09E5
SHA-512:	00DF32C93099EBA39A70CC8DB4FB185447229F498977310F5C281FA3AEFA2EF3771FE6623939C92A23573090B5D940E01B900F3CB7F6CB17C2C186DFA24E8D79
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.)...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 04:14:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.985678087610665
Encrypted:	false
SSDEEP:	48:82dFTNhWcHdidAKZdA1hehBiZUk1W1qehJy+C:8UnM9py
MD5:	3A642174C16B2B70B8192463CD57A456
SHA1:	0BA73B1D34D0CBB93475D99A2B3147B016C4C74E
SHA-256:	489660B813532228E913B8799AA4197C44EC8FF67E7284A247E71BD0FF8397B8
SHA-512:	5785394B5B3182E11533B124E18B35353F73786C5E7549D4D7B76BF26AB7A7435A0EDB45DB2BE834CBEFE0BF7CEED8FE666A349DAA504A93F407D515F8F795D9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.)...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 04:14:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996992091781953
Encrypted:	false
SSDEEP:	48:8sdFTNhWcHdidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbjy+yT+:8CniT/TbxWOvTbjy7T
MD5:	C3BDFA99AA1A60FD86B7D910C1732C28
SHA1:	F3B913315131E3A32098DA4DF8003A14F4926817
SHA-256:	8122392AB03302BB83C2F42619090CAF10F5AE36E346D436CD3FA91E54FDF0A0
SHA-512:	A87AD44AC1CB253B69AC109AF97F5D429390DDCFECC10E2394D04EE2EFA72DD5B5A721DDCA0FC97BFBAE71968AEB9FF16A0AE7E82CD0A1413EA863EC0C2DA253
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.)....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.)....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.)....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.)..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.)...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............-.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.321066989918543
Encrypted:	false
SSDEEP:	6:tI9mc4slzXXpnzSqFRYBThc4JIxurdGo7rSQKD6z0n:t4lZnzS0WThcbunrSQKv
MD5:	F3A7CA750A8F6380D522AABD2F2714DC
SHA1:	209EF089CDA8F75049567AAF16EF780C6BEDD176
SHA-256:	6ADDA3DAE570CD15696FCFA4E9553130B233D1D950BE2B67398EEB01755C6C3C
SHA-512:	5C0053E25B1A5634AECCFFFF23955FBDD10BD5175D1FF1E8A1032116D50AC2283958F1DF0A11F57170937DBF86650A0950ECB81EC795A7BD55B969A1B81B824A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="7.41" height="12" viewBox="0 0 7.41 12">. <path id="icon_ArrowRight" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-8.59 18) rotate(-90)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1189
Entropy (8bit):	4.8579503414898415
Encrypted:	false
SSDEEP:	24:t4LmRxq+s+jUeUEHvYOJKFlelVGNzQO1Hba1StO6I:jCnpr0SlUVGKJ1nH
MD5:	55ED8E6D8B4A21A40CB52E1296DDE6B8
SHA1:	8088D068136401C7E324C2F084A76A8EAAD4CB3E
SHA-256:	36F242390E7A2D63D31BCA1DE7F8E8D74868995D989C677C11B2AE25B672CC15
SHA-512:	73F8EC0144AB3E027718B6AF54155C839B361563E78B85D99058331142ECB814A8B86C2E21524CEB4AD6E47D932B418309A5A34FE738C1A3108A1DD60AEDA270
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/logo_Omnibees.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="17.862" height="20" viewBox="0 0 17.862 20">. <g id="logo_Omnibees" transform="translate(0)">. <path id="Caminho_2038" data-name="Caminho 2038" d="M-112.907-105.455l-6.911,3.99a2.018,2.018,0,0,1-2.02,0l-6.912-3.99a2.02,2.02,0,0,1-1.01-1.749v-7.98a2.02,2.02,0,0,1,1.01-1.749l6.912-3.99a2.019,2.019,0,0,1,2.02,0l6.911,3.99a2.019,2.019,0,0,1,1.01,1.749v7.98a2.02,2.02,0,0,1-1.01,1.749" transform="translate(129.759 121.194)" fill="#fedc00"/>. <path id="Caminho_2039" data-name="Caminho 2039" d="M-89.753-71.125V-77.3a1.346,1.346,0,0,0-.673-1.166l-5.352-3.09a1.346,1.346,0,0,0-1.346,0l-5.352,3.09a1.346,1.346,0,0,0-.673,1.166v6.179a1.346,1.346,0,0,0,.673,1.166l5.352,3.09a1.347,1.347,0,0,0,1.346,0l5.352-3.09a1.346,1.346,0,0,0,.673-1.166" transform="translate(105.382 84.219)" fill="#301b46"/>. <path id="Caminho_2040" data-name="Caminho 2040" d="M-53.852-43.336V-47.2a.673.673,0,0,0-.337-.583l-3.346-1.932a.673.673,0,0,0-.673,0l-3.346,1.932a.673.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	603
Entropy (8bit):	5.132763371086946
Encrypted:	false
SSDEEP:	12:t4CvncDzwA68Dh424RUCYqELAfMqACvoykaBogGazTIM8zqKADi:t4CvnyzE8DqRoqiQdkykaBoRap8Vr
MD5:	4A0408EAE4E75CAB33E01386E5A37336
SHA1:	EA84D87FD2E291E36718DDD70C33BEBCDA5EDA9C
SHA-256:	EEEF6C1F0AC5E7BACB3956787A3B60C1603BBEA4C7DAB5DBB695631F1B80AE93
SHA-512:	5EB3E41302A2589C363A7B8B083F88932AF18DDD18F923A0FF83AD28F382A765F64E77A934596C857D207D94AFF619F9B52222F8F4B49581521880EC13FBB46E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b,.c{fill:none;}.b,.c{stroke:#273240;}.c{stroke-linecap:round;}.d{stroke:none;}</style></defs><g transform="translate(-470 -642)"><rect class="a" width="16" height="16" transform="translate(470 642)"/><g transform="translate(-772 254)"><g class="b" transform="translate(1243 389)"><circle class="d" cx="7" cy="7" r="7"/><circle class="a" cx="7" cy="7" r="6.5"/></g><g transform="translate(1250 392.5)"><line class="c" y2="3.5" transform="translate(0 3.5)"/><line class="c" y2="0.875"/></g></g></g></svg>

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4572
Entropy (8bit):	5.065274873746793
Encrypted:	false
SSDEEP:	96:IWcgwu7kTnUh8YTWnWPvbynzNPn+K2N5LnB0z/M:Ixlu4jeT8WPvbYzZ+5n0M
MD5:	023F29E99107ADECCE453846214ED308
SHA1:	836948DE76D6F53DBC7A18677435D77A748E7714
SHA-256:	A126547E96F271F77593D47B9719DBFF9DF28716682C4A0794A899047EEBB4AD
SHA-512:	32E07CEC9D3FD95056FD4833FEF90CA51DD0A34E00432E4669C90967D12EDE105F961B65B55D557EBC0C149B1C598015CEB445086BBC102961CC00DD00D4C185
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0
Preview:	//jQuery.noConflict();..jQuery(document).on('elementor/render/animation-text',function(e){..jQuery(".eae-at-animation-text-wrapper .eae-at-animation-text:first-child").addClass("is-visible");...//set animation timing..var animationDelay = 2500,..//loading bar effect...barAnimationDelay = 3800,...barWaiting = barAnimationDelay - 3000, //3000 is the duration of the transition on the loading bar - set in the scss/css file..//letters effect...lettersDelay = 50,..//type effect...typeLettersDelay = 150,...selectionDuration = 500,...typeAnimationDelay = selectionDuration + 800,..//clip effect...revealDuration = 600,...revealAnimationDelay = 1500;...initHeadline();....function initHeadline() {...//insert <i> element for each letter of a changing word...singleLetters(jQuery('.eae-at-animation.letters').find('.eae-at-animation-text'));...//initialise headline animation...animateHeadline(jQuery('.eae-at-animation-text-wrapper'));..}...function singleLetters($words) {...$words.each(function(){....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6382
Entropy (8bit):	5.018439885231046
Encrypted:	false
SSDEEP:	192:EkAvBkKo8cdL4i2dpViLkgrO0okp6mAtvCo85ukD4p0o8:EkAvBkKsdLUdpwfrO0oahSCpZ4pE
MD5:	3CC03A5AD0D5308D06EEF87F013B387D
SHA1:	7D0871B855F4CD8DDA881797E5076B83B247A530
SHA-256:	2D24979BE7E101E99F1A1A576A2BF737E9D2E291F5FDEE827E8AE2D05DE4037D
SHA-512:	53D2407528286B694D00982462774B0A65F2178770D2B4EEDA243A391851E3B886DCCC982BFA868ED4740914797309C43121EA9BFC9B538F62E10C3770814366
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/scrollspy.js?ver=1.6.5
Preview:	/*. Extend jquery with a scrollspy plugin.. * This watches the window scroll and fires events when elements are scrolled into viewport.. . throttle() and getTime() taken from Underscore.js. * https://github.com/jashkenas/underscore. . @author Copyright 2013 John Smart. * @license https://raw.github.com/thesmart/jquery-scrollspy/master/LICENSE. * @see https://github.com/thesmart. * @version 0.1.2. /.(function($) {...var jWindow = $(window);..var elements = [];..var elementsInView = [];..var isSpying = false;..var ticks = 0;..var offset = {...top : 0,...right : 0,...bottom : 0,...left : 0,..}.../.. Find elements that are within the boundary.. * @param {number} top.. * @param {number} right.. * @param {number} bottom.. * @param {number} left.. * @return {jQuery}..A collection of elements.. */..function findElements(top, right, bottom, left) {...var hits = $();...$.each(elements, function(i, element) {....var elTop = element.offset().top,.....elLeft = element.offset().left,..

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.866156118080917
Encrypted:	false
SSDEEP:	24576:YQoNh2dLlrbSFfmkSLr4Ntc41tc5icE8N1w+:Y1ENFEm7n4NH1tcbxN6+
MD5:	71272D836D02D81E9858175C122BB8B8
SHA1:	C0BAAE05B1884AE1B11C199468ADA5DB5DA8745F
SHA-256:	908D995F4211A74B95C75E9772CFA2E4ACDA93BD350F7AD81F94F99CDA41AEF2
SHA-512:	36F11C79A413C8C37FCD02AB3D175531D1278D36EABB50650A989FC5A94E4FA88932FBB91B17CA837F1CEE7A64DAF35961BCFA2FA6E6636846EF6F001B8C56D6
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:13
Preview:	?...n.D...!(s._.G.b.g..$4..z.s.A..6..Ng.\...a[....8.W&K.R....z...d...7..J....S..^.45...v.%.#...P....Zy...L.Wm!-...V7..;A..L..l$....1..~i....5.`9.....^..i%..}..Ix..c.._.2X\..`t0.=..p..D07...q..yz....qW...._+..0..F>.<.=.,Ad./...sU.z.Y.d..<hn\[o.........MFV...QaNJr]!.\-F...T..../..{.o.!...k0..r.L..7y......]aw-... 3....l.$...9.j..".,..n.7...._.....M/.2~...[..O...!/.",.....B...Y._.-.I.'Z....lw..X....t'..'.jzz..`....!...._........?..<.7.Ne..?o..oV.`.X Z?..f.E"(...^k.#XpQ.....%.{"&$...N`Yr3..=].T....i..0.=...g.v.ML..#.u6V.n.h. .3Y...yw...X_H....{{rF..H..X}e.z....R;.#.aYg.N.(...=.@..n.e.m.`..f...x.g..w.R\...\.<A...O".....a=..D;...?.,..8.;...K&/.)..n..8...fg._..8.D...+....#d.b......%n.+&8...,...v......x.k.....t=..G.}0.\\....K9.{...>..F....cpA.6..!.a..D .......cs...h....U.3..O>s.......G..d..A.i...t..%...W..7.k..c.K...aY?Y).I.>..`.gY....W...U\|...o4...+o...U.a.JE......S..{V.........T{;.q..K.<.k...Y..A..A:=.....-e.{n[.....: .K.~cR.u:_4

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3812
Entropy (8bit):	4.627041741267406
Encrypted:	false
SSDEEP:	96:XwV+FFwq+FFbRFFYRFFn+FFU+FFB+FFG+FFj+FFA+FFt+FFC+FFw+FFT+FF2+FFe:XwVowqobVYVnoUoBoGojoAotoCowoToq
MD5:	7C38CFBAAAD796493259BC091A259A49
SHA1:	4CDE389A2784E5DBA7B941E2654954488BF1F629
SHA-256:	92ADDFA9F1E6E829CBC181CD1C70B1495283AEF4F14325651E27358A43E23CB9
SHA-512:	AF9BCBF5B2C5B6FEF7D0AA6C21EB7BC1443B07F1EF7664363F95F90DD304354B7840D5DC89FCBE678CE6854847D17514D0687790264D1614B9EE0DEF2D72C741
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0
Preview:	[{"status":"Close","promo":false,"date":"2024-05-28T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-29T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-30T00:00:00Z","price":1488.6,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-31T00:00:00Z","price":1488.6,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-02T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-03T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-04T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-05T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-06T00:00:00Z","price":1253.56,"currency":16,"restricti

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	477104
Entropy (8bit):	7.976159085727206
Encrypted:	false
SSDEEP:	12288:Mxl9Upct5+023TnOWbebTFHKYGU0hg/2CWwopciFtt1:DpW55fFqYBOTCToSytf
MD5:	6BF40A87D8B534065039F739A9D875AF
SHA1:	7525EF1D0BEEB02046B70D5B1607A04AA8DBA8EB
SHA-256:	E802D0DDE55270CF75AB926824F7E00016F727FB155A1F2C537D5BB159C4F224
SHA-512:	3E23922EE6CCFC5295070D6F8502A3FC04A2E028767F201AD93FFEC03CEABC0E86F705489EF7430E5BDD65BA13A3DEA3259C30FB818D0C1E3EC0474D84F24B0E
Malicious:	false
Reputation:	low
Preview:	.....\Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:08:42..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....<~Z.X....q......+h../........j.{."...2v..e...Y[2#........1.....e..1.e

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55119)
Category:	downloaded
Size (bytes):	303922
Entropy (8bit):	5.652524749734794
Encrypted:	false
SSDEEP:	3072:Ldwic0Iard3OdGWbS8pqCIqjysCBGa+dQWqzGmRms4xKQ91sN:yib3OdGE9Z13TdQWqzGaw1w
MD5:	44DC36B23E924151B6CA5388BE2DDCC1
SHA1:	CFF84A76AA6067CA03E596571F56BFED93F4DC36
SHA-256:	56F99012B38FED0F401D4C9767C0D1ECB8F0E241F8E295BFDEC3B2EDADFF0B0C
SHA-512:	1110510C7B8A2293E46431AE785CD23D92099F05C6A7642FEF60579CD3D902DB529145773B8294F65FE8C4E370F2D7A51FBF8371D8E568CC86920E88F910F467
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5SDMCJH
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"169",. . "macros":[{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__c","vtp_value":"G-E6QPTJ9TK6"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loyalty.loyalty"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loyalty.loyalty_category"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loyalty.loyalty_level"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loyalty.loyalty_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"loyalty.loyalty_type"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefault

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1581
Entropy (8bit):	7.772448668900473
Encrypted:	false
SSDEEP:	24:w/6EBjZLJLzV1P2jOWwNi4oxDsNMw/xoETiMlpIdVqTXM9JWZ/24BIDub9Z8LN4:w/6Er9n2yWwNIxIF/ipMlBXQQ/J+uRuC
MD5:	A9AF2BCFD4C4E41473900FC29BFBFC94
SHA1:	8EDBDBBCA42529233F4A0D4A3BB9C2520FF66687
SHA-256:	66C18CC0D53BA09CAB22FFF8ECFDC84AAF01FDB28E29AE8DB32DF82E729B512C
SHA-512:	41F9868D9BA7DB1EFF2C87B4AAC7846C8641C6167EA6F4E6414EADAC703747A0142B1BC81B00038EFAE3B8B688E02067DE99DEC04ADAAA183DA5E7D404A0FCFC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs................ cHRM..z%..............u0...`..:....o._.F....IDATx.VkL.W.=...,.K.].......bb.-F..I.&..M...&j...4..Z.jm.#.......FEm}...,.Z[.Uk..+.<V.ed...;.......q~.=...f.s.K233...s.B...ca..(.N.8N....#....T.}.H..p...@..(.....z.(Z~kk.)..a......-.E.....$..........'..].mg...g.Z.3.. ...H.0.Ra!.. X.%$...;v.%3.}n..<]qi.Y....`..M..c.s......U\R\\\..............e.y.444...\....hZ..)[.,X....C..:.s...G.....3rw........apI....K......t.S.......4?...pX.G.......aL......yR(.e.^...\.0E."....i....3..=z..l6..9.g...-.2.&D.........N...`..P.t]..F.M...h.(.r...y..G....-[6a...n....+ I.).16PQ...B...%].z.{B....(b..\L...A.0v..~.o...t...v...c......HIy../_..if.o.....I.?...gf...aX.t..4.,.HK{.7n....f.@\\.V.,@j..c_bb"..n.....X.R......2f.7c.....k.3f.l6[.........n.Z....9.s..\.p..2.1.Jrrf....I.Y..NFaa!.......p8.......m..W.].!..TQM.\=....?6l....v<.e..O\|m.Xb)!$.7>.}.6.n..EQ.Y.u.EE{{...+}<.z.{..v..uu.}.!.s...fll,..?...../^..... ..(6.4.l6.V.Z...

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (917)
Category:	downloaded
Size (bytes):	7507
Entropy (8bit):	5.186412965351891
Encrypted:	false
SSDEEP:	192:Fxab7G+9dp7iP7aRTfdKGUGOfsvuGAnvK85Bdfv4Rg9Es5W:Fxab7T9z7iP7+ToGU3fWfgvzfvig9EsM
MD5:	AA1A28B4D95A1C8A08AA334255CE88D6
SHA1:	8DC2E98F9574ECA18739F30C7B6FCD139B0730B2
SHA-256:	8A5F81979A54FBAFC7540A935CAC34460D28C9176854E8DD6092BE6EEF046A44
SHA-512:	D9ED8E548E487A98DADBEC3C9610FBB01B1D9631C193A02DF30B5B558E84C019AB28D4A7F2F4FAF4EB8937BBD5EF5EC7C4DE730FBE0FE7C83387324E1B6AF049
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/autocomplete-hotels.js?version=1.0.0.395
Preview:	function sortBySequence(){var swapp;var n=hotel_folders.length-1;var x=hotel_folders;do{swapp=false;for(var i=0;i<n;i++){if(x[i].IsPropertyFolder){comparei=x[i].Sequence;}else{comparei=x[i].PropertySequence;}.if(x[i+1].IsPropertyFolder){comparej=x[i+1].Sequence;}else{comparej=x[i+1].PropertySequence;}.if(comparei>comparej){var temp=x[i];x[i]=x[i+1];x[i+1]=temp;swapp=true;}}.n--;}while(swapp);return x;}.var sortedHotels=sortBySequence();var onlyHotels=[];var onlyFolders=[];for(var i=0;i<sortedHotels.length;i++){if(sortedHotels[i].IsPropertyFolder){onlyFolders.push(sortedHotels[i]);}else{onlyHotels.push(sortedHotels[i]);}}.function getHotelsForFolder(UID){var hotels=[];for(var i=0;i<onlyHotels.length;i++){if(onlyHotels[i].PropertyFolderUID==UID){hotels.push(onlyHotels[i]);}}.return hotels;}.function getFoldersForFolder(UID){var folders=[];for(var i=0;i<onlyFolders.length;i++){if(onlyFolders[i].ParentFolderUID!=null&&onlyFolders[i].ParentFolderUID==UID){folders.push(onlyFolders[i]);}}.ret

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50424, version 1.0
Category:	downloaded
Size (bytes):	50424
Entropy (8bit):	7.996275129753487
Encrypted:	true
SSDEEP:	1536:PJvDLCDPBbPK1pBrg4JtaDg54n8dDn0OC3:B7CBb6nkI8DiLDn0V3
MD5:	FCB6E31EB689762BA9DAF5106527EDD6
SHA1:	6BE669963F1DDF607581E7221F01EC627C427991
SHA-256:	9E5FE078647762A646B321938BA4096BB0E6F62A7F01C9BC4BE5AB606666FCA1
SHA-512:	986063BF43851CA865B254FD3EB8258464D4B8831D3DFCF2D5909242543B68B9AEA74AB3CF2CA049445EA79DD54E24AE512D4EE166901369EF7181CC935FC4F6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v34/1Ptsg8zYS_SKggPNyCg4TYFq.woff2
Preview:	wOF2..............}....{.................................$?HVAR...`?STAT.4'2..4.. .../~.....d..(....0..r.6.$..,. ..:..<..,[ujq%.c.....]..%.To.+.q...,..u...........\|.9......!cv.,.. ".S....l,.%2.Q...X..4+....2..j$k..su...J.....;..$..\.,T...A%...mH.L..JT..}.U!..Gy.j....y..WX+....hY...i.wp.'.V}.5=.qA.D.6..+<.s....;=@K8.e.%.5.w_..7..........@D...q.....~~...e6>...P./.B...D]....+..)..i.X ..c_...ng.R.%v4.6....B.bz+.lx...;.,......m..^.`U...[.....X....zFd[F.a.\|....b...b..=G.....~,..j..1...l..5j.#.P..:...!.F.6.....q^.'a.......u.w...;+P_.2..f..0K\|1K..?..D$o.._%.Y.m..D.`.._.`..f........K.............7s.7..!......9........"ZI.4.$.?.A;.I.T<.[...&...$.N$d....s....GT{.. /.......Q........f.y.V.O08.(.`..U.pY1.!...j..#.5..jx.....xWbEd.T...N....z.P.N..b...1@...}.Qu..4FG(.@.wM..v..9...d"..5c..5.....ITO.r....mf.&i.....A.A..AK... $..yf,l5...6.K.}(dR.."..*_...v..L.V..W.$`....1.;...'j:.Oe{.4....\.%..ZeuWq....?0...+?B]....6!0<N.z...Qk#M-.[;a.....+\|...L...c.=..5

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 23, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2604
Entropy (8bit):	6.828889001867344
Encrypted:	false
SSDEEP:	48:DaGKJF1w/kpaMT34NWGII8je8NHMev9b7rKpmAy2GVQE6c:D58GcptoNn/fUv9b1Rr
MD5:	A45646EDED011DA1217612221F8B92B4
SHA1:	26E4DFF4E97E8AD51EA3068CD9CEF62A6A50DA76
SHA-256:	762C0E753F10EF93837AE19B2A80BC7BFD86AEB53BAA470A3894974A06290789
SHA-512:	150B01539696F6CB8339AF686BFC941F757B70554CE3AAAE5BEB644134E743595F54B568A8D9D80A54DC733EB6CBBDD3708AAA1C24AC87963A71C7FC48CA1F8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c.........(V.p... cHRM..z&..............u0...`..:....p..Q<....PLTE...%.f.... .%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f...o9......tRNS.....`.....R..].....K...w?%.'E......j..\|...:N..\;.).Q.C.#.."...k.....Y..{.!v.~9f1...^6....85..L........yp...z.-........*AIG...S...&...l...../.x.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158087
Entropy (8bit):	4.279128090908199
Encrypted:	false
SSDEEP:	1536:QtrZm+kDFrcfwYgb+2LP2PjPPEm/4qMPSoz6OzWxqh4bQXR/Lb7kxRH5GX3vQ/lX:+ZwyfwYgbpXSoz6OGRZ6/QTQjC
MD5:	A9DC072073F4524B5BB15901BA636EBE
SHA1:	7A217C1D2BA028BE944D1CA5C49DAA4F20A44020
SHA-256:	6DEE4F30A2162F41FD2C44620C5829E183745D7355000FFCD432A2E81707866E
SHA-512:	930566E50E912FD33822E059DCD1391E132046ADDAD8F867AC04A84A56240E1D11D900EE7014B44BDE9B5E84342472D8351240CD1BC8314E521200E348EA208B
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5
Preview:	jQuery(window).on("elementor/frontend/init", function () {. elementorFrontend.hooks.addAction(. "frontend/element_ready/wts-gmap.default",. function ($scope) {. var $wrapper = $scope.find(".eae-markers");. if($wrapper.length == 0){. return;. }. . map = new_map($scope.find(".eae-markers"));. . function new_map($el) {. $wrapper = $scope.find(".eae-markers");. var zoom = $wrapper.data("zoom");. var $markers = $el.find(".marker");. var styles = $wrapper.data("style");. var prevent_scroll = $wrapper.data("scroll");. // vars. var args = {. zoom: zoom,. center: new google.maps.LatLng(0, 0),. mapTypeId: google.maps.MapTypeId.ROADMAP,. styles: styles,. };.. // create map. var map = new google.maps.Map($el[0], args);.. // add a markers reference. map.markers = [];.. // add markers. $markers.each(function () {.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4024), with no line terminators
Category:	downloaded
Size (bytes):	4024
Entropy (8bit):	4.834105238460977
Encrypted:	false
SSDEEP:	48:cTcbZTi7bSNbZFNfiz9Sx99W0FOPGg9CzHni0SwJI/:cTKZi7OL3iJ69XIPGnniHu6
MD5:	70934CDA11A58F4128D4D7AE8F33AAD0
SHA1:	597637B2BB0EE12F8290B17CBBAE0F0543AEFE6D
SHA-256:	775393BEA4358785C0B57FD4B2A4B781C2D849142B7E234E2C40E751DA9AC450
SHA-512:	E419D3664066E57AEB557BD1322C70BC5FDE34033072E1879EA53A31B915E577FD6A16F3ACE140E871257EE8FBAD2EFD3CD28B545CC71B65B82F861277965A92
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1
Preview:	.weather-atlas-wrapper{font-family:'Open Sans', sans-serif;font-size:1em;line-height:1.5;text-shadow:1px 1px 0 rgba(0, 0, 0, 1);text-align:center}.weather-atlas-wrapper a{text-decoration:none !important;box-shadow:none !important;border:none !important;outline:none !important}.weather-atlas-wrapper .weather-atlas-header{padding:.3em;text-align:center;background:rgba(0, 0, 0, .075);text-transform:uppercase}.weather-atlas-wrapper .weather-atlas-body{margin:0 auto;padding:.9em 1.4em}@media (min-width:480px){.weather-atlas-wrapper .current_horizontal{overflow:hidden;clear:both}.weather-atlas-wrapper .current_horizontal .current_temp{float:left;width:50%}.weather-atlas-wrapper .current_horizontal .current_text_2{font-size:1em;float:left;text-align:left;padding-left:10%;width:40%}}.weather-atlas-wrapper .current_temp{text-align:center;margin-bottom:.5em}.weather-atlas-wrapper .current_temp .wi{font-size:3.5em}.weather-atlas-wrapper .current_temp .sunrise_sunset, .weather-atlas-wrapper .curre

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26516)
Category:	downloaded
Size (bytes):	26702
Entropy (8bit):	4.830125836352143
Encrypted:	false
SSDEEP:	192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP
MD5:	C55205BCE667F5D812354FD1353E7389
SHA1:	F22DE0AF271EBA636A022C873C94FBCD81B4C89A
SHA-256:	C55902832FB84522D02EA1A60A30747403A140D8651FA748F13BA398B0C0DF3A
SHA-512:	89A2E11075B7A7E64D8240CA062E3311F1FE69600C189EC8EE78EA0F78CA9DB374BB1E0692E9AEDAF8EE23BD58528BF6D0E20F977477DAFF073BE57EE8E81BBD
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arr

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	132713
Entropy (8bit):	7.9262295126101145
Encrypted:	false
SSDEEP:	3072:QwKjVKj+r9P+Qt/hbKVsC8CUmAItcHwffj79SCLe74LpdLbYj45+Y:FKjVKj+r9P+E/NKf8xItcHG9Ssi4LpVV
MD5:	7BA4A566AD1BD36CA59A0CC571CE9C47
SHA1:	6BA72F388FFF0F9FC61CE13FE46F9E36D2BFBF38
SHA-256:	3808955F22D7CE9D6C030CCD871B296BD76B83388B11DD983DD0FB5A5B649181
SHA-512:	99F63AC498EAD125700B5DCFB873B866E1BB3DADD228A5DD514963304FC19E642C3EB15DCD67A150E726C21F1B3ECC1F14A7A7ACCE23BAD22CDB5BC4C953EC96
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-mobile-05.jpg
Preview:	.... iExif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:06:10............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...7....Mu..=...a. ..%....;.,z./....c........... ..Dl.8G@l&..'..o....$nq.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	117816
Entropy (8bit):	7.918846187188612
Encrypted:	false
SSDEEP:	1536:PoyolsqTUp7r450zJs35Jf6lZB2yxFUDGEMNtROBKQ7jDQhDgAwMT1zYg0dCb3v3:gRVTURr4OJyO7M7pBDYhzT1zPZTYYf
MD5:	48704E96103956ADE741B0E8711CBBE0
SHA1:	A7ACC5C9E5D8236BB52F09613185D1303D0D3FFF
SHA-256:	00AF41689B7660494302DEAC740742CADD7C88E03956805069A35956636EF39A
SHA-512:	D2DCD41276A88DE29B8D288B7CEC1ADD621F4D2FFF8DC01A8443002A0E57145A0797068FEE0BE82E9BEFEE239D84C8A8EB49FFC94909A1A6B3C02834AA8797C5
Malicious:	false
Reputation:	low
Preview:	.....>Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:18:22..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..75..Y-Q-R..C\.HP4.E....,1i...@x+.e7...B.....pG.....sZ...R..`..<.F6..E....

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	329098
Entropy (8bit):	7.975102619164291
Encrypted:	false
SSDEEP:	6144:YaKtkjwwa+clHPZ9amlDG69QFw92sKVGXDCBHiaPYXa1kjLf42LBeRa:Akj6x9aIGXFwsszCJiaPOaYLfIa
MD5:	F0CC970C00C2FC965961ED38BF7C96A2
SHA1:	43D91CB3064D02A7E1F28A659323886868CF6FDE
SHA-256:	C5EBB5E532DB3B7A08A21AAB75FDC2E66C9307F27BFAC9253B7DAECA3BDAAFA2
SHA-512:	A49F5B4296D3758FAED1C6D73908EF6A76E083E19F4088935214BC522C23B209E11FD2EA79A3A7D4C8B774F1497D558B347E9F307E87A92F104AB5957B288050
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/02-hotel.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:54:02..............0231...................................................................r...........z.(................................-#.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..........Y..T...u.x-.N..>..`.>.j.....UC.&8..F..]..>....,.KD......O

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	447628
Entropy (8bit):	7.975788146370957
Encrypted:	false
SSDEEP:	12288:+dtS82l8PBYqXBOOt5eNuy8ht+t7/SqKFaIfV0QNmwj8K6iQj+v:QzQ8PP1tmueyvXlQj+v
MD5:	6A876FD6BD34D3B712695293F1C0B445
SHA1:	FDA8C9D15D0F7F4E08652A2E179F0E05E7157D5B
SHA-256:	0FD3DF66E7414473621F42369ACD6BC41732247F452F00E9F5ABCFD6924C12F0
SHA-512:	26904D7BFF638F847B10284AAF4F86CF6C153E84A640B72C364A3CABE9841992C6284BBBFC151071CE8D995C97B88B34DD35FEF14CE8DBCA8533494C411A3F06
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/16-hotel-desktop.jpg
Preview:	.....9Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:12:12..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.cQ.&.....=/..D.L.i.).U.L..C.;.,.......gLh=.\a^...R.g.K..x.=.vkmO.X...B\a^

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=683, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], baseline, precision 8, 1024x438, components 3
Category:	dropped
Size (bytes):	228733
Entropy (8bit):	7.960851077506538
Encrypted:	false
SSDEEP:	6144:kgB/RAaAmZS9VRvaYhXop3j2E/li6gx2ZonXtZR7wx:kvaAdSYJyj2E/pgx2ZoXtZREx
MD5:	6ECC115F4E2C6D29813FC58086AF800B
SHA1:	E9A0D170AF63A1B25EE00D5BE3EB3FACA0D2E271
SHA-256:	24B4A3DC63A9F3B8CBF1AE3DC163EA7EC7424E966675DEBCD9304AECB29F9389
SHA-512:	511FE79AFB092023146C384EB789666D1B470123C84911A8A6032DB83CB68F749AFEF775F34868CD9D00A0A03723D686C817A2E66B6520B62083CF7D17A84673
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....<Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:52:25..............0231..................................................................r...........z.(.........................................`.......`..........Adobe_CM......Adobe.d.................................................................................................................................................D...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....7..2.e.9M`...m...yk....T]....=k...%.s^..{=G..v.m

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	5.254183874530219
Encrypted:	false
SSDEEP:	6:tI9mc4slzSdB/U1EMRHSxehpFja4U3vcIAv6rdGom4CK38n:t4cB/KJUehpFeZfcOFCK38n
MD5:	B3DC7FBBA85CA406EE28FC895B95685D
SHA1:	EEDA1E11D722BA98C4E0C61AD936E457CDD2310E
SHA-256:	21282BECFB019EDE8D3265DBF82006D7D5BA82B372D1E9829BDFDAF071392AA2
SHA-512:	BBB329703973218DE972A2FB863FB60B8042237B5AA2886DD5CE6E26B332819D9D26ED36A0D44B226A9923B045DEEFDE065E366FA2C09928CD97A903126502FC
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_White/iconWhite_Checkbox_Selected.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.444" height="9.262" viewBox="0 0 12.444 9.262">. <path id="icon_Checkbox_Selected" d="M544.382,496.844l-4.444-4.444,1.253-1.253,3.191,3.182,6.747-6.747,1.253,1.262Z" transform="translate(-539.938 -487.582)" fill="#FFFFFF"/>.</svg>.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12844
Entropy (8bit):	4.521372327078642
Encrypted:	false
SSDEEP:	192:ouF7gzxVyRqGkpTZC/FtGQCpK2PKalIBL+vCCXl0yGihwzv6toJQRt2avxiipi8s:FwoBcleFtAn52CtR1K
MD5:	EF4986E3C4DEFC9057C53617556D2692
SHA1:	BA89B286684F5E94A1E05E1472DDFE87DCAE34D3
SHA-256:	F8A7709AC7DA2C15B72B9F40FEA9A353037719AD8803EFD157B49B6B8C9A6252
SHA-512:	6E0C61559A6EC42D286267B6E4B846C3D81EEDA87427A5C3F4061A65ED19883660513AAA463BB401D4E944438E80FF6D33F64FEE138E774B8050EB258544EEEC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/popupCustom.js?ver=1.6.5
Preview:	.function safex( e, t ) {. return typeof e === "undefined" ? t : e;.}..cmpopfly_AjaxRequestSent = false;..function cmpopfly_sendAjaxClickData( cmpopfly_ClicksCounter, AjaxRequestAsync ).{. jQuery( document ).ready( function ( $ ). {. if ( popup_custom_data.preview != true ). {. AjaxRequestAsync = typeof AjaxRequestAsync !== 'undefined' ? AjaxRequestAsync : true;. $.ajax( {. 'url': popup_custom_data.ajaxClickUrl,. 'type': 'post',. 'async': AjaxRequestAsync,. 'complete': cmpopfly_resetAjax,. 'data':. {. campaign_id: popup_custom_data.campaign_id,. banner_id: popup_custom_data.banner_id,. amount: cmpopfly_ClicksCounter,. }. } );.. if ( popup_custom_data.countingMethod != 'one' ). {. // all clicks. cmpopf

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:c:c
MD5:	45C48CCE2E2D7FBDEA1AFC51C7C6AD26
SHA1:	0ADE7C2CF97F75D009975F4D720D1FA6C19F4897
SHA-256:	19581E27DE7CED00FF1CE50B2047E7A567C76B1CBAEBABE5EF03F7C3017BB5B7
SHA-512:	0DC526D8C4FA04084F4B2A6433F4CD14664B93DF9FB8A9E00B77BA890B83704D24944C93CAA692B51085BB476F81852C27E793600F137AE3929018CD4C8F1A45
Malicious:	false
Reputation:	low
Preview:	9

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	262566
Entropy (8bit):	7.970357019687572
Encrypted:	false
SSDEEP:	3072:bPMow3uI5sEltAZA6NhtMiGXfrsKcv+E9/y1481INPG/8WKd5aNPKst7tHeiLCkl:bGg6ArNNGDcv+wySlNOELcVe2n0NSj8S
MD5:	A42BC64C3004F386F1D3836D46CE1735
SHA1:	291C6D83CA94E4BD49271D272F4F721E6EEA39FD
SHA-256:	E0258348EBE05B3D332C7805FB7AAB5D061DAC8893C243D1E2B713FDCC385633
SHA-512:	DD2DC81D1CF1E7F00FB8274AF8E4FBFC0EBC8049B808496A690E06C0D9571947F31C89B4B6AE4692782F742EE819088A0CE467B0BA376DEFD7DF942826EF9F2E
Malicious:	false
Reputation:	low
Preview:	....'.Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:12:10 18:22:34............0231...................................................................n...........v.(.....................~..........&[.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..H.y..#U=...c.........`..\.J...t....5ct?...N.gN..Sls..a.o.....n......y.-)...CC

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Public Key
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.913530521730719
Encrypted:	false
SSDEEP:	24576:EHCaZuRHHj2LKFmjE6dmf8kPDnMPBCliSVRJh2L:EtZuRHHj2drS8krO6NJo
MD5:	462D753B733B071EDEB75AB1940D460D
SHA1:	9A76BC2AE96FB2B421437A04529725CDA5D2DC96
SHA-256:	23289C608E13326716601C0A90D434A4867EB027C19193A181027E2FD27ADD41
SHA-512:	4A6A7BC63CA31DCA716D8B507F28C95215E13FE42382E8F3E18F133D1FDDFF0959D873C7C93B75F2B50F30195D583C9BF4F5607CEAF5BB04B71627BB7907933A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:7
Preview:	.4^..l.ql@{..b.f5......\.k....F..@YF...R......D1...F.....j./...7.zWvUS..........JP.f...%..g.Po...}..P.......P.....c..}.q..eD.-\|.:...$.LP.\|..`,U..Ap.-.....+.;..M....D.Y$........m.L.]....<...../..^..j...H"$Y...BW.;.^1.V.%.=h.U.d......\....d....jM.(....,.p..d.M.,~.aC...L.o...}..;.....].Pe...x....o...Z\|.^. ....)..@..HB..6h.9...k.It:.yQ0...Sj..0......?..-..o..5.S.z...Ed........"...=.....H..Q.4P........M..2m.im..W.?2..q}?N......\|....sC.S.o.7....y...t@.dV..e...\|YH.)..6e.s..]...@.0$.z....Kut.Oh...z.A...<...m.\|.}.....]85..Cx..Z[. .#...=AyJ...-...w.\hC...4......m.....&...a.....+....z.l.Z.Z.t..70......6IO.S...#p ..U.....Ya...L.!c..\|.K.soD.!..36..`]1%..FV.5..H+.. .y.U..Z&C.."vu.)}.+..f.hk...@..u..C(rm...+.c)...q.W..7...F..^..1.....^0.W.$~W%....Xn.o..r.Y.M#...j.?.].......j..c4K.E.`V.......TR.o=h....)..+....P.O=y.1.....Hu..+`.2..k.Z..N......mm..`..S.a..V..]uB.4<..hP.....I.s[\|.NU.>4g..#.......{G5R..X\|..2..-..l~.......0.P.1.U].g.$>...p{.g........m.`.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22644, version 1.0
Category:	downloaded
Size (bytes):	22644
Entropy (8bit):	7.989549178606116
Encrypted:	false
SSDEEP:	384:nveSGa+jvvoaVoUT5sHiH7bDpRJknWPXEPGxZP61HaHOORn:v7HI2q5sE7HpSyUGxZC1HkZ1
MD5:	C5BF51B68DC9FD7FE944D8947FE12518
SHA1:	A39CD33A2457D12A3EB61E0841C91B73E4AF90AC
SHA-256:	B86B128B0701A436D02AA06FB2027845A0E69E4BEBDD22012C1E0578508E34D1
SHA-512:	0BE8852D2FD733BBA3AA367147CE2CDC46F43A7156B63224F7E99C51B2F0E79DE45D461F0EFAE1FB608F4DC9D816ED0041ABB830F01ED8A5354AF379B7638C4E
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff2
Preview:	wOF2......Xt..........X..........................\|.....b.`..h.T..<.....H..I..t...D.6.$..d. ..t. ..I.!...m.q;..gW0.......602.l.........@e.i...g...#.E.....S.....V?.4o.p}hu..........-."....I..&.b.}.........5...J..;..F.$'/.?.\...W.80..7..&.3Ds._.Jm..-.".9.%F......G........2.0AQT....3.;;...7..7.(...Z.$..W._...>.]\.....j. `@O....W..Lf....U.j..h.Z......'.....<..`G...%............j..h.'[......,.%..8J.(..K...............N..VbqH.d....Z......y..3..}:.f......kn.V...`.G.X0...JI..A.T.TJq.._.......m.lBN.-.]...3.}....}...\&sg...*......T...?8..r.P.7`.R..!..O.`.(a..'.9..:...:.>....f....}..(?.@....=Q.Q0......]...+.$.VF.........R.\|w&...!z...~..d...Y.y.I.<..e.gi@Cy...9"..T..6.F.x.68.....`D4D.E.)r.=0.\....p+.^.x..u.g{_-.{.z. ./...[.......;]+.vNY......e....R.l..\|.W..l....&.q\.!..s..]dN.........mz.mcJ..v7v.-......O.0.....g...b..$..C.}H..).!E1\|"._.........r.t..E\../g...`.c.S @,....!G..vw.r.<.M......A..i~q.... ......#.cs.....y;..5...)lf..x3j....\....>...w.>.....x...

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	260
Entropy (8bit):	5.178591247208421
Encrypted:	false
SSDEEP:	6:tI9mc4slzPtNyMRQo0utfftenurdGoTJdWStD6z0n:t4Jt4Mo6VDRdWwv
MD5:	B2DEC44FF0A3B2B211AFF6867B81855A
SHA1:	40445B017E1078082060F9E93FA979FBBC6B1A4B
SHA-256:	C7D242E76B8C6D5813B140EB421A2890E9DFBA56B87BD36E6F8685A15460BE8A
SHA-512:	A32325A1C4516DD1B55F6A381DE9F9E2FC4780A056792319B9088008E1BB14021C2C601323FCE85E1DF0ACB12813A50AA31EF61366E4B57A4CC82C5793DDD523
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="8.486" height="4.242" viewBox="0 0 8.486 4.242">. <path id="icon_Dropdown" data-name="icon Dropdown" d="M507.646,508.643l-4.243,4.242-4.243-4.242Z" transform="translate(-499.16 -508.643)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9954)
Category:	downloaded
Size (bytes):	39350
Entropy (8bit):	5.4232063020939805
Encrypted:	false
SSDEEP:	768:SX/Xg/HZ04W/PL+Xn+u/lLUvz8mvbPRAS3mj7OvxfdxYigP99:gj4W/C3tlUHpAS3mjIV+igP99
MD5:	558DA07AFB00E68E6ADDA280BCDEE56A
SHA1:	51FA783F3D317C04EE863A804C92D7B0B1740297
SHA-256:	5EEB1A9121C366276BF71738C072D0BD988CF65E429DD7ECFC2BBF93EDC2CF0F
SHA-512:	ADC762D7906FD8770C7F3BAD07447EB14057EBE78CEAE6A7E401787B49403A10B19969FDABB966FC330F68ADD44D4B87F08B59972E1658FE369E29154B356C4A
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3ihVQ4/y6/l/en_US/6m6v2_nvObo.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ArtillerySegment",["invariant","performanceAbsoluteNow"],(function(a,b,c,d,e,f,g,h){var i,j=0;a=function(){function a(a){a\|\|h(0,1496),"category"in a&&"description"in a\|\|h(0,3138,JSON.stringify(a)),this.$1=!1,this.$2=babelHelpers["extends"]({},a,{id:(j++).toString(36)}),this.$3=[]}var b=a.prototype;b.getID=function(){return this.$2.id};b.begin=function(){this.$2.begin=(i\|\|(i=c("performanceAbsoluteNow")))();return this};b.end=function(){this.$2.end=(i\|\|(i=c("performanceAbsoluteNow")))();return this};b.appendChild=function(){var a=this;this.$1&&h(0,37302,this.$2.description);for(var b=arguments.length,c=new Array(b),d=0;d<b;d++)c[d]=arguments[d];c.forEach(function(b){a.$3.push(b.getID())});return this};b.setPosted=function(){this.$1=!0;return this};b.getPostData=function(){return babelHelpers["extends"]({},this.$2,{id:this.$2.id,children:this.$3.slice()})};return a}();g["default"]=a}),98);.__d("ArtillerySequence",["invariant"],(function(a,b,c,d,e,f,g,h){var i=0;a=f

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1981
Entropy (8bit):	5.157257989278539
Encrypted:	false
SSDEEP:	48:JYM73AFuBJZkuw07o5qzCQd+PiSV+PtNiqFux:qAku7LgiSV6tN1FK
MD5:	28D5913A16B2FB42419BD252E5761DF5
SHA1:	9CEC111771DCEAAFDFE386406922E4158A3D3952
SHA-256:	AF4A6357075818DB7379DCD61F05DE89A8F07F04812BA9DFEEE3323946C20F17
SHA-512:	8E96ADFBDFAE6C79B10EDAB0138397C3EA042F9F853982C92BC8516120DC30E52CB0C33AFE0CF803FAFBEB825DBF0C9B6B6B9C2A14839E2AE67CDAF955E7B357
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/session_modal_imgv4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="302.537" height="162.067" viewBox="0 0 302.537 162.067">. <g id="Grupo_12569" data-name="Grupo 12569" transform="translate(3.088 -0.23)">. <g id="Grupo_12567" data-name="Grupo 12567" transform="translate(0 -0.001)">. <circle id="Elipse_623" data-name="Elipse 623" cx="80.5" cy="80.5" r="80.5" transform="translate(124.306 0.23)" fill="#b4dfff"/>. <path id="Caminho_11376" data-name="Caminho 11376" d="M132.149,67.277a2.594,2.594,0,0,0-2.595,2.595,59.752,59.752,0,1,1-22.575-46.708H98.415a2.595,2.595,0,1,0,0,5.19h15.111a2.527,2.527,0,0,0,1.535-.237c.031-.014.054-.041.085-.056a2.513,2.513,0,0,0,.593-.394c.035-.035.046-.081.078-.117s.108-.065.149-.114a2.539,2.539,0,0,0,.285-.54c.019-.043.048-.08.066-.124a2.541,2.541,0,0,0,.229-1.439L113.949,9.764a2.595,2.595,0,1,0-5.119.851l1.414,8.489a64.865,64.865,0,1,0,24.5,50.768A2.594,2.594,0,0,0,132.149,67.277Z" transform="translate(134.975 10.876)" fill="#fff"/>. <g id="Grupo_12565" data-

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31340), with no line terminators
Category:	downloaded
Size (bytes):	31340
Entropy (8bit):	5.021016422651653
Encrypted:	false
SSDEEP:	384:HzsIVFUAahZZQVMCkSvygAAe2nt+2eMgKJtw3Sr6s3kjvCUw2iTXOGw8l3H:TsiFUAarZQmCkSrtgBSrd3kRNiTXOGH
MD5:	9F6CA734845D88AD621B30AAC3E56D9B
SHA1:	8A91131248C101CF0B5B531D072A5FDA47B0D212
SHA-256:	5083451FFDC328592C4E84C4A0184B4429C7CB551F72A06E05C7A032075DADCE
SHA-512:	FED756552B78EFA307DAD30B42026BD09449B3B2B9E41CBCB07E2218C9A8F9C0EF84B4322486D3BD8B3C1EC920920AF1F08AD252CAF9220059881C07FE4B8806
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/main_css.css?version=1.0.0.395
Preview:	html{overflow-y:overlay}body{font-family:roboto,sans-serif;max-width:100vw;min-height:320px}.contain-sides-padding-zero{padding-left:0;padding-right:0}.custom-card{flex-direction:row}.custom-card:hover{box-shadow:0 0 20px 0 rgba(0,0,0,.4);transition:all .3s ease-in-out}.contain-sides-padding{padding-left:1rem;padding-right:1rem}.contain{max-width:1084px}.card-alignment{padding-left:5px}.card-title-alignment{padding-left:0}#search-input{font-size:14px;min-width:500px;height:42px;border-radius:2px;border:solid 1px #8c99af;background-color:#fff;bottom:50px;padding:10px 13px;background-image:url(/icons/icon_Search.svg);background-repeat:no-repeat;background-position-x:right;background-position-y:center;background-origin:content-box}#search-input::-webkit-input-placeholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input:-moz-placeholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input::-moz-placeholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input:-ms-in

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	660663
Entropy (8bit):	7.982275726830167
Encrypted:	false
SSDEEP:	12288:7Et5KtLt1y+1ktz6ih3cPRAVNt2SWUOzv+O89mD2ewqHpqV1MiM+8gc:mcLtf24s3cPqnt2yOzs2wqH4MiM+8J
MD5:	303A3D4F8D2D30375454D86820C329C0
SHA1:	0C178B61CFC8EBEEDB581F00F37F6756A4D18AC5
SHA-256:	6AE9C46C6B7BEA36929DA3193D48188BF225CFB97D3F38C11D6C980AF4F30037
SHA-512:	070ADCE6828A188AC9E62A15DA76AF2C26DB483F66375345E2518298DBDA2D977D7F866ACF8E0E52ECE1C652D38303BE57147FFF6017E80750221EB64E8B17BA
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2023/01/00hotel.jpg
Preview:	.... .Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.1 (Macintosh).2023:01:09 17:26:46..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?../.9X..V..$.. .h/.......f..............sG.....0..Z..u..;g..d3........\?

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	downloaded
Size (bytes):	44342
Entropy (8bit):	5.0793850768725
Encrypted:	false
SSDEEP:	768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV
MD5:	F416F9031FEF25AE25BA9756E3EB6978
SHA1:	E2A600E433DF72B4CFDE93D7880E3114917A3CBE
SHA-256:	A53C43F834B32309B084EA9314DF8307E9C78CEE2202C6E07F216AE4AE5B704D
SHA-512:	6CFB3B01EEA956F84E4A221CC940A547BFEAD8E02C462A2FC38BC0917FB325BC374A101E7AA7B3AB9D11208708511ABB39ADB4AD6DA7DAAF9FC9704D714F65AF
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({fil

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	442402
Entropy (8bit):	7.975728476722917
Encrypted:	false
SSDEEP:	12288:R2uLKVBPax9OD5GFUNZkk8zvhGHcTAFOOlEzdasZE9Mk:R2u0Q9ODMFUV8zpGKAFfOzdasZE9Mk
MD5:	4528B1CCE2AC5EC488721849E873A95D
SHA1:	AECB07B2251A09CA273313CEFFC0289C3548C476
SHA-256:	0B9F05F5E5206136A12CA230D975F9FBC87C6E73192AB8FBB7B3B6F3414A0B60
SHA-512:	BC61FBCC004AD83E8673D0CEB45E00AC1FD2137FD20F5A48327F49D263946B2AF550B66058BFABE8CA484D2417AA8721E56922335F429B2F033E1A51EEC4C704
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/18-hotel-desktop.jpg
Preview:	....!zExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:14:30..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....c..Z...w.p..~.{Z..=..........Cn...._.^.u....+..^..m..z...t..t..#k..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/js/vendor/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	598
Entropy (8bit):	5.021497281708026
Encrypted:	false
SSDEEP:	6:tI9mc4slzRlfv4ZF+2/hY+wrSdGo5wnULCitIVqYvdGoHVbj9urZGLCiAfJvdGox:t4Ffv4ZFn/hYXjn97bjAd7OjAd3tjABI
MD5:	7D3B9A6708A1142D44D8C61646B57F69
SHA1:	8397EA4FF9038A47BEDDA4E3763C6E828B587C01
SHA-256:	D26AEBFF5898029F7DA8BDF3F2FC6AB46C8B8173945DAA3C23B5D51E80FBF105
SHA-512:	9275728235E576EAAA8773F50F9CA83C81BD3412BCE586F786927DA2DE602332D8609FE45DFF3884E69F07CB5BBA418E0A687CF1710DF4C84268214870E3A847
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/hamburger_menu_desktop_icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="22" height="17" viewBox="0 0 22 17">. <g id="Group_15367" data-name="Group 15367" transform="translate(-1263.5 -177)">. <line id="Line_2591" data-name="Line 2591" x2="22" transform="translate(1263.5 177.5)" fill="none" stroke="#454950" stroke-width="1"/>. <line id="Line_2592" data-name="Line 2592" x2="22" transform="translate(1263.5 185.5)" fill="none" stroke="#454950" stroke-width="1"/>. <line id="Line_2593" data-name="Line 2593" x2="22" transform="translate(1263.5 193.5)" fill="none" stroke="#454950" stroke-width="1"/>. </g>.</svg>.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	156123
Entropy (8bit):	7.941959228872969
Encrypted:	false
SSDEEP:	3072:xSSXN7dSSXN7X5eiQy152NH6rZTIG303+4aZ50Xrpr6kYzL1CNBvMtZsGHB/1:xSeZdSeZX6y14Q/sTaZ50Xr5YiUXFB/1
MD5:	05337AADA723147F42F0CC741838D5C4
SHA1:	A73B457464BF9C5E50A5FDE7131845865CB78B5C
SHA-256:	23625426E547C886B7B2B439056CCBB87A14643A2B56B14CD63146B2077B9BCB
SHA-512:	0E0F42A110F089D96F13E5B852F02F09F0A63E3CD2E786E6EDABB1BD7F82EE9A58AAE8F446327E329B71BFB2B0BD338ABAC94D97E0CC903973CEF11286EA7E51
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/010.jpg
Preview:	....%.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:23:48..............0231...................................................................r...........z.(................................$m.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....Q..,...Lw.ED.b.c.;..........?x}..K..d......o.....K..o..2G.].=.~..]....u

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	177868
Entropy (8bit):	5.517140298677686
Encrypted:	false
SSDEEP:	3072:Ac0Iard8OdOKbS8vqCIqjysCBGJ+dQWqzGmRmd4xKkqxN:Ab8OdOq9Z13AdQWqzGaIv
MD5:	C49E77205CF5046A93EB78048BF7F11C
SHA1:	CF9C43928A8F3E0847068F248CC2DCECF0DCC7CA
SHA-256:	C74EC00AC4EC64F23190A146DB506DBFD0DC1B7D5B74AE889D79117BD78ACC32
SHA-512:	F9B7897BD9B30A205D29AE7522D8C23E894892E7069B87946C1719890000E6959918ECD78FD5D4334E0E611496941B7DB7959D7CB5E7B7203C416FA72D0B1804
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PW6X872K
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	42983
Entropy (8bit):	4.733482350907397
Encrypted:	false
SSDEEP:	384:TxzjtwGGs5YQWS+ngXFlkjXEFOcQmxm3DO3p3z8CIopbubAi4OUlLqozr+XDhYnc:9t+BDcpz88pbuM+Uo0r+XUd1YTeb2CQL
MD5:	014BA724C65A9FF3BF51B758485D7845
SHA1:	E032954D30D873A8B6412180A2C719B8A0D9EFE2
SHA-256:	F05C2BD6214E254B6D09726E7441413C5E4756CB029F1E685D9219B5374860EE
SHA-512:	E9F06011A0A32AEAE2F7529BBB1E13483125B3C5BD2E77684ED46837D02348A3EBB1192C934DF9FB15DDE7179A00205B1311AFD46F9B8DE5C323F39031AC8261
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0
Preview:	/* -----------------------------------------------./* Author : Vincent Garreau - vincentgarreau.com./* MIT license: http://opensource.org/licenses/MIT./* Demo / Generator : vincentgarreau.com/particles.js./* GitHub : github.com/VincentGarreau/particles.js./* How to use? : Check the GitHub README./* v2.0.0./* ----------------------------------------------- /..var pJS = function(tag_id, params){.. var canvas_el = document.querySelector('#'+tag_id+' > .particles-js-canvas-el');.. / particles.js variables with default values */. this.pJS = {. canvas: {. el: canvas_el,. w: canvas_el.offsetWidth,. h: canvas_el.offsetHeight. },. particles: {. number: {. value: 400,. density: {. enable: true,. value_area: 800. }. },. color: {. value: '#fff'. },. shape: {. type: 'circle',. stroke: {. width: 0,. color: '#ff0000'. },. polygon: {. nb_sides: 5.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1095x942, components 3
Category:	downloaded
Size (bytes):	174543
Entropy (8bit):	7.945308067299438
Encrypted:	false
SSDEEP:	3072:qFVt7g7R+FvYAsy1iowbFxy2E7JdvIKilGH8vb5MKzABItyasT:qJ7u0VRPH2EFdvIRlGHOmKEqUJT
MD5:	DA1C94A5EAE9A73E483EB8107039887E
SHA1:	FF182CE4A435863B102318486681ACA6C897678D
SHA-256:	2566A03B8F6070C336318D6B14478FB0E8005F7B5444C37E913A10820A31ACCA
SHA-512:	D375FF8235DB712FCA060D45548F012794AB3F35ED49AE2D6BA25AE5B3F7B93B4ED5C8C817C9ED48AFF81F4F23CBEE340449FBB5638D5CB264462C4C46B2C265
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvbdgxpl9ga6k.jpeg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........G.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..PDL..G'.@J...a..9.h..O..g...@.d..q..k._]s.../&.P..#.v.k.p.+..>.)'%.G?/\|S.v.....}.E.......$...'p.>. ..#".F0._zF;.......b7FV.....>.<).Dw.f'.......##.J.~`X...g....U:.@....!........g.v..J..1.s.....gT.#...X...(...9....IU-...GQ..$2.$...@..,XFB.1.;....n'o=9.j'....[',OJ.Tn.YA.....d."..\|..:zR..Y..x.~.I![<..{z..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64350)
Category:	downloaded
Size (bytes):	223769
Entropy (8bit):	5.454702923749521
Encrypted:	false
SSDEEP:	3072:FBLy8WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:FBLylWBU7O0bvQQGArHu5GKnG
MD5:	A824535D31BCC4EB97DC848DA7041DC3
SHA1:	3E6A75228EC07778D7074DB47F5E1D3DE325230D
SHA-256:	344F29333845C92FB58D6D954F8EFFC2BE692F1854705644495F7AE165A1B6F1
SHA-512:	F2F590DB16F412A4952EF0E33111597B41E2785C99E7C698929AB802E4B43D2F2AF377092EF875DCA53EBD9A9EDA49E93C4ECDE55BC67CB9E7B662D08A878E1C
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js?v=next
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7279)
Category:	downloaded
Size (bytes):	48676
Entropy (8bit):	5.502591652438258
Encrypted:	false
SSDEEP:	768:RDm5JQ+qBqMF8+AbWQXkQHh8Ru2htJpVMXN3aiVWX1KB/CmFnH5TtOLw7kwTB:pLW+AbWWst4h/C+OGl
MD5:	C4F1D647475724E392276CAD8E73199B
SHA1:	E5778DA456AB3C1B0F293927AA4C012DF54A4344
SHA-256:	4D5CB09E8C786DC180E9430E0665CCCBB5FDEB2C3B965DAB0B202F029D5E3262
SHA-512:	16591355A9C0E9FB56601F907AE5587CAA33FF81BA41402E73CE425357AF4923A088B7AEA13457F77DFE876D98A5AA738AE6D9EE0866109CD970D99565602944
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/y3/r/Rn_Qb5J-qbY.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BanzaiAdapter",["cr:5866"],(function(a,b,c,d,e,f,g){g["default"]=b("cr:5866")}),98);.__d("BanzaiConsts",[],(function(a,b,c,d,e,f){a={SEND:"Banzai:SEND",OK:"Banzai:OK",ERROR:"Banzai:ERROR",SHUTDOWN:"Banzai:SHUTDOWN",BASIC:"basic",VITAL:"vital",BASIC_WAIT:6e4,BASIC_WAIT_COMET:2e3,VITAL_WAIT:1e3,BATCH_SIZE_LIMIT:64e3,EXPIRY:864e5,BATCH_TIMEOUT:1e4,LAST_STORAGE_FLUSH:"banzai:last_storage_flush",STORAGE_FLUSH_INTERVAL:12606e4,POST_READY:0,POST_INFLIGHT:1,POST_SENT:2};b=a;f["default"]=b}),66);.__d("CurrentUser",["Cookie","CurrentUserInitialData"],(function(a,b,c,d,e,f){var g,h={getID:function(){return(g\|\|(g=b("CurrentUserInitialData"))).USER_ID},getAccountID:function(){return(g\|\|(g=b("CurrentUserInitialData"))).ACCOUNT_ID},getPossiblyNonFacebookUserID:function(){var a;return(a=(g\|\|(g=b("CurrentUserInitialData"))).NON_FACEBOOK_USER_ID)!=null?a:this.getID()},getEIMU:function(){var a;return(a=(g\|\|(g=b("CurrentUserInitialData"))).IG_USER_EIMU)!=null?a:"0"},getEmployeeWo

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	464657
Entropy (8bit):	7.976625939916992
Encrypted:	false
SSDEEP:	12288:U6YOZgkqOpPWaE/fK/rX2zNAx71MimoXQEP:U6zgDOpPWaEHKoNi76/eQEP
MD5:	5F90256852553F1B1361959826286600
SHA1:	98A8D22DA5398470E489F574D445D978979139B9
SHA-256:	79D80BB8B461AC579A7B017B571E205E67058AAC76E0BD2C080621F532D8A7B7
SHA-512:	622D210F9837D247C69E67D4791169CA30246BF1ADCF3DCEDAE50B8C95508615C99AB865EB52A24992567F5FBA62C46931BCED02DB4D6DCD8AF389EC2768DAB3
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/13-hotel-desktop.jpg
Preview:	.....eExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:09:20..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.?..Qv........&O...]....:..........qq;X.H..)Z8K......rD#zw.!.N.t..z.F.....

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6566
Entropy (8bit):	7.853810596837481
Encrypted:	false
SSDEEP:	192:5GUJiu/j3YyY+6qcsays5aapEdAOEVaw0I:iCj3YV2csaT5AdWcLI
MD5:	252DF7050897BEBADF23C6A8A7AE2D03
SHA1:	6D1D5EDEA1A725D896D76D2C387D82FF9692009C
SHA-256:	0B69546A74BB0637DC1321D9E22780ADF931049CDF1FA8EE2998E2FC5161E3F0
SHA-512:	E60F1E39F095CEA2F7EB7F69F0BDEC3297F715B4BD09F8597A8B9E699F01C8746886BE5F4E0503CB547E87492D79677E45740C606E06825554369FC6CE0C51A2
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx...{...}/.ow..9:{.Z..Y..b..2!..)".....(.S2...I..../....$E\....!...L....e.0..0...W.6...K+$.....t.~....eu..Z...T..vN.t.....t....y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..^...9.u...d.".....Z.u.u.Q..{..Gs9.N...a..r9.kw.u......^..y..v.ik.?n.0.....BD...QJu..yF2sFk},.."r.1fG.?".s.R..1...E.yc..S.[.P.......i...Z.....8...c~.`K.Px......vj.g..UJ...0.~f~..v.R...B.C...;.1..(:=....t..".3.vc.Vk......9..c.T.p. .(.J=.l."Z..d.T4q...1..a.....Z..x.{..g.}4.N....Sk.V).>!n...=..7[..w.YS`9.Rk..\|.E7....3..... .`..\|...=...J\|N&...@$"...BD.. .[..6..^....@;.=...7.o...:..:..)J........7W.7..w.:...2.\...!.....^L.....V.8..."r.1f_....q.u..\).E......z.@..8.T..vY....3D.U.....q.uK..9w..,.Z_b.i.@D.8...R.{.R+D$GD...zBD.a.r..Z..R..s.~CD.".q...q..d25._.T...T._.mk.>....Ap-..S...fo.1s.3....0.1........'N^....)f&":k..8.........[X/..6*......f..[.(."......T.,3......Yk..^w......".DD5..RI;..L.Kf...ZI+.....

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38857)
Category:	downloaded
Size (bytes):	38908
Entropy (8bit):	5.440617425961151
Encrypted:	false
SSDEEP:	768:OilDVRaMvFKIHo1PQVZQ0+NMwDnObIXpk2k2J6QQKx58iT:OilBxv8NUZQ0twDniMaX20Kr5
MD5:	788D96C685D5706F88DCB19799FC9A4D
SHA1:	DA7814A7EF3959B522B2DE83A7FA99D030635353
SHA-256:	D542E7D505F9DB9B651FB600968D69C4E6D8E16F583A67007F94D25980FB683A
SHA-512:	8361D4F4C3C7A433E9400522D528583FF6F8C94A7CE5E9006EFB4DB7F10B1BA205EF0F558960149D076AB4962824B13137D284EC41DF271A3BC61C340CC82427
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/js/vendor/fotorama.js
Preview:	/!. Fotorama 4.6.4 \| http://fotorama.io/license/./fotoramaVersion="4.6.4",function(a,b,c,d,e){"use strict";function f(a){var b="bez_"+d.makeArray(arguments).join("_").replace(".","p");if("function"!=typeof d.easing[b]){var c=function(a,b){var c=[null,null],d=[null,null],e=[null,null],f=function(f,g){return e[g]=3a[g],d[g]=3(b[g]-a[g])-e[g],c[g]=1-e[g]-d[g],f(e[g]+f(d[g]+fc[g]))},g=function(a){return e[0]+a(2d[0]+3c[0]a)},h=function(a){for(var b,c=a,d=0;++d<14&&(b=f(c,0)-a,!(Math.abs(b)<.001));)c-=b/g(c);return c};return function(a){return f(h(a),1)}};d.easing[b]=function(b,d,e,f,g){return f*c([a[0],a[1]],[a[2],a[3]])(d/g)+e}}return b}function g(){}function h(a,b,c){return Math.max(isNaN(b)?-1/0:b,Math.min(isNaN(c)?1/0:c,a))}function i(a){return a.match(/ma/)&&a.match(/-?\d+(?!d)/g)[a.match(/3d/)?12:4]}function j(a){return Ic?+i(a.css("transform")):+a.css("left").replace("px","")}function k(a){var b={};return Ic?b.transform="translate3d("+a+"px,0,0)":b.left=a,b}function l(a)

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.913024919675167
Encrypted:	false
SSDEEP:	24576:meAdqIO6/sC0G/VyFS5/NvhKgOgGMHCXD4iEak+q2U:m/dqIFT4FIdODXMiEHV2U
MD5:	BA1EA8180ED05A8CC8979171070F4D4E
SHA1:	1CB75A1B368628A0D9169614E2C38C51E272AE61
SHA-256:	3BD8E5E3E53B311671B24F94471AA7F594B9E0043A75EC28533A4CB41433598A
SHA-512:	F4E74B7DE2C9C8FDDD7094375BD5724627F260A673FED001216B2D20BEED7BC5F2EDDA0D8203D2D80995B6F05A646AE9F4E72C66DB61465BA2EECFC3856D87AA
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:c
Preview:	..F.e.c.HKhb..TG.......(V...d...S.(..l. .......2..a.R.F...;+t.?..c\|..0#..e{. ..k..\|..d..e:...;<..45<.F.<4.a.n~..R1N.................../7y......Z..%.>.<....B.o....S.c.T\1X..k.. ....e.C.8. ^.h...$1.M.9.2Q.......X%.3..s"K.(.2.^.b..$.%....Do ....he...A.....A'"........U.S.....q..?Q..h.l.\|.D.$...b......1...c,.e#.zv.,s.1I..5.6....P......W....^.`A...$.0.W...q.t.<.5.:.Y.D8.h..b.Qx.=..t').......{....qB..................q..j.f....j...........{.5.t.h..+f.=7.H...gU.g.X.E....)}.Q...$X..6.v...P$K~......2....'.TX...o.1u_..U..J..M-w.{3(..().._.9.8.\_V..~...Q`.`5.S;..%....E.6?..S..J6{....W.B......u.a.&.[aI.z3.-.A.?G...........w...&....Q....PL.x...Ct.........<...6....2R...bL...xYK.t..-.....w...$./._.sT....z.{!........Ax&...o^..S!Z..}....;o.z....G9.e...,..f...%......)..U.v.~.j.......2.:..p..{..>..p%r>....A,.9.h..V1.?.\|k\|..1.Y.....k...z.V..Z,:.R.(.h.\..+K".S.../P.o.p.....z.....6.\hA..y.G.f....n.(...U.*8.p~.!2,W...E7u....UF.....?:.~.!....C..9:.......3..S...r&@u...y.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9129497818444685
Encrypted:	false
SSDEEP:	24576:PRFtP8oJzU4q7K5dFqn2GDrXLQapd2xbWD4ybJl/R0TDEA6z:ZL8o24w22rMaD2nGlOEA6z
MD5:	0B4FE8B75FD3BCB00758743A3653142D
SHA1:	2B3C30BFDA30E5C83D0869871F22F40481AC5586
SHA-256:	CF039D07B9D4FD631707E3219F59F5FB1C87EB57E63CE0B38E16A318F48AF497
SHA-512:	9B88FEB9F842688BC23BE26BDBF9E9E80956CC01DCA4696DADE20A9433142E00BB5B7EBC41EF02E7F33573449788A861154D588C7E17E4B6E2C544EDD7EEF654
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:1
Preview:	N/P....'..Ik....!.<Tu..(......M........0%....r.=g.8....G;&.M .Z.5..4..d...f..?_rs.5[R}...J.`.{Z9.~..U...r.7.1.p./.3..ab....o...I>...T.^b..D....[4...o/.t..8.f.<.0,...Nu.)>........d......[hu...m.D.....Z.8...r,.<.M....Z......^...V.X..4Y#......9#.d.].v..L...J.-{.....?+ D.nC..W....S....C`..p2W.<b..$......9....(..k3.=...........d...........[d=..1......6Q.c6P1U..E.....N..Q./Hh..hW.kFS..{Q.]..?u...K$.l..w..~.A<...I.&...d.3..d.J.F1.l..k.H..f.bl..#..../..Y..^dV....Y..y..B.#..O\|..G.r~.f...(..&...s.`.)......O...i..6(.>q.g...I.?rx"...6...J..XJqbo....e.._/..$.O..^qSJ.o...PH.x.,fP...R.\6...=...A=0.:..6.n..3b...N.DGF..=a>.v+.~:....../t..D.v.Iu^#M_....Tn.s.6w.j .K..).P./u...\|\._..d..#->....?.q_{.g...t/.f.OE!.... .....b...o..5%...).VP...h.....kR.n..\|PF. ]............r."...D..v.m..j.@=..+....A...%./q....j..+..bb.n..E.`...."^..=...0..........u.iz\|VL.?..-C....K..d.*x.$5.g..F.Ev)[w...>:....s.R\i.?.,K..{../.J.=......n.:....pq...w.&.e\|M8,M!r.m. T5..LA

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	69483
Entropy (8bit):	7.834572481234115
Encrypted:	false
SSDEEP:	1536:N+Kuqb+Kuq03q3hT2BGwjlPabzfWbocjvXIT0vhztdL53ft:N3UH5PafWbo6XIol53l
MD5:	4BE07C245906648DB52A2C499C15D5D2
SHA1:	0B0C7045581958A4F69A1E1F8EBE63F5EA008222
SHA-256:	639E45BE847AB25650621460C1705603E032C0864237C003138439E81F7295F9
SHA-512:	AD1C7EAC613BDAFFFB101AD213DC3C2B250FB15E0EFF4032181E382C15EDFABBC6197322A2E26AE6B4E661A49A165947C917B616D6FCDDA65E23DD1079CC65A5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/005.jpg
Preview:	.....BExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:20:55..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..!(R.M..y.c.1.)..&.B@)BI+.hJ..(AV..xR...$[.O.PS.H. '..$.X.O.)BxI..jJP.J....

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17562
Entropy (8bit):	7.962009561450934
Encrypted:	false
SSDEEP:	384:mYKXDczJlniHRwGq6ByXwUkUvBkii7uLYx7riqBTu8EfAx11N:mYzJlnWRhq1wUNTiT6qBKV0
MD5:	F45BB3D7E651BDB60E5E5ED8EF676570
SHA1:	F10884D86D41AD36B06EBDA134060FA5D82E12E1
SHA-256:	BD9E1E83DFCC546925AF157537514F071D9EED94A9F7CC3821731A285734D832
SHA-512:	3124DDD455573685EBE03CB564CC1713446AD3D453692E7447011065177AB89D780DE0204FF4112E532BA1121D0CF33EA404A6BC9CDA7DD6A02431B910083C90
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/06/logo-v1.png
Preview:	.PNG........IHDR...T...d...........tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:38e51f48-9204-4409-9f50-d4a83e713118" xmpMM:DocumentID="xmp.did:9C7C2FAFD05811EBAB02E410F8663D99" xmpMM:InstanceID="xmp.iid:9C7C2FAED05811EBAB02E410F8663D99" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:692a4367-163b-374d-8f1b-df74522b83b1" stRef:documentID="adobe:docid:photoshop:8e0371fd-613c-dc43-81d6-e665ff8e925d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+.....@.IDATx......

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	587
Entropy (8bit):	4.770379522420475
Encrypted:	false
SSDEEP:	12:FRzhwwmEhwwFf0U3n4rR0y4lnY14bcKJVaKR:7h7Ph7FtoFC+4YcVaKR
MD5:	74EF44AE2EDB68D989B2BEC4D4F2310F
SHA1:	A9F7DE2F2957ABCF0A8F8DBD612D87846AF4CD4A
SHA-256:	D1870C49E74ADFA2D70351CC067C6A3320DA45D18231C5A31EB39356151620CB
SHA-512:	ADA0CED00482F796F476688384E94DF5256C06B95E04239C4BB81B09AC9E545DC0D184038A248F18112E19417838E90EBE07BFFDB7DFAC7A0D4FFA64F2C7061C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3
Preview:	.entry-content .addthis_button,.entry-content .addthis_toolbox,.entry-header .addthis_button,.entry-header .addthis_toolbox{margin:10px 0 10px 0}.addthis_button_tweet{min-width:83px;float:left}.atwidget iframe{max-width:none}a.at-share-btn,a.at-share-btn:hover,div.addthis_native_toolbox a,div.addthis_native_toolbox a:hover,div.addthis_tool a,div.addthis_tool a:hover,div.addthis_toolbox a,div.addthis_toolbox a:hover{border:0;box-shadow:none;-webkit-box-shadow:none}div.addthis_toolbox br{display:none}./# sourceMappingURL=../../frontend/build/addthis_wordpress_public.min.css.map /.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	507
Entropy (8bit):	5.048959060920506
Encrypted:	false
SSDEEP:	12:t4p3cf9cYDjuLctkmZqWIQ4N8INRLAjSTDELd7IqHcO:t4p3cFnDjuLctkRWtYkjSXid7/HcO
MD5:	40C24CE47948A4E78907AB50408D9626
SHA1:	914FC03BDE38A528544EBA33A7A4A873936BF562
SHA-256:	49C99A4D5051A5CB7B275D6D5BC0CCAD529BC43BD7D0BD8E87C81286E7025C53
SHA-512:	6776398770EF263B00994E3BE7CD04633A324715F7A879763EF69E903A3A3653B7B0D7297FDD0A3E96D8B490DDC53CAAE6026E67B2089CA47893F80A144AA05F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="17.086" height="17.648" viewBox="0 0 17.086 17.648">. <path id="Union_12" data-name="Union 12" d="M14.125,16.648V16.4a6.088,6.088,0,0,0-12.176,0v.25H0L0,16.4a8.034,8.034,0,0,1,16.067,0l0,.253ZM4.071,3.969A3.969,3.969,0,1,1,8.04,7.938,3.974,3.974,0,0,1,4.071,3.969Zm1.694,0A2.275,2.275,0,1,0,8.092,1.695H8.04A2.278,2.278,0,0,0,5.765,3.97Z" transform="translate(0.505 0.5)" fill="#454950" stroke="rgba(0,0,0,0)" stroke-miterlimit="10" stroke-width="1"/>.</svg>.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
Category:	downloaded
Size (bytes):	48336
Entropy (8bit):	7.995815173088384
Encrypted:	true
SSDEEP:	768:aHPbHlNlYMCZibwJi/6WwetfISUeR/nQipVg2Ddz9fZIMiktaFm5x4KSz0h1wO:0DyMYibQi1fI7exQvW9RIMTim56KSz0z
MD5:	BFE7AD4AA54CFF8909B2D7632073CC30
SHA1:	7C2E625BEA4D449CA78CDE09AB59DC6C9CB4726F
SHA-256:	47D477915FA5912616E2DC5DF8C5780F9202671678CF275472BD39F3381C0098
SHA-512:	B083C9E0766F281A39F582404F08B3D3314C7757AC151C4CB00BD3CECEB4FA06B12D08D881A2C6BF80A066ECAD22FECE7CFF41269D2DBD2BFE38D873922A31FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2...................S..........................g...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[3mq..c..5.Hu..ev.5.c.L6e....<.>U..#0l..h.........F.m........."...,V...\.i....;zG-....%..Nt.j....l..m.p.`=....%...}^B).I.Q..qt.l..l...i.......9~....P.".tj.._?.P.j...B.r...'...Zh...}......M].+......k].!..E<.{.........."........m...$C.."_i.>.i@.=.#......s...........%...;."...U.....n,...DO.W.n..85.._.Bj9..nN.T.xl.U".Xq^...y.......<.2'.... .`...WCT.W........?{wI.!.B..C..B.$..Zh..0/ b.....P.(X..?..._Pi.4;`y....gi.j.Zu=.8......>...{U..K..X.P.hN......=.....C..,............f.eE.l...e.Y...K.Xf.u.%f...k...+"V.Y"W.bD.........~.[.~QL.z2.......V.Bd..j.D...]...X.5d........){....G~Q.x....{.{.=\.5.h...DB...H]V'.....<...sD....=D(.......^.&M.2....M(iH.8<........p\d.Wo.....@..A....U..M..K...z".%....n...k.T/a..d(..5s1..P..K..i.]l..+.......ZK7H\D.N...].kL.......^.^...K)(r.J.W..L2Y...?..`.......&.%....{?T.:P9.\%..E*....H....`....r....Q.....Rw....T..}....M

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	2050
Entropy (8bit):	5.075846041566119
Encrypted:	false
SSDEEP:	48:oTxCa9hc8StDWeSGNe0LIjglLxZwWlTFyLwWC62i/Av:olCa9hcJtDWbGNlKglLbw4ALwLj
MD5:	64CDC239386C4CA7B6679655F592EF51
SHA1:	748EF9D7E643D62267D02969C0CCDFAAF741AAC3
SHA-256:	91C9A7E0DF97BED11B77D8A354F40E17EF46059F8322FA131C0B6ABB6D3BB413
SHA-512:	7F02B9E0215E9AC1D0D0B8E6C8CBD12177E3DDE7A7CB78050C6F208F556F511157AD08D761C0A039C99D71EFB268E550817AC6144F65CDE801FE6E211CEED7A2
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/myreservation.js?version=1.0.0.395
Preview:	var q=$(".login-btn").attr('data-hotelid');var c=$("#chain_home").attr("data-chain");var languageId=$("#lang_curr").attr("data-lang");var currencyId=$("#lang_curr").attr("data-curr");var chainOrHotel='';var qRegister='';var status=$("#login").attr("data-status");var client_id=$("#second_div").attr("data-client-id");var authority=$("#second_div").attr("data-authority");if(q!=0){chainOrHotel='hotel';qRegister=' acr_property_uid:'+q;}.else{chainOrHotel='chain';}.var settings={authority:authority,client_id:client_id,response_type:'id_token token',scope:'openid be.api.public',popup_redirect_uri:'https://'+window.location.host+'/signin',popup_post_logout_redirect_uri:'https://'+window.location.host+'/signout',silent_redirect_uri:'https://'+window.location.host+'/silentredirect',filterProtocolClaims:true,loadUserInfo:true};var mgr=new Oidc.UserManager(settings);function iframeSignin(){mgr.signinSilent({acr_values:'acr_currency_uid:'+currencyId+' acr_ob_client_uid:'+c+qRegister+' acr_languageI

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2624)
Category:	downloaded
Size (bytes):	58602
Entropy (8bit):	5.2658932840775465
Encrypted:	false
SSDEEP:	768:IazUYJUYBmCVSl+QCaMPdCaM55aM95aMe5aMj+C6xDtA1Wu4FzJGpfJPW1rcXDam:IwuZzcijTjejiCPnPHKlRX93ghFB5
MD5:	345E7ECCF6790E885346C933389209B3
SHA1:	0F8CD9009E1187B99DEF3D7E1197E3DD984E7C16
SHA-256:	8FB148F6DADB142CC5DA7ED8671B29961A261D519BB3EB9D83944199110B475A
SHA-512:	FAB8951DA1F02917B41E148867FD4F4FA5332EC55907E9C686ECDDD93FB8987670D325E6B3416A5E54A6B6E375CDC784E410CEB166C07B1389B351C616072207
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/main.js?version=1.0.0.395
Preview:	function getUrlParam(param){var sPageURL=window.location.search.substring(1);var sURLVariables=sPageURL.split('&');var sParameterName;for(var i=0;i<sURLVariables.length;i++){sParameterName=sURLVariables[i].split('=');if(sParameterName[0]===param){return sParameterName[1]===undefined?null:decodeURIComponent(sParameterName[1]);}}}.$(document).ready(function(){let label=$('.rates-header-title.room-qty');let button=$('.rate_plan[data-has-loyalty="true"] .button-div');label.width(button.width());$(window).on('resize',function(){let label=$('.rates-header-title.room-qty');let button=$('.rate_plan[data-has-loyalty="true"] .button-div');label.width(button.width());});});$(document).ready(repositionTooltips());function repositionTooltips(){let priceElement=$('.price-step2');priceElement.each(function(){let price=$(this);let priceTooltip=price.next();let priceTooltipText=priceTooltip.find('.t-tip__text').let distanceFromPriceElementToBottom=price.offset().top+price.outerHeight();priceTooltip.css

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4066
Entropy (8bit):	7.426439070040903
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAIBF81hFzgHbuTVHPRHo9kh+yy2GtU/ch5AbyUYah0xJVdpS9y:WSeknwzAIEzg7uTVvROkg2GtjAx0xJbF
MD5:	B48D5ECE005B94CF60AD1DBD412E6F59
SHA1:	998CC36D2C82ED3AC1F81E2C81BB7BE8E1453E2E
SHA-256:	134F7FF4475C0D987F11BF36B6045EC0EF65BE3B6717D630FDB5FCADFAA164D5
SHA-512:	D096D45B8208E13A005D3AEF74502685A62C7E106C4EF6B4402B95CBDF387E3E7F3029BA3738935E214F895FA146F60536EBF02D926137CFB25B658BAFEF3961
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/spotify.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:26:35-03:00" xmp:MetadataDate="2021-08-11T18:26:35-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:d592199f-d8cb-8a40-b7f2-ef4ef4be1a19" xmpMM:DocumentID="adobe:docid:photoshop:a72c2804-490c-b84d-9981-346478e113d0" xmpMM:Origin

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1376
Entropy (8bit):	5.227813584466248
Encrypted:	false
SSDEEP:	24:tI5hLGvnRDpYqiqeOLyn61iUWUCVAg3dsbtlcgf73uCNaxFgwg6gXAbgI8jTJhlW:EmnRZ5i1Uk130tlBf7edhgrAb
MD5:	582EC126B2C60E4BF5A98869B6A652E8
SHA1:	4433AF0512A2C077A466CEC3D99E4A5FDB7DA13C
SHA-256:	CA66E86519279C6DE7B0F57D090004B4CACE7FC50D2A03F18696FB88ABE8CC71
SHA-512:	298F2698A19C344320343E24F9AC6B50CCAE57C82D0CDD04601B0BB47C831CD5639339FE49281C4E821F5FAE8BE79E81A62E67BBFC3FEF1AFDDDFD6F6CBE8CB8
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/Group%2022069.svg
Preview:	<svg id="Group_22069" data-name="Group 22069" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="16" height="16" viewBox="0 0 16 16">. <defs>. <clipPath id="clip-path">. <rect id="Rectangle_10031" data-name="Rectangle 10031" width="16" height="16" transform="translate(0 0)" fill="none"/>. </clipPath>. </defs>. <g id="Group_21299" data-name="Group 21299" clip-path="url(#clip-path)">. <path id="Path_15040" data-name="Path 15040" d="M8.381,2.746h0ZM8.1,3.03c.769.084,2.617.443,4.1.756.348,1.642.682,3.4.762,4.118L7.832,13h0a.709.709,0,0,1-.441-.227L3.213,8.6a.694.694,0,0,1-.228-.444L8.1,3.03m-5.111,5.1h0M7.838,2.011a.285.285,0,0,0-.164.028L2.248,7.475a1.334,1.334,0,0,0,.258,1.83L6.68,13.479A1.674,1.674,0,0,0,7.828,14a.942.942,0,0,0,.682-.263L13.951,8.33c.218-.218-.91-5.386-.91-5.386s-4.287-.933-5.2-.933" transform="translate(0 0)" fill="#273240"/>. <path id="Path_15041" data-name="Path 15041" d="M10.5,7a.5.5,0,1,0,.5.5.5.5,0,0,0-.5-.5" t

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20398)
Category:	downloaded
Size (bytes):	357016
Entropy (8bit):	5.402385190575856
Encrypted:	false
SSDEEP:	3072:+jxAMP2j5i/my2cn4KLPGMZMg9bV4EG77jlf1xfWi6S8b:+OMPCU/mycKLPGMZZ9bVg7Ei6S8b
MD5:	7FD2FC4C8856FD2EDC606727380C87CF
SHA1:	E75F9D70A160C72246F3737EB28AEA3485CA7648
SHA-256:	94F794857C1168C3896F436344C8146A7DEAA1B504A7D7746E5BAA656BF98B75
SHA-512:	17EA93D59C5E8045C0925F2995BF66ECFC66671636D02D062240085FD17667F0B23378C2228C2B381532923715304B57CC60E91F3E2EAAD06F0863D3C3C02F9A
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yE/r/IAsbxbxXkof.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	470830
Entropy (8bit):	7.980592497594225
Encrypted:	false
SSDEEP:	12288:9RsIAAUdWCGLELQV3c9j1Odzh+H+2HRd3SRu3:9Rv+wEL4G16zh+H+oRgRG
MD5:	C6089D882C7E036EC3E075BAD37CDC73
SHA1:	060C86A6A8AB8A2574B185D404A0DF982C197172
SHA-256:	67CAD85D925A651CF3DEF2E0E56BF601E472770C2A562A97FA0B0CD90DF5F189
SHA-512:	FF6074232145CD9B86B7AEEF4975AA32330BF362F4ECE143DB555B928955CA32540A5FFB11A5F29676244B8E71B306E111305B1EDF4C6439992295B41D99601D
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:16:48..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..m0.`.;C....r....x.\|.,...A.Ge^.....-.M.&PX...)5..(.`Iu..)...X.O.T..h.Jb...

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	17964
Entropy (8bit):	4.797377939345131
Encrypted:	false
SSDEEP:	384:mEtXqe76l7FdKcjJ+NIfQ+KMW9hAXx4oLm8W92ySkQZqfvTFOUiVoneJ:meqegneEjqfrF/+oneJ
MD5:	0F8ECD80321CDFE9E64A4AB42F56EBDF
SHA1:	7C76299FACAA9E864B6FE4C16563793CA55BB1E2
SHA-256:	672F95AA69C25B85C6490EA85351C34A957A5C4FD8B08C2030DA4FD89428A0BC
SHA-512:	978DBA55B5FDB3D3282CC1F317AAB0D07A87FD3A71B4935C117736CE1FC11905D66B71C26E99E0DEEECEA627DA2D7B9337A89101F5BA70C417073C1EFD0DA323
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2
Preview:	/!.Waypoints - 4.0.1.Copyright . 2011-2016 Caleb Troughton.Licensed under the MIT license..https://github.com/imakewebthings/waypoints/blob/master/licenses.txt./.(function() {. 'use strict'.. var keyCounter = 0. var allWaypoints = {}.. /* http://imakewebthings.com/waypoints/api/waypoint */. function Waypoint(options) {. if (!options) {. throw new Error('No options passed to Waypoint constructor'). }. if (!options.element) {. throw new Error('No element option passed to Waypoint constructor'). }. if (!options.handler) {. throw new Error('No handler option passed to Waypoint constructor'). }.. this.key = 'waypoint-' + keyCounter. this.options = Waypoint.Adapter.extend({}, Waypoint.defaults, options). this.element = this.options.element. this.adapter = new Waypoint.Adapter(this.element). this.callback = options.handler. this.axis = this.options.horizontal ? 'horizontal' : 'vertical'. this.enabled = this.options.enabled. this

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31978
Entropy (8bit):	5.1536380562954385
Encrypted:	false
SSDEEP:	768:qS34lhQr7XyDx+0K88PLX45FCOrmLEJWFS0iv6X7LhF:qSIl+r7yGPLwFCOrdI1X
MD5:	E2620F2AE61D84E5EDEF5A0B7B95CF96
SHA1:	C79F1FD304B9452D5B5D73D98AC18C79DECCF4DD
SHA-256:	09F417C2E643B736C19E96B99E166681AF1002E9B192B84E4E85B0794E764F7F
SHA-512:	16BB87AC76CAFE4C6B07C6D5D2C5CA4DA3DACD17F7373E60155B5D57420D68BF9767A7A166D72E8867BC65C264BCE7273CD05C273645027920765ECF99EA4D9C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1
Preview:	/!. jQuery Migrate - v3.4.1 - 2023-02-23T15:31Z. * Copyright OpenJS Foundation and other contributors. */.( function( factory ) {.."use strict";...if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define( [ "jquery" ], function( jQuery ) {....return factory( jQuery, window );...} );..} else if ( typeof module === "object" && module.exports ) {....// Node/CommonJS...// eslint-disable-next-line no-undef...module.exports = factory( require( "jquery" ), window );..} else {....// Browser globals...factory( jQuery, window );..}.} )( function( jQuery, window ) {."use strict";..jQuery.migrateVersion = "3.4.1";..// Returns 0 if v1 == v2, -1 if v1 < v2, 1 if v1 > v2.function compareVersions( v1, v2 ) {..var i,...rVersionParts = /^(\d+)\.(\d+)\.(\d+)/,...v1p = rVersionParts.exec( v1 ) \|\| [ ],...v2p = rVersionParts.exec( v2 ) \|\| [ ];...for ( i = 1; i <= 3; i++ ) {...if ( +v1p[ i ] > +v2p[ i ] ) {....return 1;...}...if ( +v1p[ i ] < +v2p[ i ] ) {..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	60404
Entropy (8bit):	3.9992548513832524
Encrypted:	false
SSDEEP:	768:FPxGdOkPJcAJk+9SLaYYszc8RWzTEExpKw2w:FPxIOkPmI9SLPvzc8RWzTtL2w
MD5:	B497E0EC5FA1D2A4E178462C267B9BF5
SHA1:	63DE8F6DF25F9B8C281EAF9F13647B40F676969C
SHA-256:	57B04CBD9A5CD2F8CA8483C749944AFB26D13170EDE99795CD68F1D4D253C5B8
SHA-512:	FEF53D44EDB7E073271AE38B5A16C24F613D64E92BCC804DE17E7B0C2848BCE6AACFA42C822A5EF4BE0DC6D5FC09B2B4A74C7BA295F21B073B8271C168127685
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; /.;(function (factory) {. if (typeof define === 'function' && define.amd) {. // AMD. Register as an anonymous module.. define(['jquery'], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS. factory(require('jquery'));. } else {. // Browser globals. factory(window.jQuery \|\| window.Zepto);. }.}(function($) {.. />>core/. /. . * Magnific Popup Core JS file. . /... /*. Private static constants. */. var CLOSE_EVENT = 'Close',. BEFORE_CLOSE_EVENT = 'BeforeClose',. AFTER_CLOSE_EVENT = 'AfterClose',. BEFORE_APPEND_EVENT = 'BeforeAppend',. MARKUP_PARSE_EVENT = 'MarkupParse',. OPEN_EVENT = 'Open',. CHANGE_EVENT = 'Change',. NS = 'mfp',. EVENT_NS = '.' + NS,. READY_CLASS = 'mfp-ready',.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1366x768, components 3
Category:	dropped
Size (bytes):	295957
Entropy (8bit):	7.96813147760291
Encrypted:	false
SSDEEP:	6144:M7bzMlBcQfOtjWW0Bzg0WJ10mXoBaCOMYH1nnZ/wr4HxyunqTiZ:kMAQEjWVBk0aVXTUY1nnZPnx
MD5:	518EBC34F3CC9CA087548B1BB9B78C1C
SHA1:	FE425DCFB2F9D58BFF49F5D7D068338038921BB4
SHA-256:	5E151BD8CD97A449FF7AFB229F1124F2C15DBE690C0145FE99ECAF5D14318D70
SHA-512:	D6B36CA890D1FF759672C7BC6B2BCA5409A7C8DFDDEBE7B533CA5D7D262B009CF515C30B8ABD00E1B316B55D867F035F9130B6C68E4DF99231FDE380AC195E16
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................V.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. ..+...n......G@....d.0MK/Z.v0.....\|Ds{...}h.....j.A)....E.X.....H.r....,.q......<..)..6H.g............L..Q^L~...?...x.Z3...;..C....m.3n.Ps.).$.62.e0}..Ah..M9b...j2.x.....\|D/.I....J.J\|..}..\|..q....@c...........s..,.T..mG._.S...3o/..Zl...Z...p......=..M...T.H...TL.q.ZB.#....p:..+..t.d.t.j..."Qw3./......Y0..1Mx.8q..3.^...p)<..4s......2H.}EY.W.S&Vu.1..FLV

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 101 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9191
Entropy (8bit):	7.938521148291647
Encrypted:	false
SSDEEP:	192:s2eqYu+EMKSMWVUt0TRuBaRBQH5RYZjr90hENVqMRcrU:rlSRBTRuggstSh2Vrc4
MD5:	417BC7311E6B16871FFD5A47F2E38E89
SHA1:	8FFF46B7005B815CE4D18C42C552709FAF7D5403
SHA-256:	CCE8C8D20EFD705D5007FBED448FD859615C5C66C9F38F0A6271E9426D6F6C1D
SHA-512:	A7D1736ECBE68577ABFD83FC103B8264B3B3AEBD2FD4DE15D04968D14B1DD0B294D6DAD7EB98A9043A727728A6711872333108754554BEB5072EAD71BC0A7826
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e...d...... .j....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D5800905D05911EBA4B3CCA392FE903C" xmpMM:DocumentID="xmp.did:D5800906D05911EBA4B3CCA392FE903C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D5800903D05911EBA4B3CCA392FE903C" stRef:documentID="xmp.did:D5800904D05911EBA4B3CCA392FE903C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...K.. WIDATx.....U....C...d..A....T@....U.,Y.."....V....PD.Qr..9IP..%.......;u........w.=3.]]........u..]T"o9-

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	329098
Entropy (8bit):	7.975102619164291
Encrypted:	false
SSDEEP:	6144:YaKtkjwwa+clHPZ9amlDG69QFw92sKVGXDCBHiaPYXa1kjLf42LBeRa:Akj6x9aIGXFwsszCJiaPOaYLfIa
MD5:	F0CC970C00C2FC965961ED38BF7C96A2
SHA1:	43D91CB3064D02A7E1F28A659323886868CF6FDE
SHA-256:	C5EBB5E532DB3B7A08A21AAB75FDC2E66C9307F27BFAC9253B7DAECA3BDAAFA2
SHA-512:	A49F5B4296D3758FAED1C6D73908EF6A76E083E19F4088935214BC522C23B209E11FD2EA79A3A7D4C8B774F1497D558B347E9F307E87A92F104AB5957B288050
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:54:02..............0231...................................................................r...........z.(................................-#.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..........Y..T...u.x-.N..>..`.>.j.....UC.&8..F..]..>....,.KD......O

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	298514
Entropy (8bit):	5.570924893604967
Encrypted:	false
SSDEEP:	3072:06RlgYc0Iard8OdwDMXba8xyCKqjysCBIQ+9agdDBqzGmRFeHxK6+VH54BQoN5+A:bFb8OdwDMpFz1zQ+9fdDBqzGatV+Bx
MD5:	D9A6D0629D8712CBB4A0295A1BA32D42
SHA1:	2D4D326B4E38294DB1A4294E181865A37394B656
SHA-256:	6D8FA204EB47864CD7CD1D64393111750971DD02D55D6D3717592B95A825097F
SHA-512:	794C80063D52CCE0782CB430379F289E81C7BD5E1558201DD04C301DE04FEF3406543F5BFD83433473D0C9F0CFA1B8510FD8F5E38A21919C7C213FC609ADA1FE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-E6QPTJ9TK6&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	198506
Entropy (8bit):	7.958337902852262
Encrypted:	false
SSDEEP:	3072:Ob9LxVb9Lx2ao2khTHQB3CMShiNKDsuFfMlHWkHC37FxsU/+ZUJ7t:e9V99V2txwRCMS3su0JUxAiNt
MD5:	A6A4AC6CADB5100F34D256B60148B944
SHA1:	6B0B770A085CB6D07668E17C371A67B7C96945DF
SHA-256:	DD1F3DF4622045D283C609644D196ECF8303E31557B58914C8CA77AF7E775C6E
SHA-512:	6B5F8574D4D4882EF573887C80281EBC067261DA231AAFCF2434044E1725D60F0BF9DC3EA6F7F3BD2FC34B19FD13A6A058EAB11B17D683685B464BF5553F81E0
Malicious:	false
Reputation:	low
Preview:	....-.Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:07:41............0231...................................................................n...........v.(.....................~..........,E.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...j...P.<h.......qk...0.h.dl........Q...Q.z../.].2....{.f.vk1C.......5..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	299555
Entropy (8bit):	5.607841264808795
Encrypted:	false
SSDEEP:	3072:lW4lgSc0Iard8OdwDMNba8xqCmqjysCBIQ+9agdDBqzGmRmFHxK6kSH5T5ECO1o8:44zb8OdwDM3931zQ+9fdDBqzGaBS/OP
MD5:	E952C80FB62A9D9D751626346FA16644
SHA1:	3534D7C673B610081FBA5CCF19F726268387C698
SHA-256:	658196060CFD57047CAC85A425C602BBCDFFF039624C772E67CB79FA94F2FB16
SHA-512:	239FA2766BFBBDF7C9AECA87FFD30F28530132A038B1CDF5F28006D94004490BE11FD1E600FAF1933F9D49F087D5B14A72BB019111957F01EBFDABB7DE78E964
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-J2E85P7SPT
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	417996
Entropy (8bit):	7.975062063360363
Encrypted:	false
SSDEEP:	12288:yNeRb2c3IdS24fVmgn8pXMtiDWtvpalk6k2mhHdrkEC:yNeli/sV7nwoiDWtgls2II
MD5:	CDB56619CE4FC90D3DE92D2F5CF61403
SHA1:	5B86F51EAD697C9080C02705DB3F02CA237FEDF4
SHA-256:	C6FE01BC05EF5CC502D36963A9710D472EFC5AD0F788D72498643213E8453101
SHA-512:	A03E9D499D767604FE6FAADE9B89B73499E22895B9859215A19B8DFA68DEEC93CEE23C69BB456EC9AE0C892189CB47EBFEAF16C7C464227B571E3D3E7B3822F7
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:09:05..............0231...................................................................r...........z.(.................................#.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..g.[..q....a....)..[.....B.]S.G.>.......7..N.........#..k.Q..O.(......z_

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
URL:	https://campobahia.com/wp-content/uploads/2021/08/whatsapp-1.png
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	477104
Entropy (8bit):	7.976159085727206
Encrypted:	false
SSDEEP:	12288:Mxl9Upct5+023TnOWbebTFHKYGU0hg/2CWwopciFtt1:DpW55fFqYBOTCToSytf
MD5:	6BF40A87D8B534065039F739A9D875AF
SHA1:	7525EF1D0BEEB02046B70D5B1607A04AA8DBA8EB
SHA-256:	E802D0DDE55270CF75AB926824F7E00016F727FB155A1F2C537D5BB159C4F224
SHA-512:	3E23922EE6CCFC5295070D6F8502A3FC04A2E028767F201AD93FFEC03CEABC0E86F705489EF7430E5BDD65BA13A3DEA3259C30FB818D0C1E3EC0474D84F24B0E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-009-copiar.jpg
Preview:	.....\Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:08:42..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....<~Z.X....q......+h../........j.{."...2v..e...Y[2#........1.....e..1.e

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3146
Entropy (8bit):	7.1103105909596565
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzA3B3GFcUMzgHbh2sHqV3oHoKdjdabt8CuKcge4444mqGt:WSeknwzA3B39zg7Ysw3of/uOCrct+
MD5:	7CD6E285A9F6A903E4FBFA471170FE34
SHA1:	6FF39D37CD731952C7324CBB85914172C2B1B98E
SHA-256:	3792C4F5683BE117C7B679CE7DEB7E7CC808202348563DA54E6398D2FECA6EFE
SHA-512:	329F56B52FEB0412B4674192452E99C409E30486C0EA2E882140084C13FCB82112B87360DE7EE788A3523A15C96E13A53722ABF1A2544C2149851A5A9DE238BF
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/facebook.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:02-03:00" xmp:MetadataDate="2021-08-11T18:27:02-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:17418df3-e775-a04e-8458-2a25dd10d833" xmpMM:DocumentID="adobe:docid:photoshop:0d0ccff5-97aa-714c-8952-d9c9785e13f1" xmpMM:Origin

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46115), with NEL line terminators
Category:	downloaded
Size (bytes):	381237
Entropy (8bit):	5.4368046664329635
Encrypted:	false
SSDEEP:	6144:S3GjnRAWpP/pZ/lJfL1bb3QKVqNvoJeysiXrVe:S2LioZ3nqNvoJetme
MD5:	11953AB0A8A0817A2856077B5DD8265D
SHA1:	1A40C14D9D4536A4B01973E4A917A3209954CE77
SHA-256:	7664BD0DDBA49792992A30E5B8F89099F8DB427FEF37EA1AEAC214DA33F47319
SHA-512:	F79DFE75F69934E246C8B2A37689056E9552C9343CC90C5E70211A705BCB703877FF848E0D1E509DA4D0B119FFE4C5CA0A53983B12F6E76F8750CD6B9A972D0E
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/oidc-client/1.11.3/oidc-client.min.js
Preview:	var Oidc=function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function e(){return t.default}:function e(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=152)}([function(t,e,r){var n=r(2),i=r(19),o=r(12),s=r(13),a=r(20),u=functi

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	366574
Entropy (8bit):	7.9747196897983335
Encrypted:	false
SSDEEP:	6144:FKhohvLJ2tVCTT9KfsordII526m+ORpAi4WHGxx/qM7bqz3NG0Npgab:FKCh9Kfzdx5zmLR6/WHE//4lLg4
MD5:	F525CB5AEABE2E66A6850DE1027D4551
SHA1:	7D498722E8A89EF25B6107ABC7ECC704E074D4FF
SHA-256:	FC399400527DC7EDE4E6615683A4D21BD726CD4DF7F83142C82B1A11131F532F
SHA-512:	90C8348455997D17EDF9A2C27A4D7DAD848974AAB73EFEFAAF367877ECD6DA3BF45236EAAD021E6B4218DAA4A28509033B09033510E6EE13923524D06F104E3A
Malicious:	false
Reputation:	low
Preview:	.....9Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:58:53..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?../Q.:.O..sc...\|.Fa...mT4.c~..N....v..7......=S...gY.i....8...J.....Y....

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	442178
Entropy (8bit):	7.9763307046596195
Encrypted:	false
SSDEEP:	12288:G30QMeqxE01xsI7a9PFvDS9RYwwMd/CzjjMoT:u0pNNsI7cYYwnuj
MD5:	4E6D055352C529363C66F0E801691D2D
SHA1:	536F5BD012FC9CADA124E6BDA81E0DABAEB2A2BD
SHA-256:	24B7CDB1C87BE5C628BD143C400419AFC2B9AB2FC18546C087BD6B84B85FB778
SHA-512:	716F17852A916E3C87431405314C02A3CB7C7941733CAB0CB5F3D75BDB5CB9772B578A7B88C9C69F6F65EB844351AB7D4C61DC27D90ED8EB49E5470E19CEF6F6
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/17-hotel-desktop.jpg
Preview:	.....sExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:13:44..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......#.f...j.....'Q....zj._.N.K..s.lw....<z.]...../....wR\E.]..&.1.g`..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17562
Entropy (8bit):	7.962009561450934
Encrypted:	false
SSDEEP:	384:mYKXDczJlniHRwGq6ByXwUkUvBkii7uLYx7riqBTu8EfAx11N:mYzJlnWRhq1wUNTiT6qBKV0
MD5:	F45BB3D7E651BDB60E5E5ED8EF676570
SHA1:	F10884D86D41AD36B06EBDA134060FA5D82E12E1
SHA-256:	BD9E1E83DFCC546925AF157537514F071D9EED94A9F7CC3821731A285734D832
SHA-512:	3124DDD455573685EBE03CB564CC1713446AD3D453692E7447011065177AB89D780DE0204FF4112E532BA1121D0CF33EA404A6BC9CDA7DD6A02431B910083C90
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...d...........tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:38e51f48-9204-4409-9f50-d4a83e713118" xmpMM:DocumentID="xmp.did:9C7C2FAFD05811EBAB02E410F8663D99" xmpMM:InstanceID="xmp.iid:9C7C2FAED05811EBAB02E410F8663D99" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:692a4367-163b-374d-8f1b-df74522b83b1" stRef:documentID="adobe:docid:photoshop:8e0371fd-613c-dc43-81d6-e665ff8e925d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+.....@.IDATx......

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	587
Entropy (8bit):	4.770379522420475
Encrypted:	false
SSDEEP:	12:FRzhwwmEhwwFf0U3n4rR0y4lnY14bcKJVaKR:7h7Ph7FtoFC+4YcVaKR
MD5:	74EF44AE2EDB68D989B2BEC4D4F2310F
SHA1:	A9F7DE2F2957ABCF0A8F8DBD612D87846AF4CD4A
SHA-256:	D1870C49E74ADFA2D70351CC067C6A3320DA45D18231C5A31EB39356151620CB
SHA-512:	ADA0CED00482F796F476688384E94DF5256C06B95E04239C4BB81B09AC9E545DC0D184038A248F18112E19417838E90EBE07BFFDB7DFAC7A0D4FFA64F2C7061C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3
Preview:	.entry-content .addthis_button,.entry-content .addthis_toolbox,.entry-header .addthis_button,.entry-header .addthis_toolbox{margin:10px 0 10px 0}.addthis_button_tweet{min-width:83px;float:left}.atwidget iframe{max-width:none}a.at-share-btn,a.at-share-btn:hover,div.addthis_native_toolbox a,div.addthis_native_toolbox a:hover,div.addthis_tool a,div.addthis_tool a:hover,div.addthis_toolbox a,div.addthis_toolbox a:hover{border:0;box-shadow:none;-webkit-box-shadow:none}div.addthis_toolbox br{display:none}./# sourceMappingURL=../../frontend/build/addthis_wordpress_public.min.css.map /.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26133
Entropy (8bit):	5.038494038390952
Encrypted:	false
SSDEEP:	384:JkpFEKyr/ELnE4u1CtF10FgFEvm7/vrtKNaHbSupId8I573xFDC5iDilimI:JkpCq10FgFB/vB0uqd8y73/OAmUmI
MD5:	8CD5D5065A99FB1E60FB9147DBC2709A
SHA1:	6090FC804A071A0B99E7955AB647D48F8408511B
SHA-256:	DC7E8A6C14C18210B7E8A48E0A70E0610460080C6A82352267E2059325CFC87D
SHA-512:	3A9411C8DEEA6330D46A0E2B87E6F39AF4FD8773415389934E90DC3DDBF5750E54743013C3C7EE3E7CF3956EFA485CE830982D212C46446B390B418848EFB01C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/js/wptestimonial.js?ver=2.3.10
Preview:	(function ($) {...'use strict';...$('*').....on('touchstart', function () {.....$(this).trigger('hover');....}).....on('touchend', function () {.....$(this).trigger('hover');....});.....$(function () {....preFunction();....$(document)......on('mouseover', '.tss-isotope-button-wrapper.tooltip-active .rt-iso-button', function () {......var self = $(this),.......count = self.attr('data-filter-counter'),.......id = self.parents('.tss-wrapper').attr('id');......$tooltip =.......'<div class="tss-tooltip" id="tss-tooltip-' +.......id +.......'">' +.......'<div class="tss-tooltip-content">' +.......count +.......'</div>' +.......'<div class="tss-tooltip-bottom"></div>' +.......'</div>';......$('body').append($tooltip);......var $tooltip = $('body > .tss-tooltip');......var tHeight = $tooltip.outerHeight();......var tBottomHeight = $tooltip.find('.tss-tooltip-bottom').outerHeight();......var tWidth = $tooltip.outerWidth();......var tHolderWidth = self.outerWidth();......var top = self.offset().

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280643
Entropy (8bit):	4.899938295318863
Encrypted:	false
SSDEEP:	6144:KvJZHcc5KXqriaBXUCtYXcXXJDT1uM366yD8roNM7Sfc8mmT0Ttxb7rj/sQepZtc:KvUc5KXqriaBXUCtlUM366yD8roNM7S0
MD5:	F111E44E4E0174C32111D16640D00F48
SHA1:	7974205363B5D829AD19CCC6EED29025F82C0CE7
SHA-256:	479096B760741CCC6DFE81D78B0F1A2FD2F5575D821350D24FB1B8992628A9FF
SHA-512:	AB80934F6503A3394B2A8472E687BC7D06478D4C4651A0B71F91DED79F14234E3B338A7DCB2E269DA36DD038A6737131E1D428A759F0DDBFEE8DD9E284CEB87B
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5
Preview:	..elementor-widget-wts-textseparator .elementor-widget-container {. overflow: hidden;.}..wts-eae-textseparator {. align-items: center;. display: flex;. flex-flow: row nowrap;. margin: auto;.}.body.rtl .wts-eae-textseparator {. flex-direction: row-reverse;.}...eae-separator-icon-inner i {. height: 1em;. width: 1em;. text-align: center;. position: relative;. display: block;.}...eae-separator-icon-inner i:before {. position: absolute;. left: 50%;. -webkit-transform: translateX(-50%);. -moz-transform: translateX(-50%);. -ms-transform: translateX(-50%);. -o-transform: translateX(-50%);. transform: translateX(-50%);.}..wts-eae-textseparator .eae-sep-holder {. flex: 1 1 auto;. height: 1px;. min-width: 10%;. position: relative;.}...wts-eae-textseparator .eae-sep-holder .eae-sep-lines {. border-top-width: 1px;. display: block;. height: 1px;. position: relative;. top: 1px;. width: 100%;.}...eae-separator-title {. margin: 0;. -moz-box-flex: 0;. flex: 0 1 auto;. lin

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1095)
Category:	downloaded
Size (bytes):	196554
Entropy (8bit):	4.735657194169775
Encrypted:	false
SSDEEP:	1536:epdVkbf9QNwFxAXwGiEnpTBtMbLmBga7gwzi6SWm4KIvpbgi3xg1TkRjPAlm+/Yu:erFNAxAXwiSYRw
MD5:	5411B7DEFF65A93687719746C8BC5B99
SHA1:	092B0EF35C6B599A352B607AF439915C702CAABF
SHA-256:	E0CBF7A78CECFAAA4EED92A9764186753C24B2747824DDB9039F1EBBB9B7A013
SHA-512:	97A5D5E3622114C2D0E76D851AA7E9F0AE55F8EB1A7A78FA5BB9F9F4D87CAB4CA0CCCA760DD036A8B6E6220D5EAD188758E4C1ECE0B33C2C7B218F150D33B014
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8
Preview:	/! elementor - v3.21.0 - 26-05-2024 /.@charset "UTF-8";..dialog-widget-content {. background-color: var(--e-a-bg-default);. position: absolute;. border-radius: 3px;. box-shadow: 2px 8px 23px 3px rgba(0, 0, 0, 0.2);. overflow: hidden;.}...dialog-message {. line-height: 1.5;. box-sizing: border-box;.}...dialog-close-button {. cursor: pointer;. position: absolute;. margin-block-start: 15px;. right: 15px;. color: var(--e-a-color-txt);. font-size: 15px;. line-height: 1;. transition: var(--e-a-transition-hover);.}..dialog-close-button:hover {. color: var(--e-a-color-txt-hover);.}...dialog-prevent-scroll {. overflow: hidden;. max-height: 100vh;.}...dialog-type-lightbox {. position: fixed;. height: 100%;. width: 100%;. bottom: 0;. left: 0;. background-color: rgba(0, 0, 0, 0.8);. z-index: 9999;. -webkit-user-select: none;. -moz-user-select: none;. user-select: none;.}...elementor-editor-active .elementor-popup-modal {. background-color: initial;.}...dia

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6799)
Category:	downloaded
Size (bytes):	6800
Entropy (8bit):	5.16408402806695
Encrypted:	false
SSDEEP:	192:oGaeyWYBYWSEqEy+wgmm6JF9JMZVlMCqL8IwhOUofsXlbc/adDmbf5w:oOyWSYWrzy+wtz/MZVlMCqL8IwhOUoUB
MD5:	7A3165D03FBEED5881F24A71BEB08A49
SHA1:	3615249E62B0ACF66E2250B08CB47BE90D5E530B
SHA-256:	9AAC81AB63E438125D3FCA0D44ED06C7239296214EC7E53A595D62E04B9E0657
SHA-512:	377700E7BF99F4A2125FE5DE6A2EE9E4D4E14DF8BA758A94B2374E7B6C68C9D1075838F1B4648AD5E2FDE8899D7E0A32052681A4AB071966525478AEC80E9AEE
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1
Preview:	!function(){"use strict";const e=(e,t,n)=>{(e instanceof NodeList?e:[e]).forEach(e=>e.addEventListener(t,t=>n(t,e)))},t=(e,t)=>{r(e,t,"toggle")},n=(e,t)=>{r(e,t,"add")},o=(e,t)=>{r(e,t,"remove")},r=(e,t,n)=>{const o=t.split(" ");(e instanceof NodeList?e:[e]).forEach(e=>e.classList[n].apply(e.classList,o))};let i=null,c=2;const s=()=>{const{masonryStatus:e,masonryColumns:t,blogLayout:n}=NeveProperties;"enabled"!==e\|\|t<2\|\|(i=document.querySelector(".nv-index-posts .posts-wrapper"),null!==i&&imagesLoaded(i,()=>{window.nvMasonry=new Masonry(i,{itemSelector:"article.layout-"+n,columnWidth:"article.layout-"+n,percentPosition:!0})}))},u=()=>{"enabled"===NeveProperties.infScroll&&null!==document.querySelector(".nv-index-posts .posts-wrapper")&&((e,t,n=.5)=>{new IntersectionObserver(o=>{if(o[0].intersectionRatio<=n)return;t();const r=setInterval(()=>{const n=e.getBoundingClientRect(),{top:o,left:i,right:c,bottom:s}=n,{innerWidth:u,innerHeight:a}=window;o>=0&&i>=0&&c<=u&&s<=a?t():clearInterval(r

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3828)
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	4.776915724199922
Encrypted:	false
SSDEEP:	48:CLXLJTJIafOgWAfMfalMfDf6fH0fngfvjfIXlGpi5rpimy5piT+MC:CLXLJ11fOgWAUSu7icfgnjwXlEC+9
MD5:	8BB2B5364DB51ADED1E696F2A19B33CA
SHA1:	67B3ED522E1E35E9AA31C945CFE3802A8813E47C
SHA-256:	683E7DD72E8BF31EADDB50DE149BD4A87D9ED27541B29711A5CBCB1EA3262A45
SHA-512:	909A365A13967BA071B31612C8C09FA87634153CAB1C83413C624BB8379181A4F5C30DC82F2ADD5B1CC5537679D576E3C361DD19DBCB4A15FF9CA1469FF171C3
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22
Preview:	.clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo-carousel.nav-top-right,.eael-post-carousel.nav-top-left,.eael-post-carousel.nav-top-right,.eael-product-carousel.nav-top-left,.eael-product-carousel.nav-top-right{padding-top:40px}.eael-contact-form input[type=text],.eael-contact-form input[type=email],.eael-contact-form input[type=url],.eael-contact-form input[type=tel],.eael-contact-form input[type=date],.eael-contact-form input[type=number],.eael-contact-form textarea{background:#fff;box-shadow:none;-webkit-box-shadow:none;float:none;height:auto;margin:0;outline:0;width:100%}.eael-contact-form input[type=submit]{border:0;float:none;height:auto;margin:0;padding:10px 20px;width:auto;-webkit-transition:all .25s linear 0s;transition:all .25s linear 0s}.eael-contact-form.placeholder-hid

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.141565412858599
Encrypted:	false
SSDEEP:	3:RFeBBbBjjHxBAe2FYDxW8:jetdBv2Fp8
MD5:	DE3701EECB9340AE075E05B04BB05A6B
SHA1:	1262474193BC31E859367DF01C4B2B26214A375C
SHA-256:	F475C34186022BA531EBC8BBA97FC10DF7E4C3EA854F314A18AB0644C851620D
SHA-512:	4CCE11ABF10DF2640900C923B0CAC9AE1B80890F52701D5B57AB937C4752E91AEA392ED9439EE24357A6F88AC6F0F79B160A9C080F5670220C29C81B5148C69E
Malicious:	false
Reputation:	low
URL:	https://s7.addthis.com/js/300/addthis_widget.js?ver=6.5.3
Preview:	// AddThis services have been deprecated as of 5/31/23.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18236, version 1.0
Category:	downloaded
Size (bytes):	18236
Entropy (8bit):	7.986496142350247
Encrypted:	false
SSDEEP:	384:BPCkqePctBlBkpfecf1VphY3AngtJpFyihwqLCk:BPatDBi1DngtJpFy7mCk
MD5:	28BA19690FFA2FE50DCC0281BD34D10E
SHA1:	1FE5EB5A9FBD6E4A69D9EFF16B797157072D67EA
SHA-256:	8D11A987248D227DE3D1C02AC0E59821C390EB3B4933033013800BDAD254F42D
SHA-512:	91B15FC697D56395DEC1F8E18BE6A77C54E8EF5172DD604F8753A083F8A5E7592684BA5B92C602CAF704280504E474F6BB6407FFECD0F4E6263A71DE2E827974
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve-child-master/BiloxiScript.woff2
Preview:	wOF2......G<..........F.........................?FFTM..$. .^.`.......Y......).. ..6.$..<. ..p.......p.........Il...6l.4.@....k..c..nh......X-(..D. ..d.G5.07A<....W.2.{e..R7.j5E..\|.....[......tg..'....9..3m...2A...._~.$....;.2E...*N\.....q,@QK7.2s6l.Z6lic.ii_[.c[.k.}.........s....5&....\U"...}..Pu.......C.b.,c.@..s...@<.........O..^..u.%..d.@W......'...N.]g...4I.......,...}...W5@.K.j.......}........".....mQ.....6..0..\........2..4d..X,@R.-.....H.[.-...A.C.....0..v-..@...2..}...FZ.I..0.e".EUD..sr9..w.:.W...c........9..s.\|u]5d...k.+bSrG.2..<.r..h.5...."...E....p.Md(<..........1..4.ie.<..aL.%#...\|.2....-..B.n.......:5...R.T.iR.8S..&{.e.}X.e..X.1.d.[..T0..Mi.d......O.]Y.P..\..a..+..{...z..z>...qp. ... ...:.d.^....?l.....-......8 [...,iT._.....0..\|q....e..o4..'0r....t!.K.P.......n..n.W....v......C.L.]b...0...a.. ..;`4!..]D&h_..d/.....O'.X.e2./..$.Y...)..qN.g;.{.7.....f...k..!..@..C......"....l..v;..._....4..9=.f.d.k..[r?0O0.9.m....h....p.;.`1./.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	497922
Entropy (8bit):	7.978786604495857
Encrypted:	false
SSDEEP:	12288:+mZCh/kiwSU2TQYjMPQQvb9wLIX6Hyl7qw6czHf86iJ0:+mZCh8jQLMPQQj9wk5Bqw6cL86z
MD5:	E258F7F7C5A15FA7BC2579A05A0490FD
SHA1:	ADA13C686BCBF4C5117264AE8CD4939C46267D09
SHA-256:	3DCE9724AEDDBF036F7F8242B9E9B5A49CA48334BAFEB732BDD375CAB8C0A52B
SHA-512:	454476FF9ED78FB0FBBAB3DEEB5315423F399D4E86EC66FDA94659B6506EEC3D1367A8BD28ED28D96CAAAC6584C99E3A55405AB4F04BC51C8BA19E8D1F04493C
Malicious:	false
Reputation:	low
Preview:	....".Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:08:54..............0231...................................................................r...........z.(................................ ........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....+..H..O.yx..N.x.Y...e...OO.Q..4>.....y....U.l.=.1.l.^...........F..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15138), with no line terminators
Category:	downloaded
Size (bytes):	15138
Entropy (8bit):	4.829802680589649
Encrypted:	false
SSDEEP:	192:E/cyFvClMYwhv2DFI7zNBMgZqDidgjBhMLDuxYc14nKd2PYFILLd7a:+9vWMYc2iMgZqDZj7M6Y5YFWe
MD5:	627195C492BD017ECDA30DBF9040FFA3
SHA1:	AA9123B6A516D254000294A74C8B603144FB65FE
SHA-256:	F724D235B9B3D2C84891803E1FA23399ADE66C1B11352DC6E7F144DDBB6D5F77
SHA-512:	569A802FDE9E328BFE7DF967579EAEE96BF68818A96F75271DACA34658EC793240720F90D80847D8AC09274D8A80DC1D1D8153705B6163B2F04DD424732DA049
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/vendor/fotorama.css
Preview:	/! Fotorama 4.6.4 \| http://fotorama.io/license//.fotorama__arr:focus:after,.fotorama__fullscreen-icon:focus:after,.fotorama__html,.fotorama__img,.fotorama__nav__frame:focus .fotorama__dot:after,.fotorama__nav__frame:focus .fotorama__thumb:after,.fotorama__stage__frame,.fotorama__stage__shaft,.fotorama__video iframe{position:absolute;width:100%;height:100%;top:0;right:0;left:0;bottom:0}.fotorama--fullscreen,.fotorama__img{max-width:99999px!important;max-height:99999px!important;min-width:0!important;min-height:0!important;border-radius:0!important;box-shadow:none!important;padding:0!important}.fotorama__wrap .fotorama__grab{cursor:move;cursor:-webkit-grab;cursor:-o-grab;cursor:-ms-grab;cursor:grab}.fotorama__grabbing {cursor:move;cursor:-webkit-grabbing;cursor:-o-grabbing;cursor:-ms-grabbing;cursor:grabbing}.fotorama__spinner{position:absolute!important;top:50%!important;left:50%!important}.fotorama__wrap--css3 .fotorama__arr,.fotorama__wrap--css3 .fotorama__fullscreen-icon,.fotoram

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1366x768, components 3
Category:	downloaded
Size (bytes):	312231
Entropy (8bit):	7.967758495441514
Encrypted:	false
SSDEEP:	6144:M7bzMlBcQfOtjWW0Bzg0WJ10mXoBaCOMYH1nnZ/wr4HxyunqTidN2:kMAQEjWVBk0aVXTUY1nnZPnu
MD5:	B6555E22E58F96EEDEFC9FF443118B16
SHA1:	2ECDB9EB0F166935B36EA1D88E058694DEC46A0B
SHA-256:	F38B4497A04007222C0C0B27BF5222DE3F388F5738BF124DD7DE003D4B058F90
SHA-512:	F8ABBC88EF4926B0414377BC59DD3AA2C31C89D08A1D967487A0DB314D2E9F8D3E000225A0F139031FC97D43FCC84CCE68F5C86D16881573BDA5102EB59A877A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................V.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. ..+...n......G@....d.0MK/Z.v0.....\|Ds{...}h.....j.A)....E.X.....H.r....,.q......<..)..6H.g............L..Q^L~...?...x.Z3...;..C....m.3n.Ps.).$.62.e0}..Ah..M9b...j2.x.....\|D/.I....J.J\|..}..\|..q....@c...........s..,.T..mG._.S...3o/..Zl...Z...p......=..M...T.H...TL.q.ZB.#....p:..+..t.d.t.j..."Qw3./......Y0..1Mx.8q..3.^...p)<..4s......2H.}EY.W.S&Vu.1..FLV

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6603)
Category:	downloaded
Size (bytes):	6683
Entropy (8bit):	5.033107919956822
Encrypted:	false
SSDEEP:	96:pbNAqPJjuyat6/Ymtmyyvt5SfzNJnMngt4gv/pTVQZZIz:hLfYmTMqZJMnc1VsIz
MD5:	AA7F8D7858530A957F230A6FF511EC8F
SHA1:	57FD50D7FA536341954B835FA1835A7DB339F085
SHA-256:	D1AA6C4AB2DABA84E9082980E75F0BAB05B5C126FE50EC98844A579585C5BA0F
SHA-512:	1247F3598E7BA716293AC290C8BFA80B991551E243F3DF34883778ECC7160DD8D7B383C533D96E1F4B7F5A6291CD499AD7A34093648560466BBB4B5E57068633
Malicious:	false
Reputation:	low
URL:	"https://static.whatsapp.net/rsrc.php/v3/yI/l/0,cross/C2fHuK6eV5E.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	.rich-text a.fragment{border:0;box-sizing:border-box;display:block;font-size:0;height:0;line-height:0;outline:none;pointer-events:none;position:relative;text-decoration:none}@media (min-width: 1096px){.rich-text a.fragment{padding-top:121px;margin-top:-121px}}@media (min-width: 768px) and (max-width: 1095px){.rich-text a.fragment{padding-top:104px;margin-top:-104px}}@media (max-width: 767px){.rich-text a.fragment{padding-top:91px;margin-top:-91px}}.rich-text{font-size:14px;line-height:1.45}@media (min-width: 768px){.rich-text{font-size:16px;line-height:1.625;color:#5e5e5e}.rich-text.rich-text--large{font-size:18px;line-height:1.625}}@media (max-width: 767px){.rich-text{font-size:15px;line-height:1.5;color:#282828}}@media (min-width: 768px){.rich-text p,.rich-text ul,.rich-text ol{margin-bottom:31px}}@media (max-width: 767px){.rich-text p,.rich-text ul,.rich-text ol{margin-bottom:21px}}.rich-text sup{font-size:12px;vertical-align:top;display:inline;opacity:.8}.rich-text ol{list-style-ty

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	130604
Entropy (8bit):	4.410356140143764
Encrypted:	false
SSDEEP:	3072:1tvl/lmDD/DCD/jIrnrIlreuQ4ThDDDguMBy5E94yrb1K6z67Uzh9d6U:1tr294Q
MD5:	F673D0508B83BD0AF3F572CF058803A1
SHA1:	FC4E8927378F4391B478428363CC83D8A37AAC34
SHA-256:	50132F49590E05CBC2C47D3681C88B878CCF8C755D9C61DAFC16BDD8BCBD0B3B
SHA-512:	E68709423773AEE623751A118CA4CD17940DC6C6A08046826EA701895B0A489E89698F204672E342FB84DCD8A6D664E86FAFF8F3A428DB927AA9F551011A6E97
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/js/vendor/moment.tz.js
Preview:	!function(c,M){"use strict";"object"==typeof module&&module.exports?module.exports=M(require("moment")):"function"==typeof define&&define.amd?define(["moment"],M):M(c.moment)}(this,function(z){"use strict";var M,p={},a={},i={},e={};z&&"string"==typeof z.version\|\|E("Moment Timezone requires Moment.js. See https://momentjs.com/timezone/docs/#/use-it/browser/");var c=z.version.split("."),A=+c[0],b=+c[1];function n(c){return 96<c?c-87:64<c?c-29:c-48}function o(c){var M=0,A=c.split("."),b=A[0],o=A[1]\|\|"",z=1,p=0,a=1;for(45===c.charCodeAt(0)&&(a=-(M=1));M<b.length;M++)p=60p+n(b.charCodeAt(M));for(M=0;M<o.length;M++)z/=60,p+=n(o.charCodeAt(M))z;return pa}function q(c){for(var M=0;M<c.length;M++)c[M]=o(c[M])}function O(c,M){var A,b=[];for(A=0;A<M.length;A++)b[A]=c[M[A]];return b}function r(c){var M=c.split("\|"),A=M[2].split(" "),b=M[3].split(""),o=M[4].split(" ");return q(A),q(b),q(o),function(c,M){for(var A=0;A<M;A++)c[A]=Math.round((c[A-1]\|\|0)+6e4c[A]);c[M-1]=1/0}(o,b.length),{name:M[0],

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59158)
Category:	downloaded
Size (bytes):	59344
Entropy (8bit):	4.717040228413791
Encrypted:	false
SSDEEP:	768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B
MD5:	74BAB4578692993514E7F882CC15C218
SHA1:	B6293BCFD851F963EDBE859498570C4C0C7EAAE4
SHA-256:	D87DDF917B7A1449AB45E2B8E3C98354629BDD65B6659C37E6023BBEA1CE1386
SHA-512:	8810579BC7D6F74FA7B8B7122A56E6ACF70B6B4393F76C4ED4122C67ECB00D6642BEAB1681C715DE0168441BF4CFEF1D2C9832007221477E5565CDA833F808D7
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21276)
Category:	downloaded
Size (bytes):	154668
Entropy (8bit):	5.417583746110156
Encrypted:	false
SSDEEP:	3072:uCYJ8FxRjP7ohvke9Iim0sKymy8W2Cu20u6gCuvw4Im+gSUv5WoYqNrtd6I+dz6G:uC7FjjPM1keS5WoYx
MD5:	3CAB98F4CE61B9658111FD048D6F1700
SHA1:	1C007A16649392A77796E1598B02BB8AE580032C
SHA-256:	4A5315CCC4051432CD322F06BD39B6657669D9A5907961655C2E24671A474BA7
SHA-512:	E2F4A8444AFD1DDEDB70503EF654E0015FB6E796A4F2B22F0F94D8CD78A90AADA3F422254729B010EE25D3D75A884EC64ACA6436F71C98C28DB9B123130C9A0B
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3i7M54/yu/l/en_US/CMbvlktGnP3.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ArbiterMixin",["Arbiter","guid"],(function(a,b,c,d,e,f,g){var h="arbiter$"+c("guid")(),i=Object.prototype.hasOwnProperty;a={_getArbiterInstance:function(){return i.call(this,h)?this[h]:this[h]=new(c("Arbiter"))()},inform:function(a,b,c){return this._getArbiterInstance().inform(a,b,c)},subscribe:function(a,b,c){return this._getArbiterInstance().subscribe(a,b,c)},subscribeOnce:function(a,b,c){return this._getArbiterInstance().subscribeOnce(a,b,c)},unsubscribe:function(a){this._getArbiterInstance().unsubscribe(a)},unsubscribeCurrentSubscription:function(){this._getArbiterInstance().unsubscribeCurrentSubscription()},releaseCurrentPersistentEvent:function(){this._getArbiterInstance().releaseCurrentPersistentEvent()},registerCallback:function(a,b){return this._getArbiterInstance().registerCallback(a,b)},query:function(a){return this._getArbiterInstance().query(a)}};b=a;g["default"]=b}),98);.__d("FbtResultBase",[],(function(a,b,c,d,e,f){"use strict";var g=function(){fu

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:c:c
MD5:	45C48CCE2E2D7FBDEA1AFC51C7C6AD26
SHA1:	0ADE7C2CF97F75D009975F4D720D1FA6C19F4897
SHA-256:	19581E27DE7CED00FF1CE50B2047E7A567C76B1CBAEBABE5EF03F7C3017BB5B7
SHA-512:	0DC526D8C4FA04084F4B2A6433F4CD14664B93DF9FB8A9E00B77BA890B83704D24944C93CAA692B51085BB476F81852C27E793600F137AE3929018CD4C8F1A45
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/gethotelstyle?hotel_id=5659&currency_id=16&language_id=8
Preview:	9

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	185230
Entropy (8bit):	5.085831989302021
Encrypted:	false
SSDEEP:	3072:xqRZ3Tn1EpHy2eCGIodwQ1hOLE3PDOHXDdKZI6QFdC:EzXCGIzqhOLE3PDOHXDdKZI6QK
MD5:	3E660EFD1316C32C6D8879934D740968
SHA1:	6280D8A5C576AFDD832F743DB908607C37623504
SHA-256:	774920FB4702C70BEB9A00B9275A12FBACF18A80C62BC246AB42A63CF2D9C8BD
SHA-512:	4D3FF83A9A9B47E8EB7D10597BA55FE020D8A2F20D54C9516EB43591670F3B6F02DA3360510B2C9340B580EBC71FB87D743487E56B278E6473686103DCE73EBD
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.21.8
Preview:	/! elementor - v3.21.0 - 26-05-2024 /.(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["frontend-modules"],{../**/ "../assets/dev/js/editor/utils/is-instanceof.js":./!*****************************************************!\. !* ../assets/dev/js/editor/utils/is-instanceof.js !. \***************************************************/.// ((__unused_webpack_module, exports) => {.."use strict";...Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;./. Some FileAPI objects such as FileList, DataTransferItem and DataTransferItemList has inconsistency with the retrieved. * object (from events, etc.) and the actual JavaScript object so a regular instanceof doesn't work. This function can. * check whether it's instanceof by using the objects constructor and prototype names.. . @param object. * @param constructors. * @return {boolean}. */.var _default = (object, constructors) => {. constructors = Arra

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1536x1151, components 3
Category:	downloaded
Size (bytes):	642018
Entropy (8bit):	7.961071089446334
Encrypted:	false
SSDEEP:	12288:AmfpIzPBuvMQWqwRj89Wf6VF5RPOuiwAcKav2ztpqYG1Jd4F6p1E7y8bZ9:AmfpQpuRWw4oF5AkuWqk1s
MD5:	74448F8E8FB9328B9A3D9EA0EC105CB5
SHA1:	039FE5F7FB4180181C180798C3BAF22996E8C3D8
SHA-256:	737691C7EDF92B0265D32259C982EF9803D0D33AA923719727E5BE8DE024396A
SHA-512:	72172C6021FC382AB993E5F8E60F8B6123DFFC1373F31BF06F8156E62A823195E3CBB6834390AA8F4911394F67609B0B9EBC3EE66429FF6C8B10BE68A8C499D5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/12/Vista-aerea-02-1536x1151.jpg
Preview:	......JFIF.....H.H......Exif..II*................,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="BD70741AE109D0131ADA0A66E3EA8978" xmpMM:DocumentID="xmp.did:71D7DB32C0F311E9B60BEA3D7D9EA07B" xmpMM:InstanceID="xmp.iid:71D7DB31C0F311E9B60BEA3D7D9EA07B" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 8.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:352ccee0-a7f6-4994-8713-beeeb787ab9e" stRef:documentID="xmp.did:352ccee0-a7f6-4994-8713-beeeb787ab9e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C...

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	692099
Entropy (8bit):	7.979722660693247
Encrypted:	false
SSDEEP:	12288:kQ7gJd3ou9hj2yBJd6r4KfHUgUTw7hyGB+sQf6niNP5pJY+ZRqA:kQsJd4oRzd6TWw1yW+HF3qA
MD5:	DE0DDED4975B28870A12849A15CA3D1F
SHA1:	8023A7DEA4669BDF1EAC9C0FFBFB0905E0F3B830
SHA-256:	12C8F4CA5EE772252251ED4257F92A7B30846AB713349A459AFA778631611139
SHA-512:	35C6807CD94715D82F3A27C6A5A3E6F12F16898B86FFC7896CF8DC494F624E7631AF30D43D9175AA7BB28A324FEDA0224793350447E6F571E9DB039C5FA39771
Malicious:	false
Reputation:	low
Preview:	...."+Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.1 (Macintosh).2023:01:09 17:26:30..............0231...................................................................r...........z.(................................ ........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..).....;c......x..;..m....{.hYN>E...._2...C.........f.YuW}.......L.l...^

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3828)
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	4.776915724199922
Encrypted:	false
SSDEEP:	48:CLXLJTJIafOgWAfMfalMfDf6fH0fngfvjfIXlGpi5rpimy5piT+MC:CLXLJ11fOgWAUSu7icfgnjwXlEC+9
MD5:	8BB2B5364DB51ADED1E696F2A19B33CA
SHA1:	67B3ED522E1E35E9AA31C945CFE3802A8813E47C
SHA-256:	683E7DD72E8BF31EADDB50DE149BD4A87D9ED27541B29711A5CBCB1EA3262A45
SHA-512:	909A365A13967BA071B31612C8C09FA87634153CAB1C83413C624BB8379181A4F5C30DC82F2ADD5B1CC5537679D576E3C361DD19DBCB4A15FF9CA1469FF171C3
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22
Preview:	.clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo-carousel.nav-top-right,.eael-post-carousel.nav-top-left,.eael-post-carousel.nav-top-right,.eael-product-carousel.nav-top-left,.eael-product-carousel.nav-top-right{padding-top:40px}.eael-contact-form input[type=text],.eael-contact-form input[type=email],.eael-contact-form input[type=url],.eael-contact-form input[type=tel],.eael-contact-form input[type=date],.eael-contact-form input[type=number],.eael-contact-form textarea{background:#fff;box-shadow:none;-webkit-box-shadow:none;float:none;height:auto;margin:0;outline:0;width:100%}.eael-contact-form input[type=submit]{border:0;float:none;height:auto;margin:0;padding:10px 20px;width:auto;-webkit-transition:all .25s linear 0s;transition:all .25s linear 0s}.eael-contact-form.placeholder-hid

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2550)
Category:	downloaded
Size (bytes):	2763
Entropy (8bit):	5.308130427968618
Encrypted:	false
SSDEEP:	48:BFz1+/1CvJhveWWSB3B4bHZjIA1On9F/gwKYCdXA8Z7TrKk9TcYeGl1:BN81hWWSBYIqOnjCdQqrbIYea1
MD5:	7A33641AF8B6A83C348743692A12FD38
SHA1:	8115D93DF2E5808575067048826C0F45984615FF
SHA-256:	DEB19461B99DAD3CE41D514C7E87AB82022ACD5399C305D4F2BE363205B9308F
SHA-512:	449A0495F56F6F68207AB6AFC87659E00FC3987CAA741F27BA495187061088BCD51B16EEA74615DFE81FE5F794744DA57CB0A475B71BACAD1B1DA0B1DCA468E3
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yV/r/vjbKCjVd5OR.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/t3hOLs8wlXy/. */.__d("body-scroll-lock-3.1.5",[],(function(a,b,c,d,e,f){"use strict";var g={},h={exports:g};function i(){!function(a,b){if("undefined"!=typeof g)b(g);else{var c={};b(c),a.bodyScrollLock=c}}(this,function(a){Object.defineProperty(a,"__esModule",{value:!0});var b=!1;if("undefined"!=typeof window){var c={get passive(){b=!0}};window.addEventListener("testPassive",null,c),window.removeEventListener("testPassive",null,c)}function d(a){return i.some(function(b){return!(!b.options.allowTouchMove\|\|!b.options.allowTouchMove(a))})}function e(a){a=a\|\|window.event;return!!d(a.target)\|\|1<a.touches.length\|\|(a.preventDefault&&a.preventDefault(),!1)}function g(){void 0!==m&&(document.body.style.paddingRight=m,m=void 0),void 0!==l&&(document.body.style.overflow=l,l=void 0)}var h="undefined"!=typeof window&&window.navigator&&window.navigator.platform&&(/iP(ad\|hone\|od)/.test(window.navigator.platform)\|\|"MacIntel"===w

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.0 (Macintosh), datetime=2024:05:24 14:15:32], baseline, precision 8, 1548x1766, components 3
Category:	dropped
Size (bytes):	399229
Entropy (8bit):	7.895377970384946
Encrypted:	false
SSDEEP:	12288:EyyBhBDyUpC6C8xDLyCErm0iXvO1/yCynaB:0B/DyL/8xDLImzXi/yRnaB
MD5:	D2333B7859793545AE8529B3C115D408
SHA1:	D0FA0169D4C1F74E22AC73567B2B5766199B3DE5
SHA-256:	DDAE8CBF930F040F5AAE956F3BCBA16D1C5DD19D1B7368F8A811DA3CEC37B5D2
SHA-512:	15F14B2A462B4D90F4C552073B9A954165DEDE0039817FE99A7140B928EFB76C76BC59F5D0280BA4C61227C7D1EC63A3B3C7C117997F1638D4820985DE3AE0EC
Malicious:	false
Reputation:	low
Preview:	.....&Exif..MM..............................b...........j.(...........1.....!...r.2...........i...............$....'..$....'.Adobe Photoshop 25.0 (Macintosh).2024:05:24 14:15:32......................................................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................B.:.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...oB..w.q..M.X..1.o..].6....8...............67\|<.8Y..5.Em.\|.^[.Hs.p-..uy...l.r.O..N.........j1.E.TI.?.:.........:.b.'..wcYg..].w.."Z.p{\...cw....Q..X..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10019)
Category:	downloaded
Size (bytes):	18468
Entropy (8bit):	4.942984129844562
Encrypted:	false
SSDEEP:	384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm
MD5:	4601BA55044413706C2022CB6C1C3D05
SHA1:	5103EC2FBB389568EBF5CFE4FD721F3DF2FF7AEC
SHA-256:	FE513EF974B767510D0A2B9F1B4D3AFA53185B89AB617C869E5E3D6DB960192C
SHA-512:	8DAB2D19378E34B40043621AAC57B418E56486DCFEBD1A5991BE8A02EE6B071D07EC6BFD9408DEA8FF0198995DE9D42A46E66513D68B40B68056707E4E691E01
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.8
Preview:	@keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-15px,0)}90%{transform:translate3d(0,-4px,0)}}.bounce{animation-name:bounce;transform-origin:center bottom}@keyframes flash{50%,from,to{opacity:1}25%,75%{opacity:0}}.flash{animation-name:flash}@keyframes pulse{from,to{transform:scale3d(1,1,1)}50%{transform:scale3d(1.05,1.05,1.05)}}.pulse{animation-name:pulse}@keyframes rubberBand{from,to{transform:scale3d(1,1,1)}30%{transform:scale3d(1.25,.75,1)}40%{transform:scale3d(.75,1.25,1)}50%{transform:scale3d(1.15,.85,1)}65%{transform:scale3d(.95,1.05,1)}75%{transform:scale3d(1.05,.95,1)}}.rubberBand{animation-name:rubberBand}@keyframes shake{from,to{transform:translate3d(0,0,0)}10%,30%,50%,70%,90%{transform:translate3d(-10px,0,0)}20%,40%

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.916126946588283
Encrypted:	false
SSDEEP:	3:YGQKz9:YHK5
MD5:	1A05A7DA87DC6AA15056803008CD63B3
SHA1:	C323CF157EE9AA01299EE37F5DD910ABD5F5E291
SHA-256:	D7C4D66D157628139F188D200468AC1012EDB77BCB8B11E9C754533D6B44188F
SHA-512:	C5F5C696EE8163A583E64A3D6DD41FCD58A65B67D02860AC4BAE50FDDBDBF55C62938F7253D6900604A11516F1F11DF3FD671727D3A4E4FC5F4E6B7909FE83D4
Malicious:	false
Reputation:	low
Preview:	{"5659":"Etc\/GMT+3"}

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	846
Entropy (8bit):	5.2304508616223915
Encrypted:	false
SSDEEP:	24:t4TU/e/s6ZxzTYTFnEJMoTNefTMoXPCm5t80:D/CxZtYhnYMoTgfTz/Cmg0
MD5:	980CB53C7A3A80A52806016E0A8A498D
SHA1:	2B44D76053436E02DA2598A9A2F8C925F5EDDB2D
SHA-256:	C6520D285F9CF4FAC5EAACB8E522D7E8F330523D727F353E38A6ACA6444982F3
SHA-512:	DCC98845014C4B1B6CFE2B1284E584E7A37C3A301EC9096D4CCE9895913E0144EC3806DA17F656C7FA6CA5544E9D38D9C15DB1456775DE183FED0AC3F705794D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><defs><style>.a{fill:none;}.b{fill:#6da544;}.c{fill:#ffda44;}.d{fill:#f0f0f0;}.e{fill:#0052b4;}</style></defs><rect class="a" width="24" height="24"/><ellipse class="b" cx="12" cy="12" rx="12" ry="12"/><path class="c" d="M54.435,100.174l9.913,7.3-9.913,7.3-9.913-7.3Z" transform="translate(-42.435 -95.478)"/><ellipse class="d" cx="4.174" cy="4.174" rx="4.174" ry="4.174" transform="translate(7.826 7.826)"/><g transform="translate(7.827 7.826)"><path class="e" d="M169.071,250.435a7.019,7.019,0,0,0-2.086.315,4.173,4.173,0,0,0,7.591,2.34A7.034,7.034,0,0,0,169.071,250.435Z" transform="translate(-166.985 -246.522)"/><path class="e" d="M182.107,171.931a4.174,4.174,0,0,0-7.932-2.447,8.6,8.6,0,0,1,7.932,2.447Z" transform="translate(-173.838 -166.957)"/></g></svg>

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4769), with no line terminators
Category:	downloaded
Size (bytes):	4769
Entropy (8bit):	4.942395510347038
Encrypted:	false
SSDEEP:	96:CbRIxL+AydeUatSTLxKFkopDCLVGDGuvfobfoKImywwfofLHqa6CiBacH5VKdMn:Ctw+AydDatsLxKFhpDCLVGDnosKIm5jy
MD5:	E3600264C046B4A79B950629EAFFA7EC
SHA1:	B5D683925159ED5AE73C6D298EC2860A74AA36E3
SHA-256:	90AB83FBA934B86A7FE5327E4090FAF3F251513BB9E652ED69F583535431A34E
SHA-512:	2FEA5C14ADC9794995AB41D23EBBA95A6035AEF1DA38E4A4CC3B481C1C9305B3E9B590B31DFE39DF01604088B857672A7A49E78B06613B9B51EB0195B87830AC
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/cookieConsent.css?version=1.0.0.395
Preview:	.cookie-consent-holder{padding:21px 0;box-shadow:-5px -5px 20px 0 rgba(0,0,0,.24);background-color:#f0f0f0;position:fixed;bottom:0;width:100vw;z-index:10}.cookie-consent-text{font-size:14px;font-weight:600;line-height:1.36;color:#2c2f33;margin-bottom:20px}.cookie-consent-button-holder{display:flex;align-items:center;justify-content:flex-end}.cookie-consent-button{font-size:14px;font-weight:700;line-height:1.64;text-align:center;padding-top:8px;padding-bottom:8px;text-align:center;min-width:167px;margin-left:52px;border-width:0;border-radius:3px}.cookie-consent-button-holder a{text-decoration:underline}.cookie-modal-dialog{min-width:621px}.cookie-popup__contain{padding:16px 20px 33px;box-shadow:0 0 10px 0 rgba(0,0,0,.24);background-color:#f0f0f0}.cookie-popup-content{width:100%}.cookie-popup-header-holder{display:flex;justify-content:space-between;margin-bottom:15px}.cookie-popup-header{font-size:20px;font-weight:700;line-height:1.65;color:#242223;margin-bottom:0;display:inline-block}.c

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	299549
Entropy (8bit):	5.607797251503343
Encrypted:	false
SSDEEP:	3072:lW4lgSc0Iard8OdwDMeba8xqCKqjysCBIQ+9agdDBqzGmRmFHxK6kSH5T5ECO1o8:44zb8OdwDMm9z1zQ+9fdDBqzGaBS/OP
MD5:	E50624DAF9737C8B255BBF2EB40FDDCE
SHA1:	BB66FD5B380E2DCDFDCBDCA8E7ECC94ADBD64ECC
SHA-256:	E7DBAC0C69F15AF619E60FB1F3D7B36153C0D171F20686AF78F379F1E1B863C3
SHA-512:	136C0C320671407A7E6777329E5B48B80C5F8848AF71F4B0D497D0770DD63E1B479348AD8B2C73D9FAEB75D1A49D9869F2B3359558AC9DA4506546FA34D26CE3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-J2E85P7SPT
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	753
Entropy (8bit):	5.26625288436592
Encrypted:	false
SSDEEP:	12:t4CvncDzzA2C4RUF5LqELNCSXhYHuA+YH9pbyVTYHUYHeYHPI0Ai:t4CvnyzvVRGhqiPqutqLypqUqeqPnX
MD5:	E4CB3A63B0C37774F25D771718F6A412
SHA1:	B210F6B8D95567EBDB99852BEF46181375561CF7
SHA-256:	2B3823DCEAD4FE83DB3587DFC12E17AAEB9FC7B1A377DFB9CBC96E69F34976A3
SHA-512:	57B10706E9ACA960A18F1042808B101778FFA990C8FBBDF2A2BE89CCFE789541AA8A5AE145CE3B16AC06C0AF3D8BF28326B5A6B170874C37FC1A09572042C2E6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:#008009;stroke-linecap:round;stroke-linejoin:round;}</style></defs><g transform="translate(-619 -641)"><rect class="a" width="16" height="16" transform="translate(619 641)"/><g transform="translate(62 -191)"><path class="b" d="M27,12h.6a2.4,2.4,0,0,1,0,4.8H27" transform="translate(541.6 826.2)"/><path class="b" d="M3,12h9.6v5.4a2.4,2.4,0,0,1-2.4,2.4H5.4A2.4,2.4,0,0,1,3,17.4Z" transform="translate(556 826.2)"/><path class="b" d="M9,1.5V3.3" transform="translate(552.4 832.5)"/><path class="b" d="M15,1.5V3.3" transform="translate(548.8 832.5)"/><path class="b" d="M21,1.5V3.3" transform="translate(545.2 832.5)"/></g></g></svg>

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12457
Entropy (8bit):	5.009995334696955
Encrypted:	false
SSDEEP:	384:wa3vQ7emABaz8ldENsl5agqpt6FWWw/N5:wa3vQQBq8zl5agQXWw15
MD5:	39A98028EEDE8315F8FF2D2C1F947168
SHA1:	5BF6BA9431001F3B047216AEF2ABF4BFCB37592C
SHA-256:	0DF263A4D7D02D7BF1B4C0E02BF3C5C456228D3F5E715153C7DB9D3944AED91E
SHA-512:	7BD618C330B0B4F414BB7B25E44C6776382BADB92DE1F2C86D7C4DE7508107DD842A29EC73EB301EA8360CA518AE22DFAB36C6B65F2E75640BFEFC980ACECFBF
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/comment-reply.js?ver=6.5.3
Preview:	/*. Handles the addition of the comment form.. . @since 2.7.0. * @output wp-includes/js/comment-reply.js. . @namespace addComment. . @type {Object}. /.window.addComment = ( function( window ) {..// Avoid scope lookups on commonly used variables...var document = window.document;...// Settings...var config = {...commentReplyClass : 'comment-reply-link',...commentReplyTitleId : 'reply-title',...cancelReplyId : 'cancel-comment-reply-link',...commentFormId : 'commentform',...temporaryFormId : 'wp-temp-form-div',...parentIdFieldId : 'comment_parent',...postIdFieldId : 'comment_post_ID'..};...// Cross browser MutationObserver...var MutationObserver = window.MutationObserver \|\| window.WebKitMutationObserver \|\| window.MozMutationObserver;...// Check browser cuts the mustard...var cutsTheMustard = 'querySelector' in document && 'addEventListener' in window;.../.. * Check browser supports dataset... * !! sets the variable to true if the property exists...

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12991)
Category:	downloaded
Size (bytes):	32934
Entropy (8bit):	4.861901040632861
Encrypted:	false
SSDEEP:	384:SD3iRACYe9gkFLBuPTb9Uh3j//bEPjXgA2qNGsoGsQkAL3Wx0yzbJFz:FRACYOpdU9Uh3j//YrXgATGdnsmFDz
MD5:	BDB01526E0B7F76B0889C1C48A58E74E
SHA1:	4D75B305B228AAD5015A40AC849E66BFE668E943
SHA-256:	B75FDCB9CB724ED0E6A3C091E5EA96250E16643C5B9C6427A6240FFF3C026E22
SHA-512:	E6486C5372927867C2CB856918DCEA0E3A18EF3D15C5EA16F03D998E7279EE9D53FCD5BFA0C3FC66C62D51B5167BF8AC0935910E05121A603AB9DB47DEAFCBB8
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3
Preview:	/jslint indent: 2, browser: true, bitwise: true, plusplus: true /.var twemoji = (function (. /! Copyright Twitter Inc. and other contributors. Licensed under MIT //. https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE. /.. // WARNING: this file is generated automatically via. // `node scripts/build.js`. // please update its `createTwemoji` function. // at the bottom of the same file instead...) {. 'use strict';.. /jshint maxparams:4 /.. var. // the exported module object. twemoji = {... /////////////////////////. // properties //. /////////////////////////.. // default assets url, by default will be jsDelivr CDN. base: 'https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/',.. // default assets file extensions, by default '.png'. ext: '.png',.. // default assets/folder size, by default "72x72". // available via Twitter CDN: 72. size: '72x72',.. // default cla

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.869881273775258
Encrypted:	false
SSDEEP:	24576:pH72ww5hMCMIrRraTAn3/WDpecTJPxAIi:pbE5hM9ElWAn3+0wI
MD5:	690E9B41C500FC6727BA1D2DD85D50A1
SHA1:	989E82D228911D8AA5AE078B72B9A2E7B6BFFB45
SHA-256:	B38D2E31ACE7F17BEA1C27C34946C7785BE0C816D2D80D71D3AF0C4EF231F0F0
SHA-512:	BE913927FEE4CDB5CF9BCD8673B638223CF77E42555BB16FAC3D82B39A3F53DEFCC3D53CDCF1BF73953416C47767A9CEB67501E6365C8880F623214BF80A459D
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:11
Preview:	.Of.-....c1__K....As.{.S......LW.GKb...>.r..j.. ..d=..Qu...._.#.>5.fi%.h.iKr.A/.t.[..}.)..K.(...}.a9...r...L.&...U..?.;".p.v.;....Nf;.9........9iE.r........Wr...RD...29P...#....`.7ko.+;.h.`..qHil.@.O...M...3...N.\|......-`....U... .9.v..z..?...4...M9Io32;S...m..Q.F.%.g.r.K.e.ZM....29E.Vt;.V.i....c]xx..%....b..ub.Z...u.s..g...?J..U...$U..V.S......2_.....x..@.).........C.M.1.=....$.>.~....B.=A\!U........n....^.L.r...b.".....B...N...".......;.Qv.F..8= .....%(.1#..O...$......)...s..2@o/>.us..=.....b60w9.....:...K1..5q.j.1y.a.....^.po.......Tj...x...@..s.F.:...k....u.4..2..H.._a..s#..L!.]z..,+..f....$..bo....M..:...cA......./.(WL.....".z=..K9.n^..T.p..B.o.o.0..N....e....."<.`......X?Q..snJ\.j.c?o..o....JU..G...~..z3./&..g.g....&...;....Fd..f.zD.C^...~.v...i.z.......^..b...Wi.^L.Tb3.PK...L..$..,.......m.... ..O..X.....B.....'.~.9$.A......Ya`.B.d2Lf7.0.@...)..l.}>.F....M#...}..U.f]#.i.'.#..J./......J....Xh9A..%...?.Y,[X..~Dq.._s./.C....N%.w

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15505
Entropy (8bit):	5.0176910538980755
Encrypted:	false
SSDEEP:	384:uFbyUQdDxnzedIxhDzCVW2fFRhtVhum7NNmG80dxu:7z+kzCVWcRVhum7NNmG80bu
MD5:	2C544F8DA88A0B3917A93EA8D6F54B5B
SHA1:	46A81833E4FE9942101B88F5E11EEB26F832521A
SHA-256:	CC67C4F54DF577F1DCF1B7A010436B93BC1CCB8F5464701C244C1D88F625AEC2
SHA-512:	EBF62BE74EC7A81E876F56054BE41EC3F327F81A751C05A109ECC03910F8DCE46914B4A4D822C637404F99363B26B0A40A45CE79E8B883462D967C8B8727FC3A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.21.8
Preview:	/! elementor - v3.21.0 - 26-05-2024 /./****/ (() => { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({});./********************************************************************/./**/ .// The module cache./**/ .var __webpack_module_cache__ = {};./**/ ../**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/ ..// Check if module is in cache./**/ ..var cachedModule = __webpack_module_cache__[moduleId];./**/ ..if (cachedModule !== undefined) {./**/ ...return cachedModule.exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = __webpack_module_cache__[moduleId] = {./**/ ...// no module.id needed./**/ ...// no module.loaded needed./**/ ...exports: {}./**/ ..};./**/ ../**/ ..// Execute the module function./**/ ..__webpack_modules__[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15635
Entropy (8bit):	4.6286760300430965
Encrypted:	false
SSDEEP:	192:Xu8ZZ1zilVwBElwuasrpS/5Rv/XDWIsDcQZofbZ066HfHCHyyt08t0B1QiEB1Qi6:+8JilVp
MD5:	3EB6F42042C225E3E1181870E2D9BAB7
SHA1:	C8E3FDC249EFFFFA5B3845CA3BC437737BF3B2AA
SHA-256:	0DC38BC3D89CE90480A7FF1A1E4056AA3B9F8DA09F190013AAA5D0438DD786A7
SHA-512:	58CB8F2B34C7B6AB22CD0DF645D60341BC0EF863BE4B34161B72A199CD551746128398EDD3A05FA3FA424D1E5A1BF25D93996E7BF6ED133DEBBFBBB6E2F0FF52
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0
Preview:	.vegas-wrapper,..vegas-overlay,..vegas-timer,..vegas-slide,..vegas-slide-inner {. position: absolute;. top: 0;. left: 0;. bottom: 0;. right: 0;. overflow: hidden;. border: none;. padding: 0;. margin: 0;.}...vegas-overlay {. opacity: .5;. //background: transparent url("overlays/02.png") center center repeat;.}...vegas-timer {. top: auto;. bottom: 0;. height: 2px;.}...vegas-timer-progress {. width: 0%;. height: 100%;. background: white;. -webkit-transition: width ease-out;. transition: width ease-out;.}...vegas-timer-running .vegas-timer-progress {. width: 100%;.}...vegas-slide,..vegas-slide-inner {. margin: 0;. padding: 0;. background: transparent center center no-repeat;. -webkit-transform: translateZ(0);. transform: translateZ(0);. will-change: transform, opacity;.}..body .vegas-container {. overflow: hidden !important;. position: relative;.}...vegas-video {. min-width: 100%;. min-height:

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	278
Entropy (8bit):	4.997271592547357
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMjBn:t4uz0Lu9OYjfBolV/GbIQwBn
MD5:	25B73E01C13A3C686D9B49A45559AF4A
SHA1:	079395E40EDC20070FBE14451612D76AA0E9D57A
SHA-256:	279ED06C9D4507EC4055AE340638008814C523AD810BF9A55E762B9F074D2D79
SHA-512:	C3E987B66A53B7A295DD2F63057E1F747347F1E93E3C462323B2697985A02E900608531B2235AAC66022AF719AAE3FCC59EED37973067A7B1D0731A5A965FEE0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#A1ABBD"/>.</svg>.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.589780198035242
Encrypted:	false
SSDEEP:	3:Hd1bZc7+:TZca
MD5:	72B31CAB90F926C1CF8F85FE3C1DB9AD
SHA1:	17D2B222B8C52157E31E9CA9D1B478CB9DBBE944
SHA-256:	55E2A681B6DB2A137882A2BB8F7229500026283BF2D4D493620199ABC2D0E30A
SHA-512:	FCCA4EF9689B934582D258E5879BB26B9C3732E30F4281E1844048935B43422932DF62CDBB88FBD9F3B447F6B78D704203B5AE5D54568EE37012F2CD4036C488
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlOHdz5x7IFEhIFDRM0Cs4SFwk9tBIVwY_vlRIFDXhvEhkSBQ2UVPrP?alt=proto
Preview:	CgkKBw0TNArOGgAKEgoHDXhvEhkaAAoHDZRU+s8aAA==

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2304), with no line terminators
Category:	downloaded
Size (bytes):	2304
Entropy (8bit):	4.88051563015015
Encrypted:	false
SSDEEP:	48:shaLYoLFAuLlLPLHxLqsh5LFyLkAuLM5LMjLGLUsshwLwyNLwuAuLwWLwgLwkxLp:YmYIFAqNjHZqYRckAqMRM3yUsYgwyFwM
MD5:	258768B10C3EC2DC13DDB5297D0E4CE7
SHA1:	42D0A7680E2DD40CD6462D211046A5E2E82D5534
SHA-256:	F77D23C5DDB9EE8A277F2AEDF2524ABF459DA0B274BB23EF17B7A02AD91D9C92
SHA-512:	5E10A72E19F1636E95B4F8B84E5C3F0320F24CCE1BA3E57177BEEDB390B2F6C6BBFB247692509E37049E4A5774CD60E3B768E9F5433B02A903C5A16054039913
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/fonts_v3_css.css?version=1.0.0.395
Preview:	@font-face{font-family:roboto;font-style:normal;font-weight:300;font-display:optional;src:url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.eot);src:local('Roboto Light'),local('Roboto-Light'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.eot?#iefix) format('embedded-opentype'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.woff2) format('woff2'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.woff) format('woff'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.ttf) format('truetype'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.svg#Roboto) format('svg')}@font-face{font-family:roboto;font-style:normal;font-weight:400;font-display:optional;src:url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.eot);src:local('Roboto'),local('Roboto-Regular'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.eot?#iefix) format('embedded-opentype'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff2) format('woff2'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff) format('w

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:QQinPzY:+PM
MD5:	8880EB28DC71E73DECB52C83122E9DBE
SHA1:	A247C9C2AFA076B0CEEB238F5244E514AC53BB4C
SHA-256:	A3459784DD0C62E3A52E6D589DC3618857972685CB1F33008E0FBCEC5ADF4E62
SHA-512:	48450033C426773517E3316E279C40316E914BA80B1B0E33BC98100C1A2184C69A6E34794537CC94C298BF1F0B67B4EC37F9645AD55A1642B5812833DDE2CAEA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwk9tBIVwY_vlRIFDXhvEhkSBQ2UVPrP?alt=proto
Preview:	ChIKBw14bxIZGgAKBw2UVPrPGgA=

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	3303
Entropy (8bit):	7.2043802117385916
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAz0Fc3RQzgHbP6H7KHoKEDxzpS9/rxU9m2:WSeknwzAzuzg7P6bK8zA9/2M2
MD5:	8EA7D538628806DEBCA097AA819B0BC6
SHA1:	F586C06C2D1333D9F8BDDE694C578BFA0D3C1A7D
SHA-256:	1558B255FC5C017C0BEA0A1C5A3D469B06B62FDB544BA4428E929E6B9501E9ED
SHA-512:	741D77B70195B09E5F94FD69A37E149684B1E5543ACA50CFEA5BC4DA4508351C12E4AD2A5E7ECBA0DA598EF20700813DA113F94E8BABD23912C73447F4DAA5E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:31-03:00" xmp:MetadataDate="2021-08-11T18:27:31-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:f6b4f43c-8b8a-3c48-bbc9-0f537040b10d" xmpMM:DocumentID="adobe:docid:photoshop:6d9e649a-14cd-2845-81d2-d075bd8a71d6" xmpMM:Origin

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4024), with no line terminators
Category:	downloaded
Size (bytes):	4024
Entropy (8bit):	4.834105238460977
Encrypted:	false
SSDEEP:	48:cTcbZTi7bSNbZFNfiz9Sx99W0FOPGg9CzHni0SwJI/:cTKZi7OL3iJ69XIPGnniHu6
MD5:	70934CDA11A58F4128D4D7AE8F33AAD0
SHA1:	597637B2BB0EE12F8290B17CBBAE0F0543AEFE6D
SHA-256:	775393BEA4358785C0B57FD4B2A4B781C2D849142B7E234E2C40E751DA9AC450
SHA-512:	E419D3664066E57AEB557BD1322C70BC5FDE34033072E1879EA53A31B915E577FD6A16F3ACE140E871257EE8FBAD2EFD3CD28B545CC71B65B82F861277965A92
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1
Preview:	.weather-atlas-wrapper{font-family:'Open Sans', sans-serif;font-size:1em;line-height:1.5;text-shadow:1px 1px 0 rgba(0, 0, 0, 1);text-align:center}.weather-atlas-wrapper a{text-decoration:none !important;box-shadow:none !important;border:none !important;outline:none !important}.weather-atlas-wrapper .weather-atlas-header{padding:.3em;text-align:center;background:rgba(0, 0, 0, .075);text-transform:uppercase}.weather-atlas-wrapper .weather-atlas-body{margin:0 auto;padding:.9em 1.4em}@media (min-width:480px){.weather-atlas-wrapper .current_horizontal{overflow:hidden;clear:both}.weather-atlas-wrapper .current_horizontal .current_temp{float:left;width:50%}.weather-atlas-wrapper .current_horizontal .current_text_2{font-size:1em;float:left;text-align:left;padding-left:10%;width:40%}}.weather-atlas-wrapper .current_temp{text-align:center;margin-bottom:.5em}.weather-atlas-wrapper .current_temp .wi{font-size:3.5em}.weather-atlas-wrapper .current_temp .sunrise_sunset, .weather-atlas-wrapper .curre

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6799)
Category:	downloaded
Size (bytes):	6800
Entropy (8bit):	5.16408402806695
Encrypted:	false
SSDEEP:	192:oGaeyWYBYWSEqEy+wgmm6JF9JMZVlMCqL8IwhOUofsXlbc/adDmbf5w:oOyWSYWrzy+wtz/MZVlMCqL8IwhOUoUB
MD5:	7A3165D03FBEED5881F24A71BEB08A49
SHA1:	3615249E62B0ACF66E2250B08CB47BE90D5E530B
SHA-256:	9AAC81AB63E438125D3FCA0D44ED06C7239296214EC7E53A595D62E04B9E0657
SHA-512:	377700E7BF99F4A2125FE5DE6A2EE9E4D4E14DF8BA758A94B2374E7B6C68C9D1075838F1B4648AD5E2FDE8899D7E0A32052681A4AB071966525478AEC80E9AEE
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1
Preview:	!function(){"use strict";const e=(e,t,n)=>{(e instanceof NodeList?e:[e]).forEach(e=>e.addEventListener(t,t=>n(t,e)))},t=(e,t)=>{r(e,t,"toggle")},n=(e,t)=>{r(e,t,"add")},o=(e,t)=>{r(e,t,"remove")},r=(e,t,n)=>{const o=t.split(" ");(e instanceof NodeList?e:[e]).forEach(e=>e.classList[n].apply(e.classList,o))};let i=null,c=2;const s=()=>{const{masonryStatus:e,masonryColumns:t,blogLayout:n}=NeveProperties;"enabled"!==e\|\|t<2\|\|(i=document.querySelector(".nv-index-posts .posts-wrapper"),null!==i&&imagesLoaded(i,()=>{window.nvMasonry=new Masonry(i,{itemSelector:"article.layout-"+n,columnWidth:"article.layout-"+n,percentPosition:!0})}))},u=()=>{"enabled"===NeveProperties.infScroll&&null!==document.querySelector(".nv-index-posts .posts-wrapper")&&((e,t,n=.5)=>{new IntersectionObserver(o=>{if(o[0].intersectionRatio<=n)return;t();const r=setInterval(()=>{const n=e.getBoundingClientRect(),{top:o,left:i,right:c,bottom:s}=n,{innerWidth:u,innerHeight:a}=window;o>=0&&i>=0&&c<=u&&s<=a?t():clearInterval(r

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	1839
Entropy (8bit):	4.75373411110896
Encrypted:	false
SSDEEP:	48:YwFS15NUPUC9YNE3SEAHE5/OcbzI3IYJzIaIYY3XaI:YtHbC9YNEiEeElOcOjyr
MD5:	DB75C98F61ADA69C8CB57150010A6CCA
SHA1:	45B072A731C8D5519F6F2EAC4A6F45815C7B22AA
SHA-256:	5BB53A6E32D8A1EE0372E1706FBCF2C8EB9D41952A45C7AA6E12FC46EC22FB73
SHA-512:	EB02E6665482D4DCEA1FFB40D4ECF5D9C11073C1018E384CC5547FF468CD37B9E181BD1D2C1B5012EAF562DCA0B51B47E528E4F8B9A4C0805B0A939DC900D828
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/cookie.js?version=1.0.0.395
Preview:	$('.cookie-popup-button').on('click',function(){$('#modal-cookie').modal('hide');$('.cookie-consent-holder').css('display','none');;if($('.cookie-select').attr('data-cookie-selected')=="true"){$.get("/acceptallcookies",function(data){createCookie('cookieConsent','all',8765);});}.else{$.get("/clearcookies",function(data){createCookie('cookieConsent','necessary',8765);});}}).$('.cookie-consent-button').on('click',function(){$('.cookie-consent-holder').css('display','none').$.get("/acceptallcookies",function(data){createCookie('cookieConsent','all',8765);});}).$('.cookie-popup-link-holder').on('click',function(){if($(this).closest('.cookie-popup-section').find('.cookie-popup-cookies').css('display')=='block'){$(this).closest('.cookie-popup-section').find('.cookie-popup-cookies').slideUp();$(this).find('img').removeClass('arrow-flip-up');$(this).find('img').addClass('arrow-flip-down');}else{$(this).closest('.cookie-popup-section').find('.cookie-popup-cookies').slideDown();$(this).find('img

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	929
Entropy (8bit):	5.000714722316648
Encrypted:	false
SSDEEP:	24:BkjokjEnkkzGePkxgyRthh5yg6HnSFQ+mcRq:BAoA3DxdLVDo1+tRq
MD5:	735949F37156FA0C34A76A78E681C29B
SHA1:	D5647C5985D1D7BF9EE71604387D552F3428C18E
SHA-256:	918B6F43947A5B4039B775BDF46FDAAD233E80B5887FFC8EE7923AB76DAAC351
SHA-512:	2D9347FCB75E76F7F9CCE5A9E4764CB64812ECC52E62587C6331AD3D15C85075C15DC5C3402FDCA5D3B17BDFA005C5EB0FD9E67914D1E9BB15A11787155D280E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/image-carousel.9399f19d95d7300cbc2e.bundle.js
Preview:	/! elementor - v3.21.0 - 26-05-2024 /."use strict";.(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["image-carousel"],{../**/ "../assets/dev/js/frontend/handlers/image-carousel.js":./!***********************************************************!\. !* ../assets/dev/js/frontend/handlers/image-carousel.js !. \*********************************************************/.// ((__unused_webpack_module, exports) => {....Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;.class ImageCarousel extends elementorModules.frontend.handlers.CarouselBase {. getDefaultSettings() {. const settings = super.getDefaultSettings();. settings.selectors.carousel = '.elementor-image-carousel-wrapper';. return settings;. }.}.exports["default"] = ImageCarousel;../**/ })..}]);.//# sourceMappingURL=image-carousel.9399f19d95d7300cbc2e.bundle.js.map

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (806)
Category:	downloaded
Size (bytes):	3658
Entropy (8bit):	4.889118130981844
Encrypted:	false
SSDEEP:	96:w1GDvTQ65yEjrT/jshytcSOHMXVls3VxIzVOA7V/nxqVce9V3:6GDvVjrT/jshytnO+Suf/YT3
MD5:	7318A3ED7E81B79172F069D1552DC159
SHA1:	60DC8D3808A5338EC28CB6F86C8CDB34F9C422F5
SHA-256:	A24C80F362334C3EC33AAB2E54D2BDC75B37BBADC46ADA58A506E9DF2A406DBA
SHA-512:	01B503C81C12A66C09F96CDAE9209A028851870753C75F3CB4CC9CFAFDDB19267532BD71577F8A03793C9E9AB1F55DB5F99F7071F89BE5C5A54D6C1FFB4F74D4
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1
Preview:	/*.Theme Name: Neve Child.Theme URI: https://themeisle.com/themes/neve/.Template: neve.Author: ThemeIsle.Author URI: https://themeisle.com.Description: Neve is a super fast, easily customizable, multi-purpose theme. It.s perfect for blogs, small business, startups, agencies, firms, e-commerce shops (WooCommerce storefront) as well as personal portfolio sites and most types of projects. A fully AMP optimized and responsive theme, Neve will load in mere seconds and adapt perfectly on any viewing device. While it is lightweight and has a minimalist design, the theme is highly extendable, it has a highly SEO optimized code, resulting in top rankings in Google search results. Neve works perfectly with Gutenberg and the most popular page builders (Elementor, Brizy, Beaver Builder, Visual Composer, SiteOrigin, Divi). Neve is also WooCommerce ready, responsive, RTL & translation ready. Look no further. Neve is the perfect theme for you!.Version: 1.0.0.License:

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	802799
Entropy (8bit):	7.982411109575754
Encrypted:	false
SSDEEP:	24576:8KhzM2GGAeTe6ycQuM8oAXnN1DQj8nIwY:b+OAev2rj8nFY
MD5:	FF4C191829BE5C9B85BE7EB6FF41BBD1
SHA1:	183AB788207F0AEAC5B9F23A7B428BD03AAA5D3C
SHA-256:	8557ACF325E3D97FB025A4055192272D6D06B2DA9EE2E69A24CC32BAD4F89D9C
SHA-512:	A8A958B27AD1B6D310B8615A75E8B84F28E9C707EBFA98D22EAEF9B31A183EB307755B717C36B54B3BE42E1ED9DECC3EDBB12AEB3205F6948D6936FE6861D0B9
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/011.jpg
Preview:	....&@Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:30:16..............0231...................................................................r...........z.(................................$........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...E..I...t..F........?Gu-....._B..%...^.n}..mN.../.k..>.U.n.......d..d.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18798)
Category:	downloaded
Size (bytes):	18833
Entropy (8bit):	5.198890693042313
Encrypted:	false
SSDEEP:	384:ivzwv2QYnTte0KKscI1WxUy/gdLzrXmJUDWjFkgoKjJj5Sh6W0+:WwOQ2te0KaYrXm1hR5Uz
MD5:	F88D5720BB454ED5D204CBDB56901F6B
SHA1:	F1952292FDE4B15936E9AAC16B2B9896684DB95B
SHA-256:	726B820E44F6AB90AD991D30A4BF26D3A5D71493CBCD1FB1EFD0D14E89B9DF2A
SHA-512:	F7E3EC0C5B832116D75CAC2A5A40AB6FE673CC6C0996BD898F25850ED5555484D821E1FC4CA039C69DA3AB51FAA25613D622DB1177D7CDE16DA477145C3A6E22
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/underscore.min.js?ver=1.13.4
Preview:	/! This file is auto-generated /.!function(n,r){var t,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=r():"function"==typeof define&&define.amd?define("underscore",r):(n="undefined"!=typeof globalThis?globalThis:n\|\|self,t=n._,(e=n._=r()).noConflict=function(){return n._=t,e})}(this,function(){var n="1.13.6",r="object"==typeof self&&self.self===self&&self\|\|"object"==typeof global&&global.global===global&&global\|\|Function("return this")()\|\|{},e=Array.prototype,F=Object.prototype,V="undefined"!=typeof Symbol?Symbol.prototype:null,P=e.push,f=e.slice,s=F.toString,q=F.hasOwnProperty,t="undefined"!=typeof ArrayBuffer,u="undefined"!=typeof DataView,U=Array.isArray,W=Object.keys,z=Object.create,L=t&&ArrayBuffer.isView,$=isNaN,C=isFinite,K=!{toString:null}.propertyIsEnumerable("toString"),J=["valueOf","isPrototypeOf","toString","propertyIsEnumerable","hasOwnProperty","toLocaleString"],G=Math.pow(2,53)-1;function l(u,o){return o=null==o?u.length-1:+o,function(){for(var n=M

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4348)
Category:	downloaded
Size (bytes):	12668
Entropy (8bit):	5.2760558744806465
Encrypted:	false
SSDEEP:	192:BhG9vQHYX02L02peOmxCTkiF/g07W/NhhZWoTqGf7G0tcUvZFNc0D:XnOehCTkiUhZWGZNc0D
MD5:	44AC6018DBD60137919DC01ED6D5E631
SHA1:	D3BD504859A56F44571984EA43B534C38F330E63
SHA-256:	450C1F77EE94D7F76BFC143D6901034B121AF261F54FFE687AC8065846C88E03
SHA-512:	7E65F06F557100FD767F15233128020879477296453FF2FFAB5BC229962D79FF8B3263BA9DCBEA6A582760F1CB67DE74B0E039E7D3FB26FF8FB385BE7C7A14A3
Malicious:	false
Reputation:	low
URL:	"https://static.whatsapp.net/rsrc.php/v3/y9/l/0,cross/58P2v5ZIoPt.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	._9y16 ._9tjr{font-family:Roboto, Helvetica Neue, Helvetica, Arial, sans-serif}.UIInternpage_Content ._9tjr,._9tjr,._9y16 ._9tjr{align-items:center;background-color:#128c7e;display:flex;height:61px;justify-content:center;max-width:100%;min-width:100%;position:fixed;top:0;z-index:1000}._9tjr._aerl,._abp-{background-color:#fff;height:56px}._9tjs,._9y16 ._9tjs{align-items:center;display:flex;justify-content:space-between;max-width:100%;padding-left:8px;padding-right:8px;width:90%}._9tjt{align-items:center;display:flex}._9tju{align-items:center;display:flex;justify-content:space-between;min-width:80%}._9tij,._9tig{display:none}._9tii,._9vc_,._9tih{display:block}._9tju{justify-content:flex-end;min-width:unset}._9tjt{width:80%}._9vc_,._9y16 ._9vc_{color:#fff;font-size:17px;font-weight:500;line-height:26px;margin-left:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}._9y1a{display:none}._9v92 ._9tjr{box-sizing:content-box;padding-bottom:61px;position:relative}._9v92 ._9tjr ._9ti

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	134484
Entropy (8bit):	7.930804106445166
Encrypted:	false
SSDEEP:	3072:Ht2Qt2a6QYy84C+76PspyUlYzO5TTY4ppfIRjejHt8iDmUsPsCDRq:N2a2a6hxu7hygcRqalUWsCU
MD5:	EA6A5E448C23C23404E0937E8599A3B9
SHA1:	129DB6C52A45DFD5B4767D9A5406A197F9E84F7B
SHA-256:	2A6FFF60137913C5E6FD044FC931FA603644339756763A7CF78107AFC3727CE1
SHA-512:	C8A6DC30DBF0E84E47BE0F9CA3488A3896368349D714AC61FDE6E10E27AF2D1EAA287D4D2CBA9091739994C5738A406B7B35CB47A9FA0F03FE3672A2F948302C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:25:44..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.P....E..#P.'.....8...=.C&..s+.8Z.X...-..7!...g...........@..b.fK...fCO.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
URL:	https://campobahia.com/wp-content/uploads/2021/07/whatsapp-2.png
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912869958027777
Encrypted:	false
SSDEEP:	24576:+GQvx9H6eSstd4u2+ABzdAwg71ACvIBDXMd8XBLP+d3:+T59H6Tsb4uRAJyj7XQBDp+d3
MD5:	EA25B79AD306D7BB99EC84436852015C
SHA1:	B86D8B376804EA90AB9A62DBE7A2BEE11E96F920
SHA-256:	22ADB5E9118628AB991F22C9BBC387DCE582836ADB393ED56206AAE0EB378379
SHA-512:	68E2DCDC3888EF9F6074D886BBFA530736F745C8D5CAA6ECEEE0F13688279F1A0C27D106A27A143B5EAD7C7A80E23B9C8A16E2ACE78F57E39735BA006DEF4B14
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:8
Preview:	q:.p.Q..9b....k...z..!.;.@.5~...a....q.....3.W....1.L..7>n{.5).a......6..l.p..\|e.H.f?]Q`../p...y.ATK3...1.@..P...,+iV..XP.....90.W2.Na!G.'1..9...u......p..x....@g....M^H...`..$.....[5.)N.\._H.[.T..t....D..f..tk.....C....0q-. kX...........WFW..\.-..%R.[HTT$3..1.R......B.cX;dGL...N.H.R..v'.Q.mL.G.-..XB+......".f..&{....''...T...B.../"..T..............U.q...\.....'\|...A.M.}r....#.y...G/p...IuP0.......6.*.o......3.Bo[0..4.;h.8...dS/@.......ir.....l..:...>Ba...i.wP^..`...I>.V.'...u...c?L.......8....4....6....=...I...y4.C"....N.1Z..)[.......vF...f+..y9.....@..b.C8q..x..M..fnO..$..6.G.r.L..a.Y.I..._...v.\..I....t....X).e..X$Oe.n.E...fw.xK...`I....$.Z....X^sku.".....0,........x.d....a.!;.^.... ......Z....o...`Vt..L...,$..,.B'...ia.L4.^.z.{...MQ.\..T...L.n....).......{..)UW...Hl.....e.......B....7d...Y...4.].^:.\.`.6_..F.~......A..m.#g..#l.U.n...O.p,.I$...Uq. ..\6.aQ....D..r.IK.xx..q~]@..V...<1.-.q..Y<.1;^1h....Y...q..l.Ou..c[..o..Z~..N..<..U...+..

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	305452
Entropy (8bit):	7.9736650743760755
Encrypted:	false
SSDEEP:	6144:l4XhceQHiQCdf2vftEBWAgF6ZU7owqtp6wgNpJCN9zWeumzDH:2XhOHiv0fxt6FbCnCNMeHzDH
MD5:	76AC333BAA4C6C9D96AF7C0088D0BE28
SHA1:	EBC0A14E1F7203288E4FE8D574E1C3248B510F58
SHA-256:	BF4AEF9993D7395793E6DBF1DD970C65FC9A2CFA75815EB5F3268CBEBDCF9929
SHA-512:	E61ECBA9D147EDA7850F27736DD7932DB0517B77A01DF6C7CA1B4725697034C42E9728859C2BF619CB2BA78291F1454EE953B29A3A891D8E4F497854E19B35A5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/15-hotel-desktop.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:11:16..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?........t...1.V...:.A:...uo.".7...............$..]0..vc..\...X;;/.ie$...y

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.913207640774192
Encrypted:	false
SSDEEP:	12288:7eJAAzG4cCPgqJ0nRWWv9ZU5FCt2lc9qWiR36lsjnDhT89MWCJDUok/AV28tIypE:CeI1kZlZJac6R6W94g5Jk/AV2+ILP
MD5:	44614FB6A7F2FA50EE1135B0117F00F2
SHA1:	65831D2CA372DB2C4CC394B4A51F6CF743E93B45
SHA-256:	92A272671F1CFAE7D03E329E84DAFFD744554F9E352AB26F514174292779195B
SHA-512:	13C74D7B7CC426E3EECE54228A92C8A7D9BD695F80B1A62C0341CA27AE9B121B8D97AAA0C929E041EF17160E04693E963742C39F7A288198439B042425EDD79E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:6
Preview:	.t..c..~....FF...z.81K.@.8...:.A.....h<...@I......$o.......a.....Z"....=cZ..-.z........\...?..?.O......1.m.x...JY}.2....M....3...\/l.Wn.Qs...w.....92m.v.(.7..Vif.Y.T..#.....&.R.&61r..b^.. B.YB./.\|5.......`....c...C.;Z....nc.k.n..h:..........o+.nZ44zt.[T.d7LB&".<.i.;..I-.V.a..c...... .....c..k)..<[j...".=f"........J..{K..b..`./..R.E'e..Y..R.o..[..Q..Y...".3..6...q_.}fj`.......\%....g.\|..L.1..$V%0.a..M.+...+.1.uR..n.P.....YHLI.U.....C.8Q.;.W....>.V...T.2.>8..+`....[..>'.../Q.E8.]S0D\|"......q9..3...L0D..KF....t.K..]..r....5.<....Q...e.0pD.....B8?.P..\|........Z.......:.SXn...[t..Hj....... .....9..g..`...`#.h.G.$..HL...).....2!I..=..T<j{....I..q...g.....'. ,.s.,...;. ".A.=f.R.[/v..\|E...3.-..@.m..A%<....rE........H..=..Jh....+..hh..y..Z.M"s&.M..J......S......a..(.\|4[..c+....N...e..Dw..a*.O.G...D....-..........HV.U.Aq..L...%v.<.......DOs!..Sl...J3...D#..[.F..p`t.O..[..s....~us.`.Up`.....>..X.......,.Z.<G.2pJ... .b.....G#....>X../..M.-6.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 779
Category:	downloaded
Size (bytes):	357
Entropy (8bit):	7.420870731675725
Encrypted:	false
SSDEEP:	6:XtnelZJJeT8Dp40hT6ipRzQGNafOGc4v3qn8d/UETt5OGwWAQmWrk4zP3+zDR9q6:XqPDawBHzh6s4inC8amirk4zP3+HLWq
MD5:	7B1B6AF2D7195ACE55CA13FF7440C740
SHA1:	05B610CB14C907657144AEBA04DFC433AF44E44F
SHA-256:	D95783EA8D9D9820CC6A721E7E0D44F5CA59D19A86436714D1086AC8F4925D4E
SHA-512:	93A1FA46FB4ABAD3006288DCA0F2B12E292584F17A5F3D73B433375C3D1670FF6AE4C98D4BE396CCEB878DAA7190997969D88DE149B8629A1EE2487FA318393D
Malicious:	false
Reputation:	low
URL:	http://fonts.googleapis.com/css?family=Poppins%3A400&display=swap&ver=3.1.1
Preview:	...........;o.0..w~.7......,..U1T]... .<,.T....n.J.......:..P...D3.<.}'.2.... dU[7....=.u'..OG.[S...6k..KQWG..%..v..o2...d\W...44...<.X...JH.M>......<\|...k.....I.+.>.iW..K2..eI.j..AN.Q.S=...y.(.!.*.......h...X..rcH..$Q.H.eF0.......!x..+...!...Z...Y.S.B.....`..?.,..ON.v..o@..pE=u....".E.......e.[FT.Oamc.6..@..X.PT.r..l..............d.....

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3184)
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 110934
Category:	downloaded
Size (bytes):	33463
Entropy (8bit):	7.987350798351485
Encrypted:	false
SSDEEP:	768:qtSKaKv6cS1/ZM3d+PvjWyDt0fiSqFzPIBASJHW4miBS:qtSKaM63/ZM343jPJ0fAFzuASpRPBS
MD5:	ED422055FA560CFE712E9D8C5CB3C156
SHA1:	D61A2051BE4410F41393B76CBDFEF35FBC8A4284
SHA-256:	AF9F763C665F3B988741F08A19F4B2E74E0F6A30195246881535883A89596204
SHA-512:	1EB540121948DB74F5611D14805B3549E9D9E282C29FF52A222F95416FBF1B76EDA55A842FFF75C1B3DE3BFC27D47AA47C097E7F75B60EC42727ED5C68E9540E
Malicious:	false
Reputation:	low
URL:	http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg
Preview:	............r.H.-.[z.mVT.r....l.r}..:]]U.r...\|.I`.H+...L..u....~L.....y..&.....3..K.$..}e..2.^{..G/.y...~}......g.....i.....[p..iF....Y[.Q.7.N.E8V.".T....Oz.8.M5.c.q..R....E.c..L.Q....dd...g9Z...x.J.J...[.&.y.#f..-...(.i+`......./......s......O...............w".O[..G......7?.OZks'....vi.....'<...t.Kn9......A.r:..9....(HO..........I."..N{....\|.2..VceM{.-..1^v!QB.i.mEs....!y.......s..c.r.....M1c.../P.2..&.ax..46.\.7h.t\h4.W...A. p;Yn.>.....]....?..t.5....`y..{.q..W.7....j;;m.t$..jI.....6.{...{...t:w./!..3...;+(..(D.....~o\|..3.t/.9.a.T."k=.j}./mk.j4.J..n..r..J......gD.].x.o:....7v..I_Lql..R..k../;ZY...Z.v..?+....W.h-z8+..gLZ...X...M.MoQ..7......lie&..._..S.3.]T._R........L.h......=.Uqi...`^.f.v...+..-...X.ez....D=..,J...\c.N..-..w...?1..,uS..Pv.....,.{.;.j.F..c.P.Z...(.2~...k.......s.=..{..3-.HIgt.,.b.....A.... ,H.n.....Nyl..h...me..\|...%bM........Mj\_..~F.......GA.=.7...W.@!.........3...h...X......6d.t....q.bZ..7....w.8..R.@..I.......g..-

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	227565
Entropy (8bit):	5.377672909480599
Encrypted:	false
SSDEEP:	3072:FBwvwCiI2wJLOFwmgEFsuRUh4159bScYC:FBwvwCvJ6FnfstS1bmcYC
MD5:	B0063255C2BDAE4548747B85C55538CC
SHA1:	D62032BDEC4C283ABCE70D5ABCC6E1A15925B9AF
SHA-256:	E38A10B784BBAB6BD44A898366D659442244B7CB36A0550B4B5F3BF45EE62ED3
SHA-512:	7B2BFFFFC7F4420145C027B44EA6D645D3108BEDBDC174AD233960A34E9135EB89ADDC86697C2D928E19557F460FFB02D01F7CA1C9EBF2DAAF8E7D3EBF08E172
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.3b9efc26f753310c2bd8.js
Preview:	/! For license information please see modules.3b9efc26f753310c2bd8.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 101 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9191
Entropy (8bit):	7.938521148291647
Encrypted:	false
SSDEEP:	192:s2eqYu+EMKSMWVUt0TRuBaRBQH5RYZjr90hENVqMRcrU:rlSRBTRuggstSh2Vrc4
MD5:	417BC7311E6B16871FFD5A47F2E38E89
SHA1:	8FFF46B7005B815CE4D18C42C552709FAF7D5403
SHA-256:	CCE8C8D20EFD705D5007FBED448FD859615C5C66C9F38F0A6271E9426D6F6C1D
SHA-512:	A7D1736ECBE68577ABFD83FC103B8264B3B3AEBD2FD4DE15D04968D14B1DD0B294D6DAD7EB98A9043A727728A6711872333108754554BEB5072EAD71BC0A7826
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/06/favicon.png
Preview:	.PNG........IHDR...e...d...... .j....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D5800905D05911EBA4B3CCA392FE903C" xmpMM:DocumentID="xmp.did:D5800906D05911EBA4B3CCA392FE903C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D5800903D05911EBA4B3CCA392FE903C" stRef:documentID="xmp.did:D5800904D05911EBA4B3CCA392FE903C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...K.. WIDATx.....U....C...d..A....T@....U.,Y.."....V....PD.Qr..9IP..%.......;u........w.=3.]]........u..]T"o9-

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x751, components 3
Category:	dropped
Size (bytes):	150320
Entropy (8bit):	7.9743660273516745
Encrypted:	false
SSDEEP:	3072:WyzNvZ6ugmpYvhxIvtMPGRCWplhDytB75YjAiBCy1buo/dUHcW4:TH62UxIvaGRCWBDy/5Yjay1P/dUHt4
MD5:	E34CD543269A61B71F5DF397D42FB4ED
SHA1:	A452AF6EC0016B4B445726B2C1B2ED276F6F1C2C
SHA-256:	49D5CCA98DD1BBB7EE9F0460F275E5D022CDD218816DD93BF875987AF171B9EB
SHA-512:	169EF4B10C8D7AA0DAABF513102B41C8E7CF867851342D3B9ECCF7E972565D097721D096DBE1EB657E37853712C667736C5CD503C89B7472331D28246ACB822B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:03D433B6DB4F11EB8D92C19E557BECBF" xmpMM:DocumentID="xmp.did:03D433B7DB4F11EB8D92C19E557BECBF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03D433B4DB4F11EB8D92C19E557BECBF" stRef:documentID="xmp.did:03D433B5DB4F11EB8D92C19E557BECBF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2718
Entropy (8bit):	7.84314554182839
Encrypted:	false
SSDEEP:	48:K51W5nlJJeqrQ882js7n+tkxurNhybBt/aBpC8u2bVli6DKGvt+REbw72chf:K5KlOqrQ8/js7vxcN89t/aBVzddv8EM9
MD5:	33A58BBC9D888616F55532F9BCE93BD6
SHA1:	16F8A13CEA832DC392E6C1F7DD4B348A22BB9CE8
SHA-256:	A6EE484C6373C81E58438A19DEF6D3466BE85D9744FCB7D85F6A9F49A242081C
SHA-512:	568F2ED876477DFE07D23E71BDFC645402B6BDD69E77FB9C190DF75330927EE1C69EA1B48F739618915A445EE2E643B2B6AA0E25FDDA9E8C4BAF465A5180FBE1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png
Preview:	.PNG........IHDR.............<.q.....pHYs..........+.....PIDATx..Q.......!H..D$H..H......>...H..<.. RJ......B.)EDD..J..`..[D... "!.. %..Z...lCX...sv..33w..{...p..{..=.;...;.s&.c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1.-.....;.........._!..!.....m[/.5.")...]!..B.?M:.O...._B._...._.v..E2HZ.....9C.6IO..9m.../.;.\|.x..&.U.U..,.y.k~....Mm_..I;..I..#+_....Z......... i{j....H./.?[=.p...J..7.>.e .Fo.\.F...A$].y..23....%...f....x;.qQ..OU....39..F..o....`....x...o..h....$...9a..Y.C....a..pGj..J.H....W..]...t...y`_.v1....p..r...~.%m..x..n.kj...@O.1.....4j(T.4.+..)h;..H..\.t...y..3-.S.mDT'..N\..xc.G0..Wy.8$iB&2..Du..Zm.j[vh...:..l..S...2$Q...G-..#........W..D....IA.s....\..:.$N.M.....m.....~.z..`..g$]..w..uIG-..I.:....rm.,.OK.X{...ab..Q.k......W.(.h.....k..^.{IO.-.I.z.J..D.......!..~O..+M..6i`.......o...Z\.P..I....#.\|Xj..v.o..6...}....0B..g..M-........2p..\|.8...kt.......&..N6^.....:.I_H.l&...\|....?..h...b2...1.5.i...}V.l....x.SI.{

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	96144
Entropy (8bit):	7.890385088443004
Encrypted:	false
SSDEEP:	1536:KIjMIDdqwvBVIiwO17efkXRYwzuXeIpdpXzUB5BUVSfCFS:KIjMIMiBV+Ie4YcunpXzU6Vkf
MD5:	8B19BD5E58791AED24913FD56F067106
SHA1:	73F32CB9D3E6D031182D9A48BBA0F595C2670373
SHA-256:	2F3C4AB19AB8141B6D4E96E32ECE5475B548D1961203945A65CEDB83E3F99103
SHA-512:	7E8A6B564937F3C9FBFCA4C2FEFBA8984227FD2E326E5AFBCA797EDBD32D885C96CA8FC8504A0957A355F1BCBF022354D87142D11B9CDA218CEFD3272B013A33
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/009.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:23:17..............0231...................................................................r...........z.(.................................r.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......_`..nx...Is....8..{-..P'......T.._..a...^.Y...S...K.-.R.a...^.Y...

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 96924, version 1.0
Category:	downloaded
Size (bytes):	96924
Entropy (8bit):	7.997509095261741
Encrypted:	true
SSDEEP:	1536:SXEHmp0ciVUu44QV8VguyD24D1AYkDFM7lmt5Hl+lB2AbRvDEk4gfu4PjzHhRn:2yTVNEV8VguySVhy5O5HABTvD043HPn
MD5:	8192142E6211A46255BED91E8D5717D4
SHA1:	9ECB3FDD5EC6331CB20C17003D3E3E98161C0468
SHA-256:	B8E6C0950B169464C66DA055D932BC8CF911FD8A937F1D9CA60FD0F0E9F6F083
SHA-512:	CD85C7AE26CF08F6B06417AAAD792DDEE91DC6502EA9333C9C1CD1E1A5A390C916EAC1F7C1B973BA65EA064B3CE3CBFAE16F62867262303B4CABE305B07871D6
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0
Preview:	wOF2......z.......U<..z?.........................T.`..\|.............$..$..6.$.. . ..5..A...[!.r'.......m...S...ll`..<Kz..T....0n...;..Qo.R.....$Y...y..l..D!.,-P5..F..Exjc.[.Q...(..0V$.La=.K...FDiy^.....Ju.....X..v.C..77).."S02...(....ta..))I.$L.......2y.`.b..`y<.A...{z..Pu......E.K...u.Z..-..f..j&&.....A...A..%m....&......_4...q7.>9..=\|n.F...+E\|).h.H.....j.&;Y_H)...5.....X...9..;r.j.\..x...M]..U.A-.u..U^....xd. ...1.s.=; ]. As..mit-.....`(.....n~?.uh.I.. h0O m.T.:..."....W......JI<r....x.....,a_..KBi-\Dn....Z.x.($]."U.....-jw..SF....9..Q..X1y....4.....Uv......z.,<....&D..\....0.(K..3.`.v....n[...........t...3JCK..M..?.[..Y.....l..G...o........_..2...2.d..9s..c.........[1rl."926F.Q..$..&X........h.0._._P?.W.\|....`p.j....).....[..&.C.yR.s...]o.e;.T.f"D.c.\...8.p....&R..r...".T@I.,..g..~.;.s:....O..8.K X....@..-ce.J...f$.}......f1.,..N...9.n3.fy3..p.A.P.:[........X.x.;.....@f` @.mV.\.L..).8p.dj....M..G.,..-.....Y .. U.D.R..IEM.?.:...T8..d.(P...

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9124491074098495
Encrypted:	false
SSDEEP:	24576:Ae5SLvJo9PN7SksJYvHQUh85iIlK2yifjghznrMG+dVCZbwbZo:BIholN7Vs+vZ2dFfMhkG+dVCht
MD5:	DF4640F86A25B23926A6B0BE07F49CFC
SHA1:	A2D775426602348A5F7E272B26F2AF2026A9FA30
SHA-256:	3EF78FE242FEE0610D5565980C6742DA4B05C2772C6013A0AF366AAEC7146216
SHA-512:	876BB08E0C646D8F01D0B75D37440198ACD8B2B9F99E3C00B43E2B2FDAFC3E099DEA2AB8B227DFF63E2B1178C1625C77486E0546B427EF5962F33FD2C4C430AD
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:2
Preview:	ju..<..(.`..K...,..[dY....].q/.3.n"t4p. t..VeE.#o.y.a..p.0t.0C......gl.NS.....p.B..^..@r...O....?kRJ...... 1E..... )..Xp./M..t.[g1Z.m..by.~.aF.:8o.5(;..+.LdZ.%.V.....F=...{.O....'.p.T....8._4H.<1NF...KC[.!..H.......'..).<.2Q.......G.....^..1....G...gs..=..o.T..s...`\|".5..,....t...j..\|..\...]~.t.7"-?../&U4...}........c.C....)3l<J)..S.\.).)M:a=.}5[,..R.'}.L...Mr.%hp$z..T.O..H....F.3.'..N.&..J..c.......k .?JFrf.s....7...c.Q...k..8..\|..T..k....g.u(.e.......J..+_U...K... ..j9..h..a,..4..R2X.=...@.f....x....V.i..F.uV.....G7Y)k..i..YA4r......);gF...R7.Ac.~h0..zJ@.M.e.X..G."..`....UY.3:..>.....9...:.y.h-..nt0..w.......+.E.u.R8<X..02V.>.`....s.2.....e...#.R....).....l..AS$.Q..s..E<../p..O.T......P./...m......v.cF... ....o.I=.....H....C;u...,.8i}....o............P.o9...W..G..0.n.]4.k.cy.<..Z. ....F.U..H.@l.......1...j...<x.z.I..8....3 .b.k.z..>A...B.e.?..3\|..$?.]...:.\.i6KKV..[.V..K.....ih.....M.99./.M\|...q.=f.Gu_.....#...L.".(...Mu.p..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	4.859948949745745
Encrypted:	false
SSDEEP:	96:B/drbqnbu4o7SyN1pTDkmDLuyMe/664lZjOcniojcQ1EaETCqhnyE1e2/nNVdC+A:lZqnbu4oH3pTDkmDLPN/664lnN+anqh8
MD5:	85BB9BBFDE70FC277FE7C4AB80AAC6D0
SHA1:	D38A6EC6209A516DAED948F28D2A5C49551C4EA4
SHA-256:	E5799BCD203C0840F07D273DF9853688D3A18162ECB193C6ADF394854141E624
SHA-512:	E7DB5D86E94387F56A7C2C672E1F6B807ECB7BAB695EBB7E089C4412A83AC1FA08423CC7717A6FB826F0BF191A174B47877E36565CA72B34A571420B509AB9FA
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/video.57bb05ea17924bda3c02.bundle.js
Preview:	/! elementor - v3.21.0 - 26-05-2024 /."use strict";.(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["video"],{../**/ "../assets/dev/js/frontend/handlers/video.js":./!**************************************************!\. !* ../assets/dev/js/frontend/handlers/video.js !. \************************************************/./*/ ((__unused_webpack_module, exports) => {....Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;.class Video extends elementorModules.frontend.handlers.Base {. getDefaultSettings() {. return {. selectors: {. imageOverlay: '.elementor-custom-embed-image-overlay',. video: '.elementor-video',. videoIframe: '.elementor-video-iframe',. playIcon: '.elementor-custom-embed-play'. }. };. }. getDefaultElements() {. const selectors = this.getSettings('selectors');. return {. $imageOverlay: this.$element.find(selectors.imageOverlay),

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	96144
Entropy (8bit):	7.890385088443004
Encrypted:	false
SSDEEP:	1536:KIjMIDdqwvBVIiwO17efkXRYwzuXeIpdpXzUB5BUVSfCFS:KIjMIMiBV+Ie4YcunpXzU6Vkf
MD5:	8B19BD5E58791AED24913FD56F067106
SHA1:	73F32CB9D3E6D031182D9A48BBA0F595C2670373
SHA-256:	2F3C4AB19AB8141B6D4E96E32ECE5475B548D1961203945A65CEDB83E3F99103
SHA-512:	7E8A6B564937F3C9FBFCA4C2FEFBA8984227FD2E326E5AFBCA797EDBD32D885C96CA8FC8504A0957A355F1BCBF022354D87142D11B9CDA218CEFD3272B013A33
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:23:17..............0231...................................................................r...........z.(.................................r.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......_`..nx...Is....8..{-..P'......T.._..a...^.Y...S...K.-.R.a...^.Y...

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50485)
Category:	downloaded
Size (bytes):	50527
Entropy (8bit):	5.169577888526899
Encrypted:	false
SSDEEP:	768:NJfCD23nmAQCPlE6ioxkwKb3/TvClXbLKAm550MKT5:NJLXm1yE6i1v7KRXKAm550T
MD5:	23CFA142F023C89BA48CE83D8D3E5203
SHA1:	BD79D65A4218E5BD3ED1F3FB46FF4FBB60DFFE38
SHA-256:	2ECCE53FBC835CF0BD9DF9C7175A78D256885F75812B1A0C666D2D4CC19F0270
SHA-512:	65767684186C1D9F658A778494D1BC3B8C20785B9E1DAD66083C65B19C9CEACAB2B8C12FCFF8E6BBA272CA5C1D2A73C4381374F4D41122E43BA46FB5BF1860EB
Malicious:	false
Reputation:	low
URL:	https://pixel.asksuite.com/asktag.postload.js
Preview:	// Asksuite Pixel 1.0.0 \| MIT License.!function(o,c,e,t){"use strict";function r(t,e){var r,n=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),n.push.apply(n,r)),n}function n(n){for(var e=1;e<arguments.length;e++){var a=null!=arguments[e]?arguments[e]:{};e%2?r(Object(a),!0).forEach(function(e){var t,r;t=n,r=a[e=e],(e=d(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r}):Object.getOwnPropertyDescriptors?Object.defineProperties(n,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach(function(e){Object.defineProperty(n,e,Object.getOwnPropertyDescriptor(a,e))})}return n}function a(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,a,c,i,o=[],u=!0,l=!1;try{if(c=(r=r.call(e)).next,0===t){if(Object(r)!==r

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1376
Entropy (8bit):	5.227813584466248
Encrypted:	false
SSDEEP:	24:tI5hLGvnRDpYqiqeOLyn61iUWUCVAg3dsbtlcgf73uCNaxFgwg6gXAbgI8jTJhlW:EmnRZ5i1Uk130tlBf7edhgrAb
MD5:	582EC126B2C60E4BF5A98869B6A652E8
SHA1:	4433AF0512A2C077A466CEC3D99E4A5FDB7DA13C
SHA-256:	CA66E86519279C6DE7B0F57D090004B4CACE7FC50D2A03F18696FB88ABE8CC71
SHA-512:	298F2698A19C344320343E24F9AC6B50CCAE57C82D0CDD04601B0BB47C831CD5639339FE49281C4E821F5FAE8BE79E81A62E67BBFC3FEF1AFDDDFD6F6CBE8CB8
Malicious:	false
Reputation:	low
Preview:	<svg id="Group_22069" data-name="Group 22069" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="16" height="16" viewBox="0 0 16 16">. <defs>. <clipPath id="clip-path">. <rect id="Rectangle_10031" data-name="Rectangle 10031" width="16" height="16" transform="translate(0 0)" fill="none"/>. </clipPath>. </defs>. <g id="Group_21299" data-name="Group 21299" clip-path="url(#clip-path)">. <path id="Path_15040" data-name="Path 15040" d="M8.381,2.746h0ZM8.1,3.03c.769.084,2.617.443,4.1.756.348,1.642.682,3.4.762,4.118L7.832,13h0a.709.709,0,0,1-.441-.227L3.213,8.6a.694.694,0,0,1-.228-.444L8.1,3.03m-5.111,5.1h0M7.838,2.011a.285.285,0,0,0-.164.028L2.248,7.475a1.334,1.334,0,0,0,.258,1.83L6.68,13.479A1.674,1.674,0,0,0,7.828,14a.942.942,0,0,0,.682-.263L13.951,8.33c.218-.218-.91-5.386-.91-5.386s-4.287-.933-5.2-.933" transform="translate(0 0)" fill="#273240"/>. <path id="Path_15041" data-name="Path 15041" d="M10.5,7a.5.5,0,1,0,.5.5.5.5,0,0,0-.5-.5" t

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	278
Entropy (8bit):	4.989278313564598
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMjD6z0n:t4uz0Lu9OYjfBolV/GbIQwv
MD5:	A4969D8B9559CA1CF7436A3BDC3F8DED
SHA1:	6A25E3355716CF98133F52398723A2FCC2570855
SHA-256:	160A809726A79D4D363AEC0B9115EACF327528FBE8DEC4B3723BB0EC8CF8D691
SHA-512:	531574C5169DA79CCCB6E3928B7932C70A40FD8E6175159E68AAD13631CA55CCD80AF2A6D04A0B2C6EF81ED1280A5F5B9033BEC755322E3EBCD74B2B62DF5EB0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6566
Entropy (8bit):	7.853810596837481
Encrypted:	false
SSDEEP:	192:5GUJiu/j3YyY+6qcsays5aapEdAOEVaw0I:iCj3YV2csaT5AdWcLI
MD5:	252DF7050897BEBADF23C6A8A7AE2D03
SHA1:	6D1D5EDEA1A725D896D76D2C387D82FF9692009C
SHA-256:	0B69546A74BB0637DC1321D9E22780ADF931049CDF1FA8EE2998E2FC5161E3F0
SHA-512:	E60F1E39F095CEA2F7EB7F69F0BDEC3297F715B4BD09F8597A8B9E699F01C8746886BE5F4E0503CB547E87492D79677E45740C606E06825554369FC6CE0C51A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx...{...}/.ow..9:{.Z..Y..b..2!..)".....(.S2...I..../....$E\....!...L....e.0..0...W.6...K+$.....t.~....eu..Z...T..vN.t.....t....y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..^...9.u...d.".....Z.u.u.Q..{..Gs9.N...a..r9.kw.u......^..y..v.ik.?n.0.....BD...QJu..yF2sFk},.."r.1fG.?".s.R..1...E.yc..S.[.P.......i...Z.....8...c~.`K.Px......vj.g..UJ...0.~f~..v.R...B.C...;.1..(:=....t..".3.vc.Vk......9..c.T.p. .(.J=.l."Z..d.T4q...1..a.....Z..x.{..g.}4.N....Sk.V).>!n...=..7[..w.YS`9.Rk..\|.E7....3..... .`..\|...=...J\|N&...@$"...BD.. .[..6..^....@;.=...7.o...:..:..)J........7W.7..w.:...2.\...!.....^L.....V.8..."r.1f_....q.u..\).E......z.@..8.T..vY....3D.U.....q.uK..9w..,.Z_b.i.@D.8...R.{.R+D$GD...zBD.a.r..Z..R..s.~CD.".q...q..d25._.T...T._.mk.>....Ap-..S...fo.1s.3....0.1........'N^....)f&":k..8.........[X/..6*......f..[.(."......T.,3......Yk..^w......".DD5..RI;..L.Kf...ZI+.....

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	846
Entropy (8bit):	5.2304508616223915
Encrypted:	false
SSDEEP:	24:t4TU/e/s6ZxzTYTFnEJMoTNefTMoXPCm5t80:D/CxZtYhnYMoTgfTz/Cmg0
MD5:	980CB53C7A3A80A52806016E0A8A498D
SHA1:	2B44D76053436E02DA2598A9A2F8C925F5EDDB2D
SHA-256:	C6520D285F9CF4FAC5EAACB8E522D7E8F330523D727F353E38A6ACA6444982F3
SHA-512:	DCC98845014C4B1B6CFE2B1284E584E7A37C3A301EC9096D4CCE9895913E0144EC3806DA17F656C7FA6CA5544E9D38D9C15DB1456775DE183FED0AC3F705794D
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/lang_pt-br_v4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><defs><style>.a{fill:none;}.b{fill:#6da544;}.c{fill:#ffda44;}.d{fill:#f0f0f0;}.e{fill:#0052b4;}</style></defs><rect class="a" width="24" height="24"/><ellipse class="b" cx="12" cy="12" rx="12" ry="12"/><path class="c" d="M54.435,100.174l9.913,7.3-9.913,7.3-9.913-7.3Z" transform="translate(-42.435 -95.478)"/><ellipse class="d" cx="4.174" cy="4.174" rx="4.174" ry="4.174" transform="translate(7.826 7.826)"/><g transform="translate(7.827 7.826)"><path class="e" d="M169.071,250.435a7.019,7.019,0,0,0-2.086.315,4.173,4.173,0,0,0,7.591,2.34A7.034,7.034,0,0,0,169.071,250.435Z" transform="translate(-166.985 -246.522)"/><path class="e" d="M182.107,171.931a4.174,4.174,0,0,0-7.932-2.447,8.6,8.6,0,0,1,7.932,2.447Z" transform="translate(-173.838 -166.957)"/></g></svg>

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	410
Entropy (8bit):	5.178499990675291
Encrypted:	false
SSDEEP:	6:tI9mc4slzqBWGY2/dGoGxoRcrmgr5ItP6A0ZqRcrh4hV7quCinSQtiELrdGo+8jI:t4MBWCzgN20ZVuHSQhq8jI
MD5:	946A97CCB27ECF1E657349E871903E4A
SHA1:	4E1BBDCF926AE76B67270359C7E0558FA79CE400
SHA-256:	DF60F466E090138CDB139959C7516D029BE3D6743B37A563B6CB177A7B9546E1
SHA-512:	26D62866B253A9B8B5388EA60B629B9479CA489B92BDCD6A0A44FEFE315329863E22C3907DBBFCAD0154FFA0978DD863BDC12AADFC0694AD92818E5265F2BC45
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <g id="icon_Circle_Left" transform="translate(32) rotate(90)">. <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/>. <path id="Path_2122" data-name="Path 2122" d="M16,2A14,14,0,1,0,30,16,14.005,14.005,0,0,0,16,2Zm0,18.073-5.6-5.6H21.6Z" transform="translate(0 0)" fill="#454950"/>. </g>.</svg>.

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607
Preview:	<html></html>

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	117816
Entropy (8bit):	7.918846187188612
Encrypted:	false
SSDEEP:	1536:PoyolsqTUp7r450zJs35Jf6lZB2yxFUDGEMNtROBKQ7jDQhDgAwMT1zYg0dCb3v3:gRVTURr4OJyO7M7pBDYhzT1zPZTYYf
MD5:	48704E96103956ADE741B0E8711CBBE0
SHA1:	A7ACC5C9E5D8236BB52F09613185D1303D0D3FFF
SHA-256:	00AF41689B7660494302DEAC740742CADD7C88E03956805069A35956636EF39A
SHA-512:	D2DCD41276A88DE29B8D288B7CEC1ADD621F4D2FFF8DC01A8443002A0E57145A0797068FEE0BE82E9BEFEE239D84C8A8EB49FFC94909A1A6B3C02834AA8797C5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/001.jpg
Preview:	.....>Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:18:22..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..75..Y-Q-R..C\.HP4.E....,1i...@x+.e7...B.....pG.....sZ...R..`..<.F6..E....

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7334
Entropy (8bit):	7.878554796292353
Encrypted:	false
SSDEEP:	192:xQmDYt4IB9GXWE+h9pwTIhUV74pOz7ynHw7O9T/+1FBO:js9jmWE+rtmV7qO6Qq9T/+w
MD5:	42CD3F4984DF1ED4993380A05DD68078
SHA1:	3201E4E92D146B47EEB87278919D40B07B812506
SHA-256:	DCC9F1C308D9377DF3BBAD6B1B831F678C6F169DC4577CFE77FAA24AD9031EF7
SHA-512:	568ABBFF12DA02CC874D3025D075C4ABB6F1BEED8D06F6309DAED1EDE050D4477157DC013E9311FDC37013E718DFA7841931C9DF9004B582F61282A8BFDDEE22
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx..]k...u~.h...[k..,.]....,.Z.Z.8........... !.S......(..D.....$!..{.WC....c...1..c..b.z.<.q......~&...>}....w..9s..22222222222222222222222222222222222222222222222222222222222222222222222222222222222..dg...1Z@......$[E.$.Ed..."..I....k...v.s.4...B...[H.%".$.`Y...z.j3..."r/.GE...&9.....M.SD........\.BX.....U@r..nRU.....uOT.w.^..... y....}U......t$}...o....M..0r..1...$.I...[]..L:...$.L...D.UDfn...$[I^.`.1.H/."...g....>...v...U.k{.."3.].$.^;.^.&.6.t"..2`L...Ac.#....$......?....O..?.8..sI....,em.4.l.2v<H.a.;.i.F..0.@.AI.#".HN%y..<.....@.N..&y<......p-...\........]...a.l.....@/.!.J.d..\|..QD.\|.:.I6.H...SeH.../...@U..q..D..^.T...E...f...a.Ef..;.j%....Hrc...qow.[....Bw=...i$.""..z..."wA,.d.3h...S7....(G.....u"...vg....M...&..7.....:ND.\|L..1.u....BD..$"..z...`...AC.@]c...a...)"..8.d..D......~!"...#.........Y......ab..H....p.l.l%.D....8..t.i..:..I..B.#9..q.>.c<[H..p...<M.p>....$..$9[D...T..[C.)

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3146
Entropy (8bit):	7.1103105909596565
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzA3B3GFcUMzgHbh2sHqV3oHoKdjdabt8CuKcge4444mqGt:WSeknwzA3B39zg7Ysw3of/uOCrct+
MD5:	7CD6E285A9F6A903E4FBFA471170FE34
SHA1:	6FF39D37CD731952C7324CBB85914172C2B1B98E
SHA-256:	3792C4F5683BE117C7B679CE7DEB7E7CC808202348563DA54E6398D2FECA6EFE
SHA-512:	329F56B52FEB0412B4674192452E99C409E30486C0EA2E882140084C13FCB82112B87360DE7EE788A3523A15C96E13A53722ABF1A2544C2149851A5A9DE238BF
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/facebook.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:02-03:00" xmp:MetadataDate="2021-08-11T18:27:02-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:17418df3-e775-a04e-8458-2a25dd10d833" xmpMM:DocumentID="adobe:docid:photoshop:0d0ccff5-97aa-714c-8952-d9c9785e13f1" xmpMM:Origin

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
URL:	https://campobahia.com/wp-content/uploads/2021/08/whatsapp-1.png
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	489
Entropy (8bit):	5.160252835617118
Encrypted:	false
SSDEEP:	12:t4CvncDzzACIY4RUPqELsUCPSY9+XcY7Ai:t4CvnyzzIzR0qisxMX57X
MD5:	DE3AD5808CFB69EDD3BA6FAE95F03124
SHA1:	9A43C0B092310E74579BD999949D03A8B97881AA
SHA-256:	EA45FF3D50CB2B9D63D679ADC0E57BF24434264A2F32C305151643A781B1212C
SHA-512:	59484517E006211253AD75657A7BCDFD9A5FEA141A9D70690053896AE6BE533991216EEDFADD67BB5A183071E327CA2BDB1A67455B88F8E7FC5461391895B523
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:red;stroke-linecap:round;stroke-width:1.5px;}</style></defs><g transform="translate(-194 -690)"><rect class="a" width="16" height="16" transform="translate(194 690)"/><g transform="translate(-147.115 21)"><line class="b" y2="7.07" transform="translate(351.115 675) rotate(45)"/><line class="b" y2="7.07" transform="translate(346.116 675) rotate(-45)"/></g></g></svg>

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4090
Entropy (8bit):	7.533231910383408
Encrypted:	false
SSDEEP:	96:WS8knmWI8kocVFdkSDoHblVHoivQaqA2EJBHiP0qGXzIu2CYWv2N:WS8knwocJdDo7lVTvQjjKiPJGDIub2N
MD5:	5E2E246692C2422614BEF8FEE51F6360
SHA1:	10F42327E894C35C3753E4E2601D4011E4F0E511
SHA-256:	7DD6C9E79B569531B03EBE10A9413B6D3579470D68CF495A82734689EA98B33C
SHA-512:	6554B1B2C51E2590EE8CA2F4C40E397D501767C4D4331D44ECEBF02EB82EBAA5DE4C354AE08830B14C2046A2AC5EF3E12121CEE30C7347231D5F44ED52275574
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:22:23-03:00" xmp:ModifyDate="2021-08-11T18:26:04-03:00" xmp:MetadataDate="2021-08-11T18:26:04-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:3abf60e9-5eed-3148-82e1-86a0b9c10987" xmpMM:DocumentID="adobe:docid:photoshop:7f264967-65e8-7e4d-aea2-edb5d699b89d" xmpMM:Origin

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.276644110297719
Encrypted:	false
SSDEEP:	6:tI9mc4slzIFJqUbL/QRyBNc4JIxurdGoTEgM:t4uFJqCcoBNcbukgM
MD5:	84CA13A1B4375DCDA957E06E454FEDB9
SHA1:	9C10AA9B9C62515C2EA403DDB89B2E0A341308D5
SHA-256:	0A29A2FB57D4DA2FAE38F8A0F21BED442AAE78F43BB2B620F9903347A3AE3681
SHA-512:	309CD11500EDA4A06949DD37D035BA681B822C02F14852FDB5A8384292B561FF613B16005ED2E9B431F6CA89CC322750315E933D29775368A8648ADCD23E9C3F
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_GreyDark/iconGreyDark_ArrowDown.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="7.41" viewBox="0 0 12 7.41">. <path id="icon_ArrowDown" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-6 -8.59)" fill="#454950"/>.</svg>.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4572
Entropy (8bit):	5.065274873746793
Encrypted:	false
SSDEEP:	96:IWcgwu7kTnUh8YTWnWPvbynzNPn+K2N5LnB0z/M:Ixlu4jeT8WPvbYzZ+5n0M
MD5:	023F29E99107ADECCE453846214ED308
SHA1:	836948DE76D6F53DBC7A18677435D77A748E7714
SHA-256:	A126547E96F271F77593D47B9719DBFF9DF28716682C4A0794A899047EEBB4AD
SHA-512:	32E07CEC9D3FD95056FD4833FEF90CA51DD0A34E00432E4669C90967D12EDE105F961B65B55D557EBC0C149B1C598015CEB445086BBC102961CC00DD00D4C185
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0
Preview:	//jQuery.noConflict();..jQuery(document).on('elementor/render/animation-text',function(e){..jQuery(".eae-at-animation-text-wrapper .eae-at-animation-text:first-child").addClass("is-visible");...//set animation timing..var animationDelay = 2500,..//loading bar effect...barAnimationDelay = 3800,...barWaiting = barAnimationDelay - 3000, //3000 is the duration of the transition on the loading bar - set in the scss/css file..//letters effect...lettersDelay = 50,..//type effect...typeLettersDelay = 150,...selectionDuration = 500,...typeAnimationDelay = selectionDuration + 800,..//clip effect...revealDuration = 600,...revealAnimationDelay = 1500;...initHeadline();....function initHeadline() {...//insert <i> element for each letter of a changing word...singleLetters(jQuery('.eae-at-animation.letters').find('.eae-at-animation-text'));...//initialise headline animation...animateHeadline(jQuery('.eae-at-animation-text-wrapper'));..}...function singleLetters($words) {...$words.each(function(){....

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15635
Entropy (8bit):	4.6286760300430965
Encrypted:	false
SSDEEP:	192:Xu8ZZ1zilVwBElwuasrpS/5Rv/XDWIsDcQZofbZ066HfHCHyyt08t0B1QiEB1Qi6:+8JilVp
MD5:	3EB6F42042C225E3E1181870E2D9BAB7
SHA1:	C8E3FDC249EFFFFA5B3845CA3BC437737BF3B2AA
SHA-256:	0DC38BC3D89CE90480A7FF1A1E4056AA3B9F8DA09F190013AAA5D0438DD786A7
SHA-512:	58CB8F2B34C7B6AB22CD0DF645D60341BC0EF863BE4B34161B72A199CD551746128398EDD3A05FA3FA424D1E5A1BF25D93996E7BF6ED133DEBBFBBB6E2F0FF52
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0
Preview:	.vegas-wrapper,..vegas-overlay,..vegas-timer,..vegas-slide,..vegas-slide-inner {. position: absolute;. top: 0;. left: 0;. bottom: 0;. right: 0;. overflow: hidden;. border: none;. padding: 0;. margin: 0;.}...vegas-overlay {. opacity: .5;. //background: transparent url("overlays/02.png") center center repeat;.}...vegas-timer {. top: auto;. bottom: 0;. height: 2px;.}...vegas-timer-progress {. width: 0%;. height: 100%;. background: white;. -webkit-transition: width ease-out;. transition: width ease-out;.}...vegas-timer-running .vegas-timer-progress {. width: 100%;.}...vegas-slide,..vegas-slide-inner {. margin: 0;. padding: 0;. background: transparent center center no-repeat;. -webkit-transform: translateZ(0);. transform: translateZ(0);. will-change: transform, opacity;.}..body .vegas-container {. overflow: hidden !important;. position: relative;.}...vegas-video {. min-width: 100%;. min-height:

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 415x415, components 3
Category:	dropped
Size (bytes):	17393
Entropy (8bit):	7.862208728567495
Encrypted:	false
SSDEEP:	384:9wCRBWQZ/QamopGIf+awtt9bteBuo8LRU7Zm9UOMU:CiqGpXNwtzpEwRuOx
MD5:	98169249C8E09B0BC36D1F2F9F4E9BAB
SHA1:	243BAD41253536F8792601D3AE0BB4C4BE4801DF
SHA-256:	447A80A8D5ED58BCC3AA7C476AB734CA95239EBCC0ACD2C57D1458F055E5D20D
SHA-512:	30884559C2C3CD65C1230390DAB357E4C1D23D83A4FD4076F009E6F5B330BC6F71AE734B6A96CE0DA56C3BAC99985BF225EAC28078144FF78A2B620F2DF544A3
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................P...........................!1..AQa."2q..B..#Rb...$37rt...6CSu...%c.....&45Es................................,.......................!.1A.."2Q#aq..BR...............?.."................................................................................................................................................

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912763548776784
Encrypted:	false
SSDEEP:	24576:HOxPxQVHHdruonYr3J716m/d4psdoeUjkCpWswjpTqrqw:HePQur3J7l/d2ewzBKRw
MD5:	14A473DB83081FE55445D748E7EF9C4C
SHA1:	EF55F1E029A48741A4BA85C7C5D75DA731F10AD8
SHA-256:	64C6725F861F5859ADE1472241D3F3CA06BAA821182FC229C47A9E7AF05472C3
SHA-512:	42E5D947058BC98A889A89656EA6038540DE02EFBD7324A30D4D6A9B8A94D279C50DC666907E49B147E8DC723930300FE40B3ADD0DAAA13030BD24C76A9E93EC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:12
Preview:	.'5\|..5.b.. ...v.=...@..Hj..s....W...."...&..P.....aln.....j@....-K...M......\|...2.....@...Keo2'o..]=ZR.fv....&...5E..Mb>=..&..}.I.....j...}&[]...L` ..U.......p...@.z.$Y..b..+........@.P^.;..f..a.Uo(4F6#.......:...?...F.>....5...s4.(...;Z7I.r.....u,.%.`M..._^Q..zw+!....IJV...9.....jY....8.UaZ..3..p.[......[..vQQ..._I..p.fg\|..8.....;...$...xI..2)w.L.k...=.....X.xR.3.......Q./..r...\ .&Q.RG.4:T..Q..eJF<e0..T...<4JI.G..U.......BJh....8...........p.'...uL....#...Kjf..F....=Eg.Q.i...fY.}.._..q........c.niT<.N...P...2V........-ApT....g.\|.R.<...s..%^........._....m._.!;\[.:...j.4.\|.m.............ze.......r.P....P.7.I.S...-.w....i.O.J....r-<...p.5..5..i..-(.]...f........Y.khI.U."..!0.j.>]k.....>.lL.f....U..?..&......Y...3L\|..W.L.....),E...6..j..#.!.........3...y..&n.m..w7.._e..c..>S=...';2)."EB.$.<..=..Wx.....Z.c.S20cA...~..,.....J.rr.}..r.XSn..mwB....F[......jw...Qcg..u..&.J..........^6.[.#.Hlr$.y.$.N..nN.\........h...M.A,.k[Rp=...S.9.<uT^...E..Zc.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23844
Entropy (8bit):	3.864499754894873
Encrypted:	false
SSDEEP:	192:h2USDmm2rAUOP8F2pI7oPId6ilknsV7JmiaiSClGdv2SImlSIkdMA3QzVdefddNT:hhdp4KOvV1sl1lzWProaUXrNlDlOq
MD5:	45AFABA70708B1242206EDE12F3290BA
SHA1:	B81E5055C226C2CDE10EA81B5D8BB6AC3FF5177D
SHA-256:	B7897A82AE58F052AA5FD44DF9B80A95F439A8B38C0094042D2BE0C2B295FAC4
SHA-512:	354E85388197BC0793D77E001644512B4D4506C3CD5AEFBBAB40A5226FE01492F4B4857027720093CCC97DA310F55F0AD6519BA71F3F6BD53EB8CCB590CDE8E4
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0
Preview:	/!-----------------------------------------------------------------------------. Vegas - Fullscreen Backgrounds and Slideshows.. * v2.4.0 - built 2017-01-04. * Licensed under the MIT License.. * http://vegas.jaysalvat.com/. * ----------------------------------------------------------------------------. * Copyright (C) 2010-2017 Jay Salvat. * http://jaysalvat.com/. * --------------------------------------------------------------------------*/..(function ($) {. 'use strict';.. var defaults = {. slide: 0,. delay: 5000,. loop: true,. preload: false,. preloadImage: false,. preloadVideo: false,. timer: true,. overlay: false,. autoplay: true,. shuffle: false,. cover: true,. color: null,. align:

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	182826
Entropy (8bit):	7.95528825700286
Encrypted:	false
SSDEEP:	3072:CZJz5ZJzwpKl03R1oJ+/Q9PRJyHiZgfYNiisPDfFmlbap+6t2WuSUiKCPiUn3dlT:C/5/loMJKiGg0TFm9x6t1ki5qSZ
MD5:	C948287881323A77C350DB06CCBB024A
SHA1:	5ADF4FC897E3D11A805EAA9DE8AC082980B5AE5B
SHA-256:	1083F41310C6E6F159CEE4619A8A7C8466F8455D8FACA26B948FFE2409D86017
SHA-512:	DDB83E83FDE65C90349C067E57F5D7142FFC04AF51A98682A9E58B043E1250E2AA03D78D820B5CF9412B3081ED436508079706CB6ABB5AAAF07CD7DA8085EEC0
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg
Preview:	....!EExif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:09:08............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..7..k....... ..c.)2...;\|..c.K.#....m.@.uL.240P.U0.d..A..#......6G>bTo....

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	414
Entropy (8bit):	5.173347315808591
Encrypted:	false
SSDEEP:	6:tI9mc4slzqBWGY2eIRudGoOc4RrMHoRcrmgr5ItP6A0ZqRcrh4hV7quCinSQtiEK:t4MBWCesU4pRgN20ZVuHSQhq8jI
MD5:	9BEE2C1238102F2D832D029CAD1978A8
SHA1:	5D9EFC0DD4A049A78083FEC37F648CC14AC726E5
SHA-256:	DF946C1903E3E37280E164603D62A0C919328FD6EEE97E4BE2AE8B10CA2D1EC0
SHA-512:	2DFB83A11EA6B192A3B893890F69F9427075EC373C75282640D96A7007516D88D437B790CCF7C3AECB6D5929F0B694BFAEFF66B3A506EC58434C7E88A8341C01
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <g id="icon_Circle_Right" transform="translate(0 32) rotate(-90)">. <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/>. <path id="Path_2122" data-name="Path 2122" d="M16,2A14,14,0,1,0,30,16,14.005,14.005,0,0,0,16,2Zm0,18.073-5.6-5.6H21.6Z" transform="translate(0 0)" fill="#454950"/>. </g>.</svg>.

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4358), with CRLF line terminators
Category:	downloaded
Size (bytes):	5498
Entropy (8bit):	5.086739996986489
Encrypted:	false
SSDEEP:	96:cwYTrH5hrG6QDwC0rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTD:cwYTrq6QDwC0rI2k1u6i9woa3hSSCP9y
MD5:	CF6FD5F0FDE942EBF8B371CB63F2CC0C
SHA1:	35704CD7148986AB12A9B02010969DB6AADDAE5C
SHA-256:	B5B0852426927A883AC67C776AB89E26B5FA4069097195DEF8FD48AD5E0E6E0A
SHA-512:	FD17152A79CF243E07E57783E67F39ED0167ADB43C69224A9CA4782E5EC47C32747B5D3E4701109F62A7AFCD6A46EAC755DD7E69498673F729486721332B7A57
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/isotope/imagesloaded.pkgd.min.js?ver=2.3.10
Preview:	/!.. imagesLoaded PACKAGED v5.0.0.. * JavaScript is all like "You images are done yet or what?".. * MIT License.. */..!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(function(){function t(){}let e=t.prototype;return e.on=function(t,e){if(!t\|\|!e)return this;let i=this._events=this._events\|\|{},s=i[t]=i[t]\|\|[];return s.includes(e)\|\|s.push(e),this},e.once=function(t,e){if(!t\|\|!e)return this;this.on(t,e);let i=this._onceEvents=this._onceEvents\|\|{};return(i[t]=i[t]\|\|{})[e]=!0,this},e.off=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;let s=i.indexOf(e);return-1!=s&&i.splice(s,1),this},e.emitEvent=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;i=i.slice(0),e=e\|\|[];let s=this._onceEvents&&this._onceEvents[t];for(let n of i){s&&s[n]&&(this.off(t,n),delete s[n]),n.apply(this,e)}return this},e.allOff=function(){return delete this._events,delete this

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19586)
Category:	downloaded
Size (bytes):	142032
Entropy (8bit):	5.31553279630019
Encrypted:	false
SSDEEP:	3072:nFQPbfpz4EPGOIvgP4b37lWY2l2rB3G9G/LKjmCubaL7OVxH23/rwZ4G5RQxehqb:nFmzP4b37lWY2l2rB3G9G/LKjmWO/E
MD5:	850B8ECF5F2D1955E646DBD7C7D8C081
SHA1:	0008BAFF92CB6EA3CCBE5C58005BCC9E578F49B6
SHA-256:	6EFF05EF22B316D6FF6BC614672A60BFC180EE96AD17D4F1ACBBD92ED01BD352
SHA-512:	1FD219EFD90E3565E5424FBD6E5DE1F0400889532D234E98B163A23B460FA8D3D0FE8D2D05E7AF5C08A98909483ECFAF20E03083EBEFB668822DF4542E9FC956
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/hotel/
Preview:	<!DOCTYPE html>.<html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" >..<head>..<meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" />..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1">..<link rel="profile" href="http://gmpg.org/xfn/11">...<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" href="https://www.campobahia.com/en/hotel-en/" hreflang="en" />.<link rel="alternate" href="https://www.campobahia.com/hotel/" hreflang="pt" />... This site is optimized with the Yoast SEO plugin v22.7 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Hotel - Campo Bahia</title>..<link rel="canonical" href="https://www.campobahia.com/hotel/" />..<meta property="og:locale" content="pt_BR" />..<meta property="og:locale:alternate" content="en_US" />..<

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1176), with no line terminators
Category:	downloaded
Size (bytes):	1176
Entropy (8bit):	4.904757977828769
Encrypted:	false
SSDEEP:	24:P/Xrf83ZLBPJIzJqDghVN0GNFi9H8cyy1e4jMK19H8pyFKy9H8Oyu:P/7f83l9JqJqDoP0gFim4Jt7
MD5:	D55C03E9900F0A21808AEFDB06E21E86
SHA1:	359647810FA0BFAFDDD49CCB84AFFBE455B52675
SHA-256:	D1983A2DF0BD2C9A4918F86BFDF50C1AF40D6892B358578B74C327585CB7E1FB
SHA-512:	3AAA9DCE01300290900FE018D0DCCECF0AB34704755D2BB79B9B0369CF7D7673408A9447537E1C9495B777CC58B3FCFBF6CA34D3A7672744D35E40EC3EAAB1D5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/elementor/css/post-6.css?ver=1694545246
Preview:	.elementor-kit-6{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-2bd4352:#8A7A6E;--e-global-color-c503406:#897D72;--e-global-typography-primary-font-family:"Raleway";--e-global-typography-primary-font-weight:300;--e-global-typography-secondary-font-family:"DM Serif Text";--e-global-typography-secondary-font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-section.elementor-section-boxed > .elementor-container{max-width:1140px;}.e-con{--container-max-width:1140px;}.elementor-widget:not(:last-child){margin-block-end:20px;}.elementor-element{--widgets-spacing:20px 20px;}{}h1.entry-title{display:var(--page-title-display);}@media(max-width:1024px){.elementor-section.elementor-section-boxed > .elementor-container{max-width:1024px;}.e-con

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	92130
Entropy (8bit):	7.886952315130371
Encrypted:	false
SSDEEP:	1536:DJzMqXjn4JzMqXjnQZqJtbJYtBLt+jwe/RC89k2Z1F/Vgiw/rJxYJES3uG+L0r:NtjnqtjnbJtqtX+Me/Rr9kuFA/txOubi
MD5:	1277B583A6DD5ACDAE89EADA87686B5A
SHA1:	8D5CF90F2D65E14997EEA7BECC19EA5FD9B54749
SHA-256:	5774FD1D7B6716070C3AAD294E5621B79BF5FC3F16BE32FC3FE80FA1F5D03372
SHA-512:	A3E49B5FBEB2F8164408E5F4799A759229630E3F88116CB6D9FDE44F98E495D7707A8377CEEFB22605A34E8FD376B8934667504DC3DE431189B68EA3C5A61792
Malicious:	false
Reputation:	low
Preview:	....".Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:19:00..............0231...................................................................r...........z.(................................![.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..s~.u...2z.M....=...3r..N....sz.e..-;@.....T....Y..X~....M..9../.......H

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22732, version 1.0
Category:	downloaded
Size (bytes):	22732
Entropy (8bit):	7.991059756246616
Encrypted:	true
SSDEEP:	384:pJH4ffLHwj3VKpVFdOKA5O9uYbVl818HVm3zhilIdgag3iG/L5p1Ejp1XAwdb6sJ:pJh3VKpVFHA5O95bX8SI9ilIdg33iS5A
MD5:	15431381890720A5A4B62B33C8AE06C5
SHA1:	6266CFCCBD3281630CD4BA6D7DFD953999268480
SHA-256:	FA074F87D637E60C5639E30DC8F11787BB2400BC759E56FA7DDAE1C28BDB4278
SHA-512:	645657F187C3F454E1725CBCBF7C3423E6A4A7F6B4D91D275A90586402BDF79814C262D298320A71648A4C777CAD736183CE77D0281811B2BE099DCCB8E79D5B
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/fonts/roboto-v20-latin_latin-ext-500.woff2
Preview:	wOF2......X........D..Xi.........................\|.....b.`..h.\..<.....0..4..t...D.6.$..d. .... ..S....pg.....PU...O.Mzp...>..F...........'%.1.)<i..........a...d.=.2.H..4.I..~F.P.....\|...=...m.Ey8.y].Oh.Kz....=@K9.E}.o....F.\....at_.7.=,.5....8...w.c....Q.Q>.i.k.q...'..MUz.$xa..H_.....3.....E`..G..Bd....kv./"K.....c...T..9J...cd.HJ.@P....T...(....y......o....,..%.....`.G...{../.lKrY.vG..J...ZE.._y.\|.~.2....".]=.c.9...._.....kv...Ab...P9Z..1"....\...L..:...S...)..3qj.=^.......4.....BJo.......`).K.a.:Cf.....$uh.D....-......l.$%J.....$..........n..(....._.....UC...=..dj.SR.c;\..o....j@P........[`[F.ay..f..5vx.)B...f7.>D...."....1.E.#).~./...<..T.......N.M+....J..........2i]o.%..........=....C`T.25Kg..3~y6$%.Y..H](. T....rvfv......8.s..9@..$T.(g!.3...B.q>s..T.. . Q}.i.\..D.....?.....z..3.]....P...D...4~..DB...h4..B...k.........s.-.p.rt.......-.R!U.W...rQ...Le..7.l.! ....!u.M..p .}z.nJ.a.o4..]...Kndp............+......T.];W...ZW.k........uh... ...o..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	950
Entropy (8bit):	5.0215988264396865
Encrypted:	false
SSDEEP:	24:t4CvnRx9Yw/LqitzFfEyvW4MTNG0K8VVOXub8uJjI:fnRxn9FfEyvMTNNDOebnu
MD5:	F5EDF145F9D4BD6D3C3643AEFFFB1F29
SHA1:	F6C96A1D7EE40E312B31A3BDFAA634D5C95DA42E
SHA-256:	52C72ED81954F33D29C3CE039A9D1BB1BC7570AD453089AA73FAD0F734C7BF67
SHA-512:	20AF670319786E5FB7FE6166DCB0EE1A932A120A37F5E3A93592907B030F9AD6B5F63933792C914CAF5DC2B6AA94325BEB5236F46706A4394DE819FCD147A18A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16">. <g id="Group_15379" data-name="Group 15379" transform="translate(-464 -252)">. <rect id="Rectangle_7096" data-name="Rectangle 7096" width="16" height="16" transform="translate(464 252)" fill="rgba(255,255,255,0)"/>. <path id="Icon_awesome-envelope" data-name="Icon awesome-envelope" d="M13.735,7.967A.165.165,0,0,1,14,8.1v5.592A1.313,1.313,0,0,1,12.688,15H1.313A1.313,1.313,0,0,1,0,13.688V8.1A.164.164,0,0,1,.265,7.97c.613.476,1.425,1.08,4.214,3.106A4.892,4.892,0,0,0,7,12.378a4.894,4.894,0,0,0,2.524-1.3C12.313,9.05,13.122,8.443,13.735,7.967ZM7,11.5c.634.011,1.548-.8,2.007-1.132,3.629-2.633,3.9-2.863,4.741-3.519A.654.654,0,0,0,14,6.332v-.52A1.313,1.313,0,0,0,12.688,4.5H1.313A1.313,1.313,0,0,0,0,5.813v.52a.658.658,0,0,0,.252.517c.837.654,1.113.886,4.741,3.519C5.452,10.7,6.366,11.511,7,11.5Z" transform="translate(465 250.5)" fill="#fff"/>. </g>.</svg>.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1744), with no line terminators
Category:	downloaded
Size (bytes):	1744
Entropy (8bit):	4.823873414579013
Encrypted:	false
SSDEEP:	24:oucOdasBcXClMZ62My3euUb3ry7KnTVMcmthZ/DzBNKRPK:ovme0FyO5M/H3yy
MD5:	66FA3571B59C83DDD8BF5473D4EF7FB4
SHA1:	2B62943195A4A691813BBABCCAA64DB078BFE26E
SHA-256:	2479A48EC7BDE1891AF7885F637AA7C22C43BBCDF1D6F12C15CD8D3696F1A7FB
SHA-512:	5F15F18379A9FE9968A0A8F089277A85F4A47E1748429990723E45FB04AB6F95726D8C83FE256EC73290BB908DADAE1EE248CDB321A0F76AC38163D7C9385536
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/footer.css?version=1.0.0.395
Preview:	.top{background-color:#454950;color:#fff}.bottom{background-color:#2c2f33;text-align:center;color:#fff}.top .container{display:flex}.top-logo{margin-right:13px}.central{padding-right:unset}.bottom .container p{margin:unset}#info-bar{padding-top:20px;padding-bottom:15px}.info-title{font-family:roboto,sans-serif;font-size:12px;font-weight:700;font-stretch:condensed;line-height:1.17;color:#fff}.info-text{font-family:roboto,sans-serif;font-size:13px;line-height:1.15;color:#eaedf2}.icons{display:inline-block;margin-bottom:3px;vertical-align:middle}#version{font-family:roboto,sans-serif;font-size:11px;line-height:1.18;text-align:center;color:#fff;margin:0;padding-bottom:11px}#omnibees{font-family:roboto,sans-serif;font-size:11px;line-height:1.18;text-align:center;color:#fff}#omnibees-tags{padding-top:15px;padding-bottom:18px}.footer-title{font-size:12px;font-weight:700;font-stretch:condensed;font-style:normal;line-height:1.17;letter-spacing:normal;text-align:left;margin-bottom:5px;display:in

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.916126946588283
Encrypted:	false
SSDEEP:	3:YGQKz9:YHK5
MD5:	1A05A7DA87DC6AA15056803008CD63B3
SHA1:	C323CF157EE9AA01299EE37F5DD910ABD5F5E291
SHA-256:	D7C4D66D157628139F188D200468AC1012EDB77BCB8B11E9C754533D6B44188F
SHA-512:	C5F5C696EE8163A583E64A3D6DD41FCD58A65B67D02860AC4BAE50FDDBDBF55C62938F7253D6900604A11516F1F11DF3FD671727D3A4E4FC5F4E6B7909FE83D4
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/timezone/3090/8
Preview:	{"5659":"Etc\/GMT+3"}

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	660663
Entropy (8bit):	7.982275726830167
Encrypted:	false
SSDEEP:	12288:7Et5KtLt1y+1ktz6ih3cPRAVNt2SWUOzv+O89mD2ewqHpqV1MiM+8gc:mcLtf24s3cPqnt2yOzs2wqH4MiM+8J
MD5:	303A3D4F8D2D30375454D86820C329C0
SHA1:	0C178B61CFC8EBEEDB581F00F37F6756A4D18AC5
SHA-256:	6AE9C46C6B7BEA36929DA3193D48188BF225CFB97D3F38C11D6C980AF4F30037
SHA-512:	070ADCE6828A188AC9E62A15DA76AF2C26DB483F66375345E2518298DBDA2D977D7F866ACF8E0E52ECE1C652D38303BE57147FFF6017E80750221EB64E8B17BA
Malicious:	false
Reputation:	low
Preview:	.... .Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.1 (Macintosh).2023:01:09 17:26:46..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?../.9X..V..$.. .h/.......f..............sG.....0..Z..u..;g..d3........\?

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 340 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17562
Entropy (8bit):	7.962009561450934
Encrypted:	false
SSDEEP:	384:mYKXDczJlniHRwGq6ByXwUkUvBkii7uLYx7riqBTu8EfAx11N:mYzJlnWRhq1wUNTiT6qBKV0
MD5:	F45BB3D7E651BDB60E5E5ED8EF676570
SHA1:	F10884D86D41AD36B06EBDA134060FA5D82E12E1
SHA-256:	BD9E1E83DFCC546925AF157537514F071D9EED94A9F7CC3821731A285734D832
SHA-512:	3124DDD455573685EBE03CB564CC1713446AD3D453692E7447011065177AB89D780DE0204FF4112E532BA1121D0CF33EA404A6BC9CDA7DD6A02431B910083C90
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/06/logo-v1.png
Preview:	.PNG........IHDR...T...d...........tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:38e51f48-9204-4409-9f50-d4a83e713118" xmpMM:DocumentID="xmp.did:9C7C2FAFD05811EBAB02E410F8663D99" xmpMM:InstanceID="xmp.iid:9C7C2FAED05811EBAB02E410F8663D99" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:692a4367-163b-374d-8f1b-df74522b83b1" stRef:documentID="adobe:docid:photoshop:8e0371fd-613c-dc43-81d6-e665ff8e925d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+.....@.IDATx......

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 701x390, components 3
Category:	dropped
Size (bytes):	67363
Entropy (8bit):	7.978249210761808
Encrypted:	false
SSDEEP:	1536:S9uQitfXc8aj49TGO8ndyA6Sh88fQjXurzuOe2zoKLfTut9xJ:zQAs8aw8nwA6u8/XuuO7oefCpJ
MD5:	51EFD1A5FE1F557DD8597A638070EB63
SHA1:	0CB35A5A68E33A28B0FC90B57B87B9E8B555F732
SHA-256:	644B0CDEBCE5C42635D56F1BDEFF5F037D2F103F5DCB94F2FC606A2EA088A834
SHA-512:	FFDB6EF19CC167D8F33CC1C639599E6828ED330A7844277D00D2525B11C21220E819A21E4AD6C5723E0812AEDAFD000AD45D547DC5C975BDCAA578F8962D7381
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......................................... $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..........4.................................................................F2^W.W.....}\{..I...9.t).......j.wG.L...._{...{...{.w.\..r.:`...hd.F.+...'..!sR..--S..1.8<..x..On...O.QF......L{1...Yk..KaZVK&5....RMC..dt~......u$...l:A...........2..=....^7.:...."g..d=la..d=.......E&1.Z.B...c........s..s.....d.A...F-.TL.n(..;....R....V.Z....W....%../Y.0P.c..)...h....Ur...P...+...6......yaN.j..R..s....AQ.s..,.......K...e\{-..C...J....C:..3m.}.oh.q7.\|.\{.Y}....9I.."...Ab..u..\|I)...<......G).\RV.+su\........#.i....VmD.L..^.%)gJ,.;.<..w...t]...Q..."cS8.t..#XY..j(..Sl1./Iz.h....N.."0.....1a..j.0 .=..s. .s5.k...O..d...cU.r.$:..;8vWF........Rk.JQ..95....`.@2;.....O.z;....{..e....=.U...v-..I.d...yh..Lu...[C.=w:\1g..Y}...u.9.B..P1..j(.zB2...6.sD..q......$.....U..U8..4o.xa.z9.z.n...9.....GiI~G.?.aP.3.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 23, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2604
Entropy (8bit):	6.828889001867344
Encrypted:	false
SSDEEP:	48:DaGKJF1w/kpaMT34NWGII8je8NHMev9b7rKpmAy2GVQE6c:D58GcptoNn/fUv9b1Rr
MD5:	A45646EDED011DA1217612221F8B92B4
SHA1:	26E4DFF4E97E8AD51EA3068CD9CEF62A6A50DA76
SHA-256:	762C0E753F10EF93837AE19B2A80BC7BFD86AEB53BAA470A3894974A06290789
SHA-512:	150B01539696F6CB8339AF686BFC941F757B70554CE3AAAE5BEB644134E743595F54B568A8D9D80A54DC733EB6CBBDD3708AAA1C24AC87963A71C7FC48CA1F8E
Malicious:	false
Reputation:	low
URL:	https://scontent.whatsapp.net/v/t39.8562-34/435524640_1127495198676263_4923359980655354883_n.png?ccb=1-7&_nc_sid=73b08c&_nc_ohc=5pgnz3LNoTkQ7kNvgGoc6H_&_nc_ht=scontent.whatsapp.net&oh=01_Q5AaIG1qZp1y_B84Ex9VEc53d0TuOf1_RBZGe8G9e3ljYLbl&oe=665B55A1
Preview:	.PNG........IHDR...c.........(V.p... cHRM..z&..............u0...`..:....p..Q<....PLTE...%.f.... .%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f%.f...o9......tRNS.....`.....R..].....K...w?%.'E......j..\|...:N..\;.).Q.C.#.."...k.....Y..{.!v.~9f1...^6....85..L........yp...z.-........*AIG...S...&...l...../.x.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	91817
Entropy (8bit):	7.868104704282685
Encrypted:	false
SSDEEP:	1536:JMPUFMPUpnqQfH2JSEU5F6J2Jj8wgs56mPNgn3LSqiyXbDIrzQLiX4h6e:uPUyPUYQfH2J0dKwgslW3LSqHLDIr8LP
MD5:	DF857D4BA35E1A0BF811C438F338F242
SHA1:	8C648099571EAB230E7EB9809DE1BE903597BF49
SHA-256:	531DAF71A639D1A706DE87830D0F322386420ED66F11114938F0A54D0BF2F983
SHA-512:	7633F9B9F05886E0577E17423E896DA691F3722CBC5580101422C032993EFD10F40BEE3B291D3007B9A2A6D12D69E513457A6CC861D9E402A316EBE69AFBBE8C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:21:21..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...S.H.0.>&.....T.N..I.;S.S....XmKj.'....j[Q!(K.\(......%p...aF..G.2.B!.0

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-E6QPTJ9TK6&gacid=748051113.1716873311&gtm=45je45m0v884784337z8832375478za200zb832375478&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1683724995
Preview:	<html></html>

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	5.132763371086946
Encrypted:	false
SSDEEP:	12:t4CvncDzwA68Dh424RUCYqELAfMqACvoykaBogGazTIM8zqKADi:t4CvnyzE8DqRoqiQdkykaBoRap8Vr
MD5:	4A0408EAE4E75CAB33E01386E5A37336
SHA1:	EA84D87FD2E291E36718DDD70C33BEBCDA5EDA9C
SHA-256:	EEEF6C1F0AC5E7BACB3956787A3B60C1603BBEA4C7DAB5DBB695631F1B80AE93
SHA-512:	5EB3E41302A2589C363A7B8B083F88932AF18DDD18F923A0FF83AD28F382A765F64E77A934596C857D207D94AFF619F9B52222F8F4B49581521880EC13FBB46E
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/information_v3.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b,.c{fill:none;}.b,.c{stroke:#273240;}.c{stroke-linecap:round;}.d{stroke:none;}</style></defs><g transform="translate(-470 -642)"><rect class="a" width="16" height="16" transform="translate(470 642)"/><g transform="translate(-772 254)"><g class="b" transform="translate(1243 389)"><circle class="d" cx="7" cy="7" r="7"/><circle class="a" cx="7" cy="7" r="6.5"/></g><g transform="translate(1250 392.5)"><line class="c" y2="3.5" transform="translate(0 3.5)"/><line class="c" y2="0.875"/></g></g></g></svg>

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (877), with CRLF line terminators
Category:	downloaded
Size (bytes):	879
Entropy (8bit):	5.036572665169507
Encrypted:	false
SSDEEP:	24:sjGxT+xcy8g8b+tqs5JFmhdhOr/rXq8hDhCj:sWuc15Ml5H6GDhCj
MD5:	2C3EE695D810C2F37E25DE7A327D2F94
SHA1:	95C8238C6BEC58655A4801E826B937507A8F5C86
SHA-256:	43C3F25AE35C1D769090C0AA7CF0CF10E0E79E761BDEAD3AD41677C8E83B88C3
SHA-512:	2657A2E63A4D4F94731E57964280A884D60F2FF65A209F8771F0253B9C5CFD952FB862C9C917C6A0695656FD34048527D37F4092F7C0432CE45A27031B6F4095
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/fontello/css/tss-font.min.css?ver=2.3.10
Preview:	@font-face{font-family:tss-font;src:url('../font/tss-font.eot?40673691');src:url('../font/tss-font.eot?40673691#iefix') format('embedded-opentype'),url('../font/tss-font.woff2?40673691') format('woff2'),url('../font/tss-font.woff?40673691') format('woff'),url('../font/tss-font.ttf?40673691') format('truetype'),url('../font/tss-font.svg?40673691#tss-font') format('svg');font-weight:400;font-style:normal}[class*=" rttss-"]:before,[class^=rttss-]:before{font-family:tss-font;font-style:normal;font-weight:400;speak:never;display:inline-block;text-decoration:inherit;width:1em;margin-right:.2em;text-align:center;font-variant:normal;text-transform:none;line-height:1em;margin-left:.2em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.rttss-right-open:before{content:'\e801'}.rttss-left-open:before{content:'\e802'}.rttss-quote-left:before{content:'\f10d'}..

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1560)
Category:	downloaded
Size (bytes):	31775
Entropy (8bit):	5.123847641394225
Encrypted:	false
SSDEEP:	768:fn7zyeIqbR+7vEqSR+7yGV7J76Wx79U7Ij77Rm7sRAgC:fNIqbR+78qSR+7yGV7J76Wx79U7Ij77K
MD5:	BF8AEB6BC476D62E9C93D167FF43B344
SHA1:	B6FB19ECE059ECD1842591DDD50DFB4991F5219F
SHA-256:	A0ED8E59593EF822CA3BC0A93CC03FA4F00B0E7D3827460EFE08B90AD68E7EA7
SHA-512:	0B6674EE3D44266DA159EF3E2446C0F1031C25CD4EE00430C7CFAEEDF15A3108C27B2F968BB23B8CE4C20E0D88D917EC1E716D86F703DC38DF246B12631DD12C
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/occupancy-select.js?version=1.0.0.395
Preview:	var path=window.location.pathname;var path_split=path.split("/");if(path_split[3]=='package'){var package2page=true;}else{var package2page=false;}.$(document).ready(function(){var adultsInput=$('#ad');var childrenInput=$('#ch');var childrenAgesInput=$('#ag');var currentOccupancy=adultsInput.val()+'\|'+childrenInput.val()+'\|'+childrenAgesInput.val();var newOccupancy='';var maxRooms=10;var minAdults=1;if($('#hotel_code').attr('value')=='4937'\|\|$('#hotel_code').attr('value')=='8164'){minAdults=2;}.var guests=[{adult:minAdults,children:0,childrenAges:[],childrenAgesOriginal:[]}];var adultsParam=getUrlParam("ad");var childrenParam=getUrlParam("ch");var childrenAgesParam=getUrlParam("ag");var childrenAgesOriginalParam=getUrlParam("child_age_input");var numberOfRoomsParam=parseInt(getUrlParam("NRooms"));var children_max_age=Number($("#guests").attr("data-max-children-age"));if(isNaN(numberOfRoomsParam)){numberOfRoomsParam=1;if(typeof getUrlParam("ad")!='undefined'){numberOfRoomsParam=getUrlPar

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4090
Entropy (8bit):	7.533231910383408
Encrypted:	false
SSDEEP:	96:WS8knmWI8kocVFdkSDoHblVHoivQaqA2EJBHiP0qGXzIu2CYWv2N:WS8knwocJdDo7lVTvQjjKiPJGDIub2N
MD5:	5E2E246692C2422614BEF8FEE51F6360
SHA1:	10F42327E894C35C3753E4E2601D4011E4F0E511
SHA-256:	7DD6C9E79B569531B03EBE10A9413B6D3579470D68CF495A82734689EA98B33C
SHA-512:	6554B1B2C51E2590EE8CA2F4C40E397D501767C4D4331D44ECEBF02EB82EBAA5DE4C354AE08830B14C2046A2AC5EF3E12121CEE30C7347231D5F44ED52275574
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/instagram.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:22:23-03:00" xmp:ModifyDate="2021-08-11T18:26:04-03:00" xmp:MetadataDate="2021-08-11T18:26:04-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:3abf60e9-5eed-3148-82e1-86a0b9c10987" xmpMM:DocumentID="adobe:docid:photoshop:7f264967-65e8-7e4d-aea2-edb5d699b89d" xmpMM:Origin

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22133)
Category:	downloaded
Size (bytes):	129990
Entropy (8bit):	5.344637293884742
Encrypted:	false
SSDEEP:	1536:cbIZq0tB1r2zYO5tM2M6fkkKOakvjUfo3mpK/ucN:GIZq0jFAiy0Ul
MD5:	A5F30759C7C82EBE39CB0C77BA86798F
SHA1:	3D2797108A32681B714CD74A765CF2A9244B211B
SHA-256:	1877A0B57ED9811141E70120AA5679ABAB44F6F8BAF1031587B7F6B7B72488E1
SHA-512:	AB9AC07C849B1B50BF499B842FB83BA77AF9F8281A9A300C0AD90F062A5753D8F255C286B09494874D9788E24E7A81DD3F194E308CC6D92CB9C6E3D3527A14FD
Malicious:	false
Reputation:	low
URL:	"https://static.whatsapp.net/rsrc.php/v3/y5/l/0,cross/rBt2u2pvsTD.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	._8l_f ul,._8l_f ol{margin-left:1.5em;padding-inline-start:40px}._8l_f ol ol{list-style-type:lower-alpha}._8l_f ol ol ol{list-style-type:lower-roman}._8l_f p,._8l_f ul,._8l_f ol{word-wrap:break-word}.._adhc h1,._adhc h2,._adhc h3,._adhc h4,._adhc h5,._adhc h6,._adhc p,._adhc ._7gz5,._adhc a,._adhc li,._adhc ul,._adhc ol{color:inherit;font-family:Helvetica Neue, Helvetica Neue, Helvetica, Arial, sans-serif;font-weight:400}._adhc a{font-family:Helvetica Neue, Helvetica Neue, Helvetica, Arial, sans-serif;font-weight:400}._adhc ._8l_f a{text-decoration:underline}._adhc ._9vcx{color:#0373e9}._adhc p,._adhc ._7gz5{margin-block-end:1em;margin-block-start:1em;margin-inline-end:0;margin-inline-start:0}._adhc ._aof4 p,._adhc ._aof4 ._7gz5{margin-block-end:0;margin-block-start:0;margin-inline-end:0;margin-inline-start:0}._adhc h1{font-size:40px;letter-spacing:-0.03em;line-height:1}._adhc h2{font-size:32px;letter-spacing:-1px;line-height:38px}._adhc h3{font-size:24px;letter-spacing:-0.03em;line-he

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3459), with no line terminators
Category:	downloaded
Size (bytes):	3459
Entropy (8bit):	4.738575166886569
Encrypted:	false
SSDEEP:	48:sBASUtAg9XRI7A+/GDKQx8iQazLI9VwyEl25m3sTDBabx4:dA5p3Qx8iQqwVw125m3sTDBai
MD5:	7163DE6FAEF5C0435FB35B6358C742F7
SHA1:	0BCCDA1F4C7D0AC7AECB2BD7E0FC4B215CDA2528
SHA-256:	C7FDC41858ACE068DDC4C7A0F0E45A09697B4B528E0863A2C93518147A4BACFD
SHA-512:	60FD84FEBD578A99DD28B71FA9A1F6925B21118B55F0F9DDECBF1794A0D8A57C56865B5CE1D32229E504F5B4F8F70DFA2E88651C464069A517BB75A699106F55
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1
Preview:	@font-face{font-display:block;font-family:weathericons;src:url(../weather-icons/weathericons-regular-webfont.eot);src:url(../weather-icons/weathericons-regular-webfont.eot?#iefix) format('embedded-opentype'),url(../weather-icons/weathericons-regular-webfont.woff2) format('woff2'),url(../weather-icons/weathericons-regular-webfont.woff) format('woff'),url(../weather-icons/weathericons-regular-webfont.ttf) format('truetype'),url(../weather-icons/weathericons-regular-webfont.svg#weather_iconsregular) format('svg');font-weight:400;font-style:normal}.wi{display:inline-block;font-family:weathericons;font-style:normal;font-weight:400;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.wi-fw{text-align:center;width:1.4em}.wi-weather-0:before{content:"\f056"}.wi-weather-1:before{content:"\f00e"}.wi-weather-2:before{content:"\f073"}.wi-weather-3:before{content:"\f01e"}.wi-weather-4:before{content:"\f01e"}.wi-weather-5:before{content:"\f017"}.wi-weather-6:before{con

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	442178
Entropy (8bit):	7.9763307046596195
Encrypted:	false
SSDEEP:	12288:G30QMeqxE01xsI7a9PFvDS9RYwwMd/CzjjMoT:u0pNNsI7cYYwnuj
MD5:	4E6D055352C529363C66F0E801691D2D
SHA1:	536F5BD012FC9CADA124E6BDA81E0DABAEB2A2BD
SHA-256:	24B7CDB1C87BE5C628BD143C400419AFC2B9AB2FC18546C087BD6B84B85FB778
SHA-512:	716F17852A916E3C87431405314C02A3CB7C7941733CAB0CB5F3D75BDB5CB9772B578A7B88C9C69F6F65EB844351AB7D4C61DC27D90ED8EB49E5470E19CEF6F6
Malicious:	false
Reputation:	low
Preview:	.....sExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:13:44..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......#.f...j.....'Q....zj._.N.K..s.lw....<z.]...../....wR\E.]..&.1.g`..

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	195079
Entropy (8bit):	7.955289832852661
Encrypted:	false
SSDEEP:	3072:xkANJC65kANJC6c84OLlDm4i5R52BZAm8XtAJywDRg6hYuFVw0N/AxTeDpgBTaez:xkCkskCkldOBDml352BKTXtAwwBGu/tw
MD5:	B04D3DA47A9353D8A667315A92AE04D5
SHA1:	9079DD6CA9C13F40047CD6F83E647CC52D3E4F62
SHA-256:	7C28DB6916C9EE814C0B60861A069729CBCBAE4907610078A8A636BF5A2E0D95
SHA-512:	B60E1D20150AEEBA1B6F5FB19C942B7BC7205A2AC1BC4C15CFF02527EF2330B0B112E665FEB20EB02C22CA83D793B6CA059C970CDAA10993048655663865DBE3
Malicious:	false
Reputation:	low
Preview:	..../.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:20:16..............0231...................................................................r...........z.(.................................7.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?........z.q.cYkEo..[Q..(.ch..X.f.U.].....wY.ik.u.........o.}.....it.`

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56486)
Category:	downloaded
Size (bytes):	56678
Entropy (8bit):	5.2708491076632455
Encrypted:	false
SSDEEP:	768:woj1J3s106OigQTl0Xh3mPv798TK/67qKMK3R3ygtQTvT:woj1JccGl0XCNgtQTL
MD5:	A2DB833B913E6B8E902BCEFB804178F4
SHA1:	28C23354D39722F7BECAAD97263D4F43EE70BE1D
SHA-256:	C7D5594F3A599CCD0B1A336BB68A24D59882F394BB0B9C9A29C5200CD2B48468
SHA-512:	731B5A9F4239A9217D1BE907A5409DA176B3C2F3BD6BC4F5E7BCDB34A413AABD78AF3B28268629D15CFF34AC8B7F40EE6AA140AB2645953328E4647D2A4D3B09
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yV/r/HzxD9aAXSyD.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/9cisb7Fe7ih/. */.__d("immutable-3.7.3",[],(function(a,b,c,d,e,f){"use strict";var g={},h={exports:g};function i(){(function(b,c){typeof g==="object"&&typeof h!=="undefined"?h.exports=c():b.Immutable=c()})(this,function(){var a=Array.prototype.slice;function b(a,b){b&&(a.prototype=Object.create(b.prototype)),a.prototype.constructor=a}var c="delete",d=5,e=1<<d,f=e-1,g={},h={value:!1},i={value:!1};function j(a){a.value=!1;return a}function k(a){a&&(a.value=!0)}function l(){}function m(a,b){b=b\|\|0;var c=Math.max(0,a.length-b),d=new Array(c);for(var e=0;e<c;e++)d[e]=a[e+b];return d}function n(a){a.size===void 0&&(a.size=a.__iterate(p));return a.size}function o(a,b){return b>=0?+b:n(a)+ +b}function p(){return!0}function q(a,b,c){return(a===0\|\|c!==void 0&&a<=-c)&&(b===void 0\|\|c!==void 0&&b>=c)}function r(a,b){return aa(a,b,0)}function s(a,b){return aa(a,b,b)}function aa(a,b,c){return a===void 0?c:a<0?Math.max(0,b+a):b==

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19306), with no line terminators
Category:	downloaded
Size (bytes):	19306
Entropy (8bit):	5.260983617372494
Encrypted:	false
SSDEEP:	384:64mRaljHMZBdhMt20MN1h2e9IIft7autN72MGo:MCKBTH/7aC0MGo
MD5:	4068F6AB9E6AE017E04B8684692D202A
SHA1:	7414DB6531D4C56DBA6D8654520FCB0F09D53770
SHA-256:	F9EB189676A78D42D7A8487EEF683702ADA6C5C866399EEFBC0DF319D5F7C6D7
SHA-512:	B03217D2497CE6FD42979B6EE1618B642A47FDD57D3876C0E1894A0AE0A2326390224E1BBB3A180D94858FE4EF0BBD663812E1F020C2FD1120134197D3171B8C
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var i=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),i[t]=e>>>((3&t)<<3)&255;return i}}},508:function(e,t,n){"use strict";var i=n(944),r=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|i)();if(

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	195079
Entropy (8bit):	7.955289832852661
Encrypted:	false
SSDEEP:	3072:xkANJC65kANJC6c84OLlDm4i5R52BZAm8XtAJywDRg6hYuFVw0N/AxTeDpgBTaez:xkCkskCkldOBDml352BKTXtAwwBGu/tw
MD5:	B04D3DA47A9353D8A667315A92AE04D5
SHA1:	9079DD6CA9C13F40047CD6F83E647CC52D3E4F62
SHA-256:	7C28DB6916C9EE814C0B60861A069729CBCBAE4907610078A8A636BF5A2E0D95
SHA-512:	B60E1D20150AEEBA1B6F5FB19C942B7BC7205A2AC1BC4C15CFF02527EF2330B0B112E665FEB20EB02C22CA83D793B6CA059C970CDAA10993048655663865DBE3
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/004.jpg
Preview:	..../.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:20:16..............0231...................................................................r...........z.(.................................7.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?........z.q.cYkEo..[Q..(.ch..X.f.U.].....wY.ik.u.........o.}.....it.`

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1581
Entropy (8bit):	7.772448668900473
Encrypted:	false
SSDEEP:	24:w/6EBjZLJLzV1P2jOWwNi4oxDsNMw/xoETiMlpIdVqTXM9JWZ/24BIDub9Z8LN4:w/6Er9n2yWwNIxIF/ipMlBXQQ/J+uRuC
MD5:	A9AF2BCFD4C4E41473900FC29BFBFC94
SHA1:	8EDBDBBCA42529233F4A0D4A3BB9C2520FF66687
SHA-256:	66C18CC0D53BA09CAB22FFF8ECFDC84AAF01FDB28E29AE8DB32DF82E729B512C
SHA-512:	41F9868D9BA7DB1EFF2C87B4AAC7846C8641C6167EA6F4E6414EADAC703747A0142B1BC81B00038EFAE3B8B688E02067DE99DEC04ADAAA183DA5E7D404A0FCFC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/images/close_modal.png
Preview:	.PNG........IHDR.............;0......pHYs................ cHRM..z%..............u0...`..:....o._.F....IDATx.VkL.W.=...,.K.].......bb.-F..I.&..M...&j...4..Z.jm.#.......FEm}...,.Z[.Uk..+.<V.ed...;.......q~.=...f.s.K233...s.B...ca..(.N.8N....#....T.}.H..p...@..(.....z.(Z~kk.)..a......-.E.....$..........'..].mg...g.Z.3.. ...H.0.Ra!.. X.%$...;v.%3.}n..<]qi.Y....`..M..c.s......U\R\\\..............e.y.444...\....hZ..)[.,X....C..:.s...G.....3rw........apI....K......t.S.......4?...pX.G.......aL......yR(.e.^...\.0E."....i....3..=z..l6..9.g...-.2.&D.........N...`..P.t]..F.M...h.(.r...y..G....-[6a...n....+ I.).16PQ...B...%].z.{B....(b..\L...A.0v..~.o...t...v...c......HIy../_..if.o.....I.?...gf...aX.t..4.,.HK{.7n....f.@\\.V.,@j..c_bb"..n.....X.R......2f.7c.....k.3f.l6[.........n.Z....9.s..\.p..2.1.Jrrf....I.Y..NFaa!.......p8.......m..W.].!..TQM.\=....?6l....v<.e..O\|m.Xb)!$.7>.}.6.n..EQ.Y.u.EE{{...+}<.z.{..v..uu.}.!.s...fll,..?...../^..... ..(6.4.l6.V.Z...

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	4.988352972183771
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMj38n:t4uz0Lu9OYjfBolV/GbIQw38n
MD5:	01C6E6DE7BE92C51A6288E46F9EAD62A
SHA1:	B0B6D9791A466C84943DB4EDC968FE866743ECF7
SHA-256:	87FD4D8988182589BB197D85A17006E8B3344B096157D53385AB921C8CABEFEA
SHA-512:	972848C5F8A0C10C9991ED313E48FD5EABA2E0F543F3B476FABF3D87760A7790534D4DCA53A68D7636BE2B96F862A52D06D6C647F32045844FA0846A59E8BB08
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_White/iconWhite_Xclose.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#FFFFFF"/>.</svg>.

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1391)
Category:	downloaded
Size (bytes):	40165
Entropy (8bit):	5.2560954253770324
Encrypted:	false
SSDEEP:	768:n1AlNDtwpmza5Z7XQ1FB5mz0UPwVgmokQhZrRkr+KernCIJ0nhp3bgYVTtISnYMc:EMfg1c0UPwYA3Ex7MoI2
MD5:	C739C20D68307BA5D07C73FD883A6DCA
SHA1:	CD2C24292271A2237EA380358EF85A908A1A69EB
SHA-256:	D3D61DF3BAEB439F65E5BD54A6466439E449380D91525C48724B8BB747FCF932
SHA-512:	6C3363B6CCD70D22944949A3CCB8665845E3DBD261CF20FD1CD30BE7E178C621E7DB36308AA0F6646D0BFD0FAAD3040594C8DDC9D3F8A7B27AD5E33C16D9F731
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/zcalendar.js?version=1.0.0.395
Preview:	moment.tz.setDefault("UTC");var selected_arrival=[4820,13111];var lang=Number($("#lang_curr").attr("data-lang"));var currencySymbol=$("#currency-symbol").text();var offset=new Date().getTimezoneOffset()/60;var ChainOrHotel=window.location.href.split("/")[3];ChainOrHotel=ChainOrHotel.substr(0,ChainOrHotel.indexOf('?'));requestForNewOccupancy=false;sameDayAsUTC=true;var chain_id=$("#chain_home").attr("data-chain");var language=$("#lang_curr").attr("data-lang");$.ajax({type:"GET",url:'/timezone/'+chain_id+'/'+language,async:false,success:function(res){res=JSON.parse(res);$.each(res,function(i,val){$(".hotels_hotel[data-id="+i+"]").attr("data-timezone",val);if(window.location.href.split("/")[5]=="package"\|\|window.location.href.split("/")[5]=="room"){if($("#hotel_code").val()===i){$("#hotel_code").attr("data-timezone",val);}}});if($("#hotel_code").val()!="0"&&$("#hotel_code").val()!=""){var hotel_code=$("#hotel_code").val();var UTCday=moment.tz($(".hotels_hotel[data-id="+hotel_code+"]").att

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.953604302930793
Encrypted:	false
SSDEEP:	24576:jam+WK4p/AAKA0nOXUFjrppmNcCBjBCjihuAy+2fN:OBV/rOEVYBjBKXA+
MD5:	61383215718B8DA7142A6EAF6B92DD2E
SHA1:	4D0EC1DE3A6CF71C382B45A74542BCC8C9FB3D00
SHA-256:	98848CD69C30ED23198C316132BFEBBAA277BFAA67D92435FC25765DC07DFAB7
SHA-512:	84671561F94F80F166E0A02C2050190C726FD5A5261BFE3AA1F6EE7C93447FEAA6CEC005EF49238FD7756348C5D47F9753C638B29D85F38BC406B3BAFF0044A5
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:3
Preview:	.<;":Z.HY"e..O\5I.d..X..x..4aa.`..L5.........X9.......&.(c....xq.....d...^/......f...Y..!,..iKpNh.]n0/...}..x.k<. ..2...&.;(.....mUT..q..'-..L.......4T.+....h..3......b.h...-PD....[F.oz..V..@\|A..T..+2..._.Y.T....yb....-...t=..4..KZ..I...R.M..zD@.p_F..?:...2..[Ai`..\s..(.M.....C .j.%..F..P_....4.x.....R..'..b..v.ec..cpr.et..p..na..Zh..l-?...:.3...d o.f.9.....f.a:..F..)...=.......&...oc.2.......>.%..I...>.W.6.F.......R..T.f.U..).N..fM.4{e.Cy...L..._...X}.....7+'..SJ./...........{...l.@....@M6../~S"f............Ej......x.n3....qK..~...6.7^.gN.c.y[r9^bRL.Z.Jc......-....t...S.:...'.6.{..)....d.^...{.@....Rr...I..A.C.}.$!@k..........w.]_.{?.um.+dh..w.8.8.....$E...1IiC.)....".o.1...-..F...T...yd...S.....b...D..%..85..].yu....R...XOr1..T."...s..@....Sxx..}..g:..,.ly...d..._..p9.(..'.M.hJ.../O?.. .R....=.[..e.}.Ls........g<..X..D....,;U../t..@..e."..&.ZT.+.BY.=^.G...........<}.......i....2./..z".........j..A.O......m.[...*">..Cy.a.x.]....!...x

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	5.173975179074615
Encrypted:	false
SSDEEP:	12:t4cRj1tEa433uvzHYK0nRXRhOKXO3zIJ80XnmcZFs1FcF8joI:t4cRjMxGzHl0XRKzIJ8qnm9oI
MD5:	9A4D16BC41889411D59181302C0C49A6
SHA1:	112D9E990C79E6248218B93B53CC3AB151DB95E9
SHA-256:	DEFC17920B0B6E6BED47E35A8E5A2D58DC41421623197B35CD1A508499C84E98
SHA-512:	1233BF43A662A422229FD9FA557723E11A1A45E5717CDE4CED29E853890D1B5CA1DFEB47997377A03C4477D9EC8F3FD32631E4D02A5ACE665889ED05EE90CADF
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icon_Modal_Warning.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50">. <g id="icon_Modal_Warning" transform="translate(-4 -4)">. <path id="Caminho_2360" data-name="Caminho 2360" d="M29,4A25,25,0,1,0,54,29,25,25,0,0,0,29,4Zm0,48.078A23.078,23.078,0,1,1,52.078,29,23.078,23.078,0,0,1,29,52.078Z" fill="#f8c286"/>. <path id="Caminho_2361" data-name="Caminho 2361" d="M13.143,33.156a1.416,1.416,0,0,0,1.412-1.416V7.981a1.412,1.412,0,1,0-2.825,0v23.76a1.412,1.412,0,0,0,1.413,1.415Z" transform="translate(16.426 5.459)" fill="#f8c286"/>. <circle id="Elipse_25" data-name="Elipse 25" cx="2.259" cy="2.259" r="2.259" transform="translate(27.019 41.162)" fill="#f8c286"/>. </g>.</svg>.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.926861561127997
Encrypted:	false
SSDEEP:	24576:rrsTDcy+9bASjWrhW2vPUdFoCWC4cHwJuKE:rrQwyeUSqZvsdFArdE
MD5:	04ABA73888EC422B8A9592BCA1E849F5
SHA1:	57089BBEF14E0CF9655E9F8EBFF2EF6D2B310413
SHA-256:	814B554DCCF6137B9862780EBD00403AC5271F6E60F9CAA8C37B02BA50ED5DBD
SHA-512:	7A45206350EAB804CD526A248CB7B8BFDAA501E3239429050BCFBDC1437988A2FD0C9078C81202DFDAE6B77B8531F7AD3F6A9EF4A21D4B55E4973B73B80344A6
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:9
Preview:	=t.4.T\..u..i.x..`..7..Y.c....Kc0..+.;..ZJ..N.Y.....TH[...A..f.{.2TMR....'f.&.Z.D..(;W..)@.9X.6.:..L}.z..x....C`....a.$.^......P.....]>...0\|.f-..k.P}.....-...]pN/..9...[<...F....'........%..........D..fl...qS."Vv...Q.....Q.b.j..o..........~#..%.K....{.\|B..\.6!Qp.V.C.u.W:h'..WX?b.Y....ur.'.Q.P....w.(.ar....."@...........$}.@...F....,.......ct...\......'w`.....RZ=..&[..........T...o....}.... ...=..m!j.w...o;....k0..../.N/...........Pk0. =...{Wv..4.t.M.U.j.3.k.7........Z...G..__S~....\|.ga.;@..Q....0)R'..xy..~q{...o/.l....`.P..w....B..{.+.O...y....i..K.R.wi.!.R....;...9/`K/.X.....F?..V.Q.B.9.A.....P.n..0L..6.9NR^..e..z..Q.%-&./.L....7.$gekV7.Xm.d....s..CI.NU.`Z....,..u.G.=&.'1(.tk.....VPG..f....L{. .\|.0.oM..C.. ..'...m.....&.d....[.T.}........Gy.?G.Nm.[.@\|.[.6.....6.\..r.U....Y....lW...k.Kd.!...\|w..>4.....1?..y.o..YC...d.).P.S....T..U.p........yt>.b<..m....[O..j....2....iy.[..@.0..>.p.."...&.\..UF..,.....{..d.3.\..R....P.m..

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	177868
Entropy (8bit):	5.517058665699497
Encrypted:	false
SSDEEP:	3072:Ac0Iard8OdOlbS8vqCIqjysCBGJ+dQWqzGmRmd4xKkqxN:Ab8OdOp9Z13AdQWqzGaIv
MD5:	BC2BD51D28BBDD0F21469A7306A26118
SHA1:	D2E375309FB151D63EA319D1F5E05A3C84B8B88E
SHA-256:	569B56F2E5C0FD73108C85C7C6659CB4BDFE2D9DDB74AC9713FF1DF15DC16E5B
SHA-512:	7E1966EAC244FA0C4CD094C73FF6CCF7250505088A16EE66CD674EEABF94A31F2B689EC4B993EA4C4BBEFCD66BDBF11806F4B385A122890D8F1AF08915F5D512
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PW6X872K
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6924
Entropy (8bit):	4.744316461124384
Encrypted:	false
SSDEEP:	192:pGoN6PYxyrj0tZX0I7l8Sp/SOj0on4e+bBLvBsRbuX5vGD9:JuO
MD5:	406A56BA5CA2B2696BC2368D87EF13DB
SHA1:	2A5E9A337DEE31DBFF3911DF918BB99611F3004E
SHA-256:	E3EA122DFE958FFD587A4B7E4DF8C7BB0EA047B4B850E937C6D3FD22FE1651E3
SHA-512:	5844E23E42B7F5370006E4DFDB5DA15D39C21F7D3EDDAA5E7CDC6D0DD9BB55339C90E81F04BD65E4399D2B01EF512B6488DB975928C65802EC78F7BD38A32A90
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=1.6.5
Preview:	#ouibounce-modal {. font-family: 'Open Sans', sans-serif;. display: none;. position: fixed;. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 999999;.}.#close_button{. background: url(../images/close_modal.png) no-repeat;. background-color: transparent;. width: 30px !important;. height: 30px !important;. display: block;. cursor: pointer;. float: right;. position: absolute;. top: -15px;. right: -15px;. z-index: 10;.}.#ouibounce-modal .underlay {. width: 100%;. height: 100%;. position: absolute;. z-index: 10;. top: 0;. left: 0;. cursor: pointer;. -webkit-animation: fadein 0.5s;. animation: fadein 0.5s;.}.#ouibounce-modal .modal-title {. font-size: 18px;. background-color: #252525;. color: #fff;. padding: 10px;. margin: 0;. border-radius: 4px 4px 0 0;. text-align: center;.}.#ouibounce-modal h3 {. color: #fff;. font-size: 1em;. margin: 0.2em;. text-transform: upperca

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	497922
Entropy (8bit):	7.978786604495857
Encrypted:	false
SSDEEP:	12288:+mZCh/kiwSU2TQYjMPQQvb9wLIX6Hyl7qw6czHf86iJ0:+mZCh8jQLMPQQj9wk5Bqw6cL86z
MD5:	E258F7F7C5A15FA7BC2579A05A0490FD
SHA1:	ADA13C686BCBF4C5117264AE8CD4939C46267D09
SHA-256:	3DCE9724AEDDBF036F7F8242B9E9B5A49CA48334BAFEB732BDD375CAB8C0A52B
SHA-512:	454476FF9ED78FB0FBBAB3DEEB5315423F399D4E86EC66FDA94659B6506EEC3D1367A8BD28ED28D96CAAAC6584C99E3A55405AB4F04BC51C8BA19E8D1F04493C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-10-copiar.jpg
Preview:	....".Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:08:54..............0231...................................................................r...........z.(................................ ........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....+..H..O.yx..N.x.Y...e...OO.Q..4>.....y....U.l.=.1.l.^...........F..

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	4.935218735746844
Encrypted:	false
SSDEEP:	24:0/emCtetODyeIBpXKz7qIbFSqzEdiqBEbEFg1dg8jUfXKzxwqW22ojHc4RvzP2tc:uZo83XIqgFS82iqOwkkR/4F0Xs
MD5:	6C830C91A0A08FCA0FE883504ABC7D2B
SHA1:	5193B985AA3F992CE7BAD494B6AB519707C48CC1
SHA-256:	9D7055EC6AF6954D2DF80C0AB274B4E4362DCD9F35A184D74BA923ECB0501DF3
SHA-512:	39372E6FBF11DE6B0E0AD6374DCE85CDE0C9F0DF6ABD09F53E1E3DA2ED77C6003D56C1FDF8B471A0553A12A2E15B8F8F2917D4FBF1D17979926571C492962838
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.css
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /./. * .Default theme - Owl Carousel CSS File. /..owl-theme .owl-nav {. margin-top: 10px;. text-align: center;. -webkit-tap-highlight-color: transparent; }. .owl-theme .owl-nav [class='owl-'] {. color: #FFF;. font-size: 14px;. margin: 5px;. padding: 4px 7px;. background: #D6D6D6;. display: inline-block;. cursor: pointer;. border-radius: 3px; }. .owl-theme .owl-nav [class='owl-']:hover {. background: #869791;. color: #FFF;. text-decoration: none; }. .owl-theme .owl-nav .disabled {. opacity: 0.5;. cursor: default; }...owl-theme .owl-nav.disabled + .owl-dots {. margin-top: 10px; }...owl-theme .owl-dots {. text-align: center;. -webkit-tap-highlight-color: transparent; }. .owl-theme .owl-dots .owl-dot {. display: inline-block;. zoom: 1;. display: inline; }.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1002
Entropy (8bit):	4.286677038172223
Encrypted:	false
SSDEEP:	24:t4UJfbMphWIWQJlYLOs5PX1Ypla9rQauXdpYPGC+wo132:7AaIWiGztoUfurYRGg
MD5:	D942A1BFC6B09DBB0AFD50FD655B0186
SHA1:	623BF13980B1DDEA57453D061C03F103EBF5889C
SHA-256:	2FF5EBEE337B58F4CC458B634BD05D1ECB804CFFC6F8FDC6DEE2EB90AC32D2BC
SHA-512:	97446D8A6ADB6128AF903ECBFFCDD8190F5EE1BB035BA0DF4EC423D93E2659BE9DCC0D2560E3D8C7AE045FB04C20F4E57083FC65114C603C50B71FE9C378D6E6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14">. <path id="icon_Information" d="M7,0a7,7,0,1,0,7,7A7,7,0,0,0,7,0ZM8.457,10.849q-.54.213-.862.325a2.275,2.275,0,0,1-.748.112,1.49,1.49,0,0,1-1.017-.319,1.031,1.031,0,0,1-.362-.81,2.942,2.942,0,0,1,.027-.391c.018-.133.047-.282.087-.45l.451-1.593c.04-.153.074-.3.1-.433a1.921,1.921,0,0,0,.04-.375.578.578,0,0,0-.126-.425.714.714,0,0,0-.482-.119,1.264,1.264,0,0,0-.359.053c-.121.037-.227.071-.313.1l.119-.491q.443-.18.847-.309A2.5,2.5,0,0,1,6.625,5.6a1.463,1.463,0,0,1,1,.314,1.043,1.043,0,0,1,.352.815q0,.1-.024.366a2.447,2.447,0,0,1-.09.481L7.417,9.163c-.037.127-.069.273-.1.436a2.306,2.306,0,0,0-.043.371.533.533,0,0,0,.142.431.793.793,0,0,0,.49.115,1.422,1.422,0,0,0,.371-.057,2.109,2.109,0,0,0,.3-.1ZM8.377,4.4a1.071,1.071,0,0,1-.756.292A1.082,1.082,0,0,1,6.863,4.4.931.931,0,0,1,6.548,3.7a.94.94,0,0,1,.316-.709,1.074,1.074,0,0,1,.759-.295,1.062,1.062,0,0,1,.756.295.955.955,0,0,1,0,1.416Z" fill="#FFFFFF"/>.</svg

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	985
Entropy (8bit):	4.709341657565462
Encrypted:	false
SSDEEP:	24:yN7WuZR/IaEvwLSwL6S6qf6w2my5Pqv5P/:QWXzq6S6qf6w2my5Pqv5P/
MD5:	DA7F0F6AEBDE50C1FB30935D025F8CDA
SHA1:	5BC63AA29C8C96AA696D077F2C5FF5DC47F5E2F5
SHA-256:	E09469635EFC1842145E3FDBC2AE86EDEF9748BBD9751EB3CC6C532A997B2F3E
SHA-512:	C6B91ABBADF40794F1BEADCBCA4D5AA9F12586666271A56AC7F8F350EA7690B33168C2F8C9B157CCE6473E2108C7691E3637440BBA3E1571BFE7CFD9809E016E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5
Preview:	..peel {. position: relative;. opacity: 0;.. }. . .peel-ready {. opacity: 1;. }. . .peel-svg-clip-element {. position: absolute;. top: -10000px;. left: -10000px;. width: 1px;. height: 1px;. opacity: 0;. }. . .peel-layer {. position: absolute;. z-index: 1;. width: 100%;. height: 100%;. top: 0;. right: 0;. bottom: 0;. left: 0;. -webkit-user-select: none;. -moz-user-select: none;. user-select: none;. -webkit-transform-origin: top left;. -moz-transform-origin: top left;. transform-origin: top left;. }. . /------------] Some Defaults [------------/. . .peel-top {. background-color: #81afcb;. }. . .peel-back {. background-color: #a0c7df;. }. . .peel-bottom {. background-color: #688394;. }. . /* .eae-top{. background-image: url(Screenshot\ 2023-10-30\ at\ 1.55.14\.PM.png);. }. .eae-back{. background-image: url(Screenshot\ 2023-10-30\ at\ 1.55.14\.PM.png);. } */.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3566 x 830, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	29526
Entropy (8bit):	7.868689249946656
Encrypted:	false
SSDEEP:	768:ozDd1sA/tACcWTZ72qa3yX22xUi5GNvnDH5vp1a4:YdL/fTTZ7X7XIUGNrJp1a4
MD5:	215698B8F763CE612C41964F0F14E507
SHA1:	226059CD8896A857DCA6437F29F58E9F682E4D00
SHA-256:	2FE76A197D3891F7848604C87A945231C4DD2E39A74BDAED45AC5648A0DD72E2
SHA-512:	3DE592395D0D81E928E465A188F58BAF28F4A043C65A651421122C266355471B602C3141D0BF54FD537B78FCDC07A9D618915B6D95A61B4B853418B9DCF6067C
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yq/r/mdQNdcFMi0p.png
Preview:	.PNG........IHDR.......>......r.....3PLTEGpL.................................................A.*....tRNS... ..`.@.0..Pp6.4_..r.IDATx^..Yv..@Qp..p..Wk.m..k......{....N....X...H..._.........!...{l).........5/..4..5.T......Xs))...bJ.\|~......2.X...O.>....\|.i./5....1.....bm.......`...k..p..........7.....\|.c..m_..K...L....G.....X.a.7..s......zG.....\|...L.7..C......a..J...... ...+.......`^.X...5<....Z...qx......s......b.....!.G.......^........7]\|...Z.N......S\|....Z...'.....2V~z./........+...z...x..v.G.....5...8.......P...5......{.=....X..._....,[}?b..:.........G....,............2.......X;cO'...\b.p..^...`...`[B.............~.b.C.................{....@..>....'.....T?.....pg.x.....@.9....0.X_.1.....p...R.......k3...#..............N....Z.l...X..(......`M.7>.......6..~.....k.Hk......'.........N...s.......`:..P......b......Vo.a.?...P.]...c...y.7.1....../...%....=.d.....0......0....,...76........K).3.....7.MJ)..s............`..!mn......R..-...s.X9.r.....h....o;.+W..

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 701x390, components 3
Category:	downloaded
Size (bytes):	71306
Entropy (8bit):	7.9738825486358476
Encrypted:	false
SSDEEP:	1536:fHj9Q3vD7cN/ZHgqSfVVC/mOyz5IjL3eNtpY8kJTQ1:/8vD4tNgqSNQ/mOytI/3eNzY8kJM
MD5:	2C1D86F5E8A1A4FD1C7EE2C969C297D8
SHA1:	3DDF183BA84E56394C37C7F80771BF635A9A08C1
SHA-256:	7D9D85898115983BD4C81B9AED0C0B3B5D68BF5B218B10E5D4DCFF2BC478625A
SHA-512:	265BA2075E2294E95912C918A8FA338D243D2CA968639281421D7AF1A8D2F343E8D5174119C5EEF85E06C2E118A334BB85E1A96B015E37731FC830FC0E4A1FD2
Malicious:	false
Reputation:	low
URL:	https://media.omnibees.com/Images/5659/Packages/701x390/926105.jpg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...SYI...;w..b#.F..XTl.0.?.h.s.+05.\|.......F..2.......X{~U'.1.U@....G(..O..A\|..A.:.....o7..f.P.B].'~(....O.@i>... .D.@.g..QI..{c.G..K..#`Q.\...R..w....$..+....@..b.x.}...#.....95....dX.T\|.......aT............Y...xc.....8.z..p*1$g.......(W...E\})G...5H#.?.Zwaa1..).p.S6&..>......=F). R.c.(Q.g..BE&.p)J.\|6x.(r.......x...R,..j.-...i.?..w@7x..?...d3.(<...

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	262566
Entropy (8bit):	7.970357019687572
Encrypted:	false
SSDEEP:	3072:bPMow3uI5sEltAZA6NhtMiGXfrsKcv+E9/y1481INPG/8WKd5aNPKst7tHeiLCkl:bGg6ArNNGDcv+wySlNOELcVe2n0NSj8S
MD5:	A42BC64C3004F386F1D3836D46CE1735
SHA1:	291C6D83CA94E4BD49271D272F4F721E6EEA39FD
SHA-256:	E0258348EBE05B3D332C7805FB7AAB5D061DAC8893C243D1E2B713FDCC385633
SHA-512:	DD2DC81D1CF1E7F00FB8274AF8E4FBFC0EBC8049B808496A690E06C0D9571947F31C89B4B6AE4692782F742EE819088A0CE467B0BA376DEFD7DF942826EF9F2E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/photel-mobile-01.jpg
Preview:	....'.Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:12:10 18:22:34............0231...................................................................n...........v.(.....................~..........&[.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..H.y..#U=...c.........`..\.J...t....5ct?...N.gN..Sls..a.o.....n......y.-)...CC

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	431957
Entropy (8bit):	7.975696777722319
Encrypted:	false
SSDEEP:	12288:R2uLKVBPax9OD5GFUNZkk8zvhGHcTAFOOlEzdasZE9+:R2u0Q9ODMFUV8zpGKAFfOzdasZE9+
MD5:	18668D51661635D9C9C3302704B12FF3
SHA1:	042E61D022A9ADC1FAE788822ED7F6C672C2FE9A
SHA-256:	2139410C34026E11A8ACDC60097CCDE3CA8FA36072F4E6777CFF0AE2BF63CBF4
SHA-512:	D7E113FFBD03A01C20811CCF7A0B47ECEE2FC67A5166E12FF2879C76A2D03E16839E19ED6E72BFDF3FDF87461109D016E5A8DD90AECBF5944B519EFBFF37C656
Malicious:	false
Reputation:	low
Preview:	....!zExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:14:30..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....c..Z...w.p..~.{Z..=..........Cn...._.^.u....+..^..m..z...t..t..#k..

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.913238178679099
Encrypted:	false
SSDEEP:	24576:4Dvn5peCcwk8g4VUKm5bRgxE7hNRezpCsCq33/9vcvn:4DHeryVVmYS7hXeH1va
MD5:	F6EFAEB0CD46BBE76FCCAD7103BC7459
SHA1:	D3899C2B45773C115D234DDF751AF48E814F5A51
SHA-256:	ECD0DC68D2BD735D1F423D192B385E66168F87358EEAF4D5B1D79443094752E2
SHA-512:	83839A2C4F354E81BD8ED527278D6E1DC700A6E1EDEA11451A392D1B019221BFC6EA32A407414D70814CD0FB64465C3F871958A44220D58D73C76797BA966463
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:b
Preview:	(...V......wj......g8......].o.}.O..zR. .. ....4...6n}P....J/.u........'[k4..~DBN...>v^...G.>...M......#{..K....i...x.B.n4.0.;...\h.$..Z..CH.Q..9..W...5......@.....5.] .R>i...'.{j$.0JC..8...>..%8..[s.&........e..t:..o............ .../...!./..L(. 6v.....%...o.......a.a....X....!.N; .+......@..Y....Z...1,.c.NV..Wa.q....W..!..F.o.S.:-.....yR$..Y%.U..\|.k.....\z.k..!..u.....O.U$Z{..j9.1#..".CU&??.i?.`...=.......~'~...r.<O...D....Yi...S.P.H....\.!.....K_.K..j..K'...D.5&...5..^....o...[.$g........v.P...$..X.k3<..7/.M...69A@};\|Z.!......H. .2..\=..i."W.%G..G .....].I....f..I. .k.+T$.eCg.j...kv..rZK5.?C...3...!.k.%K~M..]YCp...4.%.Y..P{u..;.`m.}.....&....W..^.S....=#.u".....Q<..1O.:Q.n9>sY=..DN...~{O._@...r.F.......3F>.~.....t...R.o.@.....<.........0.4......A9......)2.W....Od.J..mc...#...p..2..<8..V...X...k..DQ....@...8.u4j.!.v..PL8+0..MU4......K.f....j..........+..........z..........v.....+FW.....l..-.a.bd.\|;97...W......[...a.....V.

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	4.989278313564598
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMjD6z0n:t4uz0Lu9OYjfBolV/GbIQwv
MD5:	A4969D8B9559CA1CF7436A3BDC3F8DED
SHA1:	6A25E3355716CF98133F52398723A2FCC2570855
SHA-256:	160A809726A79D4D363AEC0B9115EACF327528FBE8DEC4B3723BB0EC8CF8D691
SHA-512:	531574C5169DA79CCCB6E3928B7932C70A40FD8E6175159E68AAD13631CA55CCD80AF2A6D04A0B2C6EF81ED1280A5F5B9033BEC755322E3EBCD74B2B62DF5EB0
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_GreyDarkest/iconGreyDarkest_Xclose.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	49849
Entropy (8bit):	5.102530445699583
Encrypted:	false
SSDEEP:	1536:iAYTQULZE9fI0yngVeVN2JIz+ABRTNr0kzcs0J339p:6QUcQHncwxmp
MD5:	9C8080B6C33ED33AE08A2D0327F2F7D4
SHA1:	6513B20C790D6DD8BB26E4424A1D47D4C5B3D302
SHA-256:	837E3339DD1303952C4CE1AC2CF917D136F4D68E6B105241519EF2017D64DEB4
SHA-512:	7EE44730D99D200E6533C8AD5AA5D8729C4774F7DBF9A99F8BFE41130E1E12BD68B28D6D6C6ED074963EA122CFFD3B65093B259B9D52D179DCB6AB44B5F41FE9
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/jquery/ui/core.js?ver=1.13.2
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	67192
Entropy (8bit):	5.0344149762446335
Encrypted:	false
SSDEEP:	1536:dAsy6UyNhHuyE3Nl+6Jsw7EKhbIMbvt2pkTociTwSY1PKK+ZrzbTixVEQLuIhXa9:dAsy6UyNhHuyE3Nl+6Jsw7EKhbIMbvtW
MD5:	4068AE4F19957DEBFD1C95B0E8C336BF
SHA1:	DA83E83805A75546B8573AF111264C3F0358BFE2
SHA-256:	165C0ABB8289C2009791614344D28E8B3576ADACC895540407E1F3D35C66AF22
SHA-512:	41D8073E784235444328424C5AA7617350AF5DE808E86D5B805016E2E63BAFCD902054941754668184518A368A12A626BA28D3C96179A9C4A3E270F89EE18174
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10
Preview:	/*************************************************************/../*************** Testimonial Slider and Showcase Pro ******************/../*************** support@radiustheme.com ***************/../*********** copyright (c) 2017 @ RadiusTheme.com *******/../***********************************************************/..../******************* Grid System ************************/.....rt-container,...rt-container-fluid {...margin-right: auto;...margin-left: auto;...padding-left: 15px;...padding-right: 15px;...box-sizing: border-box;..}.....rt-row {...margin-left: -15px;...margin-right: -15px;..}.....rt-row:after,...rt-row:before {...display: table;...content: " ";..}.....rt-row:after {...clear: both;..}.....rt-col-xs-1,...rt-col-sm-1,...rt-col-md-1,...rt-col-lg-1,...rt-col-xs-2,...rt-col-sm-2,...rt-col-md-2,...rt-col-lg-2,...rt-col-xs-3,...rt-col-sm-3,...rt-col-md-3,...rt-col-lg-3,...rt-col-xs-4,...rt-col-sm-4,...rt-col-md-4,...rt-col-lg-4,...rt-col-xs

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158217
Entropy (8bit):	4.234345895461483
Encrypted:	false
SSDEEP:	1536:pJvNYLwcITncIMtrxHdFYZoGdrIWMry5UKOrf0prAr717UrTyzfxf4fHYErJx5oS:pJvNowJTkGHj
MD5:	B82C295319EAF63B8DD5952FFA775A32
SHA1:	910C33AD75A5C8014C7D20AB90AD25C8A0B6F3C3
SHA-256:	4EDCB07DDA96A64DA23B817CF5A393245EA992AD50C4616A7E123DF046470654
SHA-512:	01B08837A2498855F05F7ED81298B7AA40C260351F1022B9DB150311FC97D932AF63BEEEC965803251A3B8261859A68CDF2BEC045CE8B059BBE26A49CF927FCC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5
Preview:	/****/ (() => { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 480:.// (() => {..(function ($) {..const EAEAddToCalender = function ($scope) {...const eId = $scope.attr('data-id');...const element = document.querySelector('.elementor-element-' + eId);. var isLottiePanle = element.querySelector('.eae-lottie-animation');....if (isLottiePanle != null) {....let lottie_data = JSON.parse(isLottiePanle.getAttribute('data-lottie-settings'));....let eae_animation = lottie.loadAnimation({.....container: isLottiePanle,.....path: lottie_data.url,.....renderer: "svg",.....loop: lottie_data.loop,....});.....if (lottie_data.reverse == true) {.....eae_animation.setDirection(-1);....}...}..}.....$(window).on('elementor/frontend/init', function () {...elementorFrontend.hooks.addAction(...."frontend/element_ready/eae-add-to-calendar.default",....EAEAddToCalender...);..});.})(jQuery);..// }),..// 498:./*/ (() => {..(function ($) {..const EAEAdvanceHeading = function

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31978
Entropy (8bit):	5.1536380562954385
Encrypted:	false
SSDEEP:	768:qS34lhQr7XyDx+0K88PLX45FCOrmLEJWFS0iv6X7LhF:qSIl+r7yGPLwFCOrdI1X
MD5:	E2620F2AE61D84E5EDEF5A0B7B95CF96
SHA1:	C79F1FD304B9452D5B5D73D98AC18C79DECCF4DD
SHA-256:	09F417C2E643B736C19E96B99E166681AF1002E9B192B84E4E85B0794E764F7F
SHA-512:	16BB87AC76CAFE4C6B07C6D5D2C5CA4DA3DACD17F7373E60155B5D57420D68BF9767A7A166D72E8867BC65C264BCE7273CD05C273645027920765ECF99EA4D9C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1
Preview:	/!. jQuery Migrate - v3.4.1 - 2023-02-23T15:31Z. * Copyright OpenJS Foundation and other contributors. */.( function( factory ) {.."use strict";...if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define( [ "jquery" ], function( jQuery ) {....return factory( jQuery, window );...} );..} else if ( typeof module === "object" && module.exports ) {....// Node/CommonJS...// eslint-disable-next-line no-undef...module.exports = factory( require( "jquery" ), window );..} else {....// Browser globals...factory( jQuery, window );..}.} )( function( jQuery, window ) {."use strict";..jQuery.migrateVersion = "3.4.1";..// Returns 0 if v1 == v2, -1 if v1 < v2, 1 if v1 > v2.function compareVersions( v1, v2 ) {..var i,...rVersionParts = /^(\d+)\.(\d+)\.(\d+)/,...v1p = rVersionParts.exec( v1 ) \|\| [ ],...v2p = rVersionParts.exec( v2 ) \|\| [ ];...for ( i = 1; i <= 3; i++ ) {...if ( +v1p[ i ] > +v2p[ i ] ) {....return 1;...}...if ( +v1p[ i ] < +v2p[ i ] ) {..

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12682), with no line terminators
Category:	downloaded
Size (bytes):	12682
Entropy (8bit):	5.006069774926819
Encrypted:	false
SSDEEP:	192:4DK0ETOLjgvNODvIBQWWdBxyBnBg7K7yBlbX77eN5x7e8SVcpahpZLXlz4D4gbDA:gaNODAi6BWNVvBDl4cfJcSBIM
MD5:	0F1B8FB20798BA81B7168E00172DEF10
SHA1:	9CE83322F68C3EEA5D4898E6060F8369D87BE9ED
SHA-256:	DAD1A71127F17BF4A335D0963203638838783229867A0F1502409F8063FEEE13
SHA-512:	B2E3284AE8EEE301BEC83E233C2253C144FE95C224D475E5F891847381B9772B6F51909F78E13C919F59D4A51BFBA6E64A60641B1365F5DAAAFE9FC6A9B63FC0
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/zcalendar_css.css?version=1.0.0.395
Preview:	.zcalendar-wrap{overflow:hidden}.zcalendar{margin-left:auto;margin-right:auto;margin-top:1px;background:#fff;color:#2c2f33;position:relative;top:-1px;z-index:2;width:972px;font-family:roboto,sans-serif;display:none;overflow:unset}.zc-month-info{text-align:center;margin-bottom:20px;height:30px;line-height:30px;vertical-align:middle;font-weight:700;font-size:18px}.zc-month-name{margin-right:5px;text-transform:capitalize}.zc-btn{background-color:transparent!important;border-color:transparent!important;color:inherit;border-width:1px;border-style:solid;text-align:center;vertical-align:middle;text-decoration:none;display:inline-block;margin:0;width:32px;color:inherit;border-width:0;height:32px;font-size:26px;cursor:pointer;user-select:none;padding:0}.zc-btn img{width:100%;height:100%;vertical-align:top}.zc-btn:focus{outline:none}.zc-btn-prev{position:absolute;top:33px;left:20.5px}.opacity{opacity:.5}.zc-btn-next{position:absolute;top:33px;right:20.5px}.zc-months{width:auto;margin-left:20.5px

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	4.997271592547357
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMjBn:t4uz0Lu9OYjfBolV/GbIQwBn
MD5:	25B73E01C13A3C686D9B49A45559AF4A
SHA1:	079395E40EDC20070FBE14451612D76AA0E9D57A
SHA-256:	279ED06C9D4507EC4055AE340638008814C523AD810BF9A55E762B9F074D2D79
SHA-512:	C3E987B66A53B7A295DD2F63057E1F747347F1E93E3C462323B2697985A02E900608531B2235AAC66022AF719AAE3FCC59EED37973067A7B1D0731A5A965FEE0
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_GreyLight/iconGreyLight_Xclose.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#A1ABBD"/>.</svg>.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3812
Entropy (8bit):	4.627041741267406
Encrypted:	false
SSDEEP:	96:XwV+FFwq+FFbRFFYRFFn+FFU+FFB+FFG+FFj+FFA+FFt+FFC+FFw+FFT+FF2+FFe:XwVowqobVYVnoUoBoGojoAotoCowoToq
MD5:	7C38CFBAAAD796493259BC091A259A49
SHA1:	4CDE389A2784E5DBA7B941E2654954488BF1F629
SHA-256:	92ADDFA9F1E6E829CBC181CD1C70B1495283AEF4F14325651E27358A43E23CB9
SHA-512:	AF9BCBF5B2C5B6FEF7D0AA6C21EB7BC1443B07F1EF7664363F95F90DD304354B7840D5DC89FCBE678CE6854847D17514D0687790264D1614B9EE0DEF2D72C741
Malicious:	false
Reputation:	low
Preview:	[{"status":"Close","promo":false,"date":"2024-05-28T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-29T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-30T00:00:00Z","price":1488.6,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-31T00:00:00Z","price":1488.6,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-02T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-03T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-04T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-05T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-06T00:00:00Z","price":1253.56,"currency":16,"restricti

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	440915
Entropy (8bit):	7.976463141157688
Encrypted:	false
SSDEEP:	6144:GPjZVOkV91KtFpDWOKDARI505PkPgR9ki4ZfMHqgYbJwrxoxB4eI3jJ+XkMfxc1x:GPTO+LK1CL505Pjcg+gwZYjJIkMfxvg
MD5:	398B918C769BA5A1DEBB17CF2FDFE94C
SHA1:	35E7EC0056669F4F15A185A76C8CEE32592014BC
SHA-256:	99A83623AB69C917555134C38E65E5730C820B7832BB67AB288C3B17D79C1BAF
SHA-512:	3DEA00D3D482CE6139A4877B416084DC14C5EF0C1763651EAE360AC3E1ADF3FAABCF6F6CCF6AE359F4D237525067B1F6E5F4EAA762FB2F5D61E4F6FAABED2548
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/01-hotel-desktop.jpg
Preview:	......Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:16:09..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....T7...50.K....P&..e@.y...4..h.9C.,........\|SL)"v..N...D......r..I...

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7789)
Category:	downloaded
Size (bytes):	8948
Entropy (8bit):	5.352239272729618
Encrypted:	false
SSDEEP:	192:ibnyWH54wHePVCo4CkelHJB5ZAfhKwTxgfIGK8yb5y2zbg:ibnyXseSelvzgbrb55ng
MD5:	7C149FEDBE8AE045D361B43BF0DA88D9
SHA1:	248B9F89A34922C80C9CD12549E49E2CA79064F2
SHA-256:	9455902A831D94DE667646760ACE620634C71B6964EDD39136044897DDD131E6
SHA-512:	6FC9D1F71AE1AA7211E47E762C89C90114386734120755F886277D15B897490620EC05D0A40C729BD821165A29C1C831B7B4CBCFFD1C6916BA056C6F751D765F
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1863763.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1863763,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["feedback.widgetV2","survey.embeddable_widget","error_reporting","ask.popover_redesign","survey.screenshots","survey.type_button","survey.i

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	3146
Entropy (8bit):	7.1103105909596565
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzA3B3GFcUMzgHbh2sHqV3oHoKdjdabt8CuKcge4444mqGt:WSeknwzA3B39zg7Ysw3of/uOCrct+
MD5:	7CD6E285A9F6A903E4FBFA471170FE34
SHA1:	6FF39D37CD731952C7324CBB85914172C2B1B98E
SHA-256:	3792C4F5683BE117C7B679CE7DEB7E7CC808202348563DA54E6398D2FECA6EFE
SHA-512:	329F56B52FEB0412B4674192452E99C409E30486C0EA2E882140084C13FCB82112B87360DE7EE788A3523A15C96E13A53722ABF1A2544C2149851A5A9DE238BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:02-03:00" xmp:MetadataDate="2021-08-11T18:27:02-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:17418df3-e775-a04e-8458-2a25dd10d833" xmpMM:DocumentID="adobe:docid:photoshop:0d0ccff5-97aa-714c-8952-d9c9785e13f1" xmpMM:Origin

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1536x1151, components 3
Category:	dropped
Size (bytes):	642018
Entropy (8bit):	7.961071089446334
Encrypted:	false
SSDEEP:	12288:AmfpIzPBuvMQWqwRj89Wf6VF5RPOuiwAcKav2ztpqYG1Jd4F6p1E7y8bZ9:AmfpQpuRWw4oF5AkuWqk1s
MD5:	74448F8E8FB9328B9A3D9EA0EC105CB5
SHA1:	039FE5F7FB4180181C180798C3BAF22996E8C3D8
SHA-256:	737691C7EDF92B0265D32259C982EF9803D0D33AA923719727E5BE8DE024396A
SHA-512:	72172C6021FC382AB993E5F8E60F8B6123DFFC1373F31BF06F8156E62A823195E3CBB6834390AA8F4911394F67609B0B9EBC3EE66429FF6C8B10BE68A8C499D5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..II*................,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="BD70741AE109D0131ADA0A66E3EA8978" xmpMM:DocumentID="xmp.did:71D7DB32C0F311E9B60BEA3D7D9EA07B" xmpMM:InstanceID="xmp.iid:71D7DB31C0F311E9B60BEA3D7D9EA07B" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 8.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:352ccee0-a7f6-4994-8713-beeeb787ab9e" stRef:documentID="xmp.did:352ccee0-a7f6-4994-8713-beeeb787ab9e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C...

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	42983
Entropy (8bit):	4.733482350907397
Encrypted:	false
SSDEEP:	384:TxzjtwGGs5YQWS+ngXFlkjXEFOcQmxm3DO3p3z8CIopbubAi4OUlLqozr+XDhYnc:9t+BDcpz88pbuM+Uo0r+XUd1YTeb2CQL
MD5:	014BA724C65A9FF3BF51B758485D7845
SHA1:	E032954D30D873A8B6412180A2C719B8A0D9EFE2
SHA-256:	F05C2BD6214E254B6D09726E7441413C5E4756CB029F1E685D9219B5374860EE
SHA-512:	E9F06011A0A32AEAE2F7529BBB1E13483125B3C5BD2E77684ED46837D02348A3EBB1192C934DF9FB15DDE7179A00205B1311AFD46F9B8DE5C323F39031AC8261
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0
Preview:	/* -----------------------------------------------./* Author : Vincent Garreau - vincentgarreau.com./* MIT license: http://opensource.org/licenses/MIT./* Demo / Generator : vincentgarreau.com/particles.js./* GitHub : github.com/VincentGarreau/particles.js./* How to use? : Check the GitHub README./* v2.0.0./* ----------------------------------------------- /..var pJS = function(tag_id, params){.. var canvas_el = document.querySelector('#'+tag_id+' > .particles-js-canvas-el');.. / particles.js variables with default values */. this.pJS = {. canvas: {. el: canvas_el,. w: canvas_el.offsetWidth,. h: canvas_el.offsetHeight. },. particles: {. number: {. value: 400,. density: {. enable: true,. value_area: 800. }. },. color: {. value: '#fff'. },. shape: {. type: 'circle',. stroke: {. width: 0,. color: '#ff0000'. },. polygon: {. nb_sides: 5.

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19586)
Category:	downloaded
Size (bytes):	167953
Entropy (8bit):	5.310717863803649
Encrypted:	false
SSDEEP:	3072:OiPbf/z4EPGkZolCq+cP4b37lWY2l2rB3G9G/LKjmi+Q/m1nVp1uXDBZKlOVxH2Z:OoqP4b37lWY2l2rB3G9G/LKjmi+Q/m1x
MD5:	0F82B6CE92475ABEBC4CEC6FD145B2F5
SHA1:	8489D75F89991BC15CAE2654C255DFAFF4F6420D
SHA-256:	45C0E9B5A60906C71043C2207B6511455EEF194C24093A1F226B694B60E8E18F
SHA-512:	C7115EF4602EC876FC6367654FBC129C9157F4B7845E8D5B389A5C9127AE82BFFA43D08023D51A4531A7DDA82FF67C154633FF666B802A56EBD8D3D6F23FBEFC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/en/home-en/
Preview:	<!DOCTYPE html>.<html lang="en-US" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" >..<head>..<meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" />..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1">..<link rel="profile" href="http://gmpg.org/xfn/11">...<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" href="https://www.campobahia.com/en/home-en/" hreflang="en" />.<link rel="alternate" href="https://www.campobahia.com/es/" hreflang="es" />.<link rel="alternate" href="https://www.campobahia.com/" hreflang="pt" />... This site is optimized with the Yoast SEO plugin v22.7 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Campo Bahia - Hotel - Villas - Spa - Santo Andr. - Bahia</title>..<meta name="description" content="Hotel boutique de frente para

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (771), with no line terminators
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	4.987651578772006
Encrypted:	false
SSDEEP:	24:owzOKRzEPIiI1fI6VKcyLrbkfVwSvprGR3/Ri1tdzCj:H+H6fI+KcyjYRA3IEj
MD5:	2399EF783701F73C399589AE95298B0F
SHA1:	3E1F2A7AC9DCB2B50B1F1CF768441E46FD9F62EE
SHA-256:	2DEA57483641F8762937DFD9B09126A9B21C88BD3D7486186003E0BBB9043145
SHA-512:	50F1C2B16C8C2FC62C504A33529DCEF3FDBDD1533206C8779772CBBA1A336C7C5BBB533A35F99E559ADED3D1BF0C858C10A04EC083969F47A29DEAC92E366FA1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.8.3
Preview:	"use strict";var WPFormsElementorFrontend=window.WPFormsElementorFrontend\|\|function(o,e,n){var r={init:function(){r.events()},events:function(){e.addEventListener("elementor/popup/show",function(e){e=n("#elementor-popup-modal-"+e.detail.id).find(".wpforms-form");e.length&&r.initFields(e)})},initFields:function(e){wpforms.ready(),"undefined"!=typeof wpformsModernFileUpload&&wpformsModernFileUpload.init(),"undefined"!=typeof wpformsRecaptchaLoad&&("recaptcha"===wpformsElementorVars.captcha_provider&&"v3"===wpformsElementorVars.recaptcha_type?"undefined"!=typeof grecaptcha&&grecaptcha.ready(wpformsRecaptchaLoad):wpformsRecaptchaLoad()),n(o).trigger("wpforms_elementor_form_fields_initialized",[e])}};return r}(document,window,jQuery);WPFormsElementorFrontend.init();

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7301
Entropy (8bit):	7.88819345368873
Encrypted:	false
SSDEEP:	192:ZyJq7/XR3VjZEjkK+7jb5dLsLbZZTv3ed2sWK:EqbX9VjZEnMXzOzTb1K
MD5:	2E4B166E49D51FE6F1B8342B179EDF30
SHA1:	16E5DCAE57731831837FF8C9023405682D99F43B
SHA-256:	19163B48A169D3C57123A7D24C4D45B5F5690EA0E02FD6E1E794960D9D53746C
SHA-512:	393534BA07E8E5AF2D2326EAD11292CAA33E66039FDD4EBA4A13ED253647287512D02AC96DA2689E334396B8FB2BA4E62FF20D9DCF4C0E8144474850D961C5C1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/blta-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....7IDATx....U...S.(.zC1.E.....C14E1.8.0.q..ic.1..j.-.Ig..?b.c9....ql.X.a..i......D..4.H36.... """""...?.:.}.=.......O.{.9...>{...{..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..\|........H..`..I..e]8I .W......T...P.L&..a...=f....gf?%....u3[&..I..vZ2...)..J:[.?J.]. %...(.'..3..2..$.....d~....&JZ.`...IMaH..k...?@..IW.E..H.jf 9K.X...+....,.m..F..#..tD.6.\GrO.{.$.....A...a$..t,I+.&o.$.[R.....k..#I.....6.t.<..6.O..H.U.....6I....`3..UY...E.!..J.IS..ou.J..vJZU.E.~.$....(.}...8A..(6..C/....E.;.8..H>^.~".).~\.)i"..i..6.XGr_r..(....\..(...l .l.\|..&..I'Kz.NcjE.m....^.t..u.!..3.w..%I/E.oJzU..a(.O..N.1....=/...:..)..3{7].fv...qW>.IzK..[.%-.........f.-....S..=..'...s....$........3....G..a2...\.}..n....n.\|..aGJ.g3.O..J<]....R.(..K.../..v*..]bf...\|).....-e..GD....._..tb...aS[h..Qx..p.......].]...c$..$.>B....L....H\|.................#..8....+i...-n5=._..).f....e..G.q............#

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14886)
Category:	downloaded
Size (bytes):	15073
Entropy (8bit):	4.552348347546036
Encrypted:	false
SSDEEP:	192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g
MD5:	EF17C8FFC514D7418B4BEC001B8473FB
SHA1:	9D406018E5BE8D46B89809D38EB6CEA4F8BF62A2
SHA-256:	6F35273B8502706EE06854D797337AB40BC1B3A7421960A2CEB5392AC85A0F54
SHA-512:	6A3288F610D5F70344A48F885EA5A1877BD869035FB50F6E5159DDC09C67C7FFCC6D9AAC4CC537800F3E84349AA26345D42134F305B41BDD5004E71B2160CBF1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0
Preview:	/!. Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.(function(){var l,a;l=this,a=function(){"use strict";var l={},a={};try{"undefined"!=typeof window&&(l=window),"undefined"!=typeof document&&(a=document)}catch(l){}var e=(l.navigator\|\|{}).userAgent,r=void 0===e?"":e,n=l,o=a,u=(n.document,!!o.documentElement&&!!o.head&&"function"==typeof o.addEventListener&&o.createElement,~r.indexOf("MSIE")\|\|r.indexOf("Trident/"),"___FONT_AWESOME___"),t=function(){try{return"production"===process.env.NODE_ENV}catch(l){return!1}}();var f=n\|\|{};f[u]\|\|(f[u]={}),f[u].styles\|\|(f[u].styles={}),f[u].hooks\|\|(f[u].hooks={}),f[u].shims\|\|(f[u].shims=[]);var i=f[u],s=[["glass",null,"glass-martini"],["meetup","fab",null],["star-o","far","star"],["remove",null,"times"],["close",null,"times"],["gear",null,"cog"],["trash-o","far","trash-alt"],["file-o","far","file"],["clock-o","far","cl

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 38, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1222
Entropy (8bit):	7.63976027729966
Encrypted:	false
SSDEEP:	24:9MlqNn1whFOVumJ5ddfJoTNeGhcTthHb8jgQerCL78gQvpbF27sTrlZ:9CF8w0yjhE7HCaCP8FMQTrX
MD5:	C4B5A3B429735F5BAEBAE24C265AA70B
SHA1:	7116B37D52C3562E71F1BAACA53F8676F65939BE
SHA-256:	2EF47EFE21BD38445E6D97A32ED9F20CF53B0D1B429E9B35FEC31188F60E2564
SHA-512:	88720D26601237196A6DA46F8AE9F2C84ECBB85BC3DFC68999C7F1B78405ECB20A6DB89CB8968BE41DD7E22EC19A7ACB0FBC9C14053A12C1BD7874C330650CDF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.....t.`....HPLTEGpL......................................................................z......tRNS...p@. `....P0....._o^......IDATx^.k.. .....t....e.d.fs.=...e.px...d..,.O...77\.\1U..p-....v)....6:.iS...F<.T.p.v........Dx...9..t...c.g......kjM..L....h(..xR..ZG.C..1w..^o#Xp..m!'....>n......J..:.....Z...........rl.Lz40"..\|..L.t.K..tQ.........X..!m..-..w....o.B..,9..,...'.B[...!.&..b<...\...7.YzEP=...."I.1._..G.)b...V..p.NML.n.m}...p+...2..OvW..Gv.5!..`.[.....Yy.U.......qu..\|..E...w.j.>.yV.e......+K...s.L)T....1{."... @.`i.'H..Y....rK...1k.j.....QB...{[.......4...........N .1..r)/...s.z.N.$.>..c.7......}.G2+...k.p.zd.......#..p...M....`......o..H.}~."y...AH....c..6B:^./..^8....0l3...pM.K....cA..<...&!.X...5d..T.......AB....I.){..V..0vj~.....U..".[...j...Jr...O.Q:(.......{s.....].C....:......2....2....c...3H..TU...(>I...^....m@.bq...J..8...W9,h..k.Y..H....."..Wy3db......S..Q..VhHZ...p>..-.m...<..sx.GN.....to.A.;.t...H..C....{

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	345271
Entropy (8bit):	7.97499638838442
Encrypted:	false
SSDEEP:	6144:PrbNrbS+XS5vz18bnGkbFGWj6jfNQZiNLCfpZ8OBIaNPR4:PrZrNid18dZj6jfNQZiNLAn8OmER4
MD5:	9BCE47E92649D94BBB7D30219094C11C
SHA1:	39A149D49B2A8C8A53036C1ECB5E8A1A8F68EDF9
SHA-256:	6DDB42134983FC551CEF8AF6B668927E41B16B3CD4B2D49EC6E95B77397CA099
SHA-512:	ABC95D30641B44CDF25A32E3E7B2204CB1C6945154C6A95E3CF39B8780235A1A0ADEF562E0B91AE1679A0DBA8843386D2B06E3BB6D59EC4802CCB7ADD6AC5629
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/19-hotel-desktop.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:15:00..............0231...................................................................r...........z.(.................................M.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..i..n=..{.kx...q!.n.};...........N;2....;nE[..i...v...g..%i..r..fO.j TX.e

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1689)
Category:	downloaded
Size (bytes):	9016
Entropy (8bit):	5.141968828973475
Encrypted:	false
SSDEEP:	192:Hv7bRjxqVaM/dJ7QmaMbwndegaMbwndlINi/aMbuTdd5INuNE/EcaMbad4oQJWD9:Hv7bRjxqVaM/dJ7QmaMbwndegaMbwndK
MD5:	5A41EFE0A9BA3539B322BA0EA6253905
SHA1:	0528AEAC8528AE6277D98648880F5529F79727B6
SHA-256:	3EAAB15244213FD0B96A53E86C99E226E488DAF7218A6571D474462340A1FF43
SHA-512:	D5DE7D13B08E4E4F2F9488CE67CD734DA0F95619EE58ED8C2881C524C12BC3B3117A127C69037470791BBB6505DAFB9E87254C23D3970D36498DB29D4F213766
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/ajax-search.js?version=1.0.0.395
Preview:	$(document).ready(function(){$('#date_to,#guests').on("change",function(){newCriteria();});$(document).on("click",".room-popup-modal",getRoomInfo);$(document).on("click",".chain-service-popup-modal",getChainExtraInfo);$(document).on("click",".property-service-popup-modal",getPropertyExtraInfo);$(document).on("click",".rateplan-popup-modal",getRatePlanInfo);$(document).on("click","#gallery-ajax",getGallerySingleHotel);$(document).on("click",".service-name",getStep3ExtraInfo);$(document).on("click",".extra-image",getStep3ExtraInfo);});function getChainExtraInfo(){$("#chain-service-modal").html("");$("#modal-loader").modal("show");var service_id=$(this).data("serviceid");var rateplan_id=$(this).closest('.rate_plan_step1').attr('data-rate-id');var c=$("#chain_home").attr("data-chain");var property=$(this).closest('.roomrate').attr('data-hotel-id');var hotel_id=$(this).data('hotelid');var languageId=$("#lang_curr").attr("data-lang");var currencyId=$("#lang_curr").attr("data-curr");var langu

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	440175
Entropy (8bit):	7.978344307116581
Encrypted:	false
SSDEEP:	12288:066E5zaW13y+J0LQa3RcFZHv687G7n886Zk0:tn5lyq08SaDHB7G56n
MD5:	D342A93FB7083EF2020364215356FABD
SHA1:	4309113EC6AF80264F94572E3945B6863A6B3FB7
SHA-256:	7F5F75FD296F269CFF7BA1F4D72AD108908D5E7E6029DE7969B745CAE7D01609
SHA-512:	080DA83658E30C0E7DA3AF2C71F05891E44F190C7871F5EC439849C160160031868FD74E55C1F7F5E9F1C58B0725DAF227C143283AA8980B50AF998EF391DFC1
Malicious:	false
Reputation:	low
Preview:	.... :Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:59:18..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..88m....:.....>.w;..s.([......R...k.................k....."bu.....k+.n.M

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	598
Entropy (8bit):	5.021497281708026
Encrypted:	false
SSDEEP:	6:tI9mc4slzRlfv4ZF+2/hY+wrSdGo5wnULCitIVqYvdGoHVbj9urZGLCiAfJvdGox:t4Ffv4ZFn/hYXjn97bjAd7OjAd3tjABI
MD5:	7D3B9A6708A1142D44D8C61646B57F69
SHA1:	8397EA4FF9038A47BEDDA4E3763C6E828B587C01
SHA-256:	D26AEBFF5898029F7DA8BDF3F2FC6AB46C8B8173945DAA3C23B5D51E80FBF105
SHA-512:	9275728235E576EAAA8773F50F9CA83C81BD3412BCE586F786927DA2DE602332D8609FE45DFF3884E69F07CB5BBA418E0A687CF1710DF4C84268214870E3A847
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="22" height="17" viewBox="0 0 22 17">. <g id="Group_15367" data-name="Group 15367" transform="translate(-1263.5 -177)">. <line id="Line_2591" data-name="Line 2591" x2="22" transform="translate(1263.5 177.5)" fill="none" stroke="#454950" stroke-width="1"/>. <line id="Line_2592" data-name="Line 2592" x2="22" transform="translate(1263.5 185.5)" fill="none" stroke="#454950" stroke-width="1"/>. <line id="Line_2593" data-name="Line 2593" x2="22" transform="translate(1263.5 193.5)" fill="none" stroke="#454950" stroke-width="1"/>. </g>.</svg>.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	5.042921470177418
Encrypted:	false
SSDEEP:	6:tI9mc4slz6x+UBqRcrjVHq/b6VFEhL7dGc/VGVkhirdGolGRKS:t4Ax+9attXEl7dGcDiZ2KS
MD5:	2B82BBDBE74A9AA67F5EEE8B4AA70169
SHA1:	4914D9B3FFD9EC3C3519016F40CFC7A920101403
SHA-256:	60ACEA6586C5291E92A433D050BE8F0C268388BF1B5F2A7DB6BEE2613014606D
SHA-512:	B042C447AF9266D5B4EDCB2844FCF16A39ABD10F87FDEB92CC3B72E255E07DC3C789F810864C4E8CE1EC13B462135C00A6CEB9C16B1688BC4F05164CECA3D6EF
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/checked_index.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="10.998" height="7.999" viewBox="0 0 10.998 7.999">. <path id="Path_9840" data-name="Path 9840" d="M7.5,14.5a.5.5,0,0,1-.354-.146l-3-3a.5.5,0,0,1,.707-.707L7.5,13.293l6.646-6.646a.5.5,0,0,1,.707.707l-7,7A.5.5,0,0,1,7.5,14.5Z" transform="translate(-4 -6.501)" fill="#008009"/>.</svg>.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 701x390, components 3
Category:	downloaded
Size (bytes):	47328
Entropy (8bit):	7.971689733718443
Encrypted:	false
SSDEEP:	768:f1NqmHvbxK69nsiT4wLdOW18SFXyUb6x1A0RZR1F11pJay6t7N+SVCFbj:fvHvbxK69nb1IW1bvb6x1R51FRuo4Gbj
MD5:	A7517ECAF4E73CD420A1817C331EA60C
SHA1:	87346F85FAF6C1DC529C895CE14FD8E3A4195B89
SHA-256:	1CA01F36F4FEAB23CC7A8D3F3C24B30A3FD9A031152EEFD3163A1B17A1E7F9AD
SHA-512:	F04D1B40B1EB1048AFD9380391CD2D3089FC20F598CFC5F93919B2590CCD0E70891752210CC4B91D468BD7DBA6E2F7914864B34E58DCD30E6156BA23317BE697
Malicious:	false
Reputation:	low
URL:	https://media.omnibees.com/Images/5659/Packages/701x390/685202.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...KGJ.fZaF)h.. ....p4..J.. 8..T.~...(l$.D.&..'&..j...sb..\/....=....7j....7.UI.......n-..;Mt.L.(Rb....k...8..o...+?<U.6.A..%tT4....Z5.1y......>...C.."B...p;f....*H8..O...t.19.My.....\|..<..~.%....q.Y..}.kk_...d.Q.VM......!..\V./5..[..'.f.....T1..K1\.Xb.D..T....!...i.w.Yj..`......g..S.....W...4.av#k7..Q{1.tz=...Ud.".Uwg&.o.B....dY.w....9q.p..Im.! .[.z.5zS.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 701x390, components 3
Category:	downloaded
Size (bytes):	92397
Entropy (8bit):	7.974344429666794
Encrypted:	false
SSDEEP:	1536:fjg2jgwAVqGPAXnNPgUxT/pkGFWIi725wwJWmQlD4E0TEHntg356fvNSc0E0o:rgXbgNYURMPc7JklEEfHtg356flyjo
MD5:	F54D7B5B5EB8EFD1CE5C9B87A329AAE4
SHA1:	31C349B1162FD2FF3CE555C6C120537A9376F7EF
SHA-256:	C4F748BDA17AA497F27D2E553B0EC83D070AFD5F7E214050CDF93292741B551F
SHA-512:	49DDF2B2EC4079E84A5820C70380138EBBFB8EB0B10EF51BE80EEF0B455F343A2F1F4DEC9A289675983E65016C3FB439FC0A33E1C06A0A6AD81E5696AA133718
Malicious:	false
Reputation:	low
URL:	https://media.omnibees.com/Images/5659/Packages/701x390/922170.jpg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Y.......Vf....Q]..t..u..,...l#7.p@..9.f.o6[a.92G..?.hh.'._nK..kwV..7..rs..~X....w.oX..O..[.Ymm...0$G..<c.@5.......:.M...ly'.d...$p...~....z....ZY......F....3....A$s..\|Wq>.......e2E...A.io@s.b.R.Yri.r.P..$.r\....k....l3...6..w...........e`. ...6....@1..\|p..sXNRZ.%..O.?h.{..>........+..Fx....rG.K..a..s}m...,{D.D._.X.9A....q.\~..>.,...........Z...c.R

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (806)
Category:	downloaded
Size (bytes):	3658
Entropy (8bit):	4.889118130981844
Encrypted:	false
SSDEEP:	96:w1GDvTQ65yEjrT/jshytcSOHMXVls3VxIzVOA7V/nxqVce9V3:6GDvVjrT/jshytnO+Suf/YT3
MD5:	7318A3ED7E81B79172F069D1552DC159
SHA1:	60DC8D3808A5338EC28CB6F86C8CDB34F9C422F5
SHA-256:	A24C80F362334C3EC33AAB2E54D2BDC75B37BBADC46ADA58A506E9DF2A406DBA
SHA-512:	01B503C81C12A66C09F96CDAE9209A028851870753C75F3CB4CC9CFAFDDB19267532BD71577F8A03793C9E9AB1F55DB5F99F7071F89BE5C5A54D6C1FFB4F74D4
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1
Preview:	/*.Theme Name: Neve Child.Theme URI: https://themeisle.com/themes/neve/.Template: neve.Author: ThemeIsle.Author URI: https://themeisle.com.Description: Neve is a super fast, easily customizable, multi-purpose theme. It.s perfect for blogs, small business, startups, agencies, firms, e-commerce shops (WooCommerce storefront) as well as personal portfolio sites and most types of projects. A fully AMP optimized and responsive theme, Neve will load in mere seconds and adapt perfectly on any viewing device. While it is lightweight and has a minimalist design, the theme is highly extendable, it has a highly SEO optimized code, resulting in top rankings in Google search results. Neve works perfectly with Gutenberg and the most popular page builders (Elementor, Brizy, Beaver Builder, Visual Composer, SiteOrigin, Divi). Neve is also WooCommerce ready, responsive, RTL & translation ready. Look no further. Neve is the perfect theme for you!.Version: 1.0.0.License:

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	58067
Entropy (8bit):	5.461309903394871
Encrypted:	false
SSDEEP:	768:B2NOl+qpMAmBLBSB7BOBdBJB/vp/LXO9pQNN5YYFTVptg4TK2cCqJ34IaURijoBL:m4
MD5:	24D259DA7AF3067FB334CFD501220EB4
SHA1:	E328FB66849DF28FD8E18F6AA4377C4B2D2CCCEA
SHA-256:	116D95657B6E7AC74A71F7A497D2D74430AE99428567CB751080489BA1746717
SHA-512:	2AB6796C564934E0F5619618E76FA4C8A97C9B44B64B492A8511A11B8DBEEB86EA8BE94343F21A222B0FF373AFED4FF1CDE3A414FFA0FA3CDB9CF4D3302BB194
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Raleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CDM+Serif+Text%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.5.3
Preview:	/* latin-ext /.@font-face {. font-family: 'DM Serif Text';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dmseriftext/v12/rnCw-xZa_krGokauCeNq1wWyWfG1UVoNMrY.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'DM Serif Text';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dmseriftext/v12/rnCw-xZa_krGokauCeNq1wWyWfG1X1oN.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'DM Serif Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dmseriftext/v12/rnCu-xZa_krGokauCeNq1wWyWfqFXUIJ.woff2) format('woff2');. unico

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	200102
Entropy (8bit):	7.956982658702788
Encrypted:	false
SSDEEP:	6144:H5pU5pNa30zpCn3hl9tr4RkIlh3mb8ZacibzqbgO:H5G5uEw3330R7hWiajmt
MD5:	C273C411FBDC299661BD65C8ED450194
SHA1:	B0872EF674810726FE2DD49F5472D730C93F8C6B
SHA-256:	68E61C0C20087B67A7FE27BA95EC5B80199BBA64465D746E9870E91F5203002F
SHA-512:	7BFEBC1FB611047A1A1988461CC0CC526BD6AB7701E67A0615C5FA83FC102F8C567A667ACE046D2A9FD9885A656C60E92AF5E68E75AAA54EA9E81AC7916A503E
Malicious:	false
Reputation:	low
Preview:	....0{Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:22:05..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......[^M.b\@w.e....sk.....d.Y....o.We...{..Js2....@........3..O...+...

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	132713
Entropy (8bit):	7.9262295126101145
Encrypted:	false
SSDEEP:	3072:QwKjVKj+r9P+Qt/hbKVsC8CUmAItcHwffj79SCLe74LpdLbYj45+Y:FKjVKj+r9P+E/NKf8xItcHG9Ssi4LpVV
MD5:	7BA4A566AD1BD36CA59A0CC571CE9C47
SHA1:	6BA72F388FFF0F9FC61CE13FE46F9E36D2BFBF38
SHA-256:	3808955F22D7CE9D6C030CCD871B296BD76B83388B11DD983DD0FB5A5B649181
SHA-512:	99F63AC498EAD125700B5DCFB873B866E1BB3DADD228A5DD514963304FC19E642C3EB15DCD67A150E726C21F1B3ECC1F14A7A7ACCE23BAD22CDB5BC4C953EC96
Malicious:	false
Reputation:	low
Preview:	.... iExif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:06:10............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...7....Mu..=...a. ..%....;.,z./....c........... ..Dl.8G@l&..'..o....$nq.

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.913194958196631
Encrypted:	false
SSDEEP:	24576:Cfds5qGlcyf/Au+GIR3pLoYd3qbK8FLG8etvaOUdFES+:Cfi5qHyf+GGrlqb08etyRdFEl
MD5:	200292782B3750F4B6426540F855ABCE
SHA1:	D5F6FDCA04616C8944FDB5F3067D3158111AB5CC
SHA-256:	E883A735B567790946561D486F38A8D9A904793A2EBCA1BA62E84245B6D545A0
SHA-512:	F5B80A04FF413565C779DCC77E0E35C180AFC28012065E45179F90EF05600B66AD6EC37BAC3E54CDEE183A424793FC67C9F895FAF1AEC78DB2BE071D165A50EE
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:e
Preview:	u..Hg.-....NaY..#{....P...h.....z.vKG^.:w.....[.$..xB..&...s...f..f....=Y...5h.V.....^.!..C.0.I.Z.5.{aE'.<a.O...B<...=0......O...0.KF...K>.-f).&=....`h..U..y\|....7..7.E.VF.$.k...x.2.....DUb+.n.u.a+l..K...Tp...u.op.I.l.i......e.Wk{q1.8.....u...i.h4a.d<.go."..m.u...mxU.v5.....e.'}.x#Y..t.......\|.R....A......@gI.....Uz.Z.F0.X.U,.2.y!.?...>...HL.d..,...........v[.,.6.YW...X........@...5.wYv.RDM.....o.....7.....}.j.'..v-..pM.$fL"..Y.z...Y......j..:.S.XSFH.....q,^h.\..^..].p.G.....S../.p$.U..)..O..=N..:../......}..B....I....y.k.q5..q/.7.^....a...Z.>.K..X5(..q.h.p.....w..Z'...^.........&........q.^.fo..6...b.....^I]........3..D/~....YJkIU..R.`...G..\)<.h........g...$..rSda.V7...ue.Je...J._.B9^...8....lg3c.o.k....2cs=..)f.l.k4.)..P...i.2..F...d.DB.}}.1.p.1<N...+H.n..O..NHj..BW.......L+=...<..g.4..FY)....GL.(...M......{O~.r.....\L...../..,.........o...@... .L.h....Oa.~Y;n_.....\|....._Y1W...(..y.....Ym...a1.&....P.q..H.%v.L..4..............

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29866), with no line terminators
Category:	downloaded
Size (bytes):	29866
Entropy (8bit):	5.005883317200578
Encrypted:	false
SSDEEP:	384:2c6O8ntcGLkZwwBbvZ0C6ntG23XXWo/tsKnLH5ituJTAtstItSclGgntFo4wBqry:bTn23XXWotswLH5ifgMSclxyBCoy+
MD5:	369CE84540F653AD98EEE2EE2B37BC60
SHA1:	68EB31C2085EDC4B97FBA9747197278502B09552
SHA-256:	693FFAEBFE1AE487DB6C34C44B52FF3F78F7D8D610607E92F31D85BB2DC99621
SHA-512:	CAD76AFE47271503244D6A24351D23D18CA2894DA1F9C2A4E98A131632A50798822D1F1472919F5E9E7A77A7AF5177192C0167E9557702447D647F54F9AC947A
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/header.css?version=1.0.0.395
Preview:	body{background-color:#eaedf2}body::after{position:absolute;width:0;height:0;overflow:hidden;z-index:-1;content:url(/icons/icons_White/iconWhite_Checkbox_Selected.svg)}.header-top-bar{width:100%;position:sticky;top:0;z-index:20;padding:13px}.modal-open .header-top-bar{position:fixed}.header-top{position:fixed;width:100%;z-index:20;height:80px;transition:.15s ease-in-out}.input-holder{display:flex;position:relative;align-items:center}.input-holder .input-icon{position:absolute}.input-icon .svg-icon.search-icon{display:block}.input-icon .svg-icon.search-icon path{fill:#454950}.modal-open .header-top{top:42px}.header-top-spacer{content:'';height:80px;transition:.15s ease-in-out}.header-search-bar{position:fixed;width:100%;z-index:12;height:100px;box-shadow:0 5px 10px 0 rgba(0,0,0,.2);background-color:#263237}.modal-open .header-search-bar{top:122px}.header-search-bar-spacer{content:'';height:100px;transition:.15s ease-in-out}#loyalty_code[disabled],#group_code[disabled],#Code[disabled]{ba

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	802799
Entropy (8bit):	7.982411109575754
Encrypted:	false
SSDEEP:	24576:8KhzM2GGAeTe6ycQuM8oAXnN1DQj8nIwY:b+OAev2rj8nFY
MD5:	FF4C191829BE5C9B85BE7EB6FF41BBD1
SHA1:	183AB788207F0AEAC5B9F23A7B428BD03AAA5D3C
SHA-256:	8557ACF325E3D97FB025A4055192272D6D06B2DA9EE2E69A24CC32BAD4F89D9C
SHA-512:	A8A958B27AD1B6D310B8615A75E8B84F28E9C707EBFA98D22EAEF9B31A183EB307755B717C36B54B3BE42E1ED9DECC3EDBB12AEB3205F6948D6936FE6861D0B9
Malicious:	false
Reputation:	low
Preview:	....&@Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:30:16..............0231...................................................................r...........z.(................................$........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...E..I...t..F........?Gu-....._B..%...^.n}..mN.../.k..>.U.n.......d..d.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63944), with no line terminators
Category:	downloaded
Size (bytes):	206909
Entropy (8bit):	5.876523499005701
Encrypted:	false
SSDEEP:	3072:I9NXtGx6oLlCaLUe05R4pI473DHqkJtQxqO8:k14xzlYesmpI473DHqkJtQ8J
MD5:	BED5F2CE260F0B652D6B726EF9DFCDAF
SHA1:	F917B95F27E507E6C26F9AE32E0131DC239F0593
SHA-256:	1C4A154976535D2F2141804A2323B09202090FDB6C18B503F10B00019DE03C50
SHA-512:	7898DE51EB30C1B8B6EB1F6A6245BC93DB468DA6989A00D8C70E14CD3FFCA04A2B71A1F471D4EB779081F18E1220FFBFEB006475382B77257E2001B12F016CA9
Malicious:	false
Reputation:	low
URL:	https://www.termsfeed.com/public/cookie-consent/4.0.0/cookie-consent.js
Preview:	var cookieconsent=function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)i.d(n,o,function(t){return e[t]}.bind(null,o));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=51)}([function(e,t,i){"use strict";e.exports=function(e){var t=[];ret

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.0 (Macintosh), datetime=2024:03:04 11:03:35], baseline, precision 8, 1536x878, components 3
Category:	downloaded
Size (bytes):	219015
Entropy (8bit):	7.960792960628609
Encrypted:	false
SSDEEP:	6144:J8SmjjfzBXaJcvpQ3r4/JKKxt3xItQFzB1xFFfWkCZ9i9N7:JMfNaJcyMJjpzRPRTC7wN7
MD5:	FF4987667E17526C2027D757B447C143
SHA1:	79840C28748F9A7F478976D1050239E0747F377D
SHA-256:	AA9B246B8BE93A17FFB2DAEEDB3350136FB5A685D77111C84B2A243CBB4AD322
SHA-512:	1892F1A948AEE115855C5AD10AC8CD3ADEDDB5484B6C2BBF174ADE955775456E8A9BE82D3FD6829C8A0618147620833DB31816B241587F922A204A503525F1BB
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg
Preview:	......JFIF.....d.d.....SExif..MM..............................b...........j.(...........1.....!...r.2...........i.................d.......d....Adobe Photoshop 25.0 (Macintosh).2024:03:04 11:03:35...........................X..........................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....H..(.k.-...#.r....m.[K...?z]._...=%,...{Y.s.`.{}......g9..2.u.~.v.\=...e_G.?...+..........t..(%%^..a.......6....%6.j....X.\...\|G

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6566
Entropy (8bit):	7.853810596837481
Encrypted:	false
SSDEEP:	192:5GUJiu/j3YyY+6qcsays5aapEdAOEVaw0I:iCj3YV2csaT5AdWcLI
MD5:	252DF7050897BEBADF23C6A8A7AE2D03
SHA1:	6D1D5EDEA1A725D896D76D2C387D82FF9692009C
SHA-256:	0B69546A74BB0637DC1321D9E22780ADF931049CDF1FA8EE2998E2FC5161E3F0
SHA-512:	E60F1E39F095CEA2F7EB7F69F0BDEC3297F715B4BD09F8597A8B9E699F01C8746886BE5F4E0503CB547E87492D79677E45740C606E06825554369FC6CE0C51A2
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx...{...}/.ow..9:{.Z..Y..b..2!..)".....(.S2...I..../....$E\....!...L....e.0..0...W.6...K+$.....t.~....eu..Z...T..vN.t.....t....y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..^...9.u...d.".....Z.u.u.Q..{..Gs9.N...a..r9.kw.u......^..y..v.ik.?n.0.....BD...QJu..yF2sFk},.."r.1fG.?".s.R..1...E.yc..S.[.P.......i...Z.....8...c~.`K.Px......vj.g..UJ...0.~f~..v.R...B.C...;.1..(:=....t..".3.vc.Vk......9..c.T.p. .(.J=.l."Z..d.T4q...1..a.....Z..x.{..g.}4.N....Sk.V).>!n...=..7[..w.YS`9.Rk..\|.E7....3..... .`..\|...=...J\|N&...@$"...BD.. .[..6..^....@;.=...7.o...:..:..)J........7W.7..w.:...2.\...!.....^L.....V.8..."r.1f_....q.u..\).E......z.@..8.T..vY....3D.U.....q.uK..9w..,.Z_b.i.@D.8...R.{.R+D$GD...zBD.a.r..Z..R..s.~CD.".q...q..d25._.T...T._.mk.>....Ap-..S...fo.1s.3....0.1........'N^....)f&":k..8.........[X/..6*......f..[.(."......T.,3......Yk..^w......".DD5..RI;..L.Kf...ZI+.....

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x751, components 3
Category:	downloaded
Size (bytes):	150320
Entropy (8bit):	7.9743660273516745
Encrypted:	false
SSDEEP:	3072:WyzNvZ6ugmpYvhxIvtMPGRCWplhDytB75YjAiBCy1buo/dUHcW4:TH62UxIvaGRCWBDy/5Yjay1P/dUHt4
MD5:	E34CD543269A61B71F5DF397D42FB4ED
SHA1:	A452AF6EC0016B4B445726B2C1B2ED276F6F1C2C
SHA-256:	49D5CCA98DD1BBB7EE9F0460F275E5D022CDD218816DD93BF875987AF171B9EB
SHA-512:	169EF4B10C8D7AA0DAABF513102B41C8E7CF867851342D3B9ECCF7E972565D097721D096DBE1EB657E37853712C667736C5CD503C89B7472331D28246ACB822B
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:03D433B6DB4F11EB8D92C19E557BECBF" xmpMM:DocumentID="xmp.did:03D433B7DB4F11EB8D92C19E557BECBF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03D433B4DB4F11EB8D92C19E557BECBF" stRef:documentID="xmp.did:03D433B5DB4F11EB8D92C19E557BECBF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22326), with no line terminators
Category:	downloaded
Size (bytes):	22326
Entropy (8bit):	4.670168786930453
Encrypted:	false
SSDEEP:	192:oI02MuUVc09eI0W/ECzwdLkGO7Pw2r0YOVTtCFw3pQ9TsMtYO6VgVFRBFp6OYKK1:i12gKgogRg6gZ
MD5:	1BF68D0B277AB17E20BA615DB6456370
SHA1:	A18663D1AF3D3EA033D2CEDC8B65E8748FEAF9C2
SHA-256:	AA85817AB36FAE72668A5C3C92BA2ACFEE2054AD7A6B4286271D66CC8F580F32
SHA-512:	3556EE00DB7E597230AD49B3F45AA7704191C46F0E246274E8E4390D62FA7D1E7F13F8C07AD3958F9E8AA7C5368690B1D18E622A22B2D30FDEB3D864CAD7AEF1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/elementor/css/post-5031.css?ver=1694547618
Preview:	.elementor-5031 .elementor-element.elementor-element-84f1ffb > .elementor-container{min-height:76vh;}.elementor-5031 .elementor-element.elementor-element-84f1ffb:not(.elementor-motion-effects-element-type-background), .elementor-5031 .elementor-element.elementor-element-84f1ffb > .elementor-motion-effects-container > .elementor-motion-effects-layer{background:url("https://www.campobahia.com/wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg") 50% 50%;background-size:cover;}.elementor-5031 .elementor-element.elementor-element-84f1ffb > .elementor-background-overlay{opacity:0.18;transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-5031 .elementor-element.elementor-element-84f1ffb{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:0em 0em 0em 0em;}.elementor-5031 .elementor-element.elementor-element-b70293b.elementor-column > .elementor-widget-wrap{justify-content:flex-end;}.elementor-5031 .elementor-element.elementor-elemen

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	224843
Entropy (8bit):	7.962842076846286
Encrypted:	false
SSDEEP:	6144:nSzuykYpCdJ3P/ySbI5G+lxrXpFGUes0iJVG/d9:nS/kYAdZi9NldTGUmV/j
MD5:	4EDFA414D358F024824A98F2368C055F
SHA1:	D8F5B4F2DFEEAA9D1F76FCB2EBDE2ACBF90AB743
SHA-256:	1F2CB6D3681D43E5B4DBB393820F69CBEE68C5768B7405E96C5C3C7DE5B351B9
SHA-512:	121BC83E1F77DC8F9463A44B5B029C382FCDC4D1897926E9A9FAB3725CCE27B0E29075337F0FD3085021A35760606BC720B712CEEEA86CDD06746320C42F73AF
Malicious:	false
Reputation:	low
Preview:	....5JExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:19:41..............0231...................................................................r...........z.(................................3........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..6Y..]S.s.%....s.;.,..S.?{+..1.7"..,c...3....~..-........26...B.~5.c.5...

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59158)
Category:	downloaded
Size (bytes):	59344
Entropy (8bit):	4.717040228413791
Encrypted:	false
SSDEEP:	768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B
MD5:	74BAB4578692993514E7F882CC15C218
SHA1:	B6293BCFD851F963EDBE859498570C4C0C7EAAE4
SHA-256:	D87DDF917B7A1449AB45E2B8E3C98354629BDD65B6659C37E6023BBEA1CE1386
SHA-512:	8810579BC7D6F74FA7B8B7122A56E6ACF70B6B4393F76C4ED4122C67ECB00D6642BEAB1681C715DE0168441BF4CFEF1D2C9832007221477E5565CDA833F808D7
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22724, version 1.0
Category:	downloaded
Size (bytes):	22724
Entropy (8bit):	7.991807899525019
Encrypted:	true
SSDEEP:	384:0mMgKjstJt5qJrSFFvQT9GJj6Y83oZItY7iG7m7JXKwkA29rbQABcbAVoo+8:0mr+KJEqvA9GJetY70XKVabAooV
MD5:	52BB58C8CB04CF3EEA4F9AC0AFA1D1F6
SHA1:	789D6227065D5D9767BC094E8FB384A26009C9DE
SHA-256:	8D9364A0DD956AF9D5F0580C8247F61C49AEBAEFB9E4C48D60FB3D045F1CEDD5
SHA-512:	8B31D63C59B151A1B32008B1747576606FB4CDB0AA2D2400F3DAC59BD0E97E4AAEEF5E8D9B47AB143C11950A1E61E7076A7C0C44FDD66C671538C3BDBA406D9B
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/fonts/roboto-v20-latin_latin-ext-700.woff2
Preview:	wOF2......X...........X^.........................\|.....b.`..h.H..<...........t...D.6.$..d. ..~. ..).....6..g..Pk.z..^.n.s;2J..93......{....3..!6eIk...:....-!...$........@J.........^..E.7?...}..;.l..Y..g.....QO......Z....{X.w..\....I>.V...j....$..4..e{.`..H. C..P.-"...&~..}BDx}_=J.p0.8.........>....=u.....u.N..D.a.&c...^..m.f.f..\......=.5[.....V.T,.B...]Q...........Yg...~.'.....Q.a..3..4.xU.k..q.@.......S...H3.!...D.tH..."@.p...@....4`......n....A Y.k..../0.......w.3..dO#.u.n...f.>...jR..T.l.C.R...\$`.sI..H....:....X......w......I....>+.tM-...2......9..!.....U..\%?.B.G......H..l.......O.=L.B.a..%.~.z..{.....p.......[...f&..IQ..NU.@..+..{.p...%.&s&c.-p... T..5v.ww............q.Y....I.....]Df.&r>... R).I..Lq.4S....._..>x..._o...I,..C..A.X......l....<.........=.4..+f\|..3k.%.]}.`...C..<.6.>J..T....S.U.&....]]..p..s..).;P.;.n...Kr.!.%.d.0[.P...-o.Y."P.._...T.T...U.1..2.."".....~..5.%.u.K-......-c...W.yn..E8.]....i.c...........4.'."..1Q.......

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6423), with no line terminators
Category:	downloaded
Size (bytes):	6423
Entropy (8bit):	4.607170268082651
Encrypted:	false
SSDEEP:	96:7pQEtRvQZU+mhliG5+RvkfCCCYrxyOBzRQIBgohiNBVfdOw:7ltiZpglj5+QCmrxyOBzJBgohiNB9ow
MD5:	9F7E6A180B3B3AE2EDF849B8638C5007
SHA1:	C8BD9280053867FBDBEE10838299B9E37608B4F3
SHA-256:	C0B33770CAFA416D32409F2FBD8A7CBBA8A4B26D8EAB1CF980AEDECDEADFA650
SHA-512:	9DB7B2D4684844DE78F18900F82A3DE050387D8BCDC4897AE9FB50DAA63F7E3202B5FE96AB98FFB91B75EB9C62B9E31CE00E5795682322AE14B8C92D8750B19C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/elementor/css/post-411.css?ver=1694546287
Preview:	.elementor-411 .elementor-element.elementor-element-fc35bd9{padding:2em 0em 2em 0em;}.elementor-411 .elementor-element.elementor-element-38c1700 > .elementor-element-populated{padding:20px 20px 20px 20px;}.elementor-411 .elementor-element.elementor-element-0fb767a{text-align:center;}.elementor-411 .elementor-element.elementor-element-0fb767a .elementor-heading-title{color:var( --e-global-color-2bd4352 );font-size:68px;text-transform:lowercase;}.elementor-411 .elementor-element.elementor-element-5119b08{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:0px 0px 0px 0px;}.elementor-411 .elementor-element.elementor-element-5119b08 > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-411 .elementor-element.elementor-element-b2b17f1 > .elementor-element-populated{padding:0em 0em 0em 0em;}.elementor-411 .elementor-element.elementor-element-bcb27e4 img{width:100%;height:500px;object-fit:cover;object-position

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23844
Entropy (8bit):	3.864499754894873
Encrypted:	false
SSDEEP:	192:h2USDmm2rAUOP8F2pI7oPId6ilknsV7JmiaiSClGdv2SImlSIkdMA3QzVdefddNT:hhdp4KOvV1sl1lzWProaUXrNlDlOq
MD5:	45AFABA70708B1242206EDE12F3290BA
SHA1:	B81E5055C226C2CDE10EA81B5D8BB6AC3FF5177D
SHA-256:	B7897A82AE58F052AA5FD44DF9B80A95F439A8B38C0094042D2BE0C2B295FAC4
SHA-512:	354E85388197BC0793D77E001644512B4D4506C3CD5AEFBBAB40A5226FE01492F4B4857027720093CCC97DA310F55F0AD6519BA71F3F6BD53EB8CCB590CDE8E4
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0
Preview:	/!-----------------------------------------------------------------------------. Vegas - Fullscreen Backgrounds and Slideshows.. * v2.4.0 - built 2017-01-04. * Licensed under the MIT License.. * http://vegas.jaysalvat.com/. * ----------------------------------------------------------------------------. * Copyright (C) 2010-2017 Jay Salvat. * http://jaysalvat.com/. * --------------------------------------------------------------------------*/..(function ($) {. 'use strict';.. var defaults = {. slide: 0,. delay: 5000,. loop: true,. preload: false,. preloadImage: false,. preloadVideo: false,. timer: true,. overlay: false,. autoplay: true,. shuffle: false,. cover: true,. color: null,. align:

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65280)
Category:	downloaded
Size (bytes):	139153
Entropy (8bit):	5.2146927200642335
Encrypted:	false
SSDEEP:	1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgA:wxoo6desFshaKi+HgZsUOUTqiqM37ER
MD5:	15BB2B8491FC7E84137D65F610E1685A
SHA1:	CD76B70A5426893E9C022B9A75C50A7C1348E2D0
SHA-256:	B23F49F504FAA32AAC548B6662FFD64412F6738496FAB8BE38DA46C5B7121804
SHA-512:	95C05110B29101C84DF71C54172269F478D9CD14965B3DE987613E11E0F1CCF01C1B7D2BF290D97EF11373F24DCCD677F8710E1555D332903181F469D0F2B0BB
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=2.3.10
Preview:	/*. Swiper 5.3.6. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://swiperjs.com. . Copyright 2014-2020 Vladimir Kharlampidi. . Released under the MIT License. . Released on: February 29, 2020. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Swiper=t()}(this,(function(){"use strict";var e="undefined"==typeof document?{body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},location:{hash:""}}:document,t="undefined"==typeof window?{document:e,navigator:{userAgent:""},

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16214), with CRLF line terminators
Category:	downloaded
Size (bytes):	16481
Entropy (8bit):	5.219726736925511
Encrypted:	false
SSDEEP:	192:BCCtmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/z:BOUbeTMbHZ+Vnh2AVfHfA4XYG
MD5:	07798F9289D781A1CCD0A559D4D526F7
SHA1:	EAA8B76C8CB092F396D0CEB42F9B1B0378D83E03
SHA-256:	463081F87D2A98765AB9CE6617D99E9CF3A7C2BFBF666F0B902CEA606576BC06
SHA-512:	969D69CA47CCA333F32033F1F910CD0D7DEDBD870669FE8E505F3CBAEFB00F7A19C873BFB371806AF28A3C6938A9CE521A7FDD85EBD5318B374A8D2B5AA36D03
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/swiper/swiper.min.css?ver=2.3.10
Preview:	/*.. Swiper 8.3.1.. * Most modern mobile touch slider and framework with hardware accelerated transitions.. * https://swiperjs.com.. .. Copyright 2014-2022 Vladimir Kharlampidi.. .. Released under the MIT License.. .. Released on: July 13, 2022.. */.... @font-face{font-family:swiper-icons;src:url('data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	5.178499990675291
Encrypted:	false
SSDEEP:	6:tI9mc4slzqBWGY2/dGoGxoRcrmgr5ItP6A0ZqRcrh4hV7quCinSQtiELrdGo+8jI:t4MBWCzgN20ZVuHSQhq8jI
MD5:	946A97CCB27ECF1E657349E871903E4A
SHA1:	4E1BBDCF926AE76B67270359C7E0558FA79CE400
SHA-256:	DF60F466E090138CDB139959C7516D029BE3D6743B37A563B6CB177A7B9546E1
SHA-512:	26D62866B253A9B8B5388EA60B629B9479CA489B92BDCD6A0A44FEFE315329863E22C3907DBBFCAD0154FFA0978DD863BDC12AADFC0694AD92818E5265F2BC45
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icon_Circle_Left.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <g id="icon_Circle_Left" transform="translate(32) rotate(90)">. <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/>. <path id="Path_2122" data-name="Path 2122" d="M16,2A14,14,0,1,0,30,16,14.005,14.005,0,0,0,16,2Zm0,18.073-5.6-5.6H21.6Z" transform="translate(0 0)" fill="#454950"/>. </g>.</svg>.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (640)
Category:	downloaded
Size (bytes):	103230
Entropy (8bit):	5.047693506480395
Encrypted:	false
SSDEEP:	1536:2q1nA+rh4Y4MP964Ssr3b1AzpnaGyyTR+6+B3bh/12s0HCcxdWyGfgqLkbCtNZwy:wIwaBgG
MD5:	9AFCBC086449886D7F8FFD6F142C9FDD
SHA1:	3CC654F5C5FC1AE5073E2B02359F160D581410F0
SHA-256:	FE9546456E0321FC87F92C7032F428BBE749725C3F840DBB97C4EEEB31A04254
SHA-512:	FB987FF69E76AEE913367BC7483549521652E6230FFA13949BA52575184AE59E3580EDCC1FF6BAA684AD5D95BBEC31D4ABD09FF82514B72261DB50500D44DF2C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.21.8
Preview:	/! elementor - v3.21.0 - 26-05-2024 /."use strict";.(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["frontend"],{../**/ "../assets/dev/js/frontend/documents-manager.js":./!*****************************************************!\. !* ../assets/dev/js/frontend/documents-manager.js !. \***************************************************/.// ((__unused_webpack_module, exports, __webpack_require__) => {....var _interopRequireDefault = __webpack_require__(/! @babel/runtime/helpers/interopRequireDefault / "../node_modules/@babel/runtime/helpers/interopRequireDefault.js");.Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;.var _document = _interopRequireDefault(__webpack_require__(/! ./document */ "../assets/dev/js/frontend/document.js"));.class _default extends elementorModules.ViewModule {. constructor() {. super(...arguments);. this.documents = {};. this.initDocumentClasses();. this.a

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	692099
Entropy (8bit):	7.979722660693247
Encrypted:	false
SSDEEP:	12288:kQ7gJd3ou9hj2yBJd6r4KfHUgUTw7hyGB+sQf6niNP5pJY+ZRqA:kQsJd4oRzd6TWw1yW+HF3qA
MD5:	DE0DDED4975B28870A12849A15CA3D1F
SHA1:	8023A7DEA4669BDF1EAC9C0FFBFB0905E0F3B830
SHA-256:	12C8F4CA5EE772252251ED4257F92A7B30846AB713349A459AFA778631611139
SHA-512:	35C6807CD94715D82F3A27C6A5A3E6F12F16898B86FFC7896CF8DC494F624E7631AF30D43D9175AA7BB28A324FEDA0224793350447E6F571E9DB039C5FA39771
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2023/01/0hotel.jpg
Preview:	...."+Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.1 (Macintosh).2023:01:09 17:26:30..............0231...................................................................r...........z.(................................ ........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..).....;c......x..;..m....{.hYN>E...._2...C.........f.YuW}.......L.l...^

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	224843
Entropy (8bit):	7.962842076846286
Encrypted:	false
SSDEEP:	6144:nSzuykYpCdJ3P/ySbI5G+lxrXpFGUes0iJVG/d9:nS/kYAdZi9NldTGUmV/j
MD5:	4EDFA414D358F024824A98F2368C055F
SHA1:	D8F5B4F2DFEEAA9D1F76FCB2EBDE2ACBF90AB743
SHA-256:	1F2CB6D3681D43E5B4DBB393820F69CBEE68C5768B7405E96C5C3C7DE5B351B9
SHA-512:	121BC83E1F77DC8F9463A44B5B029C382FCDC4D1897926E9A9FAB3725CCE27B0E29075337F0FD3085021A35760606BC720B712CEEEA86CDD06746320C42F73AF
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/003.jpg
Preview:	....5JExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:19:41..............0231...................................................................r...........z.(................................3........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..6Y..]S.s.%....s.;.,..S.?{+..1.7"..,c...3....~..-........26...B.~5.c.5...

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	415957
Entropy (8bit):	7.977501343705362
Encrypted:	false
SSDEEP:	6144:0F1TF1eVkeQaabqU0/83oojPx1vydLQhiIEtvdATkkPnS7bCnR6TXgFYhk6F2tIN:0FpFnNbqfLbdVkPSGF42tIG4N5
MD5:	66815CE67B2A80E8B6FDD3449DDAF4D6
SHA1:	7A17D40B92F39BA3E8DE95A85D809183D18D9DB0
SHA-256:	AC13FB4ECB3F82236004F51667A9A98F4370B4F4D87BDB1AF2E07FA0FC2A9A21
SHA-512:	D4612897EFDE7D17B971FDF2F7F885E9977DF540225000824F6C0324B4F6810B6507C45A8E1A7C0F4A10B7135AE8CCB18D56ACE721144031603D9F7F060E183A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/05-hotel.jpg
Preview:	....5XExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:55:08..............0231...................................................................r...........z.(................................3........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.%.X..S_s+....x..s.o.m{\.?..k.........Y....>..{...............w.OS...5+z

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25496), with no line terminators
Category:	downloaded
Size (bytes):	25496
Entropy (8bit):	5.036116490325976
Encrypted:	false
SSDEEP:	384:1roeEFcu3DQqZjntabntv/sZjrntg9uO3sTcsl0kG8Hh7R92LBq:cNlZjyQl/HRR
MD5:	AE5F583E639EEA51FB33F866E0200AC9
SHA1:	6C99B67CDB6E12FF996B4BEA0E408DB9012E12C7
SHA-256:	0F4FB611F42BF224FF894FD982E1B3FCD4E532949621DE47CE4EBC4EB90B9FEB
SHA-512:	98E04719B19560C233F4407D61E2DD20659CF67A37BBDDEDA7C5F22FA80CD620C813AA9C71BA9800D728AB4F7E80601DD2D4591D01420826BB8D02FCC0E16F8B
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/index.css?version=1.0.0.395
Preview:	.section2{border-radius:10px;margin-left:auto;margin-right:auto;padding:0;margin-bottom:53px}.section3{margin:50px 0 142px}.section4{margin:50px 0 110px}.section5{margin:50px 0}#image-height{visibility:hidden;overflow:hidden;max-height:600px}#index_cover{display:block;margin:0 auto;position:relative;text-align:center}#wellcome{text-align:center;padding-top:115px;text-shadow:0 0 15px #000;color:#fff}#wellcome p{text-shadow:0 3px 6px #000;font-family:Roboto,sans-serif;font-size:50px;font-weight:700;font-stretch:normal;font-style:normal;line-height:1.22;letter-spacing:normal;text-align:center;color:#fff;color:var(--white)}#index{background-color:#263237;box-shadow:0 5px 10px 0 rgba(0,0,0,.2);color:#fff;width:100%;max-width:unset;margin-top:0}.input-overlay{content:'';position:absolute;width:50px;height:42px;background:linear-gradient(90deg,transparent,#ffffff);bottom:5px;right:30px;pointer-events:none}#index input{border-radius:2px;background-color:var(--white);outline:none;font-size:14px

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4247
Entropy (8bit):	5.0184947640518125
Encrypted:	false
SSDEEP:	96:ktQMKPsAB8ljKuUvhdiH68NmfKfz+DFVk:kFec5Uk68tik
MD5:	4C434EB6CAE66A421AECCA6A4677C7A4
SHA1:	BB6B85C8865DACDB80C990173176BD82B51B14F5
SHA-256:	48CF24C0DBA9206D98D4A1545421AE4508909AC258F98A440ED4243491CAFD84
SHA-512:	45441A40EF2D9118D716C594C693AC34F482D8700C2691EF396AE4EBADAFC9F2CCBD6F0C36F68B7033151DBD7FDD9933078B93F5281FE1B241121C4DAE599EC9
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/Grupo%2015348.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="80.63" height="16.945" viewBox="0 0 80.63 16.945">. <g id="Grupo_15348" data-name="Grupo 15348" transform="translate(-760 -156)">. <g id="Grupo_15346" data-name="Grupo 15346" transform="translate(760 156)">. <g id="Grupo_2" data-name="Grupo 2" transform="translate(0 0)">. <path id="Caminho_2038" data-name="Caminho 2038" d="M-115.482-107.859l-5.855,3.38a1.71,1.71,0,0,1-1.711,0l-5.856-3.38a1.712,1.712,0,0,1-.855-1.482V-116.1a1.711,1.711,0,0,1,.855-1.482l5.856-3.38a1.711,1.711,0,0,1,1.711,0l5.855,3.38a1.711,1.711,0,0,1,.856,1.482v6.761a1.711,1.711,0,0,1-.856,1.482" transform="translate(129.759 121.194)" fill="#fff"/>. </g>. <g id="Grupo_3" data-name="Grupo 3" transform="translate(1.892 2.099)">. <path id="Caminho_2039" data-name="Caminho 2039" d="M-91.8-72.747v-5.235a1.141,1.141,0,0,0-.57-.988L-96.9-81.588a1.14,1.14,0,0,0-1.141,0l-4.534,2.618a1.141,1.141,0,0,0-.57.988v5.235a1.141,1.141,0,0,0,.57.988l4.534,2.61

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	206875
Entropy (8bit):	7.956589148338024
Encrypted:	false
SSDEEP:	6144:LHSQHSn7KiNa+D9cvzWkqG45/Z4PucUtNfrx8:LHhH+Na+DiWp3WJ+W
MD5:	CCE18BDB4BA91DFC86DC73110AFF4E2E
SHA1:	941CEEBA5841BAFED3E3F0BFFEFEC6DE14154414
SHA-256:	F4F05E09E1DDB295D2E82A2B59003BDD70D3A0A468AA6318098EC26C0CFCB371
SHA-512:	FE05925D1E67D593F7891EA56852DC1A0F9307A8E83AF49CDF26FDF4B1B27A3CFACE9E4F691AEC1F94D9E8D60AEC0C50FBF4A0BF1F5854402F3E4182FCAE2542
Malicious:	false
Reputation:	low
Preview:	....1.Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:22:50..............0231...................................................................r...........z.(................................/........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....,.,..^..f.xw..a...uz...KknK.5.@i.\C.....Cu..F.....vb.....6.i.k..n\|.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63944), with no line terminators
Category:	downloaded
Size (bytes):	206909
Entropy (8bit):	5.876523499005701
Encrypted:	false
SSDEEP:	3072:I9NXtGx6oLlCaLUe05R4pI473DHqkJtQxqO8:k14xzlYesmpI473DHqkJtQ8J
MD5:	BED5F2CE260F0B652D6B726EF9DFCDAF
SHA1:	F917B95F27E507E6C26F9AE32E0131DC239F0593
SHA-256:	1C4A154976535D2F2141804A2323B09202090FDB6C18B503F10B00019DE03C50
SHA-512:	7898DE51EB30C1B8B6EB1F6A6245BC93DB468DA6989A00D8C70E14CD3FFCA04A2B71A1F471D4EB779081F18E1220FFBFEB006475382B77257E2001B12F016CA9
Malicious:	false
Reputation:	low
URL:	https://www.termsfeed.com/public/cookie-consent/4.0.0/cookie-consent.js
Preview:	var cookieconsent=function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)i.d(n,o,function(t){return e[t]}.bind(null,o));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=51)}([function(e,t,i){"use strict";e.exports=function(e){var t=[];ret

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	8969
Entropy (8bit):	5.181620027496431
Encrypted:	false
SSDEEP:	96:Pu4LWjoWlw0ED2v4U2Zdg+sPCi3FNr8dKKSRUMZH4dspm0ujpIvr0uSuQf5WvzdK:Pj0Ac+m3FR3KSVYdsEh9GJ3vzdouA
MD5:	4B32AEBBED7E5116C14CCAE8656CFA7C
SHA1:	16DD4308EDC56BCBCBA2D8C4EC795751B0CCB3CA
SHA-256:	E9D54383A1AE1CC16B30C0A748FF78CEBFFFEDE0E53DD7821DFCB6328CCEF47E
SHA-512:	FFDD721B69C3937D12E035F2B090E764777B1E12268AA1F3CD146D40F14D0FDBE8217E57DA8231CDE6A57E015FB76FC3A9F5A3E6F03CF460365EEE7C6C85EC7A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3
Preview:	/*. wp-emoji.js is used to replace emoji with images in browsers when the browser. * doesn't support emoji natively.. . @output wp-includes/js/wp-emoji.js. /..( function( window, settings ) {../.. Replaces emoji with images when browsers don't support emoji... .. @since 4.2.0.. * @access private.. .. @class.. .. @see Twitter Emoji library.. * @link https://github.com/twitter/twemoji.. .. @return {Object} The wpEmoji parse and test functions... /..function wpEmoji() {...var MutationObserver = window.MutationObserver \|\| window.WebKitMutationObserver \|\| window.MozMutationObserver,....// Compression and maintain local scope....document = window.document,....// Private....twemoji, timer,...loaded = false,...count = 0,...ie11 = window.navigator.userAgent.indexOf( 'Trident/7.0' ) > 0;..../... Detect if the browser supports SVG.... ... @since 4.6.0... * @private... ... @see Modernizr... * @link https://github.com/Modernizr/Modernizr/blob/master/feature-detect

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.953372528319011
Encrypted:	false
SSDEEP:	24576:poGvAU9Lqgz77O2CoKF1I2N/gr3kq3cljYyPIOh3W:poQn9C11CrQjfW
MD5:	46C2BCD3F818A7E13BFA9FEAEDF3F99E
SHA1:	34F571247CE2BE4D17E4E0CD4D127DFB7E1F19CE
SHA-256:	AC2019A3199D98E66982249D6AE0442828DB9463D1BB0AB78C398A98D643CA31
SHA-512:	F59A6358054B5B0BD6F2E7102CFB06219152F640F9C3EB9EF9B586EDD6003722F61D921C87D7720AF96E092BBBE928C89E70F0BD08C77F96A54C16CE15FBECE8
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:5
Preview:	KhLhR....-\|+u.>h..L..$..rK...nG...>.prE%..j.}......W...y...k.3i..b.....~T...Y.o.i...n.......&g..C.?K...H..`.EL2.._.@..~....&T0@X.u.iL.F.DY.......p^.=.....z.....{j...><..b4t..2.._..G...t.>..+.S..%......p.A....F..y.....V........^Z.X#......%..4.Z....r..3.V.W8O..-T...Rq)LwM..UG]\|..Typ4....&K..,..3...F!..P....<....f]c.........g......n..~...gJ...E........5........-..D.&.E...gt.[~.........T...]C..B3..jG...'.BK`&Z{!.^......P..=8.C.....jfS!.o...pI.%..[T....M.^._Q...FtL".S....Y....L.$.jz=.&.. T.K.6#.<..A..k...e.<)c...L$........}`4...,..z....&-.._[(^.b...d.9)..Z..Yn.Yw.H...D..^.U...._B..+."i:/ ...,..DH.....9\v.E(.......%.1.\|..u..M}..y.5........p.....]..\|U.......zs.9a.y....)...`v.........F.......![\|.<....m.c.0.<..(/r@..>.8..5."i.s..).wh.o...6@i..W.%......./.Heaj.C...<.U......G....0...{.S........A.z.I2....Hmb~.mw.\.......u......P[..........Ot.j@.YE...Y@.....d......o....6...!..6.).]Bs..'.u...6G......F...G@.>OBm.[..._..:\k.y,....Y7...

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	200102
Entropy (8bit):	7.956982658702788
Encrypted:	false
SSDEEP:	6144:H5pU5pNa30zpCn3hl9tr4RkIlh3mb8ZacibzqbgO:H5G5uEw3330R7hWiajmt
MD5:	C273C411FBDC299661BD65C8ED450194
SHA1:	B0872EF674810726FE2DD49F5472D730C93F8C6B
SHA-256:	68E61C0C20087B67A7FE27BA95EC5B80199BBA64465D746E9870E91F5203002F
SHA-512:	7BFEBC1FB611047A1A1988461CC0CC526BD6AB7701E67A0615C5FA83FC102F8C567A667ACE046D2A9FD9885A656C60E92AF5E68E75AAA54EA9E81AC7916A503E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/007.jpg
Preview:	....0{Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:22:05..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......[^M.b\@w.e....sk.....d.Y....o.We...{..Js2....@........3..O...+...

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.0 (Macintosh), datetime=2024:03:04 11:03:35], baseline, precision 8, 1536x878, components 3
Category:	downloaded
Size (bytes):	219015
Entropy (8bit):	7.960792960628609
Encrypted:	false
SSDEEP:	6144:J8SmjjfzBXaJcvpQ3r4/JKKxt3xItQFzB1xFFfWkCZ9i9N7:JMfNaJcyMJjpzRPRTC7wN7
MD5:	FF4987667E17526C2027D757B447C143
SHA1:	79840C28748F9A7F478976D1050239E0747F377D
SHA-256:	AA9B246B8BE93A17FFB2DAEEDB3350136FB5A685D77111C84B2A243CBB4AD322
SHA-512:	1892F1A948AEE115855C5AD10AC8CD3ADEDDB5484B6C2BBF174ADE955775456E8A9BE82D3FD6829C8A0618147620833DB31816B241587F922A204A503525F1BB
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg
Preview:	......JFIF.....d.d.....SExif..MM..............................b...........j.(...........1.....!...r.2...........i.................d.......d....Adobe Photoshop 25.0 (Macintosh).2024:03:04 11:03:35...........................X..........................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....H..(.k.-...#.r....m.[K...?z]._...=%,...{Y.s.`.{}......g9..2.u.~.v.\=...e_G.?...+..........t..(%%^..a.......6....%6.j....X.\...\|G

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 701x390, components 3
Category:	dropped
Size (bytes):	45280
Entropy (8bit):	7.972448340381777
Encrypted:	false
SSDEEP:	768:PVaENJHMMxGVX+7JrJalY22ooH1uZyRecjdO+kyI39jYDjgZwAKxbIDXdKwCuGmb:PYQO29HcyIc49ZejgZoIJKw+8
MD5:	ACA1F36AE3AA554FE244801DD3CC05C0
SHA1:	748B51FFA7F05785F1F889B5A066A3952F7EE2B6
SHA-256:	0DBFF15A14426F66227623DAD2736F29C912B54211C68B8F6403FC498E1A67D1
SHA-512:	6799CC6C269C52CBC5C9FF84239F2E285CBF51EA379C3C46258695431C1EF98961CC56DECF2E5DE74C738E5EA9B968A9BC41D32D75139660A106D0B86E2A827F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......................................... $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..........4......................................................................}.7..JD;..Y.....z.D:..p1..<.=yA......~..)..C...y..u=..~.X..5c.]k."...Z..5.R.J...~._.AU.}..l&E..y.{6.z..G...j.(....g>..I.t.......pJ....b=..r.dgr.ly.~.I^K.v1..u.n&...f.9.8'.......8#oc.1....M......2.2...6,V.W...1......9.5.M.v5.UV.vkC8x..s.U"....j'...u.......OOtjNj....W....?6..y./..E&...{Z+DE..W,^W.v.5^'U.M....+...T7.}H.y6....O.C:5%wg...Z...@oS.D....)C..\...@.3...Z...........e...._.l.<.......0..JCY...}.......cX=W_/....I5.2......n.k.<.&.B.T...4....X}.U..C.5.sd..1.C.S F...y=S.6.V...sUZ^.M.^X...._h....mt.../...Q.W.7.rmu...`..C...<..q.Jmj..5...e.mrWms..Y.p.e..$..$....m..w......._a..c6...8.....M...=P.9.9.S6 ..p..T^i]\..]eh......(..wF..O-...<......Uy?AqN...z...].O..>...Je......O..v.?...?...6a'.L.x...u.\}..}....\|..

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	633
Entropy (8bit):	5.605127431135504
Encrypted:	false
SSDEEP:	12:lo4Wh4CVfKe7X/kJeOEloEwhbuKtYeeOEuGPXEuGjlC9q0C6Cv0vGu:lo4WrdvlOEloErOEuQEuqjc5
MD5:	28FEB936601DF3C981A18ECAFB4682D9
SHA1:	F2C6E99AB853253D041E667973785A3227A16068
SHA-256:	BFE17939453A7498FA57E3016042B1E95FA30046CABA28271AF453EE4773479E
SHA-512:	6A3717B9D9EFCA18D9FB98E06C00DB21ECDE437EBDB50A14D062800330C20C6AFA798C32A0E7A59416901BF8A2CA4CDE73363EA0BFD39A03EA675638C3142C7C
Malicious:	false
Reputation:	low
Preview:	....<!DOCTYPE html>....<html xmlns="http://www.w3.org/1999/xhtml">..<head><title>....</title></head>..<body>.. <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1">..<div class="aspNetHidden">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="h4ZsSAJlhMfKffZU2e291v73uxJ2fUjHHnBkjBsCNCThWZ1TA9dionwDxWOFfpKmvLvyzfh1DXh7G6McuIqK11D4Wi4=" />..</div>....<div class="aspNetHidden">.....<input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" />..</div>.. <div>.. <span id="lbl"></span> .. </div>.. </form>..</body>..</html>..

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10364), with no line terminators
Category:	downloaded
Size (bytes):	10364
Entropy (8bit):	5.187016974390303
Encrypted:	false
SSDEEP:	192:di/rAbN3F3Tk+r3C9m5hYwMUZHWwpYTMHcJG062gA:dyrAbNx4SyyDYecRj
MD5:	751FDAE094E65B39E6C662E969B8FBE8
SHA1:	DDE2424B2BE1DB52FC16CBFA2D0D22112E1F9B2F
SHA-256:	EF9DA71A42581033F8B96EAD8C6C1E4F72B230E455472A22D120CD573DE38537
SHA-512:	5C348A5CFEEF7533E814581C9BD4C2D49C7D6DC15B58DAEAB6F4CE1417BD75D48748F25F0EDCE63F6ED6C89A562625D545CB9C71F87005BFA3F2C5E9B9CFB1A1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=100)}({100:function(e,t,r){"use strict";r.r(t);var n=function(e){return"string"!=typeof e\|\|""

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.0 (Macintosh), datetime=2024:05:24 14:15:32], baseline, precision 8, 1548x1766, components 3
Category:	downloaded
Size (bytes):	399229
Entropy (8bit):	7.895377970384946
Encrypted:	false
SSDEEP:	12288:EyyBhBDyUpC6C8xDLyCErm0iXvO1/yCynaB:0B/DyL/8xDLImzXi/yRnaB
MD5:	D2333B7859793545AE8529B3C115D408
SHA1:	D0FA0169D4C1F74E22AC73567B2B5766199B3DE5
SHA-256:	DDAE8CBF930F040F5AAE956F3BCBA16D1C5DD19D1B7368F8A811DA3CEC37B5D2
SHA-512:	15F14B2A462B4D90F4C552073B9A954165DEDE0039817FE99A7140B928EFB76C76BC59F5D0280BA4C61227C7D1EC63A3B3C7C117997F1638D4820985DE3AE0EC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Julho-atualizado-2-copiar-2.jpg
Preview:	.....&Exif..MM..............................b...........j.(...........1.....!...r.2...........i...............$....'..$....'.Adobe Photoshop 25.0 (Macintosh).2024:05:24 14:15:32......................................................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................B.:.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...oB..w.q..M.X..1.o..].6....8...............67\|<.8Y..5.Em.\|.^[.Hs.p-..uy...l.r.O..N.........j1.E.TI.?.:.........:.b.'..wcYg..].w.."Z.p{\...cw....Q..X..

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.276644110297719
Encrypted:	false
SSDEEP:	6:tI9mc4slzIFJqUbL/QRyBNc4JIxurdGoTEgM:t4uFJqCcoBNcbukgM
MD5:	84CA13A1B4375DCDA957E06E454FEDB9
SHA1:	9C10AA9B9C62515C2EA403DDB89B2E0A341308D5
SHA-256:	0A29A2FB57D4DA2FAE38F8A0F21BED442AAE78F43BB2B620F9903347A3AE3681
SHA-512:	309CD11500EDA4A06949DD37D035BA681B822C02F14852FDB5A8384292B561FF613B16005ED2E9B431F6CA89CC322750315E933D29775368A8648ADCD23E9C3F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="7.41" viewBox="0 0 12 7.41">. <path id="icon_ArrowDown" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-6 -8.59)" fill="#454950"/>.</svg>.

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	67192
Entropy (8bit):	5.0344149762446335
Encrypted:	false
SSDEEP:	1536:dAsy6UyNhHuyE3Nl+6Jsw7EKhbIMbvt2pkTociTwSY1PKK+ZrzbTixVEQLuIhXa9:dAsy6UyNhHuyE3Nl+6Jsw7EKhbIMbvtW
MD5:	4068AE4F19957DEBFD1C95B0E8C336BF
SHA1:	DA83E83805A75546B8573AF111264C3F0358BFE2
SHA-256:	165C0ABB8289C2009791614344D28E8B3576ADACC895540407E1F3D35C66AF22
SHA-512:	41D8073E784235444328424C5AA7617350AF5DE808E86D5B805016E2E63BAFCD902054941754668184518A368A12A626BA28D3C96179A9C4A3E270F89EE18174
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10
Preview:	/*************************************************************/../*************** Testimonial Slider and Showcase Pro ******************/../*************** support@radiustheme.com ***************/../*********** copyright (c) 2017 @ RadiusTheme.com *******/../***********************************************************/..../******************* Grid System ************************/.....rt-container,...rt-container-fluid {...margin-right: auto;...margin-left: auto;...padding-left: 15px;...padding-right: 15px;...box-sizing: border-box;..}.....rt-row {...margin-left: -15px;...margin-right: -15px;..}.....rt-row:after,...rt-row:before {...display: table;...content: " ";..}.....rt-row:after {...clear: both;..}.....rt-col-xs-1,...rt-col-sm-1,...rt-col-md-1,...rt-col-lg-1,...rt-col-xs-2,...rt-col-sm-2,...rt-col-md-2,...rt-col-lg-2,...rt-col-xs-3,...rt-col-sm-3,...rt-col-md-3,...rt-col-lg-3,...rt-col-xs-4,...rt-col-sm-4,...rt-col-md-4,...rt-col-lg-4,...rt-col-xs

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19586)
Category:	dropped
Size (bytes):	179261
Entropy (8bit):	5.304528647307933
Encrypted:	false
SSDEEP:	3072:npPbf/z4EPGyZolCqBnP4b37lWY2l2rB3G9G/LKjmauUtfVLhuGaZKvOVxH23/+9:n5uP4b37lWY2l2rB3G9G/LKjmauUtfVS
MD5:	63D6D34D480B93AD5A8F1AD67A8DAE97
SHA1:	70BC99E40F26F58C689C793533966C6CF394AB12
SHA-256:	85830A7B7F500085B1AF211F1DA66B1BE8E771413D79B7C1D9E81B4F8311B7E1
SHA-512:	C5EDDE576C753C73D3EF778E5C7077F992EFAFCA33D0C4159F35F685DD62B48A53C52519F98D6998720103AE8AF053B440DD8E094884306388A6EDF689CFC0C4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" >..<head>..<meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" />..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1">..<link rel="profile" href="http://gmpg.org/xfn/11">...<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" href="https://www.campobahia.com/en/home-en/" hreflang="en" />.<link rel="alternate" href="https://www.campobahia.com/es/" hreflang="es" />.<link rel="alternate" href="https://www.campobahia.com/" hreflang="pt" />... This site is optimized with the Yoast SEO plugin v22.7 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Campo Bahia - Hotel - Villas - Spa - Santo Andr. - Bahia</title>..<meta name="description" content="Hotel boutique de frente para

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.0 (Macintosh), datetime=2024:03:04 11:03:35], baseline, precision 8, 1536x878, components 3
Category:	dropped
Size (bytes):	219015
Entropy (8bit):	7.960792960628609
Encrypted:	false
SSDEEP:	6144:J8SmjjfzBXaJcvpQ3r4/JKKxt3xItQFzB1xFFfWkCZ9i9N7:JMfNaJcyMJjpzRPRTC7wN7
MD5:	FF4987667E17526C2027D757B447C143
SHA1:	79840C28748F9A7F478976D1050239E0747F377D
SHA-256:	AA9B246B8BE93A17FFB2DAEEDB3350136FB5A685D77111C84B2A243CBB4AD322
SHA-512:	1892F1A948AEE115855C5AD10AC8CD3ADEDDB5484B6C2BBF174ADE955775456E8A9BE82D3FD6829C8A0618147620833DB31816B241587F922A204A503525F1BB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....SExif..MM..............................b...........j.(...........1.....!...r.2...........i.................d.......d....Adobe Photoshop 25.0 (Macintosh).2024:03:04 11:03:35...........................X..........................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....H..(.k.-...#.r....m.[K...?z]._...=%,...{Y.s.`.{}......g9..2.u.~.v.\=...e_G.?...+..........t..(%%^..a.......6....%6.j....X.\...\|G

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4679
Entropy (8bit):	4.954926018555648
Encrypted:	false
SSDEEP:	96:+ekPofCQsMmNXOECCn1mmcawTMdWzIFE4iUjnIF4htKn8RaA5cmcAroFx:+Lwf6MKVV1mO58dUjnIW3Aj
MD5:	8BD1B07ED9C7E7D3C9740DB928314DE3
SHA1:	956968598F9F68A96D241113AA57DEEE76D77583
SHA-256:	FED3ABAB855965172B6A86861BC8B8462567DCAD5F3CA9B5A2C1ACCCD1E0DDB8
SHA-512:	6C14180FDD9C1C615BAFEEFFBFF05A8EBFB9269F93B062B5F0CA52FD489D8141E86E288D2407E418AB5F38BF05F66F21841EDC87C30712EB0651FDF96BEA87BE
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/wp-util.js?ver=6.5.3
Preview:	/*. @output wp-includes/js/wp-util.js. /../ global _wpUtilSettings /../* @namespace wp /.window.wp = window.wp \|\| {};..(function ($) {..// Check for the utility settings...var settings = typeof _wpUtilSettings === 'undefined' ? {} : _wpUtilSettings;.../.. wp.template( id ).. .. Fetch a JavaScript template for an id, and return a templating function for it... .. @param {string} id A string that corresponds to a DOM element with an id prefixed with "tmpl-"... * For example, "attachment" maps to "tmpl-attachment"... * @return {function} A function that lazily-compiles the template requested... /..wp.template = _.memoize(function ( id ) {...var compiled,..../.... * Underscore's default ERB-style templates are incompatible with PHP.... * when asp_tags is enabled, so WordPress uses Mustache-inspired templating syntax..... .... @see trac ticket #22344..... */....options = {.....evaluate: /<#([\s\S]+?)#>/g,.....interpolate: /\{\{\{([\s\S]+?)\}\}\}/g

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	285334
Entropy (8bit):	5.0538586203224645
Encrypted:	false
SSDEEP:	6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk
MD5:	16623E9F7CD802CF093C325C511A739C
SHA1:	B364DBD40E67076A03E9D7B061C9B2624D081E31
SHA-256:	1E7F83052E1E3442C4397CED9555033CD1D3F08444D85960683BCF91C8433CDB
SHA-512:	44B9D0ED3184FE5F19E650798E6FDA22B71A6F316415E08C4EC88AF3A4211E9FD335D5F9FC44A070F7B478D7060AE3B665C2D2620BBBCE2EA6098BD6826B930C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1
Preview:	/!. jQuery JavaScript Library v3.7.1. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-08-28T13:37Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket trac-14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..} else {...factory( global

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
Category:	downloaded
Size (bytes):	48336
Entropy (8bit):	7.995815173088384
Encrypted:	true
SSDEEP:	768:aHPbHlNlYMCZibwJi/6WwetfISUeR/nQipVg2Ddz9fZIMiktaFm5x4KSz0h1wO:0DyMYibQi1fI7exQvW9RIMTim56KSz0z
MD5:	BFE7AD4AA54CFF8909B2D7632073CC30
SHA1:	7C2E625BEA4D449CA78CDE09AB59DC6C9CB4726F
SHA-256:	47D477915FA5912616E2DC5DF8C5780F9202671678CF275472BD39F3381C0098
SHA-512:	B083C9E0766F281A39F582404F08B3D3314C7757AC151C4CB00BD3CECEB4FA06B12D08D881A2C6BF80A066ECAD22FECE7CFF41269D2DBD2BFE38D873922A31FF
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2...................S..........................g...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[3mq..c..5.Hu..ev.5.c.L6e....<.>U..#0l..h.........F.m........."...,V...\.i....;zG-....%..Nt.j....l..m.p.`=....%...}^B).I.Q..qt.l..l...i.......9~....P.".tj.._?.P.j...B.r...'...Zh...}......M].+......k].!..E<.{.........."........m...$C.."_i.>.i@.=.#......s...........%...;."...U.....n,...DO.W.n..85.._.Bj9..nN.T.xl.U".Xq^...y.......<.2'.... .`...WCT.W........?{wI.!.B..C..B.$..Zh..0/ b.....P.(X..?..._Pi.4;`y....gi.j.Zu=.8......>...{U..K..X.P.hN......=.....C..,............f.eE.l...e.Y...K.Xf.u.%f...k...+"V.Y"W.bD.........~.[.~QL.z2.......V.Bd..j.D...]...X.5d........){....G~Q.x....{.{.=\.5.h...DB...H]V'.....<...sD....=D(.......^.&M.2....M(iH.8<........p\d.Wo.....@..A....U..M..K...z".%....n...k.T/a..d(..5s1..P..K..i.]l..+.......ZK7H\D.N...].kL.......^.^...K)(r.J.W..L2Y...?..`.......&.%....{?T.:P9.\%..E*....H....`....r....Q.....Rw....T..}....M

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	4.388496168968899
Encrypted:	false
SSDEEP:	96:3w0Kq/OSp+tLRvny+4G/oUitAa+YIdVC7Q8uKt:3PB/dgvny+4QoUMAa+YIdVC7Q8p
MD5:	2344C2369F3AE37FB5F28616B645DADC
SHA1:	587FD3BBAADC6D023D1CF74C15073553765825D0
SHA-256:	9E28CCC0255EEC86D4DE746E8DFE9E7FA9BB5C0FAE93FA0EE39670BD7734D974
SHA-512:	40D9BA9DF5E81317D30CD0CEA27DCC90EC42A3B181E1DD45DD7F9A5E8420F983425B6C090EB1F2CDFC37DA341D42E208B3D957E7EEB8DFEFD7628815058F46D1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0
Preview:	window.eae = {};.window.renderIconHtml = function(view,elementor,sett,control_name, wClass = '', index=''){. // console.log("View => ", view);. // data.addRenderAttribute('key', 'context', 'value');. // console.log(data.getRenderAttributeString('key'));.. var icon_class = '';. let imageHtml = '';. let lottie_data = [];. let iconHtml = '';. if(sett[control_name+'_graphic_type'] != 'none' && sett[control_name+'_graphic_type'] != ''){. icon_class += ' eae-gbl-icon eae-graphic-type-'+ sett[control_name+'_graphic_type'] + ' elementor-animation-' + sett[control_name+'_hover_animation'];. if(wClass != ''){. icon_class += ' '+wClass; . }.. icon_class += ' eae-graphic-view-'+sett[control_name+'_view']; . if(sett[control_name+'_view'] != 'default'){. icon_class += ' eae-graphic-shape-'+sett[control_name+'_shape'];. }.. if(sett[control_name+'_graphic_type'] == 'lottie'){. if( (sett[contro

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	downloaded
Size (bytes):	245662
Entropy (8bit):	5.388783455972756
Encrypted:	false
SSDEEP:	6144:RK4glhdDen77MI8Y8bjq7+sJXUIjHKbN0RMM:xgl/KElYapsJkhGiM
MD5:	095DC5A747CC8D9A74EC890EAFCF3C9C
SHA1:	6F6A4A35E211F62AB87D6296BC0314655014DC21
SHA-256:	B446343398CFA621371DE2161F18362847CCF86D57490EB54A9263C6B4585478
SHA-512:	F0CD77730C97D3352B0846AB6385F78CED71E6B36EAAC1F9D9BC91F892CAF8A9DFB774FD9E6650051C4D31E51202220146FB040D43C39A196E61C472BAF931FB
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/plugins/openbridge3.js?v=next
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.888920222920892
Encrypted:	false
SSDEEP:	24576:aJN7/pPjd+DnrhPxA6Hf75ELkZrZP3dAjsqqdNWtUAOkPUoFj4:khpjwDnrhPxhHz5EILt+WNWKho2
MD5:	B9F4E0B578ACE2976FAC01485A1FF8C3
SHA1:	5AD2F7A8D2C6FA84C2BB6B12F7865651D6911897
SHA-256:	E8128E9D557CFCFCF401C206D5FB0EB3F710FF4A9CFD8EEF6C9831F291B30CEB
SHA-512:	A8DF1B765B917F038169227986518EFE610767B7BB26BA63509B08000C001632EF7EE226CB07EBD758C8460BE946421E87E085A9B425113BDCB2A98BB972EBB8
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:0
Preview:	....ftypmp42....mp42mp41.._.moov...lmvhd.....S%M.S%N.._..9..................................................@.................................8)trak...\tkhd.....S%M.S%M.........8..................................................@........8.....$edts....elst.........8............7.mdia... mdhd.....S%M.S%M..u0...S.......@hdlr........vide.............Mainconcept Video Media Handler..79minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ......6.stbl....stsd............avc1...........................8.H...H.........AVC Coding............................5avcC.d.(....gd.(.,......j........u0B...h..5%........stts...................hstss...............W...........e...........E...d...........7...U...w...................U...q............sdtp..............................................................................................................................................................................................................

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1095)
Category:	downloaded
Size (bytes):	196554
Entropy (8bit):	4.735657194169775
Encrypted:	false
SSDEEP:	1536:epdVkbf9QNwFxAXwGiEnpTBtMbLmBga7gwzi6SWm4KIvpbgi3xg1TkRjPAlm+/Yu:erFNAxAXwiSYRw
MD5:	5411B7DEFF65A93687719746C8BC5B99
SHA1:	092B0EF35C6B599A352B607AF439915C702CAABF
SHA-256:	E0CBF7A78CECFAAA4EED92A9764186753C24B2747824DDB9039F1EBBB9B7A013
SHA-512:	97A5D5E3622114C2D0E76D851AA7E9F0AE55F8EB1A7A78FA5BB9F9F4D87CAB4CA0CCCA760DD036A8B6E6220D5EAD188758E4C1ECE0B33C2C7B218F150D33B014
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8
Preview:	/! elementor - v3.21.0 - 26-05-2024 /.@charset "UTF-8";..dialog-widget-content {. background-color: var(--e-a-bg-default);. position: absolute;. border-radius: 3px;. box-shadow: 2px 8px 23px 3px rgba(0, 0, 0, 0.2);. overflow: hidden;.}...dialog-message {. line-height: 1.5;. box-sizing: border-box;.}...dialog-close-button {. cursor: pointer;. position: absolute;. margin-block-start: 15px;. right: 15px;. color: var(--e-a-color-txt);. font-size: 15px;. line-height: 1;. transition: var(--e-a-transition-hover);.}..dialog-close-button:hover {. color: var(--e-a-color-txt-hover);.}...dialog-prevent-scroll {. overflow: hidden;. max-height: 100vh;.}...dialog-type-lightbox {. position: fixed;. height: 100%;. width: 100%;. bottom: 0;. left: 0;. background-color: rgba(0, 0, 0, 0.8);. z-index: 9999;. -webkit-user-select: none;. -moz-user-select: none;. user-select: none;.}...elementor-editor-active .elementor-popup-modal {. background-color: initial;.}...dia

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	5.406333618109174
Encrypted:	false
SSDEEP:	96:ZOEMIJOEMiDFZ8OEMXkOEMhYOEMvOEMkyhZcyJzV+zmnWOEMfubqGIFuYUOEMmOb:wIAiXBh1Skuy22bqGIwYR3XqO
MD5:	C840A8EFA9639BA51FFFF865A6D5B3ED
SHA1:	00C77DA03DDCFA49CC08A7229BA8FA3F9AFCCC38
SHA-256:	C3061C3788AD5783EF8A5D10C454BAFE7EB942C48200DCCC852CC6D3C9F303D4
SHA-512:	E73A55A7CB4906133D3C85F7F7F5BC1435FB1AE023A565B446B9A628D2540B7501EECC6D6CDC3276871BC418C16DAAE14FF0C84E9A10A691CC40597400ECDEC1
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans&ver=6.5.3
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5340
Entropy (8bit):	5.4310745623594245
Encrypted:	false
SSDEEP:	96:vO1aefO1aBFZOGO1a0xO1awVc+uKO1aVNvOEaefOEaBFZOGOEa0xOEawVc+uKOEK:leV480XanYeo4R0+aOCeS4/00aEH
MD5:	187067516E6D4E7EF16DC931BC7128B7
SHA1:	114DC30AD0DF7D932BB9D556E308F07B23B35831
SHA-256:	A3576A4925DAE3FFD60B21D3BE54D7823CB71DD8DC4A0D04772FE25D199EDB40
SHA-512:	5C177CDF44603E5E9CF121C3E54641F96BDCA3B35EF691D2030FA38A9E499698F78B5626481E178143017213ED821FDB9A6D278A25190FC344FCFA03466F1611
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Raleway%3A300%2C400%2C600&display=swap&ver=3.1.1
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4247
Entropy (8bit):	5.0184947640518125
Encrypted:	false
SSDEEP:	96:ktQMKPsAB8ljKuUvhdiH68NmfKfz+DFVk:kFec5Uk68tik
MD5:	4C434EB6CAE66A421AECCA6A4677C7A4
SHA1:	BB6B85C8865DACDB80C990173176BD82B51B14F5
SHA-256:	48CF24C0DBA9206D98D4A1545421AE4508909AC258F98A440ED4243491CAFD84
SHA-512:	45441A40EF2D9118D716C594C693AC34F482D8700C2691EF396AE4EBADAFC9F2CCBD6F0C36F68B7033151DBD7FDD9933078B93F5281FE1B241121C4DAE599EC9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="80.63" height="16.945" viewBox="0 0 80.63 16.945">. <g id="Grupo_15348" data-name="Grupo 15348" transform="translate(-760 -156)">. <g id="Grupo_15346" data-name="Grupo 15346" transform="translate(760 156)">. <g id="Grupo_2" data-name="Grupo 2" transform="translate(0 0)">. <path id="Caminho_2038" data-name="Caminho 2038" d="M-115.482-107.859l-5.855,3.38a1.71,1.71,0,0,1-1.711,0l-5.856-3.38a1.712,1.712,0,0,1-.855-1.482V-116.1a1.711,1.711,0,0,1,.855-1.482l5.856-3.38a1.711,1.711,0,0,1,1.711,0l5.855,3.38a1.711,1.711,0,0,1,.856,1.482v6.761a1.711,1.711,0,0,1-.856,1.482" transform="translate(129.759 121.194)" fill="#fff"/>. </g>. <g id="Grupo_3" data-name="Grupo 3" transform="translate(1.892 2.099)">. <path id="Caminho_2039" data-name="Caminho 2039" d="M-91.8-72.747v-5.235a1.141,1.141,0,0,0-.57-.988L-96.9-81.588a1.14,1.14,0,0,0-1.141,0l-4.534,2.618a1.141,1.141,0,0,0-.57.988v5.235a1.141,1.141,0,0,0,.57.988l4.534,2.61

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=683, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], baseline, precision 8, 1024x438, components 3
Category:	downloaded
Size (bytes):	228733
Entropy (8bit):	7.960851077506538
Encrypted:	false
SSDEEP:	6144:kgB/RAaAmZS9VRvaYhXop3j2E/li6gx2ZonXtZR7wx:kvaAdSYJyj2E/pgx2ZoXtZREx
MD5:	6ECC115F4E2C6D29813FC58086AF800B
SHA1:	E9A0D170AF63A1B25EE00D5BE3EB3FACA0D2E271
SHA-256:	24B4A3DC63A9F3B8CBF1AE3DC163EA7EC7424E966675DEBCD9304AECB29F9389
SHA-512:	511FE79AFB092023146C384EB789666D1B470123C84911A8A6032DB83CB68F749AFEF775F34868CD9D00A0A03723D686C817A2E66B6520B62083CF7D17A84673
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg
Preview:	......JFIF.....`.`.....<Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$.........`.......`....Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:52:25..............0231..................................................................r...........z.(.........................................`.......`..........Adobe_CM......Adobe.d.................................................................................................................................................D...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....7..2.e.9M`...m...yk....T]....=k...%.s^..{=G..v.m

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	687611
Entropy (8bit):	7.977513592685637
Encrypted:	false
SSDEEP:	12288:cM09IuOutGf5qJPYzgaCcsvUJkpXOMrkYWMX/3zluWZWX9+6XxqMoc:cb9IuFb5ACXOoRP31E9+DVc
MD5:	9AD2CE9FBE3517B43E2DDC0275D4FCB8
SHA1:	958B09DDE538BA7D8B7021C0A8E0B45F2EF3B771
SHA-256:	21C6C5A2973F86DE9A66405AF71E3E06A7711276357F5DE9242F74299C11F8DD
SHA-512:	7CAFAF8EDE134B6DC9A3E6F05F8AC288AA62EC29361F2A6D05174A75AE7B0E9D142E2F1810FCEC5082A7398825832F0CFB2DB5E27579EED49AEAAD31396759B8
Malicious:	false
Reputation:	low
Preview:	....(.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:29:15..............0231...................................................................r...........z.(................................'........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:I..[.".^=s.._g.I!....B..3.g.K.:~wNmYVb..2..W.\^....u..Q..e.....{=.

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	60404
Entropy (8bit):	3.9992548513832524
Encrypted:	false
SSDEEP:	768:FPxGdOkPJcAJk+9SLaYYszc8RWzTEExpKw2w:FPxIOkPmI9SLPvzc8RWzTtL2w
MD5:	B497E0EC5FA1D2A4E178462C267B9BF5
SHA1:	63DE8F6DF25F9B8C281EAF9F13647B40F676969C
SHA-256:	57B04CBD9A5CD2F8CA8483C749944AFB26D13170EDE99795CD68F1D4D253C5B8
SHA-512:	FEF53D44EDB7E073271AE38B5A16C24F613D64E92BCC804DE17E7B0C2848BCE6AACFA42C822A5EF4BE0DC6D5FC09B2B4A74C7BA295F21B073B8271C168127685
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; /.;(function (factory) {. if (typeof define === 'function' && define.amd) {. // AMD. Register as an anonymous module.. define(['jquery'], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS. factory(require('jquery'));. } else {. // Browser globals. factory(window.jQuery \|\| window.Zepto);. }.}(function($) {.. />>core/. /. . * Magnific Popup Core JS file. . /... /*. Private static constants. */. var CLOSE_EVENT = 'Close',. BEFORE_CLOSE_EVENT = 'BeforeClose',. AFTER_CLOSE_EVENT = 'AfterClose',. BEFORE_APPEND_EVENT = 'BeforeAppend',. MARKUP_PARSE_EVENT = 'MarkupParse',. OPEN_EVENT = 'Open',. CHANGE_EVENT = 'Change',. NS = 'mfp',. EVENT_NS = '.' + NS,. READY_CLASS = 'mfp-ready',.

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	366574
Entropy (8bit):	7.9747196897983335
Encrypted:	false
SSDEEP:	6144:FKhohvLJ2tVCTT9KfsordII526m+ORpAi4WHGxx/qM7bqz3NG0Npgab:FKCh9Kfzdx5zmLR6/WHE//4lLg4
MD5:	F525CB5AEABE2E66A6850DE1027D4551
SHA1:	7D498722E8A89EF25B6107ABC7ECC704E074D4FF
SHA-256:	FC399400527DC7EDE4E6615683A4D21BD726CD4DF7F83142C82B1A11131F532F
SHA-512:	90C8348455997D17EDF9A2C27A4D7DAD848974AAB73EFEFAAF367877ECD6DA3BF45236EAAD021E6B4218DAA4A28509033B09033510E6EE13923524D06F104E3A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/03-hotel-desktop.jpg
Preview:	.....9Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:58:53..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?../Q.:.O..sc...\|.Fa...mT4.c~..N....v..7......=S...gY.i....8...J.....Y....

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7301
Entropy (8bit):	7.88819345368873
Encrypted:	false
SSDEEP:	192:ZyJq7/XR3VjZEjkK+7jb5dLsLbZZTv3ed2sWK:EqbX9VjZEnMXzOzTb1K
MD5:	2E4B166E49D51FE6F1B8342B179EDF30
SHA1:	16E5DCAE57731831837FF8C9023405682D99F43B
SHA-256:	19163B48A169D3C57123A7D24C4D45B5F5690EA0E02FD6E1E794960D9D53746C
SHA-512:	393534BA07E8E5AF2D2326EAD11292CAA33E66039FDD4EBA4A13ED253647287512D02AC96DA2689E334396B8FB2BA4E62FF20D9DCF4C0E8144474850D961C5C1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/blta-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....7IDATx....U...S.(.zC1.E.....C14E1.8.0.q..ic.1..j.-.Ig..?b.c9....ql.X.a..i......D..4.H36.... """""...?.:.}.=.......O.{.9...>{...{..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..\|........H..`..I..e]8I .W......T...P.L&..a...=f....gf?%....u3[&..I..vZ2...)..J:[.?J.]. %...(.'..3..2..$.....d~....&JZ.`...IMaH..k...?@..IW.E..H.jf 9K.X...+....,.m..F..#..tD.6.\GrO.{.$.....A...a$..t,I+.&o.$.[R.....k..#I.....6.t.<..6.O..H.U.....6I....`3..UY...E.!..J.IS..ou.J..vJZU.E.~.$....(.}...8A..(6..C/....E.;.8..H>^.~".).~\.)i"..i..6.XGr_r..(....\..(...l .l.\|..&..I'Kz.NcjE.m....^.t..u.!..3.w..%I/E.oJzU..a(.O..N.1....=/...:..)..3{7].fv...qW>.IzK..[.%-.........f.-....S..=..'...s....$........3....G..a2...\.}..n....n.\|..aGJ.g3.O..J<]....R.(..K.../..v*..]bf...\|).....-e..GD....._..tb...aS[h..Qx..p.......].]...c$..$.>B....L....H\|.................#..8....+i...-n5=._..).f....e..G.q............#

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	69483
Entropy (8bit):	7.834572481234115
Encrypted:	false
SSDEEP:	1536:N+Kuqb+Kuq03q3hT2BGwjlPabzfWbocjvXIT0vhztdL53ft:N3UH5PafWbo6XIol53l
MD5:	4BE07C245906648DB52A2C499C15D5D2
SHA1:	0B0C7045581958A4F69A1E1F8EBE63F5EA008222
SHA-256:	639E45BE847AB25650621460C1705603E032C0864237C003138439E81F7295F9
SHA-512:	AD1C7EAC613BDAFFFB101AD213DC3C2B250FB15E0EFF4032181E382C15EDFABBC6197322A2E26AE6B4E661A49A165947C917B616D6FCDDA65E23DD1079CC65A5
Malicious:	false
Reputation:	low
Preview:	.....BExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:20:55..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..!(R.M..y.c.1.)..&.B@)BI+.hJ..(AV..xR...$[.O.PS.H. '..$.X.O.)BxI..jJP.J....

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	464657
Entropy (8bit):	7.976625939916992
Encrypted:	false
SSDEEP:	12288:U6YOZgkqOpPWaE/fK/rX2zNAx71MimoXQEP:U6zgDOpPWaEHKoNi76/eQEP
MD5:	5F90256852553F1B1361959826286600
SHA1:	98A8D22DA5398470E489F574D445D978979139B9
SHA-256:	79D80BB8B461AC579A7B017B571E205E67058AAC76E0BD2C080621F532D8A7B7
SHA-512:	622D210F9837D247C69E67D4791169CA30246BF1ADCF3DCEDAE50B8C95508615C99AB865EB52A24992567F5FBA62C46931BCED02DB4D6DCD8AF389EC2768DAB3
Malicious:	false
Reputation:	low
Preview:	.....eExif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:09:20..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.?..Qv........&O...]....:..........qq;X.H..)Z8K......rD#zw.!.N.t..z.F.....

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23997
Entropy (8bit):	4.6575611224865465
Encrypted:	false
SSDEEP:	192:HgQgivMct3OjQEahN8GLeqsiZFFmjD408ihiQWKoi9YmCHuOk0cG+:V4jQEJrD4fIv9UcG+
MD5:	1BEC16C1CF97982C4C8596AE25F22D10
SHA1:	77B42261603F486CE08F0C3EBC0A8D838A6C50B9
SHA-256:	8A50C46AFD37E5E5EA4B22922951FEE7BC2FBE6ACC3173F5854A89469F029286
SHA-512:	FD062564D8E45489807872B07BA086D4CD62931B1FFAEB943FF2D94BC6AFC2D3764DDD39DF643B7A93FC13E513C90735FC2319922AC741E5D25FEAEF722C3130
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.29.0
Preview:	@font-face {. font-family: "eicons";. src: url("../fonts/eicons.eot?5.29.0");. src: url("../fonts/eicons.eot?5.29.0#iefix") format("embedded-opentype"), url("../fonts/eicons.woff2?5.29.0") format("woff2"), url("../fonts/eicons.woff?5.29.0") format("woff"), url("../fonts/eicons.ttf?5.29.0") format("truetype"), url("../fonts/eicons.svg?5.29.0#eicon") format("svg");. font-weight: normal;. font-style: normal;.}.[class^=eicon],.[class*=" eicon-"] {. display: inline-block;. font-family: eicons;. font-size: inherit;. font-weight: normal;. font-style: normal;. font-variant: normal;. line-height: 1;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}..@keyframes eicon-spin {. 0% {. transform: rotate(0deg);. }. 100% {. transform: rotate(359deg);. }.}..eicon-animation-spin {. animation: eicon-spin 2s infinite linear;.}...eicon-editor-link:before {. content: "\e800";.}...eicon-editor-unlink:before {. content: "\e801";.}...

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14886)
Category:	downloaded
Size (bytes):	15073
Entropy (8bit):	4.552348347546036
Encrypted:	false
SSDEEP:	192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g
MD5:	EF17C8FFC514D7418B4BEC001B8473FB
SHA1:	9D406018E5BE8D46B89809D38EB6CEA4F8BF62A2
SHA-256:	6F35273B8502706EE06854D797337AB40BC1B3A7421960A2CEB5392AC85A0F54
SHA-512:	6A3288F610D5F70344A48F885EA5A1877BD869035FB50F6E5159DDC09C67C7FFCC6D9AAC4CC537800F3E84349AA26345D42134F305B41BDD5004E71B2160CBF1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0
Preview:	/!. Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.(function(){var l,a;l=this,a=function(){"use strict";var l={},a={};try{"undefined"!=typeof window&&(l=window),"undefined"!=typeof document&&(a=document)}catch(l){}var e=(l.navigator\|\|{}).userAgent,r=void 0===e?"":e,n=l,o=a,u=(n.document,!!o.documentElement&&!!o.head&&"function"==typeof o.addEventListener&&o.createElement,~r.indexOf("MSIE")\|\|r.indexOf("Trident/"),"___FONT_AWESOME___"),t=function(){try{return"production"===process.env.NODE_ENV}catch(l){return!1}}();var f=n\|\|{};f[u]\|\|(f[u]={}),f[u].styles\|\|(f[u].styles={}),f[u].hooks\|\|(f[u].hooks={}),f[u].shims\|\|(f[u].shims=[]);var i=f[u],s=[["glass",null,"glass-martini"],["meetup","fab",null],["star-o","far","star"],["remove",null,"times"],["close",null,"times"],["gear",null,"cog"],["trash-o","far","trash-alt"],["file-o","far","file"],["clock-o","far","cl

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.141565412858599
Encrypted:	false
SSDEEP:	3:RFeBBbBjjHxBAe2FYDxW8:jetdBv2Fp8
MD5:	DE3701EECB9340AE075E05B04BB05A6B
SHA1:	1262474193BC31E859367DF01C4B2B26214A375C
SHA-256:	F475C34186022BA531EBC8BBA97FC10DF7E4C3EA854F314A18AB0644C851620D
SHA-512:	4CCE11ABF10DF2640900C923B0CAC9AE1B80890F52701D5B57AB937C4752E91AEA392ED9439EE24357A6F88AC6F0F79B160A9C080F5670220C29C81B5148C69E
Malicious:	false
Reputation:	low
URL:	https://s7.addthis.com/js/300/addthis_widget.js?ver=6.5.3
Preview:	// AddThis services have been deprecated as of 5/31/23.

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	4.388496168968899
Encrypted:	false
SSDEEP:	96:3w0Kq/OSp+tLRvny+4G/oUitAa+YIdVC7Q8uKt:3PB/dgvny+4QoUMAa+YIdVC7Q8p
MD5:	2344C2369F3AE37FB5F28616B645DADC
SHA1:	587FD3BBAADC6D023D1CF74C15073553765825D0
SHA-256:	9E28CCC0255EEC86D4DE746E8DFE9E7FA9BB5C0FAE93FA0EE39670BD7734D974
SHA-512:	40D9BA9DF5E81317D30CD0CEA27DCC90EC42A3B181E1DD45DD7F9A5E8420F983425B6C090EB1F2CDFC37DA341D42E208B3D957E7EEB8DFEFD7628815058F46D1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0
Preview:	window.eae = {};.window.renderIconHtml = function(view,elementor,sett,control_name, wClass = '', index=''){. // console.log("View => ", view);. // data.addRenderAttribute('key', 'context', 'value');. // console.log(data.getRenderAttributeString('key'));.. var icon_class = '';. let imageHtml = '';. let lottie_data = [];. let iconHtml = '';. if(sett[control_name+'_graphic_type'] != 'none' && sett[control_name+'_graphic_type'] != ''){. icon_class += ' eae-gbl-icon eae-graphic-type-'+ sett[control_name+'_graphic_type'] + ' elementor-animation-' + sett[control_name+'_hover_animation'];. if(wClass != ''){. icon_class += ' '+wClass; . }.. icon_class += ' eae-graphic-view-'+sett[control_name+'_view']; . if(sett[control_name+'_view'] != 'default'){. icon_class += ' eae-graphic-shape-'+sett[control_name+'_shape'];. }.. if(sett[control_name+'_graphic_type'] == 'lottie'){. if( (sett[contro

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3459), with no line terminators
Category:	downloaded
Size (bytes):	3459
Entropy (8bit):	4.738575166886569
Encrypted:	false
SSDEEP:	48:sBASUtAg9XRI7A+/GDKQx8iQazLI9VwyEl25m3sTDBabx4:dA5p3Qx8iQqwVw125m3sTDBai
MD5:	7163DE6FAEF5C0435FB35B6358C742F7
SHA1:	0BCCDA1F4C7D0AC7AECB2BD7E0FC4B215CDA2528
SHA-256:	C7FDC41858ACE068DDC4C7A0F0E45A09697B4B528E0863A2C93518147A4BACFD
SHA-512:	60FD84FEBD578A99DD28B71FA9A1F6925B21118B55F0F9DDECBF1794A0D8A57C56865B5CE1D32229E504F5B4F8F70DFA2E88651C464069A517BB75A699106F55
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1
Preview:	@font-face{font-display:block;font-family:weathericons;src:url(../weather-icons/weathericons-regular-webfont.eot);src:url(../weather-icons/weathericons-regular-webfont.eot?#iefix) format('embedded-opentype'),url(../weather-icons/weathericons-regular-webfont.woff2) format('woff2'),url(../weather-icons/weathericons-regular-webfont.woff) format('woff'),url(../weather-icons/weathericons-regular-webfont.ttf) format('truetype'),url(../weather-icons/weathericons-regular-webfont.svg#weather_iconsregular) format('svg');font-weight:400;font-style:normal}.wi{display:inline-block;font-family:weathericons;font-style:normal;font-weight:400;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.wi-fw{text-align:center;width:1.4em}.wi-weather-0:before{content:"\f056"}.wi-weather-1:before{content:"\f00e"}.wi-weather-2:before{content:"\f073"}.wi-weather-3:before{content:"\f01e"}.wi-weather-4:before{content:"\f01e"}.wi-weather-5:before{content:"\f017"}.wi-weather-6:before{con

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.573744659359683
Encrypted:	false
SSDEEP:	3:PSYrSxnhn9G9inuSYlIhkunV3yuSrw:qxxhnY99SKf8yPrw
MD5:	D3544E98F65525A06451EEB86C946E38
SHA1:	A468FE99E61BD23F7C85929B3EAFF5163F6EC8CA
SHA-256:	A96C361274ADA6D679DCC39D226C6F74D8B044A0813787B6BEB31D6297B8804B
SHA-512:	5699AAA92746C401A66BAA961EE7464421CF6033629EB1101DFDDEEE52FBD7FBACF54CC0697C3D48CACE73A377D29C0C6ED54DF1D501BFC4C6B4D4293508F025
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQkqG8jC2GIZkRIFDRjHotkSBQ1MK9VJEgUNPwXkaBIFDZSQkvoSBQ3zIM20EgUNkPqvYxIFDb1sDdkSBQ0dFzG2?alt=proto
Preview:	CkgKBw0Yx6LZGgAKBw1MK9VJGgAKBw0/BeRoGgAKBw2UkJL6GgAKBw3zIM20GgAKBw2Q+q9jGgAKBw29bA3ZGgAKBw0dFzG2GgA=

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	182826
Entropy (8bit):	7.95528825700286
Encrypted:	false
SSDEEP:	3072:CZJz5ZJzwpKl03R1oJ+/Q9PRJyHiZgfYNiisPDfFmlbap+6t2WuSUiKCPiUn3dlT:C/5/loMJKiGg0TFm9x6t1ki5qSZ
MD5:	C948287881323A77C350DB06CCBB024A
SHA1:	5ADF4FC897E3D11A805EAA9DE8AC082980B5AE5B
SHA-256:	1083F41310C6E6F159CEE4619A8A7C8466F8455D8FACA26B948FFE2409D86017
SHA-512:	DDB83E83FDE65C90349C067E57F5D7142FFC04AF51A98682A9E58B043E1250E2AA03D78D820B5CF9412B3081ED436508079706CB6ABB5AAAF07CD7DA8085EEC0
Malicious:	false
Reputation:	low
Preview:	....!EExif..MM........................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:09:08............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..7..k....... ..c.)2...;\|..c.K.#....m.@.uL.240P.U0.d..A..#......6G>bTo....

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	345271
Entropy (8bit):	7.97499638838442
Encrypted:	false
SSDEEP:	6144:PrbNrbS+XS5vz18bnGkbFGWj6jfNQZiNLCfpZ8OBIaNPR4:PrZrNid18dZj6jfNQZiNLAn8OmER4
MD5:	9BCE47E92649D94BBB7D30219094C11C
SHA1:	39A149D49B2A8C8A53036C1ECB5E8A1A8F68EDF9
SHA-256:	6DDB42134983FC551CEF8AF6B668927E41B16B3CD4B2D49EC6E95B77397CA099
SHA-512:	ABC95D30641B44CDF25A32E3E7B2204CB1C6945154C6A95E3CF39B8780235A1A0ADEF562E0B91AE1679A0DBA8843386D2B06E3BB6D59EC4802CCB7ADD6AC5629
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:15:00..............0231...................................................................r...........z.(.................................M.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..i..n=..{.kx...q!.n.};...........N;2....;nE[..i...v...g..%i..r..fO.j TX.e

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
URL:	https://campobahia.com/wp-content/uploads/2021/07/whatsapp-2.png
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4066
Entropy (8bit):	7.426439070040903
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAIBF81hFzgHbuTVHPRHo9kh+yy2GtU/ch5AbyUYah0xJVdpS9y:WSeknwzAIEzg7uTVvROkg2GtjAx0xJbF
MD5:	B48D5ECE005B94CF60AD1DBD412E6F59
SHA1:	998CC36D2C82ED3AC1F81E2C81BB7BE8E1453E2E
SHA-256:	134F7FF4475C0D987F11BF36B6045EC0EF65BE3B6717D630FDB5FCADFAA164D5
SHA-512:	D096D45B8208E13A005D3AEF74502685A62C7E106C4EF6B4402B95CBDF387E3E7F3029BA3738935E214F895FA146F60536EBF02D926137CFB25B658BAFEF3961
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/spotify.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:26:35-03:00" xmp:MetadataDate="2021-08-11T18:26:35-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:d592199f-d8cb-8a40-b7f2-ef4ef4be1a19" xmpMM:DocumentID="adobe:docid:photoshop:a72c2804-490c-b84d-9981-346478e113d0" xmpMM:Origin

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	4.8579503414898415
Encrypted:	false
SSDEEP:	24:t4LmRxq+s+jUeUEHvYOJKFlelVGNzQO1Hba1StO6I:jCnpr0SlUVGKJ1nH
MD5:	55ED8E6D8B4A21A40CB52E1296DDE6B8
SHA1:	8088D068136401C7E324C2F084A76A8EAAD4CB3E
SHA-256:	36F242390E7A2D63D31BCA1DE7F8E8D74868995D989C677C11B2AE25B672CC15
SHA-512:	73F8EC0144AB3E027718B6AF54155C839B361563E78B85D99058331142ECB814A8B86C2E21524CEB4AD6E47D932B418309A5A34FE738C1A3108A1DD60AEDA270
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="17.862" height="20" viewBox="0 0 17.862 20">. <g id="logo_Omnibees" transform="translate(0)">. <path id="Caminho_2038" data-name="Caminho 2038" d="M-112.907-105.455l-6.911,3.99a2.018,2.018,0,0,1-2.02,0l-6.912-3.99a2.02,2.02,0,0,1-1.01-1.749v-7.98a2.02,2.02,0,0,1,1.01-1.749l6.912-3.99a2.019,2.019,0,0,1,2.02,0l6.911,3.99a2.019,2.019,0,0,1,1.01,1.749v7.98a2.02,2.02,0,0,1-1.01,1.749" transform="translate(129.759 121.194)" fill="#fedc00"/>. <path id="Caminho_2039" data-name="Caminho 2039" d="M-89.753-71.125V-77.3a1.346,1.346,0,0,0-.673-1.166l-5.352-3.09a1.346,1.346,0,0,0-1.346,0l-5.352,3.09a1.346,1.346,0,0,0-.673,1.166v6.179a1.346,1.346,0,0,0,.673,1.166l5.352,3.09a1.347,1.347,0,0,0,1.346,0l5.352-3.09a1.346,1.346,0,0,0,.673-1.166" transform="translate(105.382 84.219)" fill="#301b46"/>. <path id="Caminho_2040" data-name="Caminho 2040" d="M-53.852-43.336V-47.2a.673.673,0,0,0-.337-.583l-3.346-1.932a.673.673,0,0,0-.673,0l-3.346,1.932a.673.

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2800
Entropy (8bit):	4.913889633501378
Encrypted:	false
SSDEEP:	48:BAoAdcxdWLbR6ow5w4Gt6sLFLM6gDQKODohuy54oUjy2CPR9UyOaKydWTIqlxv+n:B7dWLbuu4ZorD6uy+Jy2CgyOFydeZE1R
MD5:	EAA978792E05926F8CC1D10E8B5237C8
SHA1:	486B774653F03B90C6032E1D8935080C59385797
SHA-256:	6CD00A2F1EF02C50CAFCFC771C90E6324C917A0AAA5EE9DD44C1AEACBF5158D8
SHA-512:	79A288A154A4C428A7CC8037B434A6C5AD4F81A514E9DB215C9F25ADA51F8BC7130D75E0CB8960EF84B3C4FAA23C13F19B8B9C6F5D18AC5B0162AF3A85212D5F
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js
Preview:	/! elementor - v3.21.0 - 26-05-2024 /."use strict";.(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["text-editor"],{../**/ "../assets/dev/js/frontend/handlers/text-editor.js":./!********************************************************!\. !* ../assets/dev/js/frontend/handlers/text-editor.js !. \******************************************************/./*/ ((__unused_webpack_module, exports) => {....Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;.class TextEditor extends elementorModules.frontend.handlers.Base {. getDefaultSettings() {. return {. selectors: {. paragraph: 'p:first'. },. classes: {. dropCap: 'elementor-drop-cap',. dropCapLetter: 'elementor-drop-cap-letter'. }. };. }. getDefaultElements() {. const selectors = this.getSettings('selectors'),. classes = this.getSettings('classes'),. $dropCap = jQuery('<span>', {. cla

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	507
Entropy (8bit):	5.048959060920506
Encrypted:	false
SSDEEP:	12:t4p3cf9cYDjuLctkmZqWIQ4N8INRLAjSTDELd7IqHcO:t4p3cFnDjuLctkRWtYkjSXid7/HcO
MD5:	40C24CE47948A4E78907AB50408D9626
SHA1:	914FC03BDE38A528544EBA33A7A4A873936BF562
SHA-256:	49C99A4D5051A5CB7B275D6D5BC0CCAD529BC43BD7D0BD8E87C81286E7025C53
SHA-512:	6776398770EF263B00994E3BE7CD04633A324715F7A879763EF69E903A3A3653B7B0D7297FDD0A3E96D8B490DDC53CAAE6026E67B2089CA47893F80A144AA05F
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/indexIcons/iconPerson.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="17.086" height="17.648" viewBox="0 0 17.086 17.648">. <path id="Union_12" data-name="Union 12" d="M14.125,16.648V16.4a6.088,6.088,0,0,0-12.176,0v.25H0L0,16.4a8.034,8.034,0,0,1,16.067,0l0,.253ZM4.071,3.969A3.969,3.969,0,1,1,8.04,7.938,3.974,3.974,0,0,1,4.071,3.969Zm1.694,0A2.275,2.275,0,1,0,8.092,1.695H8.04A2.278,2.278,0,0,0,5.765,3.97Z" transform="translate(0.505 0.5)" fill="#454950" stroke="rgba(0,0,0,0)" stroke-miterlimit="10" stroke-width="1"/>.</svg>.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1984)
Category:	downloaded
Size (bytes):	14002
Entropy (8bit):	5.381785078714131
Encrypted:	false
SSDEEP:	384:MFN3db5QvYM1Gb/cp0cWc2FW/A6LxxPWkXwC7NJ:RGZW/zjAC7D
MD5:	183348CAB0EE8B9D7A9D6ABB7AA306EC
SHA1:	4DB401D47F9A4990A9A45D2C9EDB106CD587E090
SHA-256:	7FDFC7A935A86D39BA9BF5BFCE671D1621B1E41CEA0E876BEF6BB2E52F2DBB3B
SHA-512:	D630276530173F22BCF49FB2C8984230E3A402F54A10FDED85666DE9A06330C2AAEE8CDC920BA6F34D2D9B048E82C0053048A7685B8917E3D7B6EF187E73D289
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yz/r/JU3TMHT_W2V.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("EventEmitterWithValidation",["BaseEventEmitter"],(function(a,b,c,d,e,f){"use strict";a=function(a){babelHelpers.inheritsLoose(b,a);function b(b,c){var d;d=a.call(this)\|\|this;d.$EventEmitterWithValidation1=Object.keys(b);d.$EventEmitterWithValidation2=Boolean(c);return d}var c=b.prototype;c.emit=function(b){if(this.$EventEmitterWithValidation1.indexOf(b)===-1){if(this.$EventEmitterWithValidation2)return;throw new TypeError(g(b,this.$EventEmitterWithValidation1))}return a.prototype.emit.apply(this,arguments)};return b}(b("BaseEventEmitter"));function g(a,b){a='Unknown event type "'+a+'". ';a+="Known event types: "+b.join(", ")+".";return a}e.exports=a}),null);.__d("EventListenerImplForBlue",["Event","TimeSlice","emptyFunction","setImmediateAcrossTransitions"],(function(a,b,c,d,e,f,g){function h(a,b,d,e){var f=c("TimeSlice").guard(d,"EventListener capture "+b);if(a.addEventListener){a.addEventListener(b,f,e);return{remove:function(){a.removeEventListener(b,f,e)}}}e

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66914
Entropy (8bit):	5.332898840283429
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltWHM9ZEqJ1UJnTZ02LKVlEyi:RIT7OX6s9ZZYtj8lti
MD5:	E123F0B2262D40A35541EFCD843F952B
SHA1:	196AF6B5B1C3D8B09C77CB1EC3B8C5ABAB55E6CB
SHA-256:	691CD40182CB45F73808E491746E64D6C651EB1AC2F6D0100C6981B5DE2D5967
SHA-512:	AD9E783830E934BC592ED62BA4FE23C9594993E4B678342A87CF70D096B18882ADEFBCEDA130A80E4200427170BF5ACC668DDB5EFA42B9CB76AC2D7A233DD518
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1981
Entropy (8bit):	5.157257989278539
Encrypted:	false
SSDEEP:	48:JYM73AFuBJZkuw07o5qzCQd+PiSV+PtNiqFux:qAku7LgiSV6tN1FK
MD5:	28D5913A16B2FB42419BD252E5761DF5
SHA1:	9CEC111771DCEAAFDFE386406922E4158A3D3952
SHA-256:	AF4A6357075818DB7379DCD61F05DE89A8F07F04812BA9DFEEE3323946C20F17
SHA-512:	8E96ADFBDFAE6C79B10EDAB0138397C3EA042F9F853982C92BC8516120DC30E52CB0C33AFE0CF803FAFBEB825DBF0C9B6B6B9C2A14839E2AE67CDAF955E7B357
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="302.537" height="162.067" viewBox="0 0 302.537 162.067">. <g id="Grupo_12569" data-name="Grupo 12569" transform="translate(3.088 -0.23)">. <g id="Grupo_12567" data-name="Grupo 12567" transform="translate(0 -0.001)">. <circle id="Elipse_623" data-name="Elipse 623" cx="80.5" cy="80.5" r="80.5" transform="translate(124.306 0.23)" fill="#b4dfff"/>. <path id="Caminho_11376" data-name="Caminho 11376" d="M132.149,67.277a2.594,2.594,0,0,0-2.595,2.595,59.752,59.752,0,1,1-22.575-46.708H98.415a2.595,2.595,0,1,0,0,5.19h15.111a2.527,2.527,0,0,0,1.535-.237c.031-.014.054-.041.085-.056a2.513,2.513,0,0,0,.593-.394c.035-.035.046-.081.078-.117s.108-.065.149-.114a2.539,2.539,0,0,0,.285-.54c.019-.043.048-.08.066-.124a2.541,2.541,0,0,0,.229-1.439L113.949,9.764a2.595,2.595,0,1,0-5.119.851l1.414,8.489a64.865,64.865,0,1,0,24.5,50.768A2.594,2.594,0,0,0,132.149,67.277Z" transform="translate(134.975 10.876)" fill="#fff"/>. <g id="Grupo_12565" data-

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 701x390, components 3
Category:	dropped
Size (bytes):	86582
Entropy (8bit):	7.990386577360359
Encrypted:	true
SSDEEP:	1536:GcMd/PPio5rB8Fi3lGnD9IQvhRTDV7dywSD0dKFfAOIUy+IQV2wLppjfDJTfapT3:GNrPonJIQTTDV7dcD0dKdAOm+IPwd11+
MD5:	0906780DF3AC7E8B03D50CD2AE11B45A
SHA1:	EEE7A8ABE5D215893F25C867D8715B27EC934355
SHA-256:	9B8D9EB8FA14E8502B5469CB312E6C58FA22DAA27C680B47AA936FA707EE38CC
SHA-512:	0B90229C1150F178191DD85EBBC775A5D953C2F2B28556430B21ED3E1AD2B896FAA7D025EA1C3A590F46BC77B3D0A5B022DF4E637421BF8A3E83AA9F2D96F3E7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......................................... $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..........3..................................................................<~.d........oy...7.$k.HWj.B......yl.6....R'Bfb4..r.F.cEi....\.......0..eH,.....oAT.,....F..F.....4^...}.j.1..y..!&....Q...XZi.F.!.KIf.C.+Ds..:...[D.4.P...).,.3I.$.)..?.l~.yu.v..(.7W.Ku.f..b...`.v.FzN..kdb./..a...)..>..7kH2..ij..-E..;V.&,7!>.X2.~{U~.....2....%d.)r...k..HsX.a.4l.3.}...,...#W...N...B..$H.../.Y.k4X..X.;....XCI6.Ebr.o..c..........b....)....Q...jR.J...KwE.....J4.].#.{R.d[...6.Wj...W=.....>..zz.,..R...K....Y..MT.....x.v.i7k.1.....H`......ZeV.J..-.H.a...Xe`.,lLy..`..L.J..y...Z.>b..j.NY.l.%J:Y..._..U`.(.\5........^p_i.FNG.w..{.,Q*DS..=..G.-.Em..`.j.<...T7.j..6.s... .JBM..,.[..O.+J.wM....\|:.....f.2....$.[.P8/$8....2.\|E..[.):.@A...$.N.....<.y.Mz. g.-d.^..{Al.)..M.a..........sl....-......c

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	982
Entropy (8bit):	4.375709588649068
Encrypted:	false
SSDEEP:	24:t4sfhQmmPNTooI5kgbDnA8i33JLn03EkP8Fpf:LJrmVtGkgnA8iHJDlkPUN
MD5:	32A2CA0946D540EB51D9AEC88754C311
SHA1:	83E1FD34AE82FF5F4C78C24A8CF331AE42C0DDE0
SHA-256:	B73002349571258A1852614ECC30C15D2868A36BAD6DDB166F89F7A66D46929F
SHA-512:	10E48E96096036632B8C24EE71DE0A99238B1BAA100C73471855CDE1DFB18E469B6A98B3D7A0B03E79CDC33A16820BB92C0373D6BB492CE73F0E91DB63F60FF5
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/indexIcons/iconPromo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16.2" height="13.298" viewBox="0 0 16.2 13.298">. <path id="Path_2502" data-name="Path 2502" d="M83.845,153.235l-3.082,8.218-1.153-.432,3.083-8.218ZM79.361,157.3a1.5,1.5,0,1,0-1.5-1.5,1.5,1.5,0,0,0,1.5,1.5Zm.5-1.5a.5.5,0,1,1-.5-.5A.5.5,0,0,1,79.861,155.8Zm5.77,3.1a1.5,1.5,0,1,0-1.5,1.5A1.5,1.5,0,0,0,85.631,158.9Zm-1,0a.5.5,0,1,1-.5-.5A.5.5,0,0,1,84.63,158.9Zm3.214-1.771a.857.857,0,0,0,.856.857,1.147,1.147,0,0,1,1.146,1.145v2.5a2.149,2.149,0,0,1-2.146,2.145H75.791a2.148,2.148,0,0,1-2.145-2.145v-2.5a1.146,1.146,0,0,1,1.144-1.145.857.857,0,1,0,0-1.713,1.146,1.146,0,0,1-1.144-1.145v-2.5a2.148,2.148,0,0,1,2.145-2.146H87.7a2.149,2.149,0,0,1,2.146,2.146v2.5a1.147,1.147,0,0,1-1.146,1.145A.857.857,0,0,0,87.844,157.133Zm.356,2.452a2.5,2.5,0,0,1,0-4.9V152.63a.5.5,0,0,0-.5-.5H75.791a.5.5,0,0,0-.5.5v2.052a2.5,2.5,0,0,1,0,4.9v2.052a.5.5,0,0,0,.5.5H87.7a.5.5,0,0,0,.5-.5Z" transform="translate(-73.646 -150.484)" fill="#454950"/>.</svg>.

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	470830
Entropy (8bit):	7.980592497594225
Encrypted:	false
SSDEEP:	12288:9RsIAAUdWCGLELQV3c9j1Odzh+H+2HRd3SRu3:9Rv+wEL4G16zh+H+oRgRG
MD5:	C6089D882C7E036EC3E075BAD37CDC73
SHA1:	060C86A6A8AB8A2574B185D404A0DF982C197172
SHA-256:	67CAD85D925A651CF3DEF2E0E56BF601E472770C2A562A97FA0B0CD90DF5F189
SHA-512:	FF6074232145CD9B86B7AEEF4975AA32330BF362F4ECE143DB555B928955CA32540A5FFB11A5F29676244B8E71B306E111305B1EDF4C6439992295B41D99601D
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/00-hotel-desktop.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:16:48..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..m0.`.;C....r....x.\|.,...A.Ge^.....-.M.&PX...)5..(.`Iu..)...X.O.T..h.Jb...

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	687611
Entropy (8bit):	7.977513592685637
Encrypted:	false
SSDEEP:	12288:cM09IuOutGf5qJPYzgaCcsvUJkpXOMrkYWMX/3zluWZWX9+6XxqMoc:cb9IuFb5ACXOoRP31E9+DVc
MD5:	9AD2CE9FBE3517B43E2DDC0275D4FCB8
SHA1:	958B09DDE538BA7D8B7021C0A8E0B45F2EF3B771
SHA-256:	21C6C5A2973F86DE9A66405AF71E3E06A7711276357F5DE9242F74299C11F8DD
SHA-512:	7CAFAF8EDE134B6DC9A3E6F05F8AC288AA62EC29361F2A6D05174A75AE7B0E9D142E2F1810FCEC5082A7398825832F0CFB2DB5E27579EED49AEAAD31396759B8
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg
Preview:	....(.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:29:15..............0231...................................................................r...........z.(................................'........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:I..[.".^=s.._g.I!....B..3.g.K.:~wNmYVb..2..W.\^....u..Q..e.....{=.

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	950
Entropy (8bit):	5.0215988264396865
Encrypted:	false
SSDEEP:	24:t4CvnRx9Yw/LqitzFfEyvW4MTNG0K8VVOXub8uJjI:fnRxn9FfEyvMTNNDOebnu
MD5:	F5EDF145F9D4BD6D3C3643AEFFFB1F29
SHA1:	F6C96A1D7EE40E312B31A3BDFAA634D5C95DA42E
SHA-256:	52C72ED81954F33D29C3CE039A9D1BB1BC7570AD453089AA73FAD0F734C7BF67
SHA-512:	20AF670319786E5FB7FE6166DCB0EE1A932A120A37F5E3A93592907B030F9AD6B5F63933792C914CAF5DC2B6AA94325BEB5236F46706A4394DE819FCD147A18A
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/envelope-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16">. <g id="Group_15379" data-name="Group 15379" transform="translate(-464 -252)">. <rect id="Rectangle_7096" data-name="Rectangle 7096" width="16" height="16" transform="translate(464 252)" fill="rgba(255,255,255,0)"/>. <path id="Icon_awesome-envelope" data-name="Icon awesome-envelope" d="M13.735,7.967A.165.165,0,0,1,14,8.1v5.592A1.313,1.313,0,0,1,12.688,15H1.313A1.313,1.313,0,0,1,0,13.688V8.1A.164.164,0,0,1,.265,7.97c.613.476,1.425,1.08,4.214,3.106A4.892,4.892,0,0,0,7,12.378a4.894,4.894,0,0,0,2.524-1.3C12.313,9.05,13.122,8.443,13.735,7.967ZM7,11.5c.634.011,1.548-.8,2.007-1.132,3.629-2.633,3.9-2.863,4.741-3.519A.654.654,0,0,0,14,6.332v-.52A1.313,1.313,0,0,0,12.688,4.5H1.313A1.313,1.313,0,0,0,0,5.813v.52a.658.658,0,0,0,.252.517c.837.654,1.113.886,4.741,3.519C5.452,10.7,6.366,11.511,7,11.5Z" transform="translate(465 250.5)" fill="#fff"/>. </g>.</svg>.

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3303
Entropy (8bit):	7.2043802117385916
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAz0Fc3RQzgHbP6H7KHoKEDxzpS9/rxU9m2:WSeknwzAzuzg7P6bK8zA9/2M2
MD5:	8EA7D538628806DEBCA097AA819B0BC6
SHA1:	F586C06C2D1333D9F8BDDE694C578BFA0D3C1A7D
SHA-256:	1558B255FC5C017C0BEA0A1C5A3D469B06B62FDB544BA4428E929E6B9501E9ED
SHA-512:	741D77B70195B09E5F94FD69A37E149684B1E5543ACA50CFEA5BC4DA4508351C12E4AD2A5E7ECBA0DA598EF20700813DA113F94E8BABD23912C73447F4DAA5E1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:31-03:00" xmp:MetadataDate="2021-08-11T18:27:31-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:f6b4f43c-8b8a-3c48-bbc9-0f537040b10d" xmpMM:DocumentID="adobe:docid:photoshop:6d9e649a-14cd-2845-81d2-d075bd8a71d6" xmpMM:Origin

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SysEx File -
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912678731954389
Encrypted:	false
SSDEEP:	24576:qe3Bre9FoKoY+7MT3NyScIHjfMhlXIP4EesJrSQ8H46ns+Y3:pde9F+C35cIDEheP4GRP6na3
MD5:	D381E49A25AF03E01AB593CD8EE65FCA
SHA1:	310B45CF1936A071107B558BC286FF50D9B4381E
SHA-256:	F536ECEBCC7C99CE860B07133EC83AA5F9CF135EA918BA011A9C6ADF254F6C86
SHA-512:	D5B04B9251024243CF5A75C31EB134973071BA92FCB92D9A9B1791996419D4D4F167E89F909648AE5AB1ED2E1E38885D3C78C547320542233F4F819FD81C513E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:d
Preview:	.<.. oy..F....N.........{u.D+'....c.x.......i....+gf...'..)...tz...k+pHt[E.2.z.r.q{B>r2..;...w.....2zB.C.jG....-.4&...Y........u[v...V.0.ys..........r.jT.....w.,.&Q.fCj.I.....B.}F..y...`v...N.c+....~...0x.-.-$al+.r.hJ.....\|.".J...N.....BG.y....2.e...+..iPt}....oORS....a._.....\ .........,...l.2.I.F>@..(.\|c..K$.g.m$..]...f..:..%.....^..#..;h........fF....7....i.j...$.{g..b.p.J.x....s..D.)#kw.(.>mnmH.....Qg,^=.z.m.c......!Y?.I.0.....Q..>O`.KWH.\|.4..QX.d..0e.....D..}.....G.C........h..!`....3..2...,(..H..3........^3...V.v......dg.......1.U..W......X........[...`........\(..g.J.t>?...z~.Y.b...s.....8...M/.Abz.F.q0j.e.E@.d.@.......S.c.3WO........z).#.b.g....D3.+...Zv4<.l..........e.P..#......<...h.y.O..km.c;t...#Z~?.4..Q.c....u..H.......b..uw....F.m..pG~..2t......:...@..8...D:ki...j.R.SZ..u..z(......M..;....X....YX~5...Nm.b(..X........(..(...S.<..w.....$G..8..>n...._!..B.\|.....6...@.%.'}.{#...w_K!.....R..\|q.[k..m..:3.....8._.......y)iP.

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5445
Entropy (8bit):	4.2956504229521135
Encrypted:	false
SSDEEP:	96:kZLeCueFf8uZrx5imZQf0hy1zkD3l3FfLECj72TTn12E2+sW0c3QmyD6:kZLeCuelpZNGfD1zSl1fLEumZ2W0+yD6
MD5:	675C1A8F20298B42543C5D38CAA30D19
SHA1:	6A43DB096FE7FB888E0532CCC900159E20C95CE1
SHA-256:	84E26E1729E8214540F267AFDFC319AA7F2939BF4FF12253FF687615D5CB81DD
SHA-512:	83107CCAC5F11E944442E6D4EAEA43F18D918302A00EBCCE86BAD6132AA0C835E46A8EC4591B56140F298D7CA46ECC13B280C544B1BC17394D3AEABB13A900B1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/js/ouibounce.js?ver=1.6.5
Preview:	..( function ( root, factory ) {. if ( typeof define === 'function' && define.amd ) {. define( factory );. } else if ( typeof exports === 'object' ) {. module.exports = factory( require, exports, module );. } else {. root.ouibounce = factory();. }.}( this, function ( require, exports, module ) {.. return function ouibounce( el, config ) {. var config = config \|\| { },. aggressive = config.aggressive \|\| false,. sensitivity = setDefault( config.sensitivity, 20 ),. timer = setDefault( config.timer, 1000 ),. delay = setDefault( config.delay, 0 ),. callback = config.callback \|\| function () {},. cookieExpire = setDefaultCookieExpire( config.cookieExpire ) \|\| '',. cookieDomain = config.cookieDomain ? ';domain=' + config.cookieDomain : '',. cookieName = config.cookieName ? config.cookieName : 'viewedOuibounceModal',. sitewide = config.sitewide === true ?

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	198506
Entropy (8bit):	7.958337902852262
Encrypted:	false
SSDEEP:	3072:Ob9LxVb9Lx2ao2khTHQB3CMShiNKDsuFfMlHWkHC37FxsU/+ZUJ7t:e9V99V2txwRCMS3su0JUxAiNt
MD5:	A6A4AC6CADB5100F34D256B60148B944
SHA1:	6B0B770A085CB6D07668E17C371A67B7C96945DF
SHA-256:	DD1F3DF4622045D283C609644D196ECF8303E31557B58914C8CA77AF7E775C6E
SHA-512:	6B5F8574D4D4882EF573887C80281EBC067261DA231AAFCF2434044E1725D60F0BF9DC3EA6F7F3BD2FC34B19FD13A6A058EAB11B17D683685B464BF5553F81E0
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-mobile-10.jpg
Preview:	....-.Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 22.4 (Windows).2021:11:06 22:07:41............0231...................................................................n...........v.(.....................~..........,E.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...j...P.<h.......qk...0.h.dl........Q...Q.z../.].2....{.f.vk1C.......5..

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3303
Entropy (8bit):	7.2043802117385916
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAz0Fc3RQzgHbP6H7KHoKEDxzpS9/rxU9m2:WSeknwzAzuzg7P6bK8zA9/2M2
MD5:	8EA7D538628806DEBCA097AA819B0BC6
SHA1:	F586C06C2D1333D9F8BDDE694C578BFA0D3C1A7D
SHA-256:	1558B255FC5C017C0BEA0A1C5A3D469B06B62FDB544BA4428E929E6B9501E9ED
SHA-512:	741D77B70195B09E5F94FD69A37E149684B1E5543ACA50CFEA5BC4DA4508351C12E4AD2A5E7ECBA0DA598EF20700813DA113F94E8BABD23912C73447F4DAA5E1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/youtube.png
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:27:31-03:00" xmp:MetadataDate="2021-08-11T18:27:31-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:f6b4f43c-8b8a-3c48-bbc9-0f537040b10d" xmpMM:DocumentID="adobe:docid:photoshop:6d9e649a-14cd-2845-81d2-d075bd8a71d6" xmpMM:Origin

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 5325
Category:	downloaded
Size (bytes):	590
Entropy (8bit):	7.5420975035391375
Encrypted:	false
SSDEEP:	12:XGsLzpnvX8ImczULeNwP2o/xDZSpkomRAa/MLdmiZu85LugZ:XHLlnfbo849JDgeRiv55CU
MD5:	5A35320BB9F266CA1CAC6EC019879742
SHA1:	DE1FDF642DF2BE5701F918C58EDF47B44BBDF4FF
SHA-256:	CBBD924BCADE7365D3D19BCD81CD63AA9C4290E28587AD1982125B664D85969C
SHA-512:	C961B9EF031D89F561EA08113AF3C1661FD257DB06BBF5D096E0AA36B9AFD21936060342C61FFB1F329E402B4D56A788C97EAC1C74418C68D6BAE1B9E3A3C46E
Malicious:	false
Reputation:	low
URL:	http://fonts.googleapis.com/css?family=Raleway%3A300%2C400%2C600&display=swap&ver=3.1.1
Preview:	...........Mo.@......HR.g....R...ZEIz...X5..K(...;....J.".......x.....H.uQ.Ejf_.qa....0.I...z...(.c.....&../.F..-..Q-.ER.z7Y...a....fU&.H.IV.......{!Vc...a.D..0]....~..X.J.s.....wy~.a...[.\.7....i.:.8....XWE....:.r:..7.x`..\|@..>...R DN.'S0q......zA+...&5....g=.;1h_..f......9.W".".#..Q+.1O#z(2Q%...N..l.H...ny0F<.Sp..$0P..."..B=-.$".(.4....[.G._.......fSZ.My.^t.i.J.xu......@.0....@bR.p.d..3......bB"...[..S&.x....)O.8........f/. I........U......b%bO.I.c.'.P...i[F.v"V& ....(Sh@GW.lu<...}...t....rw`H].;...r.r..r...y].;:h.....RW.................. _J....

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	369019
Entropy (8bit):	5.471884287546806
Encrypted:	false
SSDEEP:	6144:cHOUXP7AhVuhTDGfNXqh/IT3TSZWkcSO2dpmcsmhce5NuNWPllei+BJkWomDBT5D:afAhVuhTDGRk/W3TSZWkcSO2dpmFmhcp
MD5:	D458B68730A7330653700489333A7837
SHA1:	4059AECA1D0B99AEC8006B37A927F09D9C0E794D
SHA-256:	430725B95468277DCBCCC27E08E3D873276C0082737310B0B1AD330392511847
SHA-512:	E363C4D2B77EC19DA13577ED94CEFC0527A1206CDECCD790BB38A18810AF504077095C47BEC4A117CEB0056C1039137134836504FBAAEEB1B859684D89354716
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/js/vendor/moment.min.js
Preview:	!function(e,a){"object"==typeof exports&&"undefined"!=typeof module?module.exports=a():"function"==typeof define&&define.amd?define(a):e.moment=a()}(this,function(){"use strict";var E;function M(){return E.apply(null,arguments)}function F(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function z(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function l(e,a){return Object.prototype.hasOwnProperty.call(e,a)}function N(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;for(var a in e)if(l(e,a))return;return 1}function d(e){return void 0===e}function J(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function R(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function C(e,a){for(var t=[],s=e.length,n=0;n<s;++n)t.push(a(e[n],n));return t}function I(e,a){for(var t in a)l(a,t)&&(e[t]=a[t]);return l(a,"toString")&&(e.toString=a.toString),

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.042921470177418
Encrypted:	false
SSDEEP:	6:tI9mc4slz6x+UBqRcrjVHq/b6VFEhL7dGc/VGVkhirdGolGRKS:t4Ax+9attXEl7dGcDiZ2KS
MD5:	2B82BBDBE74A9AA67F5EEE8B4AA70169
SHA1:	4914D9B3FFD9EC3C3519016F40CFC7A920101403
SHA-256:	60ACEA6586C5291E92A433D050BE8F0C268388BF1B5F2A7DB6BEE2613014606D
SHA-512:	B042C447AF9266D5B4EDCB2844FCF16A39ABD10F87FDEB92CC3B72E255E07DC3C789F810864C4E8CE1EC13B462135C00A6CEB9C16B1688BC4F05164CECA3D6EF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="10.998" height="7.999" viewBox="0 0 10.998 7.999">. <path id="Path_9840" data-name="Path 9840" d="M7.5,14.5a.5.5,0,0,1-.354-.146l-3-3a.5.5,0,0,1,.707-.707L7.5,13.293l6.646-6.646a.5.5,0,0,1,.707.707l-7,7A.5.5,0,0,1,7.5,14.5Z" transform="translate(-4 -6.501)" fill="#008009"/>.</svg>.

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 5766
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	7.856303458921577
Encrypted:	false
SSDEEP:	24:XY66ukXVzL0A4NW4gfEQxDq9Wi8gyV0X9pcLcTLq/nqWoYS940ibVjH3504saa7a:XY66ukXh0jN3gfTDhFV0NK3qWoYSDibV
MD5:	D4BE4490B7F95BF6D2F8B7E1F28A08E8
SHA1:	3EE579E18202722ADFDF983BA90CBD0EC998720C
SHA-256:	DCF57BF1FE1514D71D025B949A4B461816BEAD30DC0DCACDACFD2581B46E682C
SHA-512:	F80B57CDE266649804BAE5499758690AF95E499C94AB0771337F64B81FDBB888088BD73BA1C85A29058B975F679C388C1A656C47FBF2CEA23195BD6D7AE1804F
Malicious:	false
Reputation:	low
URL:	http://fonts.googleapis.com/css?family=Open+Sans&ver=6.5.3
Preview:	...........Ko.7.......NRo..r....Z..!...&+k[....81....3J.C.....!93$gw.l2.........'.g..n...v6.'..M&D....rr~.i\O^......?....z.].../...~.91B\|.s;.....)./X.../'...'.......{......b.\|.YMw.......FLW..._..;..w..o^?..y....o.....uu.............w"......_../..[....K.?9/x..W.y..o..v.....U.+..\|. .^4......<&..K.o.h.u.rR..$.8..l.M.'..GhW.yQ.,@..........()-..n;..O.Uw?.L.A.2....NT=....<Iw.E..P.N........}.B.5.A....v.r..].....l[.@%..(!E._...5.....k.D.....Q...?..:.h)...E...{zW!`.@..Gl.2...OB.....j-m.t...R...q..$.-T.jq)..$.e.....R.2VP..rp...1.h...F.n...._.....JG.:......I..,.2u..(XU...`.,..5...$T ...Q.........S.....<@c.."..8.tk:X..j.....).(.t.$..9h..u.......@.....{.<A..Q.t.4..S..\..s.(/.....$M......=.n6....#N..p2.v.......].pt..G.......}...;:..52Y.s.5yu..^{...<...%...U.1..........)T.qL...\|9UW...V.z..........5........M.8...}"t..@...b...=.J...$...$...WEM..#...Ia(%..,(}$..B.Z..S.z.aa.B..B9Zq..T.z....WTp..8..;D...P.[........ /#...aX.I.R.T3....F..7h$.

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4090
Entropy (8bit):	7.533231910383408
Encrypted:	false
SSDEEP:	96:WS8knmWI8kocVFdkSDoHblVHoivQaqA2EJBHiP0qGXzIu2CYWv2N:WS8knwocJdDo7lVTvQjjKiPJGDIub2N
MD5:	5E2E246692C2422614BEF8FEE51F6360
SHA1:	10F42327E894C35C3753E4E2601D4011E4F0E511
SHA-256:	7DD6C9E79B569531B03EBE10A9413B6D3579470D68CF495A82734689EA98B33C
SHA-512:	6554B1B2C51E2590EE8CA2F4C40E397D501767C4D4331D44ECEBF02EB82EBAA5DE4C354AE08830B14C2046A2AC5EF3E12121CEE30C7347231D5F44ED52275574
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:22:23-03:00" xmp:ModifyDate="2021-08-11T18:26:04-03:00" xmp:MetadataDate="2021-08-11T18:26:04-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:3abf60e9-5eed-3148-82e1-86a0b9c10987" xmpMM:DocumentID="adobe:docid:photoshop:7f264967-65e8-7e4d-aea2-edb5d699b89d" xmpMM:Origin

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	985
Entropy (8bit):	4.709341657565462
Encrypted:	false
SSDEEP:	24:yN7WuZR/IaEvwLSwL6S6qf6w2my5Pqv5P/:QWXzq6S6qf6w2my5Pqv5P/
MD5:	DA7F0F6AEBDE50C1FB30935D025F8CDA
SHA1:	5BC63AA29C8C96AA696D077F2C5FF5DC47F5E2F5
SHA-256:	E09469635EFC1842145E3FDBC2AE86EDEF9748BBD9751EB3CC6C532A997B2F3E
SHA-512:	C6B91ABBADF40794F1BEADCBCA4D5AA9F12586666271A56AC7F8F350EA7690B33168C2F8C9B157CCE6473E2108C7691E3637440BBA3E1571BFE7CFD9809E016E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5
Preview:	..peel {. position: relative;. opacity: 0;.. }. . .peel-ready {. opacity: 1;. }. . .peel-svg-clip-element {. position: absolute;. top: -10000px;. left: -10000px;. width: 1px;. height: 1px;. opacity: 0;. }. . .peel-layer {. position: absolute;. z-index: 1;. width: 100%;. height: 100%;. top: 0;. right: 0;. bottom: 0;. left: 0;. -webkit-user-select: none;. -moz-user-select: none;. user-select: none;. -webkit-transform-origin: top left;. -moz-transform-origin: top left;. transform-origin: top left;. }. . /------------] Some Defaults [------------/. . .peel-top {. background-color: #81afcb;. }. . .peel-back {. background-color: #a0c7df;. }. . .peel-bottom {. background-color: #688394;. }. . /* .eae-top{. background-image: url(Screenshot\ 2023-10-30\ at\ 1.55.14\.PM.png);. }. .eae-back{. background-image: url(Screenshot\ 2023-10-30\ at\ 1.55.14\.PM.png);. } */.

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158087
Entropy (8bit):	4.279128090908199
Encrypted:	false
SSDEEP:	1536:QtrZm+kDFrcfwYgb+2LP2PjPPEm/4qMPSoz6OzWxqh4bQXR/Lb7kxRH5GX3vQ/lX:+ZwyfwYgbpXSoz6OGRZ6/QTQjC
MD5:	A9DC072073F4524B5BB15901BA636EBE
SHA1:	7A217C1D2BA028BE944D1CA5C49DAA4F20A44020
SHA-256:	6DEE4F30A2162F41FD2C44620C5829E183745D7355000FFCD432A2E81707866E
SHA-512:	930566E50E912FD33822E059DCD1391E132046ADDAD8F867AC04A84A56240E1D11D900EE7014B44BDE9B5E84342472D8351240CD1BC8314E521200E348EA208B
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5
Preview:	jQuery(window).on("elementor/frontend/init", function () {. elementorFrontend.hooks.addAction(. "frontend/element_ready/wts-gmap.default",. function ($scope) {. var $wrapper = $scope.find(".eae-markers");. if($wrapper.length == 0){. return;. }. . map = new_map($scope.find(".eae-markers"));. . function new_map($el) {. $wrapper = $scope.find(".eae-markers");. var zoom = $wrapper.data("zoom");. var $markers = $el.find(".marker");. var styles = $wrapper.data("style");. var prevent_scroll = $wrapper.data("scroll");. // vars. var args = {. zoom: zoom,. center: new google.maps.LatLng(0, 0),. mapTypeId: google.maps.MapTypeId.ROADMAP,. styles: styles,. };.. // create map. var map = new google.maps.Map($el[0], args);.. // add a markers reference. map.markers = [];.. // add markers. $markers.each(function () {.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7334
Entropy (8bit):	7.878554796292353
Encrypted:	false
SSDEEP:	192:xQmDYt4IB9GXWE+h9pwTIhUV74pOz7ynHw7O9T/+1FBO:js9jmWE+rtmV7qO6Qq9T/+w
MD5:	42CD3F4984DF1ED4993380A05DD68078
SHA1:	3201E4E92D146B47EEB87278919D40B07B812506
SHA-256:	DCC9F1C308D9377DF3BBAD6B1B831F678C6F169DC4577CFE77FAA24AD9031EF7
SHA-512:	568ABBFF12DA02CC874D3025D075C4ABB6F1BEED8D06F6309DAED1EDE050D4477157DC013E9311FDC37013E718DFA7841931C9DF9004B582F61282A8BFDDEE22
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx..]k...u~.h...[k..,.]....,.Z.Z.8........... !.S......(..D.....$!..{.WC....c...1..c..b.z.<.q......~&...>}....w..9s..22222222222222222222222222222222222222222222222222222222222222222222222222222222222..dg...1Z@......$[E.$.Ed..."..I....k...v.s.4...B...[H.%".$.`Y...z.j3..."r/.GE...&9.....M.SD........\.BX.....U@r..nRU.....uOT.w.^..... y....}U......t$}...o....M..0r..1...$.I...[]..L:...$.L...D.UDfn...$[I^.`.1.H/."...g....>...v...U.k{.."3.].$.^;.^.&.6.t"..2`L...Ac.#....$......?....O..?.8..sI....,em.4.l.2v<H.a.;.i.F..0.@.AI.#".HN%y..<.....@.N..&y<......p-...\........]...a.l.....@/.!.J.d..\|..QD.\|.:.I6.H...SeH.../...@U..q..D..^.T...E...f...a.Ef..;.j%....Hrc...qow.[....Bw=...i$.""..z..."wA,.d.3h...S7....(G.....u"...vg....M...&..7.....:ND.\|L..1.u....BD..$"..z...`...AC.@]c...a...)"..8.d..D......~!"...#.........Y......ab..H....p.l.l%.D....8..t.i..:..I..B.#9..q.>.c<[H..p...<M.p>....$..$9[D...T..[C.)

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	489
Entropy (8bit):	5.160252835617118
Encrypted:	false
SSDEEP:	12:t4CvncDzzACIY4RUPqELsUCPSY9+XcY7Ai:t4CvnyzzIzR0qisxMX57X
MD5:	DE3AD5808CFB69EDD3BA6FAE95F03124
SHA1:	9A43C0B092310E74579BD999949D03A8B97881AA
SHA-256:	EA45FF3D50CB2B9D63D679ADC0E57BF24434264A2F32C305151643A781B1212C
SHA-512:	59484517E006211253AD75657A7BCDFD9A5FEA141A9D70690053896AE6BE533991216EEDFADD67BB5A183071E327CA2BDB1A67455B88F8E7FC5461391895B523
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/x-close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:red;stroke-linecap:round;stroke-width:1.5px;}</style></defs><g transform="translate(-194 -690)"><rect class="a" width="16" height="16" transform="translate(194 690)"/><g transform="translate(-147.115 21)"><line class="b" y2="7.07" transform="translate(351.115 675) rotate(45)"/><line class="b" y2="7.07" transform="translate(346.116 675) rotate(-45)"/></g></g></svg>

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158217
Entropy (8bit):	4.234345895461483
Encrypted:	false
SSDEEP:	1536:pJvNYLwcITncIMtrxHdFYZoGdrIWMry5UKOrf0prAr717UrTyzfxf4fHYErJx5oS:pJvNowJTkGHj
MD5:	B82C295319EAF63B8DD5952FFA775A32
SHA1:	910C33AD75A5C8014C7D20AB90AD25C8A0B6F3C3
SHA-256:	4EDCB07DDA96A64DA23B817CF5A393245EA992AD50C4616A7E123DF046470654
SHA-512:	01B08837A2498855F05F7ED81298B7AA40C260351F1022B9DB150311FC97D932AF63BEEEC965803251A3B8261859A68CDF2BEC045CE8B059BBE26A49CF927FCC
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5
Preview:	/****/ (() => { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 480:.// (() => {..(function ($) {..const EAEAddToCalender = function ($scope) {...const eId = $scope.attr('data-id');...const element = document.querySelector('.elementor-element-' + eId);. var isLottiePanle = element.querySelector('.eae-lottie-animation');....if (isLottiePanle != null) {....let lottie_data = JSON.parse(isLottiePanle.getAttribute('data-lottie-settings'));....let eae_animation = lottie.loadAnimation({.....container: isLottiePanle,.....path: lottie_data.url,.....renderer: "svg",.....loop: lottie_data.loop,....});.....if (lottie_data.reverse == true) {.....eae_animation.setDirection(-1);....}...}..}.....$(window).on('elementor/frontend/init', function () {...elementorFrontend.hooks.addAction(...."frontend/element_ready/eae-add-to-calendar.default",....EAEAddToCalender...);..});.})(jQuery);..// }),..// 498:./*/ (() => {..(function ($) {..const EAEAdvanceHeading = function

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2718
Entropy (8bit):	7.84314554182839
Encrypted:	false
SSDEEP:	48:K51W5nlJJeqrQ882js7n+tkxurNhybBt/aBpC8u2bVli6DKGvt+REbw72chf:K5KlOqrQ8/js7vxcN89t/aBVzddv8EM9
MD5:	33A58BBC9D888616F55532F9BCE93BD6
SHA1:	16F8A13CEA832DC392E6C1F7DD4B348A22BB9CE8
SHA-256:	A6EE484C6373C81E58438A19DEF6D3466BE85D9744FCB7D85F6A9F49A242081C
SHA-512:	568F2ED876477DFE07D23E71BDFC645402B6BDD69E77FB9C190DF75330927EE1C69EA1B48F739618915A445EE2E643B2B6AA0E25FDDA9E8C4BAF465A5180FBE1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....pHYs..........+.....PIDATx..Q.......!H..D$H..H......>...H..<.. RJ......B.)EDD..J..`..[D... "!.. %..Z...lCX...sv..33w..{...p..{..=.;...;.s&.c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1.-.....;.........._!..!.....m[/.5.")...]!..B.?M:.O...._B._...._.v..E2HZ.....9C.6IO..9m.../.;.\|.x..&.U.U..,.y.k~....Mm_..I;..I..#+_....Z......... i{j....H./.?[=.p...J..7.>.e .Fo.\.F...A$].y..23....%...f....x;.qQ..OU....39..F..o....`....x...o..h....$...9a..Y.C....a..pGj..J.H....W..]...t...y`_.v1....p..r...~.%m..x..n.kj...@O.1.....4j(T.4.+..)h;..H..\.t...y..3-.S.mDT'..N\..xc.G0..Wy.8$iB&2..Du..Zm.j[vh...:..l..S...2$Q...G-..#........W..D....IA.s....\..:.$N.M.....m.....~.z..`..g$]..w..uIG-..I.:....rm.,.OK.X{...ab..Q.k......W.(.h.....k..^.{IO.-.I.z.J..D.......!..~O..+M..6i`.......o...Z\.P..I....#.\|Xj..v.o..6...}....0B..g..M-........2p..\|.8...kt.......&..N6^.....:.I_H.l&...\|....?..h...b2...1.5.i...}V.l....x.SI.{

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 38, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	7.63976027729966
Encrypted:	false
SSDEEP:	24:9MlqNn1whFOVumJ5ddfJoTNeGhcTthHb8jgQerCL78gQvpbF27sTrlZ:9CF8w0yjhE7HCaCP8FMQTrX
MD5:	C4B5A3B429735F5BAEBAE24C265AA70B
SHA1:	7116B37D52C3562E71F1BAACA53F8676F65939BE
SHA-256:	2EF47EFE21BD38445E6D97A32ED9F20CF53B0D1B429E9B35FEC31188F60E2564
SHA-512:	88720D26601237196A6DA46F8AE9F2C84ECBB85BC3DFC68999C7F1B78405ECB20A6DB89CB8968BE41DD7E22EC19A7ACB0FBC9C14053A12C1BD7874C330650CDF
Malicious:	false
Reputation:	low
URL:	https://static.whatsapp.net/rsrc.php/v3/yJ/r/Qhrnh5evyPV.png
Preview:	.PNG........IHDR.......&.....t.`....HPLTEGpL......................................................................z......tRNS...p@. `....P0....._o^......IDATx^.k.. .....t....e.d.fs.=...e.px...d..,.O...77\.\1U..p-....v)....6:.iS...F<.T.p.v........Dx...9..t...c.g......kjM..L....h(..xR..ZG.C..1w..^o#Xp..m!'....>n......J..:.....Z...........rl.Lz40"..\|..L.t.K..tQ.........X..!m..-..w....o.B..,9..,...'.B[...!.&..b<...\...7.YzEP=...."I.1._..G.)b...V..p.NML.n.m}...p+...2..OvW..Gv.5!..`.[.....Yy.U.......qu..\|..E...w.j.>.yV.e......+K...s.L)T....1{."... @.`i.'H..Y....rK...1k.j.....QB...{[.......4...........N .1..r)/...s.z.N.$.>..c.7......}.G2+...k.p.zd.......#..p...M....`......o..H.}~."y...AH....c..6B:^./..^8....0l3...pM.K....cA..<...&!.X...5d..T.......AB....I.){..V..0vj~.....U..".[...j...Jr...O.Q:(.......{s.....].C....:......2....2....c...3H..TU...(>I...^....m@.bq...J..8...W9,h..k.Y..H....."..Wy3db......S..Q..VhHZ...p>..-.m...<..sx.GN.....to.A.;.t...H..C....{

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912786791994024
Encrypted:	false
SSDEEP:	24576:G9IVAbIFx77uo0M4NKMoQVhYqJQmQ04hhs5kT5RHSpH:6kwM+CqJnQ0485kT5lSpH
MD5:	1F8F73DCBEA46311CFDA3D8685EA61ED
SHA1:	EFC37F76C63B520A6886C58C300EEB83542D85FF
SHA-256:	B5B6767245174E33C17F4FA316ACA10625B9A49B3B041E3BA14AF604609287B0
SHA-512:	B5F6EB8846EADDBC2F37DBACDEECAA49934B205B36C4D32CA09B618FA64A6834D4276C411C7DD0F391884B24E2F9922748BC235238A249FA4AC31F571EC1FA31
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:10
Preview:	.Y.....%d..o....O.1X._m.e.Z.a...O...K..?.0.?Y....(P.........r.@lb.].<.......Y...w....c...........ng+vj.0.+~.......An.Q<....2.d..(......#!&.....mi.'.0.n...,.'."...E.....]..L...%.(j...-..m;zq..U.."....l..\.s.KsT...`.....S?.[{....~6.......s...5.......C.3..2...I....N\.....f.Q.Z.1Y=...@..&..8.eM...(.k5x....d}m........!2.....z...;./ .6L.a.......6`t.5.;.t%.3....zrh S....RBY..F.F'2...b....c..V.m.p....^}.]..f..`..pg.4.dBW..D.$...X..Y..T\|.Y......z.A-.........K.'...O..5.J4Y..r.Y.l.yNy..e/z...f.vM...C.Y.]7...}H]./t.r..y'.h..WlD..H....C.....L2.h. ..:..<....z.)....0.[4,..y.....N^aP..+}...=\|q.AP4.<...p...I...E.~C@.hWe2..kD$..T..gU...<v......../....TDy-.8.<;......{.~`.W.a...{E\....R..I.pA.<..B.4..y.L3R..Ks.........y.........t...../..qhL.k=.cR.JI..E..._.....]=8q}P=......y.p..Q......l.....D.2{.."<l..Y.._.m...T>.sq.(..X^.p.N.5..%p..u....@R.?H...hu..,..f....\|........w.a`q.+y.n..q.y....=...... .d0...G.........i..U....N.O$+u.=..zA"Ij..`...A.BE.

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.941420254074553
Encrypted:	false
SSDEEP:	24576:J2dQvrm0CepC7S7PQHPO/zmHbRg9IMy91F7Ta7ByH2gpF5/:kyv60C127+POqdd9HXIyH2gpFl
MD5:	B047394F4660629A62209A48D54E944F
SHA1:	0C3ADCE0720FDF39464335EDF27BBB27697343B0
SHA-256:	3F22315D97C53121BAB244D839DD336491C181018214F61526117973EA1A61A6
SHA-512:	CBF95060A6E18F427B014023C7D73F65353681F5F7380D2DF66594C40C6EDF6F5BA611054D85EBCB70FD00476761AFB6D6CBFDF609659690133343CA8122343E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:a
Preview:	..........................................................................!...................................................................................................................................................................................................................................................................................7..............................................................................................................................................................................................................................................................................o..........................................................................................................................................................................................................................................................................................................!...............................................................................

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	753
Entropy (8bit):	5.26625288436592
Encrypted:	false
SSDEEP:	12:t4CvncDzzA2C4RUF5LqELNCSXhYHuA+YH9pbyVTYHUYHeYHPI0Ai:t4CvnyzvVRGhqiPqutqLypqUqeqPnX
MD5:	E4CB3A63B0C37774F25D771718F6A412
SHA1:	B210F6B8D95567EBDB99852BEF46181375561CF7
SHA-256:	2B3823DCEAD4FE83DB3587DFC12E17AAEB9FC7B1A377DFB9CBC96E69F34976A3
SHA-512:	57B10706E9ACA960A18F1042808B101778FFA990C8FBBDF2A2BE89CCFE789541AA8A5AE145CE3B16AC06C0AF3D8BF28326B5A6B170874C37FC1A09572042C2E6
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v4/icons/meals/breakfast_v4_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:#008009;stroke-linecap:round;stroke-linejoin:round;}</style></defs><g transform="translate(-619 -641)"><rect class="a" width="16" height="16" transform="translate(619 641)"/><g transform="translate(62 -191)"><path class="b" d="M27,12h.6a2.4,2.4,0,0,1,0,4.8H27" transform="translate(541.6 826.2)"/><path class="b" d="M3,12h9.6v5.4a2.4,2.4,0,0,1-2.4,2.4H5.4A2.4,2.4,0,0,1,3,17.4Z" transform="translate(556 826.2)"/><path class="b" d="M9,1.5V3.3" transform="translate(552.4 832.5)"/><path class="b" d="M15,1.5V3.3" transform="translate(548.8 832.5)"/><path class="b" d="M21,1.5V3.3" transform="translate(545.2 832.5)"/></g></g></svg>

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	702
Entropy (8bit):	5.173975179074615
Encrypted:	false
SSDEEP:	12:t4cRj1tEa433uvzHYK0nRXRhOKXO3zIJ80XnmcZFs1FcF8joI:t4cRjMxGzHl0XRKzIJ8qnm9oI
MD5:	9A4D16BC41889411D59181302C0C49A6
SHA1:	112D9E990C79E6248218B93B53CC3AB151DB95E9
SHA-256:	DEFC17920B0B6E6BED47E35A8E5A2D58DC41421623197B35CD1A508499C84E98
SHA-512:	1233BF43A662A422229FD9FA557723E11A1A45E5717CDE4CED29E853890D1B5CA1DFEB47997377A03C4477D9EC8F3FD32631E4D02A5ACE665889ED05EE90CADF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50">. <g id="icon_Modal_Warning" transform="translate(-4 -4)">. <path id="Caminho_2360" data-name="Caminho 2360" d="M29,4A25,25,0,1,0,54,29,25,25,0,0,0,29,4Zm0,48.078A23.078,23.078,0,1,1,52.078,29,23.078,23.078,0,0,1,29,52.078Z" fill="#f8c286"/>. <path id="Caminho_2361" data-name="Caminho 2361" d="M13.143,33.156a1.416,1.416,0,0,0,1.412-1.416V7.981a1.412,1.412,0,1,0-2.825,0v23.76a1.412,1.412,0,0,0,1.413,1.415Z" transform="translate(16.426 5.459)" fill="#f8c286"/>. <circle id="Elipse_25" data-name="Elipse 25" cx="2.259" cy="2.259" r="2.259" transform="translate(27.019 41.162)" fill="#f8c286"/>. </g>.</svg>.

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	5.178591247208421
Encrypted:	false
SSDEEP:	6:tI9mc4slzPtNyMRQo0utfftenurdGoTJdWStD6z0n:t4Jt4Mo6VDRdWwv
MD5:	B2DEC44FF0A3B2B211AFF6867B81855A
SHA1:	40445B017E1078082060F9E93FA979FBBC6B1A4B
SHA-256:	C7D242E76B8C6D5813B140EB421A2890E9DFBA56B87BD36E6F8685A15460BE8A
SHA-512:	A32325A1C4516DD1B55F6A381DE9F9E2FC4780A056792319B9088008E1BB14021C2C601323FCE85E1DF0ACB12813A50AA31EF61366E4B57A4CC82C5793DDD523
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="8.486" height="4.242" viewBox="0 0 8.486 4.242">. <path id="icon_Dropdown" data-name="icon Dropdown" d="M507.646,508.643l-4.243,4.242-4.243-4.242Z" transform="translate(-499.16 -508.643)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66914
Entropy (8bit):	5.332898840283429
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltWHM9ZEqJ1UJnTZ02LKVlEyi:RIT7OX6s9ZZYtj8lti
MD5:	E123F0B2262D40A35541EFCD843F952B
SHA1:	196AF6B5B1C3D8B09C77CB1EC3B8C5ABAB55E6CB
SHA-256:	691CD40182CB45F73808E491746E64D6C651EB1AC2F6D0100C6981B5DE2D5967
SHA-512:	AD9E783830E934BC592ED62BA4FE23C9594993E4B678342A87CF70D096B18882ADEFBCEDA130A80E4200427170BF5ACC668DDB5EFA42B9CB76AC2D7A233DD518
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	414
Entropy (8bit):	5.173347315808591
Encrypted:	false
SSDEEP:	6:tI9mc4slzqBWGY2eIRudGoOc4RrMHoRcrmgr5ItP6A0ZqRcrh4hV7quCinSQtiEK:t4MBWCesU4pRgN20ZVuHSQhq8jI
MD5:	9BEE2C1238102F2D832D029CAD1978A8
SHA1:	5D9EFC0DD4A049A78083FEC37F648CC14AC726E5
SHA-256:	DF946C1903E3E37280E164603D62A0C919328FD6EEE97E4BE2AE8B10CA2D1EC0
SHA-512:	2DFB83A11EA6B192A3B893890F69F9427075EC373C75282640D96A7007516D88D437B790CCF7C3AECB6D5929F0B694BFAEFF66B3A506EC58434C7E88A8341C01
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icon_Circle_Right.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <g id="icon_Circle_Right" transform="translate(0 32) rotate(-90)">. <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/>. <path id="Path_2122" data-name="Path 2122" d="M16,2A14,14,0,1,0,30,16,14.005,14.005,0,0,0,16,2Zm0,18.073-5.6-5.6H21.6Z" transform="translate(0 0)" fill="#454950"/>. </g>.</svg>.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7334
Entropy (8bit):	7.878554796292353
Encrypted:	false
SSDEEP:	192:xQmDYt4IB9GXWE+h9pwTIhUV74pOz7ynHw7O9T/+1FBO:js9jmWE+rtmV7qO6Qq9T/+w
MD5:	42CD3F4984DF1ED4993380A05DD68078
SHA1:	3201E4E92D146B47EEB87278919D40B07B812506
SHA-256:	DCC9F1C308D9377DF3BBAD6B1B831F678C6F169DC4577CFE77FAA24AD9031EF7
SHA-512:	568ABBFF12DA02CC874D3025D075C4ABB6F1BEED8D06F6309DAED1EDE050D4477157DC013E9311FDC37013E718DFA7841931C9DF9004B582F61282A8BFDDEE22
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....XIDATx..]k...u~.h...[k..,.]....,.Z.Z.8........... !.S......(..D.....$!..{.WC....c...1..c..b.z.<.q......~&...>}....w..9s..22222222222222222222222222222222222222222222222222222222222222222222222222222222222..dg...1Z@......$[E.$.Ed..."..I....k...v.s.4...B...[H.%".$.`Y...z.j3..."r/.GE...&9.....M.SD........\.BX.....U@r..nRU.....uOT.w.^..... y....}U......t$}...o....M..0r..1...$.I...[]..L:...$.L...D.UDfn...$[I^.`.1.H/."...g....>...v...U.k{.."3.].$.^;.^.&.6.t"..2`L...Ac.#....$......?....O..?.8..sI....,em.4.l.2v<H.a.;.i.F..0.@.AI.#".HN%y..<.....@.N..&y<......p-...\........]...a.l.....@/.!.J.d..\|..QD.\|.:.I6.H...SeH.../...@U..q..D..^.T...E...f...a.Ef..;.j%....Hrc...qow.[....Bw=...i$.""..z..."wA,.d.3h...S7....(G.....u"...vg....M...&..7.....:ND.\|L..1.u....BD..$"..z...`...AC.@]c...a...)"..8.d..D......~!"...#.........Y......ab..H....p.l.l%.D....8..t.i..:..I..B.#9..q.>.c<[H..p...<M.p>....$..$9[D...T..[C.)

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	38007
Entropy (8bit):	7.894408522921192
Encrypted:	false
SSDEEP:	768:3W+fv/Bckr9S7wCZxzPhSIgBKRIRQDSxulhti1g3NrY2fFzQJK:RdrwsC7hSINNeulYgVfFEJK
MD5:	769E2C64DBF89631B0C94E1A7769DDCA
SHA1:	CFB4AC8E16D401B79482785674E673A0274644F3
SHA-256:	74A5D97D980F49CE24F9BA234F311D0CE718BA4FCF6CB82FF4701618600AED96
SHA-512:	FF827F80F4E37715F9AF8EEB82CE0A1E9AE5EE1F6DDACF8C8E66B995977A4159397F0AD7E68957572A77F8C5261210B17BC65B2266D6DD1BA65709E61D873FBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs...`...`..kB.....IDATx...w@...?....U..(...m....i....;S.G.if...).....{.^....2.=.?n7...O......> p..~.x?.s......+F...3_>..)S....6..u.......d..........1M..w..E?.@...~..Xww1.-5...qN~.?.."..x1..Mf.....c0....."..#....1o^.c.....Q..7....`...sp.s\|.......Y.k...._.&[.t..'.'.RS....wii(.O.=)...,.ge...!6>{&.BC...D_yJj..Ecl.....&...........c.6.Z\|.l./.<>^3R./....r.\....Gg...Q.!.A...<..a"L.................Q.......oi .W...U.I[.xqm?.Y.X.( .../V..\..+&.b..../..F2....+F..`0N.wo..........,!A..al..F9....).b...C\|..#....Q.^Xy....QQB+..;.._......Q]...........).. "".f..wpp.Nw7......\.\|V...F.......y./UJ..0./UJ....C..$..Z.8N!....~...".....r.6..[".A.....,..Gn......n..?..p........M..W.w...Kxxx.?LH...).....,....{}.......,WNx ....5..c..o..\|y4.`....y....DNMK......_....../..Q.....O.d..\|Y3P,...]*V-..37o.0 "...........r.:g..:..yN.-+<pB./.....zu.G...zu....k..X...S'

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	417996
Entropy (8bit):	7.975062063360363
Encrypted:	false
SSDEEP:	12288:yNeRb2c3IdS24fVmgn8pXMtiDWtvpalk6k2mhHdrkEC:yNeli/sV7nwoiDWtgls2II
MD5:	CDB56619CE4FC90D3DE92D2F5CF61403
SHA1:	5B86F51EAD697C9080C02705DB3F02CA237FEDF4
SHA-256:	C6FE01BC05EF5CC502D36963A9710D472EFC5AD0F788D72498643213E8453101
SHA-512:	A03E9D499D767604FE6FAADE9B89B73499E22895B9859215A19B8DFA68DEEC93CEE23C69BB456EC9AE0C892189CB47EBFEAF16C7C464227B571E3D3E7B3822F7
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/12-hotel-desktop.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:09:05..............0231...................................................................r...........z.(.................................#.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..g.[..q....a....)..[.....B.]S.G.>.......7..N.........#..k.Q..O.(......z_

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	305452
Entropy (8bit):	7.9736650743760755
Encrypted:	false
SSDEEP:	6144:l4XhceQHiQCdf2vftEBWAgF6ZU7owqtp6wgNpJCN9zWeumzDH:2XhOHiv0fxt6FbCnCNMeHzDH
MD5:	76AC333BAA4C6C9D96AF7C0088D0BE28
SHA1:	EBC0A14E1F7203288E4FE8D574E1C3248B510F58
SHA-256:	BF4AEF9993D7395793E6DBF1DD970C65FC9A2CFA75815EB5F3268CBEBDCF9929
SHA-512:	E61ECBA9D147EDA7850F27736DD7932DB0517B77A01DF6C7CA1B4725697034C42E9728859C2BF619CB2BA78291F1454EE953B29A3A891D8E4F497854E19B35A5
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:11:16..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?........t...1.V...:.A:...uo.".7...............$..]0..vc..\...X;;/.ie$...y

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	982
Entropy (8bit):	4.375709588649068
Encrypted:	false
SSDEEP:	24:t4sfhQmmPNTooI5kgbDnA8i33JLn03EkP8Fpf:LJrmVtGkgnA8iHJDlkPUN
MD5:	32A2CA0946D540EB51D9AEC88754C311
SHA1:	83E1FD34AE82FF5F4C78C24A8CF331AE42C0DDE0
SHA-256:	B73002349571258A1852614ECC30C15D2868A36BAD6DDB166F89F7A66D46929F
SHA-512:	10E48E96096036632B8C24EE71DE0A99238B1BAA100C73471855CDE1DFB18E469B6A98B3D7A0B03E79CDC33A16820BB92C0373D6BB492CE73F0E91DB63F60FF5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16.2" height="13.298" viewBox="0 0 16.2 13.298">. <path id="Path_2502" data-name="Path 2502" d="M83.845,153.235l-3.082,8.218-1.153-.432,3.083-8.218ZM79.361,157.3a1.5,1.5,0,1,0-1.5-1.5,1.5,1.5,0,0,0,1.5,1.5Zm.5-1.5a.5.5,0,1,1-.5-.5A.5.5,0,0,1,79.861,155.8Zm5.77,3.1a1.5,1.5,0,1,0-1.5,1.5A1.5,1.5,0,0,0,85.631,158.9Zm-1,0a.5.5,0,1,1-.5-.5A.5.5,0,0,1,84.63,158.9Zm3.214-1.771a.857.857,0,0,0,.856.857,1.147,1.147,0,0,1,1.146,1.145v2.5a2.149,2.149,0,0,1-2.146,2.145H75.791a2.148,2.148,0,0,1-2.145-2.145v-2.5a1.146,1.146,0,0,1,1.144-1.145.857.857,0,1,0,0-1.713,1.146,1.146,0,0,1-1.144-1.145v-2.5a2.148,2.148,0,0,1,2.145-2.146H87.7a2.149,2.149,0,0,1,2.146,2.146v2.5a1.147,1.147,0,0,1-1.146,1.145A.857.857,0,0,0,87.844,157.133Zm.356,2.452a2.5,2.5,0,0,1,0-4.9V152.63a.5.5,0,0,0-.5-.5H75.791a.5.5,0,0,0-.5.5v2.052a2.5,2.5,0,0,1,0,4.9v2.052a.5.5,0,0,0,.5.5H87.7a.5.5,0,0,0,.5-.5Z" transform="translate(-73.646 -150.484)" fill="#454950"/>.</svg>.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	78635
Entropy (8bit):	5.263861622876498
Encrypted:	false
SSDEEP:	768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In
MD5:	A454220FC07088BF1FDD19313B6BFD50
SHA1:	265A733CB7FBC481FD2510A659A85AD55C93C895
SHA-256:	7F3145C87D3570154F633975E8A4F8D30AA38603EDABA145501E9C90DDBE186C
SHA-512:	4EA980874FEC49BC12B9504E0C46A002889421E191A3CBBDE5AE35CF29067EAE623E43BDA227BC20A0A0C7BC80AF56DF8818D97AE6A98CB80C769F5432909561
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/js/vendor/bootstrap/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,function(t,p){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable}))),e.forEach(function(t){v

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48153), with no line terminators
Category:	downloaded
Size (bytes):	48153
Entropy (8bit):	5.015689848883808
Encrypted:	false
SSDEEP:	768:wfN6o2oHIXoXfe+zViWHRxnOZh7LGZye0QqKT1:wfoXoXfeWaLGZye034
MD5:	8C058F46F493E9BA75B90EF2CF0541BD
SHA1:	7DF6F7115C53A8BDA425E4E3280D6538618C3EAE
SHA-256:	92640F85DA216A4BF51AB458CACEB2D5B31ACD12AB51B95B2AD5EE8B6A118EF2
SHA-512:	0EDBC0A9744CA346D4ED04F6C18718AE1FEC3B746E0771EE1F7D940451FCDE16556C86C521185F6F4FE5B7774B838391AE0884DA4DFDC5E41EADCBA044F6E3AA
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1
Preview:	.btn,.button,.wp-block-button a,button,input[type=button],input[type=submit]{font-size:.8em;font-weight:600;padding:8px 12px;transition:all .15s ease-in-out;text-align:center;vertical-align:middle;border:1px solid transparent;border-radius:3px;text-transform:uppercase;cursor:pointer;line-height:normal;font-family:inherit}.btn:hover,.button:hover,.wp-block-button a:hover,button:hover,input:hover[type=button],input:hover[type=submit]{text-decoration:none;opacity:.9}.button.button-secondary,.wp-block-button.is-style-outline .wp-block-button__link,.wp-block-button.is-style-secondary .wp-block-button__link{letter-spacing:0;line-height:normal;text-transform:uppercase;font-size:.8em;border:1px solid;background-color:transparent;font-weight:600;color:#676767}.button.button-secondary:hover,.wp-block-button.is-style-outline .wp-block-button__link:hover,.wp-block-button.is-style-secondary .wp-block-button__link:hover{background:0 0}.btn,.button.button-primary,button,input[type=button],input[type=

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x880, components 3
Category:	dropped
Size (bytes):	271200
Entropy (8bit):	7.976656591277392
Encrypted:	false
SSDEEP:	6144:f8JyLpuLFK6/mAC3lzgZ/itAaronnQtO4FnBNaHDrtE5qf1cR:U4aF3C35gximEonQtOMBut1cR
MD5:	8954BFD42389AAFF3AA634364A15633E
SHA1:	9D1405AFA5F925FB231CAC7E8EEB42EFE2E59D8F
SHA-256:	DC4C9D7BC95711BCC0D22BEE6FE255F5961D03EA84D9948F1E9FD1BED46D5A0C
SHA-512:	95FC7DB58AA3084821394E2F87D344C025AA9F2EE2C43435DEE7EF3C71A5F2222E8952F980336BA7DD5D7DB28B4F241F6694F50653A579B3EE6B3EADF0C7D428
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......p...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e[........WC{v..,.<....^.~hm..Fw.0p}})..5?g.5......W&..<H].W.....U..a.ft....h..Gn..n.6.nt.....e.$.J@d...oP}.....I\|...'...g*u.\...;5.z.2.....Mb;.%\|...2..~....\.q.^..v...c.H..z.?..:..^$.N.@p..j......u...1....Tg.G.g,,!y;i.:........-..It.....F.;......CX.........?6:..[.....!..\2.:.2..#r2T.....1....]A.

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x880, components 3
Category:	downloaded
Size (bytes):	271200
Entropy (8bit):	7.976656591277392
Encrypted:	false
SSDEEP:	6144:f8JyLpuLFK6/mAC3lzgZ/itAaronnQtO4FnBNaHDrtE5qf1cR:U4aF3C35gximEonQtOMBut1cR
MD5:	8954BFD42389AAFF3AA634364A15633E
SHA1:	9D1405AFA5F925FB231CAC7E8EEB42EFE2E59D8F
SHA-256:	DC4C9D7BC95711BCC0D22BEE6FE255F5961D03EA84D9948F1E9FD1BED46D5A0C
SHA-512:	95FC7DB58AA3084821394E2F87D344C025AA9F2EE2C43435DEE7EF3C71A5F2222E8952F980336BA7DD5D7DB28B4F241F6694F50653A579B3EE6B3EADF0C7D428
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96xc55dwvl3hw0hl1s9289njj34.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......p...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e[........WC{v..,.<....^.~hm..Fw.0p}})..5?g.5......W&..<H].W.....U..a.ft....h..Gn..n.6.nt.....e.$.J@d...oP}.....I\|...'...g*u.\...;5.z.2.....Mb;.%\|...2..~....\.q.^..v...c.H..z.?..:..^$.N.@p..j......u...1....Tg.G.g,,!y;i.:........-..It.....F.;......CX.........?6:..[.....!..\2.:.2..#r2T.....1....]A.

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64350)
Category:	downloaded
Size (bytes):	223769
Entropy (8bit):	5.454702923749521
Encrypted:	false
SSDEEP:	3072:FBLy8WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:FBLylWBU7O0bvQQGArHu5GKnG
MD5:	A824535D31BCC4EB97DC848DA7041DC3
SHA1:	3E6A75228EC07778D7074DB47F5E1D3DE325230D
SHA-256:	344F29333845C92FB58D6D954F8EFFC2BE692F1854705644495F7AE165A1B6F1
SHA-512:	F2F590DB16F412A4952EF0E33111597B41E2785C99E7C698929AB802E4B43D2F2AF377092EF875DCA53EBD9A9EDA49E93C4ECDE55BC67CB9E7B662D08A878E1C
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js?v=next
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	285334
Entropy (8bit):	5.0538586203224645
Encrypted:	false
SSDEEP:	6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk
MD5:	16623E9F7CD802CF093C325C511A739C
SHA1:	B364DBD40E67076A03E9D7B061C9B2624D081E31
SHA-256:	1E7F83052E1E3442C4397CED9555033CD1D3F08444D85960683BCF91C8433CDB
SHA-512:	44B9D0ED3184FE5F19E650798E6FDA22B71A6F316415E08C4EC88AF3A4211E9FD335D5F9FC44A070F7B478D7060AE3B665C2D2620BBBCE2EA6098BD6826B930C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1
Preview:	/!. jQuery JavaScript Library v3.7.1. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-08-28T13:37Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket trac-14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..} else {...factory( global

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280643
Entropy (8bit):	4.899938295318863
Encrypted:	false
SSDEEP:	6144:KvJZHcc5KXqriaBXUCtYXcXXJDT1uM366yD8roNM7Sfc8mmT0Ttxb7rj/sQepZtc:KvUc5KXqriaBXUCtlUM366yD8roNM7S0
MD5:	F111E44E4E0174C32111D16640D00F48
SHA1:	7974205363B5D829AD19CCC6EED29025F82C0CE7
SHA-256:	479096B760741CCC6DFE81D78B0F1A2FD2F5575D821350D24FB1B8992628A9FF
SHA-512:	AB80934F6503A3394B2A8472E687BC7D06478D4C4651A0B71F91DED79F14234E3B338A7DCB2E269DA36DD038A6737131E1D428A759F0DDBFEE8DD9E284CEB87B
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5
Preview:	..elementor-widget-wts-textseparator .elementor-widget-container {. overflow: hidden;.}..wts-eae-textseparator {. align-items: center;. display: flex;. flex-flow: row nowrap;. margin: auto;.}.body.rtl .wts-eae-textseparator {. flex-direction: row-reverse;.}...eae-separator-icon-inner i {. height: 1em;. width: 1em;. text-align: center;. position: relative;. display: block;.}...eae-separator-icon-inner i:before {. position: absolute;. left: 50%;. -webkit-transform: translateX(-50%);. -moz-transform: translateX(-50%);. -ms-transform: translateX(-50%);. -o-transform: translateX(-50%);. transform: translateX(-50%);.}..wts-eae-textseparator .eae-sep-holder {. flex: 1 1 auto;. height: 1px;. min-width: 10%;. position: relative;.}...wts-eae-textseparator .eae-sep-holder .eae-sep-lines {. border-top-width: 1px;. display: block;. height: 1px;. position: relative;. top: 1px;. width: 100%;.}...eae-separator-title {. margin: 0;. -moz-box-flex: 0;. flex: 0 1 auto;. lin

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	321251
Entropy (8bit):	4.701616223025343
Encrypted:	false
SSDEEP:	6144:00r8SHw4M1hiC30cLmAJU3db2t7fO46yVuZwLsvykp9ohLgROWTA4UQ/YHyyuJA7:GR
MD5:	7860D8138FFBD55042AEEAAF32DAF318
SHA1:	C0BB0325675750A1F4AADFA1AE01E996B7D4D6EB
SHA-256:	7D54583AC226E4F1BA51C20F14450454721DF1932095C942A7F1FA615FB07292
SHA-512:	FEED7E16CCA375D0E2CDD5C56F1F73EAC08E58F5A991D72B5F527C3A2E9CFE3CD7A6EF04C146717ECF48DB9020D1F1BD00FB37BC3624CF800B26C14CF6C05991
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js?ver=8.4.5
Preview:	/*. Swiper 8.4.5. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2022 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 21, 2022. /.. (function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.Swiper = factory());.})(this, (function () { 'use strict';.. /. SSR Window 4.0.2. * Better handling for window object in SSR environment. * https://github.com/nolimits4web/ssr-window. . Copyright 2021, Vladimir Kharlampidi. . Licensed under MIT. . Released on: December 13, 2021. /.. / eslint-disable no-param-reassign */. function isObject$1(obj) {. return obj !== null && typeof obj === 'object' && 'constructor' in obj && obj

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	91817
Entropy (8bit):	7.868104704282685
Encrypted:	false
SSDEEP:	1536:JMPUFMPUpnqQfH2JSEU5F6J2Jj8wgs56mPNgn3LSqiyXbDIrzQLiX4h6e:uPUyPUYQfH2J0dKwgslW3LSqHLDIr8LP
MD5:	DF857D4BA35E1A0BF811C438F338F242
SHA1:	8C648099571EAB230E7EB9809DE1BE903597BF49
SHA-256:	531DAF71A639D1A706DE87830D0F322386420ED66F11114938F0A54D0BF2F983
SHA-512:	7633F9B9F05886E0577E17423E896DA691F3722CBC5580101422C032993EFD10F40BEE3B291D3007B9A2A6D12D69E513457A6CC861D9E402A316EBE69AFBBE8C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/006.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:21:21..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...S.H.0.>&.....T.N..I.;S.S....XmKj.'....j[Q!(K.\(......%p...aF..G.2.B!.0

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	134484
Entropy (8bit):	7.930804106445166
Encrypted:	false
SSDEEP:	3072:Ht2Qt2a6QYy84C+76PspyUlYzO5TTY4ppfIRjejHt8iDmUsPsCDRq:N2a2a6hxu7hygcRqalUWsCU
MD5:	EA6A5E448C23C23404E0937E8599A3B9
SHA1:	129DB6C52A45DFD5B4767D9A5406A197F9E84F7B
SHA-256:	2A6FFF60137913C5E6FD044FC931FA603644339756763A7CF78107AFC3727CE1
SHA-512:	C8A6DC30DBF0E84E47BE0F9CA3488A3896368349D714AC61FDE6E10E27AF2D1EAA287D4D2CBA9091739994C5738A406B7B35CB47A9FA0F03FE3672A2F948302C
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/hotel-06-copiar.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:25:44..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..1.P....E..#P.'.....8...=.C&..s+.8Z.X...-..7!...g...........@..b.fK...fCO.

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	5.311246673140053
Encrypted:	false
SSDEEP:	24:3AOY7aZw6RVc+u/rAOY7aZwwwy96DGSSf7:QOEaZRVc+ukOEaHN0oD
MD5:	A9A33D98EA8D21AFE643BA2F673AA65F
SHA1:	BFD56D752A02A8A95E0F680FEDD322CBAEDC8C87
SHA-256:	171AD06D195B0098C704A465FEF9E726222A369C1DC39873A7A57AB6E0D74C9D
SHA-512:	F4429FD888E26C0533A91849D8FEDF14F1D1A95DAE17688A3DDC5FE5A8528EB8466EC5A8743CD3EBE907A22A2CBCDC4222F041070AED841EAA13AFFCBCEBA731
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Poppins%3A400&display=swap&ver=3.1.1
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 16-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4066
Entropy (8bit):	7.426439070040903
Encrypted:	false
SSDEEP:	96:WSeknmWI8kzAIBF81hFzgHbuTVHPRHo9kh+yy2GtU/ch5AbyUYah0xJVdpS9y:WSeknwzAIEzg7uTVvROkg2GtjAx0xJbF
MD5:	B48D5ECE005B94CF60AD1DBD412E6F59
SHA1:	998CC36D2C82ED3AC1F81E2C81BB7BE8E1453E2E
SHA-256:	134F7FF4475C0D987F11BF36B6045EC0EF65BE3B6717D630FDB5FCADFAA164D5
SHA-512:	D096D45B8208E13A005D3AEF74502685A62C7E106C4EF6B4402B95CBDF387E3E7F3029BA3738935E214F895FA146F60536EBF02D926137CFB25B658BAFEF3961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....P.e.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmp:CreateDate="2021-08-11T18:07:57-03:00" xmp:ModifyDate="2021-08-11T18:26:35-03:00" xmp:MetadataDate="2021-08-11T18:26:35-03:00" dc:format="image/png" photoshop:ColorMode="1" photoshop:ICCProfile="sGray" xmpMM:InstanceID="xmp.iid:d592199f-d8cb-8a40-b7f2-ef4ef4be1a19" xmpMM:DocumentID="adobe:docid:photoshop:a72c2804-490c-b84d-9981-346478e113d0" xmpMM:Origin

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	278
Entropy (8bit):	4.988352972183771
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQwRNJ49TpcZYjcicZaBKJlQrQN/LSrdGo3IQMj38n:t4uz0Lu9OYjfBolV/GbIQw38n
MD5:	01C6E6DE7BE92C51A6288E46F9EAD62A
SHA1:	B0B6D9791A466C84943DB4EDC968FE866743ECF7
SHA-256:	87FD4D8988182589BB197D85A17006E8B3344B096157D53385AB921C8CABEFEA
SHA-512:	972848C5F8A0C10C9991ED313E48FD5EABA2E0F543F3B476FABF3D87760A7790534D4DCA53A68D7636BE2B96F862A52D06D6C647F32045844FA0846A59E8BB08
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">. <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -5)" fill="#FFFFFF"/>.</svg>.

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	206875
Entropy (8bit):	7.956589148338024
Encrypted:	false
SSDEEP:	6144:LHSQHSn7KiNa+D9cvzWkqG45/Z4PucUtNfrx8:LHhH+Na+DiWp3WJ+W
MD5:	CCE18BDB4BA91DFC86DC73110AFF4E2E
SHA1:	941CEEBA5841BAFED3E3F0BFFEFEC6DE14154414
SHA-256:	F4F05E09E1DDB295D2E82A2B59003BDD70D3A0A468AA6318098EC26C0CFCB371
SHA-512:	FE05925D1E67D593F7891EA56852DC1A0F9307A8E83AF49CDF26FDF4B1B27A3CFACE9E4F691AEC1F94D9E8D60AEC0C50FBF4A0BF1F5854402F3E4182FCAE2542
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/008.jpg
Preview:	....1.Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:22:50..............0231...................................................................r...........z.(................................/........H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....,.,..^..f.xw..a...uz...KknK.5.@i.\C.....Cu..F.....vb.....6.i.k..n\|.

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	440915
Entropy (8bit):	7.976463141157688
Encrypted:	false
SSDEEP:	6144:GPjZVOkV91KtFpDWOKDARI505PkPgR9ki4ZfMHqgYbJwrxoxB4eI3jJ+XkMfxc1x:GPTO+LK1CL505Pjcg+gwZYjJIkMfxvg
MD5:	398B918C769BA5A1DEBB17CF2FDFE94C
SHA1:	35E7EC0056669F4F15A185A76C8CEE32592014BC
SHA-256:	99A83623AB69C917555134C38E65E5730C820B7832BB67AB288C3B17D79C1BAF
SHA-512:	3DEA00D3D482CE6139A4877B416084DC14C5EF0C1763651EAE360AC3E1ADF3FAABCF6F6CCF6AE359F4D237525067B1F6E5F4EAA762FB2F5D61E4F6FAABED2548
Malicious:	false
Reputation:	low
Preview:	......Exif..MM........................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:16:09..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....T7...50.K....P&..e@.y...4..h.9C.,........\|SL)"v..N...D......r..I...

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7301
Entropy (8bit):	7.88819345368873
Encrypted:	false
SSDEEP:	192:ZyJq7/XR3VjZEjkK+7jb5dLsLbZZTv3ed2sWK:EqbX9VjZEnMXzOzTb1K
MD5:	2E4B166E49D51FE6F1B8342B179EDF30
SHA1:	16E5DCAE57731831837FF8C9023405682D99F43B
SHA-256:	19163B48A169D3C57123A7D24C4D45B5F5690EA0E02FD6E1E794960D9D53746C
SHA-512:	393534BA07E8E5AF2D2326EAD11292CAA33E66039FDD4EBA4A13ED253647287512D02AC96DA2689E334396B8FB2BA4E62FF20D9DCF4C0E8144474850D961C5C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...Q.....h.......pHYs..........+.....7IDATx....U...S.(.zC1.E.....C14E1.8.0.q..ic.1..j.-.Ig..?b.c9....ql.X.a..i......D..4.H36.... """""...?.:.}.=.......O.{.9...>{...{..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..d2.L&..\|........H..`..I..e]8I .W......T...P.L&..a...=f....gf?%....u3[&..I..vZ2...)..J:[.?J.]. %...(.'..3..2..$.....d~....&JZ.`...IMaH..k...?@..IW.E..H.jf 9K.X...+....,.m..F..#..tD.6.\GrO.{.$.....A...a$..t,I+.&o.$.[R.....k..#I.....6.t.<..6.O..H.U.....6I....`3..UY...E.!..J.IS..ou.J..vJZU.E.~.$....(.}...8A..(6..C/....E.;.8..H>^.~".).~\.)i"..i..6.XGr_r..(....\..(...l .l.\|..&..I'Kz.NcjE.m....^.t..u.!..3.w..%I/E.oJzU..a(.O..N.1....=/...:..)..3{7].fv...qW>.IzK..[.%-.........f.-....S..=..'...s....$........3....G..a2...\.}..n....n.\|..aGJ.g3.O..J<]....R.(..K.../..v*..]bf...\|).....-e..GD....._..tb...aS[h..Qx..p.......].]...c$..$.>B....L....H\|.................#..8....+i...-n5=._..).f....e..G.q............#

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12991)
Category:	downloaded
Size (bytes):	32934
Entropy (8bit):	4.861901040632861
Encrypted:	false
SSDEEP:	384:SD3iRACYe9gkFLBuPTb9Uh3j//bEPjXgA2qNGsoGsQkAL3Wx0yzbJFz:FRACYOpdU9Uh3j//YrXgATGdnsmFDz
MD5:	BDB01526E0B7F76B0889C1C48A58E74E
SHA1:	4D75B305B228AAD5015A40AC849E66BFE668E943
SHA-256:	B75FDCB9CB724ED0E6A3C091E5EA96250E16643C5B9C6427A6240FFF3C026E22
SHA-512:	E6486C5372927867C2CB856918DCEA0E3A18EF3D15C5EA16F03D998E7279EE9D53FCD5BFA0C3FC66C62D51B5167BF8AC0935910E05121A603AB9DB47DEAFCBB8
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3
Preview:	/jslint indent: 2, browser: true, bitwise: true, plusplus: true /.var twemoji = (function (. /! Copyright Twitter Inc. and other contributors. Licensed under MIT //. https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE. /.. // WARNING: this file is generated automatically via. // `node scripts/build.js`. // please update its `createTwemoji` function. // at the bottom of the same file instead...) {. 'use strict';.. /jshint maxparams:4 /.. var. // the exported module object. twemoji = {... /////////////////////////. // properties //. /////////////////////////.. // default assets url, by default will be jsDelivr CDN. base: 'https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/',.. // default assets file extensions, by default '.png'. ext: '.png',.. // default assets/folder size, by default "72x72". // available via Twitter CDN: 72. size: '72x72',.. // default cla

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3566 x 830, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	29526
Entropy (8bit):	7.868689249946656
Encrypted:	false
SSDEEP:	768:ozDd1sA/tACcWTZ72qa3yX22xUi5GNvnDH5vp1a4:YdL/fTTZ7X7XIUGNrJp1a4
MD5:	215698B8F763CE612C41964F0F14E507
SHA1:	226059CD8896A857DCA6437F29F58E9F682E4D00
SHA-256:	2FE76A197D3891F7848604C87A945231C4DD2E39A74BDAED45AC5648A0DD72E2
SHA-512:	3DE592395D0D81E928E465A188F58BAF28F4A043C65A651421122C266355471B602C3141D0BF54FD537B78FCDC07A9D618915B6D95A61B4B853418B9DCF6067C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......>......r.....3PLTEGpL.................................................A.*....tRNS... ..`.@.0..Pp6.4_..r.IDATx^..Yv..@Qp..p..Wk.m..k......{....N....X...H..._.........!...{l).........5/..4..5.T......Xs))...bJ.\|~......2.X...O.>....\|.i./5....1.....bm.......`...k..p..........7.....\|.c..m_..K...L....G.....X.a.7..s......zG.....\|...L.7..C......a..J...... ...+.......`^.X...5<....Z...qx......s......b.....!.G.......^........7]\|...Z.N......S\|....Z...'.....2V~z./........+...z...x..v.G.....5...8.......P...5......{.=....X..._....,[}?b..:.........G....,............2.......X;cO'...\b.p..^...`...`[B.............~.b.C.................{....@..>....'.....T?.....pg.x.....@.9....0.X_.1.....p...R.......k3...#..............N....Z.l...X..(......`M.7>.......6..~.....k.Hk......'.........N...s.......`:..P......b......Vo.a.?...P.]...c...y.7.1....../...%....=.d.....0......0....,...76........K).3.....7.MJ)..s............`..!mn......R..-...s.X9.r.....h....o;.+W..

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48153), with no line terminators
Category:	downloaded
Size (bytes):	48153
Entropy (8bit):	5.015689848883808
Encrypted:	false
SSDEEP:	768:wfN6o2oHIXoXfe+zViWHRxnOZh7LGZye0QqKT1:wfoXoXfeWaLGZye034
MD5:	8C058F46F493E9BA75B90EF2CF0541BD
SHA1:	7DF6F7115C53A8BDA425E4E3280D6538618C3EAE
SHA-256:	92640F85DA216A4BF51AB458CACEB2D5B31ACD12AB51B95B2AD5EE8B6A118EF2
SHA-512:	0EDBC0A9744CA346D4ED04F6C18718AE1FEC3B746E0771EE1F7D940451FCDE16556C86C521185F6F4FE5B7774B838391AE0884DA4DFDC5E41EADCBA044F6E3AA
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1
Preview:	.btn,.button,.wp-block-button a,button,input[type=button],input[type=submit]{font-size:.8em;font-weight:600;padding:8px 12px;transition:all .15s ease-in-out;text-align:center;vertical-align:middle;border:1px solid transparent;border-radius:3px;text-transform:uppercase;cursor:pointer;line-height:normal;font-family:inherit}.btn:hover,.button:hover,.wp-block-button a:hover,button:hover,input:hover[type=button],input:hover[type=submit]{text-decoration:none;opacity:.9}.button.button-secondary,.wp-block-button.is-style-outline .wp-block-button__link,.wp-block-button.is-style-secondary .wp-block-button__link{letter-spacing:0;line-height:normal;text-transform:uppercase;font-size:.8em;border:1px solid;background-color:transparent;font-weight:600;color:#676767}.button.button-secondary:hover,.wp-block-button.is-style-outline .wp-block-button__link:hover,.wp-block-button.is-style-secondary .wp-block-button__link:hover{background:0 0}.btn,.button.button-primary,button,input[type=button],input[type=

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1095x942, components 3
Category:	dropped
Size (bytes):	174543
Entropy (8bit):	7.945308067299438
Encrypted:	false
SSDEEP:	3072:qFVt7g7R+FvYAsy1iowbFxy2E7JdvIKilGH8vb5MKzABItyasT:qJ7u0VRPH2EFdvIRlGHOmKEqUJT
MD5:	DA1C94A5EAE9A73E483EB8107039887E
SHA1:	FF182CE4A435863B102318486681ACA6C897678D
SHA-256:	2566A03B8F6070C336318D6B14478FB0E8005F7B5444C37E913A10820A31ACCA
SHA-512:	D375FF8235DB712FCA060D45548F012794AB3F35ED49AE2D6BA25AE5B3F7B93B4ED5C8C817C9ED48AFF81F4F23CBEE340449FBB5638D5CB264462C4C46B2C265
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........G.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..PDL..G'.@J...a..9.h..O..g...@.d..q..k._]s.../&.P..#.v.k.p.+..>.)'%.G?/\|S.v.....}.E.......$...'p.>. ..#".F0._zF;.......b7FV.....>.<).Dw.f'.......##.J.~`X...g....U:.@....!........g.v..J..1.s.....gT.#...X...(...9....IU-...GQ..$2.$...@..,XFB.1.;....n'o=9.j'....[',OJ.Tn.YA.....d."..\|..:zR..Y..x.~.I![<..{z..

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22544, version 1.0
Category:	downloaded
Size (bytes):	22544
Entropy (8bit):	7.990283687652226
Encrypted:	true
SSDEEP:	384:fUm1q/7JHi42/sJvCKTRYgOTRtg56KGo1NI8VSA305JciwvLo8GfMnueWzPGxmDE:LU/NH12UJvxTRYKhO8VSAgJr2wHzPGxd
MD5:	56ECFC67855E255D92DB6F6FCB97143E
SHA1:	0B5DEEDADF4D16324ACF8817877B5B16B6C6B578
SHA-256:	1DE2644ED23B32D34A3765733B997DD085891BF018638ABA36B7FE3CCF9B1007
SHA-512:	BAC9BB9352C673B3C94955A7D145905A442CA36FEA677D40979A1DCD046E3EC726EDEF1B84F806944653B3049A7F0DCEBDFEC102ED00BE393AF6FE6A60D01B92
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/v3/css/fonts/roboto-v20-latin_latin-ext-300.woff2
Preview:	wOF2......X........\|..W..........................\|.....b.`..h.X..<........x..t...D.6.$..d. ..\|. ..:...'.m.U.Hw....N..&.aw.]..D....!...Q.....T..vp.ZZiE.D....!.z&.D..H....B_.....p...=.)V.,:....Z(U_.%.......~\|pa.EG....0..T.......J~v.7./~f...7...H.FtB.[.P.U.`)..:...m2,..6.a.0>C..W:.....;.....SI.....~....... ...#.x..E"k.........z...c..].#k.;.$....i.y..x~k.{.1...VhbI..:.>TBa:..r...f..$...L.z.X....W..ceO...c..$...<...ue.EpS.:...H.1,.e{.H8..=..f .,.=.f....8H..~.Kw7yio....d$.P_H........^.*V.&O..6.....P.......Z.d....C,./...E..)...Z.Cy.h^._...7...;6.Z'...m%\|.R..:8.......%...p...c,K.&....%.t%.<..m...J..`\|...z\|..v....A....A........F...9#0..A....I....5.;.6.`..H.e.e..;b.......K.D4[...?.e;.......n....j.g...H...w...P{..a...>...\1ti.4y....Pte....}..3.}U...~....d.Y...18...w..4....1.E)....oj.;...%!rF!U)Tr.....C.......1X......k.......`......a%....b.C.K...J....m.)}.L.....f^n.O.wQhC.&0..0G.s..]<J..9."C....y.2A.!...Y+....qa.bD...U.F..-.v.pNL6...WD..c...2\f.._;?.... .I

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	dropped
Size (bytes):	447628
Entropy (8bit):	7.975788146370957
Encrypted:	false
SSDEEP:	12288:+dtS82l8PBYqXBOOt5eNuy8ht+t7/SqKFaIfV0QNmwj8K6iQj+v:QzQ8PP1tmueyvXlQj+v
MD5:	6A876FD6BD34D3B712695293F1C0B445
SHA1:	FDA8C9D15D0F7F4E08652A2E179F0E05E7157D5B
SHA-256:	0FD3DF66E7414473621F42369ACD6BC41732247F452F00E9F5ABCFD6924C12F0
SHA-512:	26904D7BFF638F847B10284AAF4F86CF6C153E84A640B72C364A3CABE9841992C6284BBBFC151071CE8D995C97B88B34DD35FEF14CE8DBCA8533494C411A3F06
Malicious:	false
Reputation:	low
Preview:	.....9Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:12:12..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.cQ.&.....=/..D.L.i.).U.L..C.;.,.......gLh=.\a^...R.g.K..x.=.vkmO.X...B\a^

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=525, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 1024x525, components 3
Category:	downloaded
Size (bytes):	440175
Entropy (8bit):	7.978344307116581
Encrypted:	false
SSDEEP:	12288:066E5zaW13y+J0LQa3RcFZHv687G7n886Zk0:tn5lyq08SaDHB7G56n
MD5:	D342A93FB7083EF2020364215356FABD
SHA1:	4309113EC6AF80264F94572E3945B6863A6B3FB7
SHA-256:	7F5F75FD296F269CFF7BA1F4D72AD108908D5E7E6029DE7969B745CAE7D01609
SHA-512:	080DA83658E30C0E7DA3AF2C71F05891E44F190C7871F5EC439849C160160031868FD74E55C1F7F5E9F1C58B0725DAF227C143283AA8980B50AF998EF391DFC1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/04-hotel-desktop.jpg
Preview:	.... :Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.1 (Macintosh).2022:02:09 20:59:18..............0231...................................................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..88m....:.....>.w;..s.([......R...k.................k....."bu.....k+.n.M

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42379)
Category:	downloaded
Size (bytes):	62361
Entropy (8bit):	6.105459336370426
Encrypted:	false
SSDEEP:	768:5Zey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs51t:Lx/ZvB/qPWMiquqioMUXQSJYIMW+HH
MD5:	2C4AF0BBDF2FB60FC46EE752E4BB7EE9
SHA1:	945049E29CD486CA0626E9A905BC4BE9F1AE48B7
SHA-256:	A914DCBC1A475591CA1493CC05020C4D6E32B2D24D5E0094A13840ED00CA0038
SHA-512:	03505E58C87581E3757B89C704F2E0E44048C11366518C9F4CE428882346FD4F3F0A3DFB61A49F9C50F29AB5FE81DF12F7C13940A1600D126BB6BAD12F465EAD
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/css/dashicons.css?ver=6.5.3
Preview:	/*. DO NOT EDIT THIS FILE DIRECTLY. * This file is automatically built using a build process. * If you need to fix errors, see https://github.com/WordPress/dashicons. /../ stylelint-disable function-url-quotes, declaration-colon-newline-after */.@font-face {..font-family: dashicons;..src: url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");..src: url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),...url("data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAAHvwAAsAAAAA3EgAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABCAAAADMAAABCsP6z7U9TLzIAAAE8AAAAQAAAAFZAuk8lY21hcAAAAXwAAAk/AAAU9l+BPsxnbHlmAAAKvAAAYwIAAKlAcWTMRWhlYWQAAG3AAAAALwAAADYXkmaRaGhlYQAAbfAAAAAfAAAAJAQ3A0hobXR4AABuEAAAACUAAAVQpgT/9mxvY2EAAG44AAACqgAAAqps5EEYbWF4cAAAcOQAAAAfAAAAIAJvAKBuYW1lAABxBAAAATAAAAIiwytf8nBvc3QAAHI0AAAJvAAAEhojMlz2eJxjYGRgYOBikGPQYWB0cfMJYeBgYGGAAJAMY05meiJQDMoDyrGAaQ4gZoOIAgCKIwNPAHicY2Bk/Mc4gYGVgYOBhzGNgYHBHUp/ZZBkaGFgYGJgZWbACgLSXFMYHD4y

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	8969
Entropy (8bit):	5.181620027496431
Encrypted:	false
SSDEEP:	96:Pu4LWjoWlw0ED2v4U2Zdg+sPCi3FNr8dKKSRUMZH4dspm0ujpIvr0uSuQf5WvzdK:Pj0Ac+m3FR3KSVYdsEh9GJ3vzdouA
MD5:	4B32AEBBED7E5116C14CCAE8656CFA7C
SHA1:	16DD4308EDC56BCBCBA2D8C4EC795751B0CCB3CA
SHA-256:	E9D54383A1AE1CC16B30C0A748FF78CEBFFFEDE0E53DD7821DFCB6328CCEF47E
SHA-512:	FFDD721B69C3937D12E035F2B090E764777B1E12268AA1F3CD146D40F14D0FDBE8217E57DA8231CDE6A57E015FB76FC3A9F5A3E6F03CF460365EEE7C6C85EC7A
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3
Preview:	/*. wp-emoji.js is used to replace emoji with images in browsers when the browser. * doesn't support emoji natively.. . @output wp-includes/js/wp-emoji.js. /..( function( window, settings ) {../.. Replaces emoji with images when browsers don't support emoji... .. @since 4.2.0.. * @access private.. .. @class.. .. @see Twitter Emoji library.. * @link https://github.com/twitter/twemoji.. .. @return {Object} The wpEmoji parse and test functions... /..function wpEmoji() {...var MutationObserver = window.MutationObserver \|\| window.WebKitMutationObserver \|\| window.MozMutationObserver,....// Compression and maintain local scope....document = window.document,....// Private....twemoji, timer,...loaded = false,...count = 0,...ie11 = window.navigator.userAgent.indexOf( 'Trident/7.0' ) > 0;..../... Detect if the browser supports SVG.... ... @since 4.6.0... * @private... ... @see Modernizr... * @link https://github.com/Modernizr/Modernizr/blob/master/feature-detect

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	4.283243366395593
Encrypted:	false
SSDEEP:	24:t4qvZPdgdTjxjUuF0KwxnUTk92GJjZpfWQWx7DgfFpPIS32:rZPdgVjxjUu6KvOtfW6tpAL
MD5:	5F6C87948DB7DAF94293471C95AC2AA3
SHA1:	7561B4312AC0934FADB704E0B6E104503EE3C5AA
SHA-256:	E43AB322A8CDC6F3977045EFA7DBFE2D26092BDA20DC549E4470F67FC6286390
SHA-512:	F59FEC93D1CB4B41137A54E7B05E27B9FFD55459D427BAC68FCD0E2BB41F1189B5D08AB91CE4F1C5758C70D56CA72D0390405960D18A58D881E44363C349415A
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_White/iconWhite_Footer_Contact.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16.002" height="16" viewBox="0 0 16.002 16">. <path id="icon_Footer_Contact" d="M19.991,16.63a.774.774,0,0,1-.23.681L17.5,19.54a1.118,1.118,0,0,1-.4.29,1.484,1.484,0,0,1-.479.15l-.1.01L16.3,20a8.661,8.661,0,0,1-1.04-.109,7.5,7.5,0,0,1-1.76-.541,14.382,14.382,0,0,1-2.37-1.3,18.371,18.371,0,0,1-2.81-2.37,18.609,18.609,0,0,1-1.96-2.24A16.637,16.637,0,0,1,5.1,11.471a11.861,11.861,0,0,1-.71-1.65,8.716,8.716,0,0,1-.32-1.27A4.065,4.065,0,0,1,4,7.711l.02-.34a1.482,1.482,0,0,1,.15-.48,1.376,1.376,0,0,1,.29-.4l2.25-2.25A.743.743,0,0,1,7.251,4a.593.593,0,0,1,.39.13,1.073,1.073,0,0,1,.29.31l1.81,3.44a.806.806,0,0,1,.09.59,1.086,1.086,0,0,1-.29.55l-.83.83a.358.358,0,0,0-.06.11.738.738,0,0,0-.02.12,2.86,2.86,0,0,0,.3.82,8.451,8.451,0,0,0,.63.99,10.815,10.815,0,0,0,1.2,1.35,11.1,11.1,0,0,0,1.36,1.21,6.472,6.472,0,0,0,.989.63,2.486,2.486,0,0,0,.611.25l.209.04a.88.88,0,0,0,.11-.021.338.338,0,0,0,.11-.06l.959-.99a1.06,1.06,0,0,1,.721-.271.827.827,0,0,1,.44

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.321066989918543
Encrypted:	false
SSDEEP:	6:tI9mc4slzXXpnzSqFRYBThc4JIxurdGo7rSQKD6z0n:t4lZnzS0WThcbunrSQKv
MD5:	F3A7CA750A8F6380D522AABD2F2714DC
SHA1:	209EF089CDA8F75049567AAF16EF780C6BEDD176
SHA-256:	6ADDA3DAE570CD15696FCFA4E9553130B233D1D950BE2B67398EEB01755C6C3C
SHA-512:	5C0053E25B1A5634AECCFFFF23955FBDD10BD5175D1FF1E8A1032116D50AC2283958F1DF0A11F57170937DBF86650A0950ECB81EC795A7BD55B969A1B81B824A
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_GreyDarkest/iconGreyDarkest_ArrowRight.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="7.41" height="12" viewBox="0 0 7.41 12">. <path id="icon_ArrowRight" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-8.59 18) rotate(-90)" fill="#2C2F33"/>.</svg>.

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 101 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9191
Entropy (8bit):	7.938521148291647
Encrypted:	false
SSDEEP:	192:s2eqYu+EMKSMWVUt0TRuBaRBQH5RYZjr90hENVqMRcrU:rlSRBTRuggstSh2Vrc4
MD5:	417BC7311E6B16871FFD5A47F2E38E89
SHA1:	8FFF46B7005B815CE4D18C42C552709FAF7D5403
SHA-256:	CCE8C8D20EFD705D5007FBED448FD859615C5C66C9F38F0A6271E9426D6F6C1D
SHA-512:	A7D1736ECBE68577ABFD83FC103B8264B3B3AEBD2FD4DE15D04968D14B1DD0B294D6DAD7EB98A9043A727728A6711872333108754554BEB5072EAD71BC0A7826
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/06/favicon.png
Preview:	.PNG........IHDR...e...d...... .j....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D5800905D05911EBA4B3CCA392FE903C" xmpMM:DocumentID="xmp.did:D5800906D05911EBA4B3CCA392FE903C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D5800903D05911EBA4B3CCA392FE903C" stRef:documentID="xmp.did:D5800904D05911EBA4B3CCA392FE903C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...K.. WIDATx.....U....C...d..A....T@....U.,Y.."....V....PD.Qr..9IP..%.......;u........w.=3.]]........u..]T"o9-

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	downloaded
Size (bytes):	245662
Entropy (8bit):	5.388783455972756
Encrypted:	false
SSDEEP:	6144:RK4glhdDen77MI8Y8bjq7+sJXUIjHKbN0RMM:xgl/KElYapsJkhGiM
MD5:	095DC5A747CC8D9A74EC890EAFCF3C9C
SHA1:	6F6A4A35E211F62AB87D6296BC0314655014DC21
SHA-256:	B446343398CFA621371DE2161F18362847CCF86D57490EB54A9263C6B4585478
SHA-512:	F0CD77730C97D3352B0846AB6385F78CED71E6B36EAAC1F9D9BC91F892CAF8A9DFB774FD9E6650051C4D31E51202220146FB040D43C39A196E61C472BAF931FB
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/plugins/openbridge3.js?v=next
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 415x415, components 3
Category:	downloaded
Size (bytes):	17393
Entropy (8bit):	7.862208728567495
Encrypted:	false
SSDEEP:	384:9wCRBWQZ/QamopGIf+awtt9bteBuo8LRU7Zm9UOMU:CiqGpXNwtzpEwRuOx
MD5:	98169249C8E09B0BC36D1F2F9F4E9BAB
SHA1:	243BAD41253536F8792601D3AE0BB4C4BE4801DF
SHA-256:	447A80A8D5ED58BCC3AA7C476AB734CA95239EBCC0ACD2C57D1458F055E5D20D
SHA-512:	30884559C2C3CD65C1230390DAB357E4C1D23D83A4FD4076F009E6F5B330BC6F71AE734B6A96CE0DA56C3BAC99985BF225EAC28078144FF78A2B620F2DF544A3
Malicious:	false
Reputation:	low
URL:	https://pps.whatsapp.net/v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................P...........................!1..AQa."2q..B..#Rb...$37rt...6CSu...%c.....&45Es................................,.......................!.1A.."2Q#aq..BR...............?.."................................................................................................................................................

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5252)
Category:	downloaded
Size (bytes):	5290
Entropy (8bit):	5.249915919531355
Encrypted:	false
SSDEEP:	96:zZ+95qf7d+MN4p1nSp9qrch48/N//8/5AvL+oASSNDXyebAFgqdA63ovBkBU+hxg:zZk5YMMN4p9Sp9qE4r/5Az3cDX7PqCpz
MD5:	71696B59FBC1D92E4591873853A13803
SHA1:	9AD61E9CDBC196FD211E34F4E4686E4A3BB821E9
SHA-256:	C692F8D1B999D45E2F8BA16AE32A81206235FEBEB59D14F33E5A1ACB4F512EC6
SHA-512:	2AC0C6DC86F3080E0574C38CCD1A643B9007253541C18C934F2019E1859A074195394023F41B4461B527BA3DDEA8929C213780E2D37530D579835C30C0973940
Malicious:	false
Reputation:	low
URL:	https://pixel.asksuite.com/asktag.js
Preview:	// Asksuite Pixel 1.0.0 \| MIT License."use strict";function _typeof(e){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function init(){window.askTagQueuePreLoad=[],window.AskPixelObject=window.AskPixelObject\|\|{},setup()}function setup(){var e,a=window.AskPixelObject.name\|\|"askTag",t=window.AskPixelObject.dataLayer\|\|"dataLayer",n=window.AskPixelObject.options\|\|{};window[a]\|\|(window[t]=window[t]\|\|[],(e=window[a]=function(){e.process?e.process.apply(e,arguments):e.queue.push(arguments)}).queue=[],e.options=n,e.dataLayer=t,e.t=+new Date,(a=document.createElement("script")).async=1,a.src="https://pixel.asksuite.com/asktag.postload.js",(n=document.getElementsByTagName("script")[0]).parentNode.insertBefore(a,n))}function handleEventGoogleSpy(e,a){e&&e.the&&(window.location.href.includes("omnibees")&&"Z"===e.the.trackerName

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912890940301618
Encrypted:	false
SSDEEP:	24576:Jk6rH7PbKd4i/ytLi/wxTnlvDN4aVw37tDipqMr8LK:mYH72yi/uL6QTj4aVi1ipqUN
MD5:	8C5B3A11A401BA8A860200691FC9E583
SHA1:	C646F74F1A54B79C28A64BC4E10BAC1624548BEB
SHA-256:	DE9CA0B9F9F6AEC7B4490F568BF7276657AAC8D6479CCD42C7D6B1F559E17B1A
SHA-512:	46C753C9C3D5AA828A2D7AA198FEDD20A3BDD3A5C950F7D3A52E9562F1BE2CE779B819AD9BA2D8F2671C9307EDEAE1D6BC096A4C06C94D89D623D4F9809A9B3E
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:4
Preview:	....\..U[...)..v.T{..@{AV.N...._..h...2.G...MS1....H\|.K.\|.Mf"ZA.......6/..r..IJ_:Y...ILZ..{,.o..P.CZ......8..w ......._.P.S#....h..Oa...\|.3Z..~.r.......I.#.)......Y]C$p.z.P.=V\..k=4.#.=d...\|c W\9.......:.]81.=x.....5x\.r9#f.Bm.F.!,....7...].......".....q..........[...n5.-d#......u.%.5..<.....v..u..N...,s. .#.p~T4m..SjJ.....}..."{..\Hs..2....-\...F.#-...#....L...W.).#Jp...0MS..5.F.F.V.$.?D{.........y......X..o...C.:..?.qE.q]...+1v.w....cP..)@K..-..[.M..b....+........Y)..T../.......S..v...e...ZW..._$@...&....'..Gb..F3.X#n...p......O...n...hl.L...ic..8(.g1z.=..9..K.......l..6....0q2...Z.....\-...]j2........S.h....X.5.M.....J."{..jy .KXe~.0..-.R.H........a..v.sr..I.M.d.<..A;G..M..t...dKCi_..G.,..N...K.}..^.......R....RY.aLMg.V...h...N..M.D\(...N...b~.?.....H5.......d....OKOe.7...a2~BF8...:...w.....D.Y#.~.;>..r.....1....._.............o...h......->..L..t..as....o*op(.1_m.}E....jE.`mn.tf.t.AQ......:.O.AB.jO]bcw&%.d..$Bu...\y...:fX..-}G......

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26516)
Category:	downloaded
Size (bytes):	26702
Entropy (8bit):	4.830125836352143
Encrypted:	false
SSDEEP:	192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP
MD5:	C55205BCE667F5D812354FD1353E7389
SHA1:	F22DE0AF271EBA636A022C873C94FBCD81B4C89A
SHA-256:	C55902832FB84522D02EA1A60A30747403A140D8651FA748F13BA398B0C0DF3A
SHA-512:	89A2E11075B7A7E64D8240CA062E3311F1FE69600C189EC8EE78EA0F78CA9DB374BB1E0692E9AEDAF8EE23BD58528BF6D0E20F977477DAFF073BE57EE8E81BBD
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arr

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 137x100, components 3
Category:	downloaded
Size (bytes):	2360
Entropy (8bit):	7.602785024868534
Encrypted:	false
SSDEEP:	48:u/m99YMUFuERApXoBi53UZVAXlRZlfHjD/pQmL8OR:u+vhTE6X35C0lFfH6sR
MD5:	55D962326AE313C0589A8F7E2DF7DF34
SHA1:	2AA90CFEAC1C343541019673FCECAC15F7ED19BA
SHA-256:	0AC0B0A119D690C79AB65D385D63BE884ED766F07587DBD91602518518818959
SHA-512:	6EC0D703B17E18A58B516E96288016F8C4A71D885722D4577E7EB8DD0B99FAFC93BF9B88AD123C4E40561BB9FB2BE3F29958A2E5FBBBA7844F35CE70E19573F4
Malicious:	false
Reputation:	low
URL:	https://media.omnibees.com/BEImages/5643.jpg
Preview:	......JFIF.....`.`.....ZExif..MM..................J............Q...........Q...........Q..........................C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......d...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...).bn.wzg.}..QE..QE..QE..QE..QE..QE..QE.Awu....3...d.r}..$...\.MO^v.y......I...........L.!.{...(-...I.A....0}EO?.'..}.Xn".,...a.s.w......-.o.yL.?.,.F.~q..8......E.-...w..H].....G..x.I.[.....0...$n.o..F1.Nz.t.G{xm.."\O.)!..X`........SGO..R.K....T.S....

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.254183874530219
Encrypted:	false
SSDEEP:	6:tI9mc4slzSdB/U1EMRHSxehpFja4U3vcIAv6rdGom4CK38n:t4cB/KJUehpFeZfcOFCK38n
MD5:	B3DC7FBBA85CA406EE28FC895B95685D
SHA1:	EEDA1E11D722BA98C4E0C61AD936E457CDD2310E
SHA-256:	21282BECFB019EDE8D3265DBF82006D7D5BA82B372D1E9829BDFDAF071392AA2
SHA-512:	BBB329703973218DE972A2FB863FB60B8042237B5AA2886DD5CE6E26B332819D9D26ED36A0D44B226A9923B045DEEFDE065E366FA2C09928CD97A903126502FC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.444" height="9.262" viewBox="0 0 12.444 9.262">. <path id="icon_Checkbox_Selected" d="M544.382,496.844l-4.444-4.444,1.253-1.253,3.191,3.182,6.747-6.747,1.253,1.262Z" transform="translate(-539.938 -487.582)" fill="#FFFFFF"/>.</svg>.

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10364), with no line terminators
Category:	downloaded
Size (bytes):	10364
Entropy (8bit):	5.187016974390303
Encrypted:	false
SSDEEP:	192:di/rAbN3F3Tk+r3C9m5hYwMUZHWwpYTMHcJG062gA:dyrAbNx4SyyDYecRj
MD5:	751FDAE094E65B39E6C662E969B8FBE8
SHA1:	DDE2424B2BE1DB52FC16CBFA2D0D22112E1F9B2F
SHA-256:	EF9DA71A42581033F8B96EAD8C6C1E4F72B230E455472A22D120CD573DE38537
SHA-512:	5C348A5CFEEF7533E814581C9BD4C2D49C7D6DC15B58DAEAB6F4CE1417BD75D48748F25F0EDCE63F6ED6C89A562625D545CB9C71F87005BFA3F2C5E9B9CFB1A1
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=100)}({100:function(e,t,r){"use strict";r.r(t);var n=function(e){return"string"!=typeof e\|\|""

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	399901
Entropy (8bit):	7.903276922724044
Encrypted:	false
SSDEEP:	12288:7/49jfHtTZ1NmeCd/g4/hB7eQeZXBTLbYqqaUkqKs:zGHtvNmjdY4/hM1A/kfs
MD5:	FD663E073144C0E13B0CAA8B557A0DE5
SHA1:	04166745CE49E9C15ACE29B2D73D11317C05D7F6
SHA-256:	342D8F8DAEE87FFD5143F4BC6146B43346586A35AC9BB33B08A91FE5BEF6D922
SHA-512:	45817F0C14436FC2E6DE8AAEAEE085F94A4D250E2529FA5A9B37307AF9941D29A4F1ED40A333CEE9922D8DA62B6525B452873DB5F017DF5585AA20FFFAB13338
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2023/07/SaveInsta.App-2876484693686955359_6076186385.mp4:2f7812fee70901:0
Preview:	... ftypisom....isomiso2avc1mp41..c.moov...lmvhd..................u.................................................@.................................MNtrak...\tkhd......................u0................................................@..............$edts....elst..........u0..........L.mdia... mdhd..............<.....U......-hdlr........vide............VideoHandler...Lqminf....vmhd...............$dinf....dref............url ......L1stbl....stsd............avc1.............................H...H...............................................3avcC.M@.....gM@..Z................<..-....h.......btrt...*.K;..'......stts...................0stss...............=...y...........;.......g....ctts.......`..........................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	dropped
Size (bytes):	156123
Entropy (8bit):	7.941959228872969
Encrypted:	false
SSDEEP:	3072:xSSXN7dSSXN7X5eiQy152NH6rZTIG303+4aZ50Xrpr6kYzL1CNBvMtZsGHB/1:xSeZdSeZX6y14Q/sTaZ50Xr5YiUXFB/1
MD5:	05337AADA723147F42F0CC741838D5C4
SHA1:	A73B457464BF9C5E50A5FDE7131845865CB78B5C
SHA-256:	23625426E547C886B7B2B439056CCBB87A14643A2B56B14CD63146B2077B9BCB
SHA-512:	0E0F42A110F089D96F13E5B852F02F09F0A63E3CD2E786E6EDABB1BD7F82EE9A58AAE8F446327E329B71BFB2B0BD338ABAC94D97E0CC903973CEF11286EA7E51
Malicious:	false
Reputation:	low
Preview:	....%.Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:23:48..............0231...................................................................r...........z.(................................$m.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....Q..,...Lw.ED.b.c.;..........?x}..K..d......o.....K..o..2G.].=.~..]....u

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.912574835513875
Encrypted:	false
SSDEEP:	24576:AXQ7OOzT2H3eDr5+J7pmILSGF8XMOo/KBb4XRVm2DgbqL0fdI7Cvg5C:AXQ7bi3eDr507pmQS9oGMw2RLYdI7CvL
MD5:	78FE6ED8CF7DC78D1E3B2B49D9055C81
SHA1:	65C89611BB0D8546C8BCC82789D79113CEAC47C8
SHA-256:	877A20A6B8A354658486B9AE502593C6AC86D1883097AFD195559D40CFED808C
SHA-512:	25F22E68F5CEAB185985C4181BB86F3C3E6416C59302CBF9A0FFF9E2E361AF166A553D25E33ABC9077D0F17A1AC0790727B03181B5F6568E00C4CFDB9339D9DF
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4:2f7812ff14ab09:f
Preview:	....>.\..a....U....-..R=I.....h...qy61....{J#mD1.R.....;..F..B[.....e.b#.<.}..........p@...F...-.OTu.3.J..!1i@....?.. .-A.8Ly.$.....6.-.s0X..).QJ.1..v....1.....z..r...W.}.....G~. .].....a1.}q..`d...p/0..b..3....e]%.\|..E.....-k..'.T......M.pD..d.@..llX.....}...%..hI.,P.......!../hm..i6P...:V..?<Zw.9 7.}...M.....=.+.o.w.....S..S.h..OW.N....5..=.;4.v..0>.#..H.$....}&1..7.mo..]S...P.%f..Q..ez...:.e.j..lT$!..g8.rn....'....O. ..."b....XP65\|..?,.5...j.}...VD..%1.......LuK...:d..`............x..>.uHdT.=..Xm..K..=.MM....I.dy.k.........9zh.l..i..1....."K\|O.O.....{.a.K2.".B8...c..............l...XS.....ya.^.W.q...;.x.....s....S...S.5Kc.K't...v.$..e.].e.G+6...q...NX.Y.6..._...L:..d ...W..Bi...)I.E.....A........g8M.....C.t..Q.FA..I..cv..F .K.L+.<...M...K......U....t..R.5.....%.....;...b....^.L.Q..d....,.^).-...~..0..:.M.qZ...N[Q/n........3..,.^..`..a...QzE.d..t#p.....2..C...a}....z.l.[...d....M....9.o.a....y....w.isI.N.0.U[.X.#..<..69..].A$.7!.&.}..

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=768], progressive, precision 8, 768x935, components 3
Category:	downloaded
Size (bytes):	92130
Entropy (8bit):	7.886952315130371
Encrypted:	false
SSDEEP:	1536:DJzMqXjn4JzMqXjnQZqJtbJYtBLt+jwe/RC89k2Z1F/Vgiw/rJxYJES3uG+L0r:NtjnqtjnbJtqtX+Me/Rr9kuFA/txOubi
MD5:	1277B583A6DD5ACDAE89EADA87686B5A
SHA1:	8D5CF90F2D65E14997EEA7BECC19EA5FD9B54749
SHA-256:	5774FD1D7B6716070C3AAD294E5621B79BF5FC3F16BE32FC3FE80FA1F5D03372
SHA-512:	A3E49B5FBEB2F8164408E5F4799A759229630E3F88116CB6D9FDE44F98E495D7707A8377CEEFB22605A34E8FD376B8934667504DC3DE431189B68EA3C5A61792
Malicious:	false
Reputation:	low
URL:	https://www.campobahia.com/wp-content/uploads/2022/07/002.jpg
Preview:	....".Exif..MM.*.......................................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 23.4 (Macintosh).2022:07:26 11:19:00..............0231...................................................................r...........z.(................................![.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..s~.u...2z.M....=...3r..N....sz.e..-;@.....T....Y..X~....M..9../.......H

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	4.286677038172223
Encrypted:	false
SSDEEP:	24:t4UJfbMphWIWQJlYLOs5PX1Ypla9rQauXdpYPGC+wo132:7AaIWiGztoUfurYRGg
MD5:	D942A1BFC6B09DBB0AFD50FD655B0186
SHA1:	623BF13980B1DDEA57453D061C03F103EBF5889C
SHA-256:	2FF5EBEE337B58F4CC458B634BD05D1ECB804CFFC6F8FDC6DEE2EB90AC32D2BC
SHA-512:	97446D8A6ADB6128AF903ECBFFCDD8190F5EE1BB035BA0DF4EC423D93E2659BE9DCC0D2560E3D8C7AE045FB04C20F4E57083FC65114C603C50B71FE9C378D6E6
Malicious:	false
Reputation:	low
URL:	https://book.omnibees.com/icons/icons_White/iconWhite_Information.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14">. <path id="icon_Information" d="M7,0a7,7,0,1,0,7,7A7,7,0,0,0,7,0ZM8.457,10.849q-.54.213-.862.325a2.275,2.275,0,0,1-.748.112,1.49,1.49,0,0,1-1.017-.319,1.031,1.031,0,0,1-.362-.81,2.942,2.942,0,0,1,.027-.391c.018-.133.047-.282.087-.45l.451-1.593c.04-.153.074-.3.1-.433a1.921,1.921,0,0,0,.04-.375.578.578,0,0,0-.126-.425.714.714,0,0,0-.482-.119,1.264,1.264,0,0,0-.359.053c-.121.037-.227.071-.313.1l.119-.491q.443-.18.847-.309A2.5,2.5,0,0,1,6.625,5.6a1.463,1.463,0,0,1,1,.314,1.043,1.043,0,0,1,.352.815q0,.1-.024.366a2.447,2.447,0,0,1-.09.481L7.417,9.163c-.037.127-.069.273-.1.436a2.306,2.306,0,0,0-.043.371.533.533,0,0,0,.142.431.793.793,0,0,0,.49.115,1.422,1.422,0,0,0,.371-.057,2.109,2.109,0,0,0,.3-.1ZM8.377,4.4a1.071,1.071,0,0,1-.756.292A1.082,1.082,0,0,1,6.863,4.4.931.931,0,0,1,6.548,3.7a.94.94,0,0,1,.316-.709,1.074,1.074,0,0,1,.759-.295,1.062,1.062,0,0,1,.756.295.955.955,0,0,1,0,1.416Z" fill="#FFFFFF"/>.</svg

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 137x100, components 3
Category:	dropped
Size (bytes):	1932
Entropy (8bit):	7.69225097110384
Encrypted:	false
SSDEEP:	48:emowKkHPZ7XXKbSxtVsand08sQvD7fTpU1ID0zV2mb:em08Xa2fVsSdVsKDXpQID0zYmb
MD5:	AD21F3A2FF3F94073D9D4FF6DEB3FC3E
SHA1:	7B06332BDC27E83A796FB9E83B9926D0F4E24D13
SHA-256:	BC7BCFB0AFDC1AE4B76111BC0E2C4D26ED00F241C6406271E773E817D1661479
SHA-512:	80F8C4CDDC5C22BF054B86BBC16C64256BB1429736CCE8039B3C055B0EA064969B9D8C854107CD7F99AF7D4AC52357D92BF42E8B6477E2CCE5F90784E4DE6C82
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......d...."..........y.....................................................!"1.AQaR.2.q..#$c..............................................".2............?...DD.D@DD.D@E..m9...z.T.D@DD.D@DD.D@DD.DA.....K5]A..6K._....,...#3..R...8I."........>..'i+.V.p..c.L.,...t-....}O...p.T.US..q..7.."........$\/`..i..B@#'..W.....K.3.]<5.....5]E..2IM8......t...e.ZR.............w..-\|.1...:jzoY(T...Ht...1.6p-...yWK.M....UBN.~E..?.c....eY.=.....X.../T..8....Yw[......" ""." ""." ...\.!...jcy2..\.3.H.w.6.....D_.d.y!'....s......P.1....K..~....e...T.v..M)....q9..o.......c...CU_.Tz..T..R...$..L[l..wl..\-.$.0..@..C.%..`..>.Z.z>.Y..u.m,q<..:..yJFp.....O...q<.t..(..A.....8.G..W...)2..Q#BlqP.r.F\|.dnBy."g}..[.Z.J.!99.3.6y.3/...~V.l....0DD.D@DD.......Z...("l...".J..T..%U.......1..x..}...<o.%Lu-u..Hc...n..P._.2..p.G.{.x.....lx....R

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2024 07:14:06.234375000 CEST	192.168.2.5	1.1.1.1	0xc88b	Standard query (0)	www.campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:06.234472036 CEST	192.168.2.5	1.1.1.1	0x27b0	Standard query (0)	www.campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:08.040868998 CEST	192.168.2.5	1.1.1.1	0x9eea	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:08.045336008 CEST	192.168.2.5	1.1.1.1	0x98bb	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
May 28, 2024 07:14:08.255029917 CEST	192.168.2.5	1.1.1.1	0xacb6	Standard query (0)	www.campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:08.255635023 CEST	192.168.2.5	1.1.1.1	0x5e00	Standard query (0)	www.campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:08.870434046 CEST	192.168.2.5	1.1.1.1	0xb7e4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:08.872909069 CEST	192.168.2.5	1.1.1.1	0x8f47	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 07:14:10.460509062 CEST	192.168.2.5	1.1.1.1	0xaa8e	Standard query (0)	campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:10.460685015 CEST	192.168.2.5	1.1.1.1	0x31da	Standard query (0)	campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.548640966 CEST	192.168.2.5	1.1.1.1	0xc6fc	Standard query (0)	campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.549087048 CEST	192.168.2.5	1.1.1.1	0x3b1f	Standard query (0)	campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.667095900 CEST	192.168.2.5	1.1.1.1	0x8a7c	Standard query (0)	llimages.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.667532921 CEST	192.168.2.5	1.1.1.1	0x14bb	Standard query (0)	llimages.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.671556950 CEST	192.168.2.5	1.1.1.1	0x3411	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.671855927 CEST	192.168.2.5	1.1.1.1	0x7d2c	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.677413940 CEST	192.168.2.5	1.1.1.1	0x334a	Standard query (0)	www.cookieconsent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.677967072 CEST	192.168.2.5	1.1.1.1	0xef8e	Standard query (0)	www.cookieconsent.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.796539068 CEST	192.168.2.5	1.1.1.1	0x8e4d	Standard query (0)	www.cookieconsent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.796709061 CEST	192.168.2.5	1.1.1.1	0xc98e	Standard query (0)	www.cookieconsent.com	65	IN (0x0001)	false
May 28, 2024 07:14:11.822945118 CEST	192.168.2.5	1.1.1.1	0x310	Standard query (0)	www.campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.824649096 CEST	192.168.2.5	1.1.1.1	0x2e51	Standard query (0)	www.campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:12.813083887 CEST	192.168.2.5	1.1.1.1	0xc77f	Standard query (0)	www.termsfeed.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.813255072 CEST	192.168.2.5	1.1.1.1	0x16fd	Standard query (0)	www.termsfeed.com	65	IN (0x0001)	false
May 28, 2024 07:14:12.876187086 CEST	192.168.2.5	1.1.1.1	0xf117	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.876744032 CEST	192.168.2.5	1.1.1.1	0xfda9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 28, 2024 07:14:12.998956919 CEST	192.168.2.5	1.1.1.1	0x278e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.999332905 CEST	192.168.2.5	1.1.1.1	0x2d65	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 28, 2024 07:14:13.053878069 CEST	192.168.2.5	1.1.1.1	0x582e	Standard query (0)	llimages.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.054168940 CEST	192.168.2.5	1.1.1.1	0x3981	Standard query (0)	llimages.com	65	IN (0x0001)	false
May 28, 2024 07:14:13.768349886 CEST	192.168.2.5	1.1.1.1	0xcada	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.768768072 CEST	192.168.2.5	1.1.1.1	0x24ff	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 28, 2024 07:14:13.971359015 CEST	192.168.2.5	1.1.1.1	0xb447	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.971359015 CEST	192.168.2.5	1.1.1.1	0xf1c6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 07:14:17.537620068 CEST	192.168.2.5	1.1.1.1	0x64f6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:17.537847042 CEST	192.168.2.5	1.1.1.1	0xfbcf	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 28, 2024 07:14:18.485611916 CEST	192.168.2.5	1.1.1.1	0xea36	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:18.485883951 CEST	192.168.2.5	1.1.1.1	0x82a3	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 28, 2024 07:14:33.845968962 CEST	192.168.2.5	1.1.1.1	0xd6b	Standard query (0)	www.campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:33.846311092 CEST	192.168.2.5	1.1.1.1	0x729b	Standard query (0)	www.campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:37.043715954 CEST	192.168.2.5	1.1.1.1	0xe60d	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:37.043956995 CEST	192.168.2.5	1.1.1.1	0xc8e4	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
May 28, 2024 07:14:37.735198021 CEST	192.168.2.5	1.1.1.1	0x1b55	Standard query (0)	campobahia.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:37.735624075 CEST	192.168.2.5	1.1.1.1	0x8ec2	Standard query (0)	campobahia.com	65	IN (0x0001)	false
May 28, 2024 07:14:40.657619953 CEST	192.168.2.5	1.1.1.1	0xc6da	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.657787085 CEST	192.168.2.5	1.1.1.1	0xb7f8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 28, 2024 07:14:40.696041107 CEST	192.168.2.5	1.1.1.1	0xb4c4	Standard query (0)	www.cookieconsent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.696284056 CEST	192.168.2.5	1.1.1.1	0x2df	Standard query (0)	www.cookieconsent.com	65	IN (0x0001)	false
May 28, 2024 07:14:41.283982038 CEST	192.168.2.5	1.1.1.1	0x73df	Standard query (0)	llimages.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.284127951 CEST	192.168.2.5	1.1.1.1	0x8be3	Standard query (0)	llimages.com	65	IN (0x0001)	false
May 28, 2024 07:14:41.332093000 CEST	192.168.2.5	1.1.1.1	0x5582	Standard query (0)	www.termsfeed.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.332403898 CEST	192.168.2.5	1.1.1.1	0xca61	Standard query (0)	www.termsfeed.com	65	IN (0x0001)	false
May 28, 2024 07:14:41.406032085 CEST	192.168.2.5	1.1.1.1	0x87dc	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.406168938 CEST	192.168.2.5	1.1.1.1	0x7a54	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 28, 2024 07:14:46.072160006 CEST	192.168.2.5	1.1.1.1	0x7d0b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:46.079092026 CEST	192.168.2.5	1.1.1.1	0x6108	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 28, 2024 07:14:47.884381056 CEST	192.168.2.5	1.1.1.1	0x408	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:47.884587049 CEST	192.168.2.5	1.1.1.1	0x3783	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 28, 2024 07:14:56.738665104 CEST	192.168.2.5	1.1.1.1	0xd55	Standard query (0)	api.whatsapp.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:56.738794088 CEST	192.168.2.5	1.1.1.1	0xf555	Standard query (0)	api.whatsapp.com	65	IN (0x0001)	false
May 28, 2024 07:14:58.228756905 CEST	192.168.2.5	1.1.1.1	0x1e16	Standard query (0)	static.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:58.229144096 CEST	192.168.2.5	1.1.1.1	0x1164	Standard query (0)	static.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:14:58.312877893 CEST	192.168.2.5	1.1.1.1	0x9c30	Standard query (0)	scontent.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:58.313030005 CEST	192.168.2.5	1.1.1.1	0x8a80	Standard query (0)	scontent.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:14:59.276961088 CEST	192.168.2.5	1.1.1.1	0x4ff5	Standard query (0)	pps.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.277182102 CEST	192.168.2.5	1.1.1.1	0x4983	Standard query (0)	pps.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:14:59.280019045 CEST	192.168.2.5	1.1.1.1	0x38d9	Standard query (0)	scontent.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.280138016 CEST	192.168.2.5	1.1.1.1	0xdabe	Standard query (0)	scontent.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:14:59.392071009 CEST	192.168.2.5	1.1.1.1	0xb789	Standard query (0)	static.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.392220020 CEST	192.168.2.5	1.1.1.1	0xe319	Standard query (0)	static.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:15:00.562787056 CEST	192.168.2.5	1.1.1.1	0x8435	Standard query (0)	pps.whatsapp.net	65	IN (0x0001)	false
May 28, 2024 07:15:00.562787056 CEST	192.168.2.5	1.1.1.1	0x9efa	Standard query (0)	pps.whatsapp.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:03.669406891 CEST	192.168.2.5	1.1.1.1	0x3af	Standard query (0)	book.omnibees.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:03.669882059 CEST	192.168.2.5	1.1.1.1	0x2977	Standard query (0)	book.omnibees.com	65	IN (0x0001)	false
May 28, 2024 07:15:04.019349098 CEST	192.168.2.5	1.1.1.1	0x5b6b	Standard query (0)	api.whatsapp.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:04.019957066 CEST	192.168.2.5	1.1.1.1	0x27a7	Standard query (0)	api.whatsapp.com	65	IN (0x0001)	false
May 28, 2024 07:15:05.458014965 CEST	192.168.2.5	1.1.1.1	0x125c	Standard query (0)	pixel.asksuite.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:05.458200932 CEST	192.168.2.5	1.1.1.1	0xbfd3	Standard query (0)	pixel.asksuite.com	65	IN (0x0001)	false
May 28, 2024 07:15:05.458623886 CEST	192.168.2.5	1.1.1.1	0x2e87	Standard query (0)	media.omnibees.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:05.458784103 CEST	192.168.2.5	1.1.1.1	0x5605	Standard query (0)	media.omnibees.com	65	IN (0x0001)	false
May 28, 2024 07:15:07.348510027 CEST	192.168.2.5	1.1.1.1	0xbd77	Standard query (0)	media.omnibees.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:07.348860979 CEST	192.168.2.5	1.1.1.1	0xdee7	Standard query (0)	media.omnibees.com	65	IN (0x0001)	false
May 28, 2024 07:15:08.059824944 CEST	192.168.2.5	1.1.1.1	0xe1a7	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.060118914 CEST	192.168.2.5	1.1.1.1	0x12c1	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 28, 2024 07:15:08.061960936 CEST	192.168.2.5	1.1.1.1	0xb1fe	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.063119888 CEST	192.168.2.5	1.1.1.1	0x85df	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
May 28, 2024 07:15:08.126689911 CEST	192.168.2.5	1.1.1.1	0x29f7	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.126893997 CEST	192.168.2.5	1.1.1.1	0xd523	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
May 28, 2024 07:15:08.566816092 CEST	192.168.2.5	1.1.1.1	0x360a	Standard query (0)	book.omnibees.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.566992044 CEST	192.168.2.5	1.1.1.1	0x63ca	Standard query (0)	book.omnibees.com	65	IN (0x0001)	false
May 28, 2024 07:15:09.177741051 CEST	192.168.2.5	1.1.1.1	0x9429	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:09.178011894 CEST	192.168.2.5	1.1.1.1	0x25b1	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
May 28, 2024 07:15:11.968338013 CEST	192.168.2.5	1.1.1.1	0x77a7	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.968729019 CEST	192.168.2.5	1.1.1.1	0x90e7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 28, 2024 07:15:11.970647097 CEST	192.168.2.5	1.1.1.1	0xa4ba	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.970890999 CEST	192.168.2.5	1.1.1.1	0xbd80	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 07:15:12.404671907 CEST	192.168.2.5	1.1.1.1	0x58bc	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.404900074 CEST	192.168.2.5	1.1.1.1	0x4229	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 07:15:12.405713081 CEST	192.168.2.5	1.1.1.1	0xa47b	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.405713081 CEST	192.168.2.5	1.1.1.1	0xe7d2	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
May 28, 2024 07:15:12.882848024 CEST	192.168.2.5	1.1.1.1	0xdc20	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.882992983 CEST	192.168.2.5	1.1.1.1	0x5a25	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 28, 2024 07:15:24.121351004 CEST	192.168.2.5	1.1.1.1	0x92c8	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:24.121838093 CEST	192.168.2.5	1.1.1.1	0xe8ca	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 07:15:27.350413084 CEST	192.168.2.5	1.1.1.1	0xfdb3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:27.350541115 CEST	192.168.2.5	1.1.1.1	0x8eae	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2024 07:14:06.942133904 CEST	1.1.1.1	192.168.2.5	0xc88b	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:06.942133904 CEST	1.1.1.1	192.168.2.5	0xc88b	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:07.035114050 CEST	1.1.1.1	192.168.2.5	0x27b0	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.049890995 CEST	1.1.1.1	192.168.2.5	0x9eea	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.049890995 CEST	1.1.1.1	192.168.2.5	0x9eea	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.055521011 CEST	1.1.1.1	192.168.2.5	0x98bb	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.055521011 CEST	1.1.1.1	192.168.2.5	0x98bb	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.815010071 CEST	1.1.1.1	192.168.2.5	0xacb6	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:08.815010071 CEST	1.1.1.1	192.168.2.5	0xacb6	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:08.878067970 CEST	1.1.1.1	192.168.2.5	0xb7e4	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:08.879925966 CEST	1.1.1.1	192.168.2.5	0x8f47	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 07:14:08.974446058 CEST	1.1.1.1	192.168.2.5	0x5e00	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:10.646246910 CEST	1.1.1.1	192.168.2.5	0xaa8e	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.678927898 CEST	1.1.1.1	192.168.2.5	0x3411	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:11.678927898 CEST	1.1.1.1	192.168.2.5	0x3411	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:11.679676056 CEST	1.1.1.1	192.168.2.5	0x7d2c	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:11.679676056 CEST	1.1.1.1	192.168.2.5	0x7d2c	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:11.681951046 CEST	1.1.1.1	192.168.2.5	0x8a7c	No error (0)	llimages.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.681951046 CEST	1.1.1.1	192.168.2.5	0x8a7c	No error (0)	llimages.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.686659098 CEST	1.1.1.1	192.168.2.5	0x334a	No error (0)	www.cookieconsent.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.686659098 CEST	1.1.1.1	192.168.2.5	0x334a	No error (0)	www.cookieconsent.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.687748909 CEST	1.1.1.1	192.168.2.5	0xef8e	No error (0)	www.cookieconsent.com			65	IN (0x0001)	false
May 28, 2024 07:14:11.702032089 CEST	1.1.1.1	192.168.2.5	0x14bb	No error (0)	llimages.com			65	IN (0x0001)	false
May 28, 2024 07:14:11.803812027 CEST	1.1.1.1	192.168.2.5	0x8e4d	No error (0)	www.cookieconsent.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.803812027 CEST	1.1.1.1	192.168.2.5	0x8e4d	No error (0)	www.cookieconsent.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:11.804371119 CEST	1.1.1.1	192.168.2.5	0xc98e	No error (0)	www.cookieconsent.com			65	IN (0x0001)	false
May 28, 2024 07:14:11.921469927 CEST	1.1.1.1	192.168.2.5	0xc6fc	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.195426941 CEST	1.1.1.1	192.168.2.5	0x310	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:12.195426941 CEST	1.1.1.1	192.168.2.5	0x310	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.340594053 CEST	1.1.1.1	192.168.2.5	0x2e51	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:12.821610928 CEST	1.1.1.1	192.168.2.5	0xc77f	No error (0)	www.termsfeed.com		172.67.75.149	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.821610928 CEST	1.1.1.1	192.168.2.5	0xc77f	No error (0)	www.termsfeed.com		104.26.7.160	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.821610928 CEST	1.1.1.1	192.168.2.5	0xc77f	No error (0)	www.termsfeed.com		104.26.6.160	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:12.883210897 CEST	1.1.1.1	192.168.2.5	0xf117	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.006104946 CEST	1.1.1.1	192.168.2.5	0x278e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:13.006104946 CEST	1.1.1.1	192.168.2.5	0x278e	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.006431103 CEST	1.1.1.1	192.168.2.5	0x2d65	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:13.066551924 CEST	1.1.1.1	192.168.2.5	0x582e	No error (0)	llimages.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.066551924 CEST	1.1.1.1	192.168.2.5	0x582e	No error (0)	llimages.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.092569113 CEST	1.1.1.1	192.168.2.5	0x3981	No error (0)	llimages.com			65	IN (0x0001)	false
May 28, 2024 07:14:13.775619984 CEST	1.1.1.1	192.168.2.5	0xcada	No error (0)	analytics.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.776076078 CEST	1.1.1.1	192.168.2.5	0x24ff	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:13.978533983 CEST	1.1.1.1	192.168.2.5	0xb447	No error (0)	stats.g.doubleclick.net		142.250.110.157	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.978533983 CEST	1.1.1.1	192.168.2.5	0xb447	No error (0)	stats.g.doubleclick.net		142.250.110.155	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.978533983 CEST	1.1.1.1	192.168.2.5	0xb447	No error (0)	stats.g.doubleclick.net		142.250.110.154	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:13.978533983 CEST	1.1.1.1	192.168.2.5	0xb447	No error (0)	stats.g.doubleclick.net		142.250.110.156	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:17.544317961 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:17.544317961 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:17.544635057 CEST	1.1.1.1	192.168.2.5	0xfbcf	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:18.492960930 CEST	1.1.1.1	192.168.2.5	0xea36	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:18.492960930 CEST	1.1.1.1	192.168.2.5	0xea36	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:18.493051052 CEST	1.1.1.1	192.168.2.5	0x82a3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:21.563832045 CEST	1.1.1.1	192.168.2.5	0x37a0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:21.563832045 CEST	1.1.1.1	192.168.2.5	0x37a0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:34.400671959 CEST	1.1.1.1	192.168.2.5	0x729b	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:34.532565117 CEST	1.1.1.1	192.168.2.5	0xd6b	No error (0)	www.campobahia.com	campobahia.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:34.532565117 CEST	1.1.1.1	192.168.2.5	0xd6b	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:35.393815041 CEST	1.1.1.1	192.168.2.5	0xde83	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:35.393815041 CEST	1.1.1.1	192.168.2.5	0xde83	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:37.051630974 CEST	1.1.1.1	192.168.2.5	0xe60d	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:37.051630974 CEST	1.1.1.1	192.168.2.5	0xe60d	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:37.198399067 CEST	1.1.1.1	192.168.2.5	0xc8e4	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:37.198399067 CEST	1.1.1.1	192.168.2.5	0xc8e4	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:38.257520914 CEST	1.1.1.1	192.168.2.5	0x1b55	No error (0)	campobahia.com		50.116.87.228	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.664321899 CEST	1.1.1.1	192.168.2.5	0xc6da	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.664321899 CEST	1.1.1.1	192.168.2.5	0xc6da	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.664712906 CEST	1.1.1.1	192.168.2.5	0xb7f8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 28, 2024 07:14:40.703871965 CEST	1.1.1.1	192.168.2.5	0xb4c4	No error (0)	www.cookieconsent.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.703871965 CEST	1.1.1.1	192.168.2.5	0xb4c4	No error (0)	www.cookieconsent.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:40.705955029 CEST	1.1.1.1	192.168.2.5	0x2df	No error (0)	www.cookieconsent.com			65	IN (0x0001)	false
May 28, 2024 07:14:41.297660112 CEST	1.1.1.1	192.168.2.5	0x73df	No error (0)	llimages.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.297660112 CEST	1.1.1.1	192.168.2.5	0x73df	No error (0)	llimages.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.326023102 CEST	1.1.1.1	192.168.2.5	0x8be3	No error (0)	llimages.com			65	IN (0x0001)	false
May 28, 2024 07:14:41.339432955 CEST	1.1.1.1	192.168.2.5	0x5582	No error (0)	www.termsfeed.com		104.26.7.160	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.339432955 CEST	1.1.1.1	192.168.2.5	0x5582	No error (0)	www.termsfeed.com		104.26.6.160	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.339432955 CEST	1.1.1.1	192.168.2.5	0x5582	No error (0)	www.termsfeed.com		172.67.75.149	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.413165092 CEST	1.1.1.1	192.168.2.5	0x87dc	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:41.413165092 CEST	1.1.1.1	192.168.2.5	0x87dc	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:41.413181067 CEST	1.1.1.1	192.168.2.5	0x7a54	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:46.079020977 CEST	1.1.1.1	192.168.2.5	0x7d0b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:46.079020977 CEST	1.1.1.1	192.168.2.5	0x7d0b	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:46.086020947 CEST	1.1.1.1	192.168.2.5	0x6108	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:47.891618013 CEST	1.1.1.1	192.168.2.5	0x3783	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:47.891683102 CEST	1.1.1.1	192.168.2.5	0x408	No error (0)	analytics.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:56.745593071 CEST	1.1.1.1	192.168.2.5	0xd55	No error (0)	api.whatsapp.com	web.whatsapp.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:56.745593071 CEST	1.1.1.1	192.168.2.5	0xd55	No error (0)	web.whatsapp.com	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:56.745593071 CEST	1.1.1.1	192.168.2.5	0xd55	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.253.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:56.745870113 CEST	1.1.1.1	192.168.2.5	0xf555	No error (0)	api.whatsapp.com	web.whatsapp.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:56.745870113 CEST	1.1.1.1	192.168.2.5	0xf555	No error (0)	web.whatsapp.com	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:58.235605001 CEST	1.1.1.1	192.168.2.5	0x1e16	No error (0)	static.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:58.235605001 CEST	1.1.1.1	192.168.2.5	0x1e16	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.252.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:58.235726118 CEST	1.1.1.1	192.168.2.5	0x1164	No error (0)	static.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:58.319943905 CEST	1.1.1.1	192.168.2.5	0x8a80	No error (0)	scontent.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:58.320333004 CEST	1.1.1.1	192.168.2.5	0x9c30	No error (0)	scontent.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:58.320333004 CEST	1.1.1.1	192.168.2.5	0x9c30	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.253.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.283847094 CEST	1.1.1.1	192.168.2.5	0x4ff5	No error (0)	pps.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:59.283847094 CEST	1.1.1.1	192.168.2.5	0x4ff5	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.253.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.284312010 CEST	1.1.1.1	192.168.2.5	0x4983	No error (0)	pps.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:59.286766052 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	scontent.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:59.286766052 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.252.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.287197113 CEST	1.1.1.1	192.168.2.5	0xdabe	No error (0)	scontent.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:59.399915934 CEST	1.1.1.1	192.168.2.5	0xb789	No error (0)	static.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:14:59.399915934 CEST	1.1.1.1	192.168.2.5	0xb789	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.253.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:14:59.399926901 CEST	1.1.1.1	192.168.2.5	0xe319	No error (0)	static.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:00.569550037 CEST	1.1.1.1	192.168.2.5	0x8435	No error (0)	pps.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:00.570416927 CEST	1.1.1.1	192.168.2.5	0x9efa	No error (0)	pps.whatsapp.net	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:00.570416927 CEST	1.1.1.1	192.168.2.5	0x9efa	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.252.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:03.679558039 CEST	1.1.1.1	192.168.2.5	0x3af	No error (0)	book.omnibees.com		104.18.125.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:03.679558039 CEST	1.1.1.1	192.168.2.5	0x3af	No error (0)	book.omnibees.com		104.18.124.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:03.681684017 CEST	1.1.1.1	192.168.2.5	0x2977	No error (0)	book.omnibees.com			65	IN (0x0001)	false
May 28, 2024 07:15:04.027076006 CEST	1.1.1.1	192.168.2.5	0x27a7	No error (0)	api.whatsapp.com	web.whatsapp.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:04.027076006 CEST	1.1.1.1	192.168.2.5	0x27a7	No error (0)	web.whatsapp.com	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:04.027597904 CEST	1.1.1.1	192.168.2.5	0x5b6b	No error (0)	api.whatsapp.com	web.whatsapp.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:04.027597904 CEST	1.1.1.1	192.168.2.5	0x5b6b	No error (0)	web.whatsapp.com	mmx-ds.cdn.whatsapp.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:04.027597904 CEST	1.1.1.1	192.168.2.5	0x5b6b	No error (0)	mmx-ds.cdn.whatsapp.net		157.240.252.60	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:05.467405081 CEST	1.1.1.1	192.168.2.5	0x2e87	No error (0)	media.omnibees.com		104.18.125.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:05.467405081 CEST	1.1.1.1	192.168.2.5	0x2e87	No error (0)	media.omnibees.com		104.18.124.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:05.469362974 CEST	1.1.1.1	192.168.2.5	0x5605	No error (0)	media.omnibees.com			65	IN (0x0001)	false
May 28, 2024 07:15:05.487354040 CEST	1.1.1.1	192.168.2.5	0xbfd3	No error (0)	pixel.asksuite.com	pixel.asksuite.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:05.487389088 CEST	1.1.1.1	192.168.2.5	0x125c	No error (0)	pixel.asksuite.com	pixel.asksuite.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:07.357322931 CEST	1.1.1.1	192.168.2.5	0xbd77	No error (0)	media.omnibees.com		104.18.124.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:07.357322931 CEST	1.1.1.1	192.168.2.5	0xbd77	No error (0)	media.omnibees.com		104.18.125.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:07.360096931 CEST	1.1.1.1	192.168.2.5	0xdee7	No error (0)	media.omnibees.com			65	IN (0x0001)	false
May 28, 2024 07:15:08.066725016 CEST	1.1.1.1	192.168.2.5	0xe1a7	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.066725016 CEST	1.1.1.1	192.168.2.5	0xe1a7	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.066807032 CEST	1.1.1.1	192.168.2.5	0x12c1	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 28, 2024 07:15:08.068723917 CEST	1.1.1.1	192.168.2.5	0xb1fe	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.068723917 CEST	1.1.1.1	192.168.2.5	0xb1fe	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.070651054 CEST	1.1.1.1	192.168.2.5	0x85df	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
May 28, 2024 07:15:08.133604050 CEST	1.1.1.1	192.168.2.5	0x29f7	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:08.133604050 CEST	1.1.1.1	192.168.2.5	0x29f7	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.133604050 CEST	1.1.1.1	192.168.2.5	0x29f7	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.133604050 CEST	1.1.1.1	192.168.2.5	0x29f7	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.133604050 CEST	1.1.1.1	192.168.2.5	0x29f7	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.133637905 CEST	1.1.1.1	192.168.2.5	0xd523	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:08.825356960 CEST	1.1.1.1	192.168.2.5	0x63ca	No error (0)	book.omnibees.com			65	IN (0x0001)	false
May 28, 2024 07:15:08.826627970 CEST	1.1.1.1	192.168.2.5	0x360a	No error (0)	book.omnibees.com		104.18.125.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:08.826627970 CEST	1.1.1.1	192.168.2.5	0x360a	No error (0)	book.omnibees.com		104.18.124.82	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:09.185024023 CEST	1.1.1.1	192.168.2.5	0x9429	No error (0)	script.hotjar.com		13.32.27.107	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:09.185024023 CEST	1.1.1.1	192.168.2.5	0x9429	No error (0)	script.hotjar.com		13.32.27.19	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:09.185024023 CEST	1.1.1.1	192.168.2.5	0x9429	No error (0)	script.hotjar.com		13.32.27.21	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:09.185024023 CEST	1.1.1.1	192.168.2.5	0x9429	No error (0)	script.hotjar.com		13.32.27.54	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.975354910 CEST	1.1.1.1	192.168.2.5	0x90e7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:11.975440025 CEST	1.1.1.1	192.168.2.5	0x77a7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:11.975440025 CEST	1.1.1.1	192.168.2.5	0x77a7	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.975440025 CEST	1.1.1.1	192.168.2.5	0x77a7	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.975440025 CEST	1.1.1.1	192.168.2.5	0x77a7	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.975440025 CEST	1.1.1.1	192.168.2.5	0x77a7	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.977781057 CEST	1.1.1.1	192.168.2.5	0xa4ba	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.977781057 CEST	1.1.1.1	192.168.2.5	0xa4ba	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.977781057 CEST	1.1.1.1	192.168.2.5	0xa4ba	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:11.977781057 CEST	1.1.1.1	192.168.2.5	0xa4ba	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.415057898 CEST	1.1.1.1	192.168.2.5	0x58bc	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.416412115 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:12.416412115 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	vc-live-cf.hotjar.io		18.66.112.79	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.416412115 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	vc-live-cf.hotjar.io		18.66.112.110	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.416412115 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	vc-live-cf.hotjar.io		18.66.112.19	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.416412115 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	vc-live-cf.hotjar.io		18.66.112.15	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:12.416553020 CEST	1.1.1.1	192.168.2.5	0xe7d2	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:12.889790058 CEST	1.1.1.1	192.168.2.5	0xdc20	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:24.138358116 CEST	1.1.1.1	192.168.2.5	0x92c8	No error (0)	td.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:27.357156038 CEST	1.1.1.1	192.168.2.5	0xfdb3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:27.357156038 CEST	1.1.1.1	192.168.2.5	0xfdb3	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 28, 2024 07:15:27.357717991 CEST	1.1.1.1	192.168.2.5	0x8eae	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:32.085725069 CEST	1.1.1.1	192.168.2.5	0x8a2a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 07:15:32.085725069 CEST	1.1.1.1	192.168.2.5	0x8a2a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:07.008176088 CEST	511	OUT	GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:07.951466084 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Tue, 28 May 2024 05:14:07 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 b2 ed 72 db 48 b6 2d f8 5b 7a 8a 6d 56 54 91 72 11 e0 87 be 6c ca 72 7d d8 ae ee 3a 5d 5d 55 d7 72 9d ba e7 b8 7c 14 49 60 03 48 2b 91 89 ce 4c 90 a2 75 f4 0e f3 7f 7e 4c dc 98 88 89 98 88 79 8b f3 26 f3 04 f3 08 b3 33 01 f0 4b a4 24 cb ee be 7d 65 93 04 32 f7 5e 7b ed b5 d6 b3 47 2f 7f 79 f1 e6 df 7e 7d 05 99 cd c5 f3 dd 67 ee 07 04 93 e9 69 ab b0 c1 f7 af 5b 70 99 0b 69 46 c9 f8 b4 95 59 5b 98 51 af 37 9d 4e c3 84 45 38 56 ea 22 8c 54 de 1b f6 fb 4f 7a c9 38 17 4d 35 8b 63 9b 71 b3 da 52 1f fa 8e 0c 45 d1 63 05 0f 4c 81 51 0b 9e ef d2 64 64 f1 f3 dd 9d 67 39 5a 06 92 e5 78 da 4a 95 4a 05 06 86 5b 0c 26 a8 79 c2 23 66 b9 92 2d 88 94 b4 28 ed 69 2b 60 d9 f7 b3 0f f1 df d4 2f bf fc e9 c5 bf bf ff 73 fe a7 89 f9 e5 fd 4f fc c3 bf fe f5 a8 c0 a1 fe d7 ff a6 ff 1b fb f3 77 22 e9 4f 5b d0 9b e3 47 19 d3 06 a9 ff b7 37 3f 04 4f 5a 6b 73 27 1c a7 85 d2 76 69 ce 94 13 f9 d3 18 27 3c c2 c0 bf 74 81 4b 6e 39 13 81 89 98 c0 d3 41 17 72 3a c9 cb bc 39 f0 b0 82 [TRUNCATED] Data Ascii: 1faarH-[zmVTrlr}:]]Ur\|I`H+Lu~Ly&3K$}e2^{G/y~}gi[piFY[Q7NE8V"TOz8M5cqREcLQddg9ZxJJ[&y#f-(i+`/sOw"O[G7?OZks'vi'<tKn9Ar:9(HO.I"N{\|2VceM{-1^v!QBimEs!yscrM1c/P2&ax46\7ht\h4WA p;Yn>]?t5`y{qW7j;;mt$jI6{{t:w/!3;+((D~o\|3t/9aT"k=j}/mkj4JnrJgD]xo:7vI_LqlRk/;ZYZv?+W.h-z8+gLZXMMoQ7lie&_S3]T_RLh=Uqi`^fv+-XezD=,J\cN-w?1,uSPv
May 28, 2024 07:14:07.951538086 CEST	1236	IN	Data Raw: 2c ef 7b 1f 3b d5 6a c3 46 bf ee 63 b4 50 a9 5a d6 ea c7 9c 28 fe 32 7e 8f 91 13 6b 03 eb fb 90 ab 83 db 73 e0 3d ee 10 7b f7 a1 33 2d 82 48 49 67 74 af 2c 84 62 b1 e9 0d fb c3 41 af 7f e4 91 82 c9 20 2c 48 ce 6e ab ae fa ed b3 01 4e 79 6c b3 d6 Data Ascii: ,{;jFcPZ(2~ks={3-HIgt,bA ,HnNylhme\|%bMMj\_~FGA=7W@!3hX6dtqbZ7w8R@Ig-&,j,Bg2tc(f
May 28, 2024 07:14:07.951575994 CEST	448	IN	Data Raw: 81 c8 b0 c9 9f a9 38 7a 89 c1 d4 da 7f 6c 00 c9 45 96 93 ef 2b 86 af ec b7 12 c5 1b 09 33 9b 13 b6 0a f1 a9 79 ab 04 5d 86 1c ad 0c e8 56 0e 35 0e 8f 60 53 10 bc ec 27 bb bb 37 f3 6a ea bc 6e c8 32 65 b6 02 f7 91 37 56 73 99 f2 64 d6 a9 98 2d d2 Data Ascii: 8zlE+3y]V5`S'7jn2e7Vsd-\|e^d]]r({QFD2zY0dB(ss61LUKrw/PKMR@*s6HZ~62.iS?D^MPlFD\0chx>E}34q
May 28, 2024 07:14:07.951610088 CEST	1236	IN	Data Raw: 19 6e 93 66 f8 3f 5d 9a 3a b1 73 af 42 9c a0 a6 9c cd c3 d8 59 90 75 2c ba c0 e9 ed b2 ce dc 7a bb 2f 81 d3 d3 d3 c5 c9 db ba e1 9d db fd da 4b 70 4d 83 7b 8f 1f bb d8 c3 4b b4 a8 73 2e d1 00 4f c0 66 08 63 ad a6 06 35 99 a4 0a d4 62 56 43 19 78 Data Ascii: nf?]:sBYu,z/KpM{Ks.Ofc5bVCxJ7S/((PYct)0]!DiCP9XM GI23MD\|CxB^:f,~ka_OW/$4EeuJ4\4
May 28, 2024 07:14:07.951649904 CEST	1236	IN	Data Raw: d0 9a d7 5e 99 f9 95 98 75 7c f5 4e a4 a4 c5 4b 5b 19 be d3 5e f6 f7 8f d2 d9 49 df 24 4c bb 0b bd 1e b0 ca b6 0f ce 84 a9 37 e1 7d e5 6e 43 75 1b ca f7 35 8a 03 31 58 30 cd 2c 99 34 9e 51 4c 97 c0 8c 73 d4 43 ec 9d ec fa 5f 8d 24 a7 84 47 b0 b4 Data Ascii: ^u\|NK[^I$L7}nCu51X0,4QLsC_$G\2a cr{aD&9yKJY$?19UKIv@R\|.p.[tBPQX.-gH\0c*I:9ZK\5(BtZXMo]W+
May 28, 2024 07:14:07.951684952 CEST	1236	IN	Data Raw: 75 6a 69 97 57 ce 8c 5a 0f 13 5a 75 66 75 c5 b6 ae 69 2f ca df 56 3f 3b ff 72 f6 cb cf a1 f1 75 3c 99 75 c0 56 92 74 eb eb da c7 06 d3 0f 58 02 6e ca 7c 0a ce d0 9a d7 28 63 d4 3f c6 b4 19 ed 22 c4 6c a9 b8 aa 7d 17 be 57 5c 52 04 bb 6d 58 10 db Data Ascii: ujiWZZufui/V?;ru<uVtXn\|(c?"l}W\RmX;i5c==vbxi{_KBOaYe#KjMr>-k9x*Whb~s7u>\W?N(slk:AFtaSH
May 28, 2024 07:14:07.951723099 CEST	1236	IN	Data Raw: 5a f6 78 d9 dd 1b 51 d8 b2 33 41 3f eb 19 3b 13 f8 7c f7 99 ff 05 1e 9f b6 53 a1 c6 4c 04 fe c0 04 5c ba dd 82 c8 98 36 d8 59 81 a7 6d 87 d6 73 ef cf 77 c7 2a 9e 5d 05 01 f1 0b 0a 8d 06 6d 50 65 2d 20 be 44 8d 38 f4 fd df c9 c6 9a 68 c6 24 15 96 Data Ascii: ZxQ3A?;\|SL\6Ymsw]mPe- D8h$dAx$\>Zk&0(t'1;\7nQ2!neM@ptZk=,w#ooifIDUqocR'?xDa/WOpO"9aC*9EJ
May 28, 2024 07:14:07.951757908 CEST	1236	IN	Data Raw: 6c 40 1c 0b 16 5d 04 63 fa 4a b5 2a 65 13 e6 f5 83 5b 06 78 84 0d c8 cd 1e dc 64 64 01 9b 7d d2 90 75 b0 0d f3 a6 19 b7 f8 49 43 3c c2 b6 8c 14 5c 7e 9a 4e 73 94 ad be 6a 8c 3f 69 c2 1c 65 c3 04 51 e6 5c aa b2 19 a5 34 93 e9 a7 a9 b5 11 f1 ee c9 Data Ascii: l@]cJe[xdd}uIC<\~Nsj?ieQ\4,=<,Qk`[=L$OrjngiE9FU@AccJdrlMFA6f}4\>LyV75Bwo@eJ3>LHwOd?@iO3K!@u,2kd
May 28, 2024 07:14:07.951793909 CEST	1236	IN	Data Raw: d4 57 b0 c4 e6 f8 e0 49 71 e9 f0 c3 8c 92 ed 75 1f 97 d6 52 46 69 34 45 d2 7f 3b 30 fa 19 c1 17 4f 9f 3e 79 7a 1c 2d 6b b1 b5 73 cc a2 8b 54 ab 52 c6 0d c8 fa c9 36 3c c3 65 4a ce 17 ca 2d d5 b0 86 d0 ab 9e 94 42 c0 73 78 1b d1 ca e6 f1 69 eb fc Data Ascii: WIquRFi4E;0O>yz-ksTR6<eJ-Bsxik@H Zsg]eQ>17-Ssnc*(Ooy-2,ZZU3-PEYM`iVW./\gT7%J[WU-9i^w2V:&5
May 28, 2024 07:14:07.951834917 CEST	1236	IN	Data Raw: b2 a2 6a 85 48 31 66 d1 45 aa 55 29 e3 a0 d9 2a 8e c6 09 3b fe 3b 6f 35 ca d4 04 f5 27 f9 4b 53 1a 90 cf 94 98 8d 88 0b bb 3f 8b 30 1b 28 9b 49 7a 05 09 17 e2 33 cd 08 a3 52 6b 94 b6 aa 70 ed 9f a8 4a 03 78 5e b0 14 cf ff 5e 80 ab 26 2e 64 1f 27 Data Ascii: jH1fEU)*;;o5'KS?0(Iz3RkpJx^^&.d'A-\|<~}$J;+p42<hxP\hL`B}.2e{h+7)m631wT<Xe` %F0\|r"s1k&pf]09!,
May 28, 2024 07:14:07.957102060 CEST	1061	IN	Data Raw: 6c e0 a1 64 2a 90 9e 43 94 96 d6 b8 89 7a 78 b8 01 75 df 99 bf 0d 77 b8 d2 bf ff d1 fd fb 4e 43 a5 22 95 e7 a8 23 0c a2 0c a3 0b 55 5a ba 59 41 1e f6 3f 16 f9 e0 6e bd 6e ed 3f 5c ed 3f f8 d8 fe a3 4f eb 0f 33 64 31 9d e7 28 4b c2 88 71 cc f4 15 Data Ascii: ldCzxuwNC"#UZYA?nn?\?O3d1(KqLyl3?O,RP#y^A.oxhG-nN5%<RBzpe:8#&S+Hflk` )-GK.2e{"(SXB1
May 28, 2024 07:14:08.079544067 CEST	497	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.203382969 CEST	638	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 Content-Length: 307 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 70 65 65 6c 2f 70 65 65 6c 2e 63 73 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5">here</a>.</p></body></html>
May 28, 2024 07:14:08.251204967 CEST	498	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.371185064 CEST	640	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 Content-Length: 308 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 76 65 67 61 73 2f 76 65 67 61 73 2e 63 73 73 3f 76 65 72 3d 32 2e 34 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0">here</a>.</p></body></html>
May 28, 2024 07:14:08.378670931 CEST	465	OUT	GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.501121044 CEST	574	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 Content-Length: 275 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 73 74 79 6c 65 2d 6c 65 67 61 63 79 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1">here</a>.</p></body></html>
May 28, 2024 07:14:08.503055096 CEST	456	OUT	GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.626168966 CEST	556	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1 Content-Length: 266 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2d 63 68 69 6c 64 2d 6d 61 73 74 65 72 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1">here</a>.</p></body></html>
May 28, 2024 07:14:11.671057940 CEST	479	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.795080900 CEST	632	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 Content-Length: 304 Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 6d 61 67 6e 69 66 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:08.064183950 CEST	491	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.197318077 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 Content-Length: 301 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2d 61 6e 64 2d 73 68 6f 77 63 61 73 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 70 74 65 73 74 69 6d 6f 6e 69 61 6c 2e 63 73 73 3f 76 65 72 3d 32 2e 33 2e 31 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10">here</a>.</p></body></html>
May 28, 2024 07:14:08.244080067 CEST	477	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.373976946 CEST	598	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 Content-Length: 287 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 63 73 73 2f 61 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:08.379295111 CEST	485	OUT	GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.505218029 CEST	614	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 Content-Length: 295 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 74 68 69 73 2f 66 72 6f 6e 74 65 6e 64 2f 62 75 69 6c 64 2f 61 64 64 74 68 69 73 5f 77 6f 72 64 70 72 65 73 73 5f 70 75 62 6c 69 63 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3">here</a>.</p></body></html>
May 28, 2024 07:14:08.505783081 CEST	464	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.631876945 CEST	572	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 Content-Length: 274 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2e 63 73 73 3f 76 65 72 3d 33 2e 32 31 2e 38 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8">here</a>.</p></body></html>
May 28, 2024 07:14:11.670587063 CEST	479	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.798257113 CEST	632	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 Content-Length: 304 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 70 61 72 74 69 63 6c 65 73 2e 6a 73 3f 76 65 72 3d 32 2e 30 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0">here</a>.</p></body></html>
May 28, 2024 07:14:12.522367001 CEST	491	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:12.880127907 CEST	656	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 Content-Length: 316 Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 73 73 65 6e 74 69 61 6c 2d 61 64 64 6f 6e 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 74 65 2f 61 73 73 65 74 73 2f 66 72 6f 6e 74 2d 65 6e 64 2f 6a 73 2f 76 69 65 77 2f 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 39 2e 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22">here</a>.</p></body></html>
May 28, 2024 07:14:13.790678978 CEST	517	OUT	GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
May 28, 2024 07:14:13.917582035 CEST	518	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3 Content-Length: 247 Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 65 6d 6f 6a 69 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:08.071571112 CEST	483	OUT	GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.581715107 CEST	610	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 Content-Length: 293 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2f 70 75 62 6c 69 63 2f 63 73 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 70 75 62 6c 69 63 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 30 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1">here</a>.</p></body></html>
May 28, 2024 07:14:08.582505941 CEST	478	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.704978943 CEST	630	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 Content-Length: 303 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 69 63 6f 6e 48 65 6c 70 65 72 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:11.669481039 CEST	465	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.795840025 CEST	604	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 Content-Length: 290 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 6a 73 2f 76 34 2d 73 68 69 6d 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:08.072221994 CEST	491	OUT	GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.569407940 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 Content-Length: 301 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2f 70 75 62 6c 69 63 2f 66 6f 6e 74 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 30 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1">here</a>.</p></body></html>
May 28, 2024 07:14:08.570331097 CEST	508	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.690329075 CEST	660	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 Content-Length: 318 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 73 73 65 6e 74 69 61 6c 2d 61 64 64 6f 6e 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 74 65 2f 61 73 73 65 74 73 2f 66 72 6f 6e 74 2d 65 6e 64 2f 63 73 73 2f 76 69 65 77 2f 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 35 2e 39 2e 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22">here</a>.</p></body></html>
May 28, 2024 07:14:11.670042038 CEST	481	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.798238039 CEST	636	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 Content-Length: 306 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 61 6e 69 6d 61 74 65 64 2d 6d 61 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:12.512083054 CEST	482	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:12.758924007 CEST	638	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 Content-Length: 307 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 76 65 67 61 73 2f 76 65 67 61 73 2e 6a 73 3f 76 65 72 3d 32 2e 34 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0">here</a>.</p></body></html>
May 28, 2024 07:14:12.877237082 CEST	453	OUT	GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:13.000401020 CEST	580	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 Content-Length: 278 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 61 73 73 65 74 73 2f 6a 73 2f 62 75 69 6c 64 2f 6d 6f 64 65 72 6e 2f 66 72 6f 6e 74 65 6e 64 2e 6a 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1">here</a>.</p></body></html>
May 28, 2024 07:14:13.785902977 CEST	516	OUT	GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
May 28, 2024 07:14:13.907519102 CEST	516	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3 Content-Length: 246 Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:08.074624062 CEST	491	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.589274883 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 Content-Length: 301 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 65 61 65 2e 63 73 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5">here</a>.</p></body></html>
May 28, 2024 07:14:08.591876030 CEST	435	OUT	GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.719027042 CEST	544	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 Content-Length: 260 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2d 6d 69 67 72 61 74 65 2e 6a 73 3f 76 65 72 3d 33 2e 34 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1">here</a>.</p></body></html>
May 28, 2024 07:14:11.668726921 CEST	474	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.796206951 CEST	622	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 Content-Length: 299 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 65 61 65 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:08.081227064 CEST	482	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.585249901 CEST	608	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 Content-Length: 292 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 63 73 73 2f 76 34 2d 73 68 69 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:08.586246014 CEST	427	OUT	GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:08.709311962 CEST	528	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:08 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1 Content-Length: 252 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2e 6a 73 3f 76 65 72 3d 33 2e 37 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1">here</a>.</p></body></html>
May 28, 2024 07:14:11.669032097 CEST	472	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 07:14:11.794434071 CEST	618	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 Content-Length: 297 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 62 75 69 6c 64 2f 69 6e 64 65 78 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49803	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:27.215379000 CEST	650	OUT	GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.160164118 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Tue, 28 May 2024 05:14:27 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 b2 ed 72 db 48 b6 2d f8 5b 7a 8a 6d 56 54 91 72 11 e0 87 be 6c ca 72 7d d8 ae ee 3a 5d 5d 55 d7 72 9d ba e7 b8 7c 14 49 60 03 48 2b 91 89 ce 4c 90 a2 75 f4 0e f3 7f 7e 4c dc 98 88 89 98 88 79 8b f3 26 f3 04 f3 08 b3 33 01 f0 4b a4 24 cb ee be 7d 65 93 04 32 f7 5e 7b ed b5 d6 b3 47 2f 7f 79 f1 e6 df 7e 7d 05 99 cd c5 f3 dd 67 ee 07 04 93 e9 69 ab b0 c1 f7 af 5b 70 99 0b 69 46 c9 f8 b4 95 59 5b 98 51 af 37 9d 4e c3 84 45 38 56 ea 22 8c 54 de 1b f6 fb 4f 7a c9 38 17 4d 35 8b 63 9b 71 b3 da 52 1f fa 8e 0c 45 d1 63 05 0f 4c 81 51 0b 9e ef d2 64 64 f1 f3 dd 9d 67 39 5a 06 92 e5 78 da 4a 95 4a 05 06 86 5b 0c 26 a8 79 c2 23 66 b9 92 2d 88 94 b4 28 ed 69 2b 60 d9 f7 b3 0f f1 df d4 2f bf fc e9 c5 bf bf ff 73 fe a7 89 f9 e5 fd 4f fc c3 bf fe f5 a8 c0 a1 fe d7 ff a6 ff 1b fb f3 77 22 e9 4f 5b d0 9b e3 47 19 d3 06 a9 ff b7 37 3f 04 4f 5a 6b 73 27 1c a7 85 d2 76 69 ce 94 13 f9 d3 18 27 3c c2 c0 bf 74 81 4b 6e 39 13 81 89 98 c0 d3 41 17 72 3a c9 cb bc 39 f0 b0 82 [TRUNCATED] Data Ascii: 1faarH-[zmVTrlr}:]]Ur\|I`H+Lu~Ly&3K$}e2^{G/y~}gi[piFY[Q7NE8V"TOz8M5cqREcLQddg9ZxJJ[&y#f-(i+`/sOw"O[G7?OZks'vi'<tKn9Ar:9(HO.I"N{\|2VceM{-1^v!QBimEs!yscrM1c/P2&ax46\7ht\h4WA p;Yn>]?t5`y{qW7j;;mt$jI6{{t:w/!3;+((D~o\|3t/9aT"k=j}/mkj4JnrJgD]xo:7vI_LqlRk/;ZYZv?+W.h-z8+gLZXMMoQ7lie&_S3]T_RLh=Uqi`^fv+-XezD=,J\cN-w?1,uSPv
May 28, 2024 07:14:28.160207033 CEST	224	IN	Data Raw: 2c ef 7b 1f 3b d5 6a c3 46 bf ee 63 b4 50 a9 5a d6 ea c7 9c 28 fe 32 7e 8f 91 13 6b 03 eb fb 90 ab 83 db 73 e0 3d ee 10 7b f7 a1 33 2d 82 48 49 67 74 af 2c 84 62 b1 e9 0d fb c3 41 af 7f e4 91 82 c9 20 2c 48 ce 6e ab ae fa ed b3 01 4e 79 6c b3 d6 Data Ascii: ,{;jFcPZ(2~ks={3-HIgt,bA ,HnNylhme\|%bMMj\_~FGA=7W@!3hX6dtqbZ7w8R@Ig-&,j,Bg
May 28, 2024 07:14:28.160247087 CEST	1236	IN	Data Raw: b6 a7 8d f9 fa 32 17 74 c5 ad a0 bb 1f 10 63 28 98 66 b0 a4 34 7c a5 d9 df 4a 75 d2 aa e6 de 26 73 42 fd bd d6 27 33 88 11 08 8d 12 f3 5f ff 43 73 65 3e 85 11 7d 1c 90 59 a6 56 39 5e 93 b1 78 69 7b ef d9 84 55 a7 ad e7 bb bd c7 f0 ec d1 db 17 2f Data Ascii: 2tc(f4\|Ju&sB'3_Cse>}YV9^xi{U/{[xrix>-0WZejZcf7-GP*fo78PX^$}5z4}U{W5jkl}S0:+.#Qn{\|c\|3A}zlVOHU-J
May 28, 2024 07:14:28.160283089 CEST	1236	IN	Data Raw: c0 83 f0 e9 7d 02 f8 82 c9 09 33 af bd 02 34 e3 05 71 c0 4b 3b 7c 79 ed e9 d0 23 0c 5f 42 7d 1a ae 74 56 a6 5c 3b 59 07 70 86 76 21 2d ad e7 42 bb b5 7c b8 bd bc 6a d1 68 4b 2d e1 6a ac 94 40 26 af e1 8d 2e d1 db 48 32 cd ad 5c b3 cd f7 53 82 e7 Data Ascii: }34qK;\|y#_B}tV\;Ypv!-B\|jhK-j@&.H2\S6CIv?(-fgHz-B4w0*#~_xI)mv4Cf\|x:5WUPJ51)Ho\wZYJ()sKfw6tSQt7{aL`Ddnf?]:sB
May 28, 2024 07:14:28.160320044 CEST	1236	IN	Data Raw: 9e 03 97 fb 31 97 2e eb ff df ff f1 bf fd 5f f0 bd ab 72 dc ff df ff e7 7f 07 c1 74 8a 15 7d 30 7f 2b 99 c6 b0 bb 06 df bf 1c fc 70 30 3c 82 8e f7 eb a5 d3 70 78 b4 07 a7 a7 1e 69 51 45 32 bf 74 a7 ff ee dc fe dd bb fd 2f 94 06 5a a3 43 74 f6 28 Data Ascii: 1._rt}0+p0<pxiQE2t/ZCt(".+94#Z$8:dl#`eH4g^51~PBYs?RLPw\1du9!$ZDf,(n=a8J^u\|NK[
May 28, 2024 07:14:28.160356045 CEST	1236	IN	Data Raw: ab fc 35 ed 36 fb b5 1e 73 0a 12 a7 50 bf ad c4 57 a3 51 62 82 b5 ee 73 65 c8 95 57 0e f9 27 6e 88 18 6a 52 7b 9d 66 bb db 34 77 7d ef 8e 22 d6 cd c2 75 64 fd b7 df fc 97 b1 65 5c 56 94 5d da 9b 14 43 42 a4 fc f1 58 ab a9 41 dd 05 66 66 32 ca b4 Data Ascii: 56sPWQbseW'njR{f4w}"ude\V]CBXAff24b2&P@~U#h`<[V+usv.++w/I"H,DgAzV=8Y~V9$Rsg7@\R#UA>;mg)vuujiWZZufui/
May 28, 2024 07:14:28.160389900 CEST	1236	IN	Data Raw: d0 2c e6 a5 19 c1 53 fa 2b 2e 4f 80 02 3a e8 f7 bf 84 88 95 c6 ed 28 41 4d 98 e8 3a ae f4 32 03 bc 2c 04 8f b8 f5 07 1a 99 10 33 c8 28 10 40 55 25 29 83 96 71 69 fc 0a 05 17 82 96 66 05 86 8e f7 ee 4e cf 09 c1 8d 17 8d a0 41 a8 29 98 02 23 9e 38 Data Ascii: ,S+.O:(AM:2,3(@U%)qifNA)#8DHOl[ZkP+ho'cBxf~4 HirI&EV8WmJy&)QSv{ 96pF0COvwLwA8?%ZxQ3A?;\|
May 28, 2024 07:14:28.160424948 CEST	1236	IN	Data Raw: 45 bd b9 13 9e c3 e3 ab 9c e9 94 4b 62 71 b3 c6 71 5c 30 70 6f 9b 6b d6 71 9a 6d 49 d2 b1 50 d1 45 10 29 51 e6 d2 6c 96 68 b8 2c d0 2d 2d 4b 8a 6d 6e 29 94 b1 01 6d 4d 74 2d 6e 9e 35 08 87 87 1f d5 bb 34 b4 e9 0d 33 66 a8 8b 55 24 95 be f2 df 23 Data Ascii: EKbqq\0pokqmIPE)Qlh,--Kmn)mMt-n543fU$#0Y=xBi1tYr6'ziFn([7`MXX.Udz]7=c[7Mi(+CUF^o&}\|i+][Zl@]cJe[
May 28, 2024 07:14:28.160540104 CEST	776	IN	Data Raw: 9c 60 e0 0f 3f 7a 19 9b 11 63 d3 73 08 0d 4d 27 76 05 26 88 66 34 5b 51 7d 3f 1c 84 83 bb b9 fa fe 75 6e 5c d2 0a 35 c5 35 80 e7 bb 61 86 8c b4 0a 48 bf 32 30 3c c6 31 d3 d4 21 51 83 e0 a1 3f e5 16 f3 40 b2 49 60 90 e9 28 83 2b 88 b9 29 04 9b 8d Data Ascii: `?zcsM'v&f4[Q}?un\55aH20<1!Q?@I`(+)@'p6fZM2iOJlF"O\|U0A)I:9;lORLsJe.$%[gHfleKjF^!tWIqu
May 28, 2024 07:14:28.160574913 CEST	1236	IN	Data Raw: f7 4d eb b2 83 7e ff 04 bc b5 56 33 69 9c 5c 23 90 4a 62 5d 97 b0 9c 8b d9 08 7e 55 45 c1 a5 e9 2e f2 90 30 21 5c 9c 82 24 f1 71 c8 06 9e 9f 4c 05 d2 73 48 19 22 6d 6e 52 dd 7f ba 81 ea 10 f3 fb 90 3d ba 27 d9 d7 4c e0 94 cd 6e 23 3b 5c 25 d5 df Data Ascii: M~V3i\#Jb]~UE.0!\$qLsH"mnR='Ln#;\%@jNjEHH9(BnV9f*RG\+pYvTs`tZPJVgBA]?=?.<NHW)hUj^q+(XIT1
May 28, 2024 07:14:28.166162968 CEST	1236	IN	Data Raw: 7f 86 96 d6 0c 4c c1 22 17 e8 2a ae be 71 5a 17 1e f4 fb 27 60 f1 d2 06 56 33 69 12 a5 f3 11 94 45 81 3a 62 06 3f 76 05 30 93 74 2e aa 63 35 e7 e3 d8 dc 81 75 05 05 8b 63 c7 b3 8f 39 b8 cf 7e f5 7b 52 e5 60 7e 5c 7f 3c 60 a2 94 db d0 aa 22 e0 52 Data Ascii: L"qZ'`V3iE:b?v0t.c5uc9~{R`~\<`"R:KBV&XqBpI$<f$M3?6$Iiu'FK"nlj!nB@<7I1\+CSkX\|vS`mkn:fJ\|kfnT{sm\-AP+)Zs
May 28, 2024 07:14:28.299230099 CEST	630	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.426398039 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 Content-Length: 301 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2d 61 6e 64 2d 73 68 6f 77 63 61 73 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 70 74 65 73 74 69 6d 6f 6e 69 61 6c 2e 63 73 73 3f 76 65 72 3d 32 2e 33 2e 31 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10">here</a>.</p></body></html>
May 28, 2024 07:14:28.427786112 CEST	616	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.551644087 CEST	598	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 Content-Length: 287 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 63 73 73 2f 61 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:28.552473068 CEST	604	OUT	GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.677086115 CEST	574	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 Content-Length: 275 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 73 74 79 6c 65 2d 6c 65 67 61 63 79 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.677819967 CEST	595	OUT	GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.804452896 CEST	556	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1 Content-Length: 266 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2d 63 68 69 6c 64 2d 6d 61 73 74 65 72 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.805219889 CEST	617	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.931071043 CEST	630	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 Content-Length: 303 Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 69 63 6f 6e 48 65 6c 70 65 72 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:28.987163067 CEST	618	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.112587929 CEST	632	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 Content-Length: 304 Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 70 61 72 74 69 63 6c 65 73 2e 6a 73 3f 76 65 72 3d 32 2e 30 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49804	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:28.299236059 CEST	622	OUT	GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.425270081 CEST	610	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 Content-Length: 293 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2f 70 75 62 6c 69 63 2f 63 73 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 70 75 62 6c 69 63 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 30 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.427896976 CEST	637	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.553662062 CEST	640	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 Content-Length: 308 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 76 65 67 61 73 2f 76 65 67 61 73 2e 63 73 73 3f 76 65 72 3d 32 2e 34 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0">here</a>.</p></body></html>
May 28, 2024 07:14:28.556471109 CEST	624	OUT	GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.682543039 CEST	614	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 Content-Length: 295 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 74 68 69 73 2f 66 72 6f 6e 74 65 6e 64 2f 62 75 69 6c 64 2f 61 64 64 74 68 69 73 5f 77 6f 72 64 70 72 65 73 73 5f 70 75 62 6c 69 63 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3">here</a>.</p></body></html>
May 28, 2024 07:14:28.684108019 CEST	603	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.808484077 CEST	572	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 Content-Length: 274 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2e 63 73 73 3f 76 65 72 3d 33 2e 32 31 2e 38 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8">here</a>.</p></body></html>
May 28, 2024 07:14:28.813330889 CEST	574	OUT	GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.938633919 CEST	544	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 Content-Length: 260 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2d 6d 69 67 72 61 74 65 2e 6a 73 3f 76 65 72 3d 33 2e 34 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.985439062 CEST	604	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.110100985 CEST	604	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 Content-Length: 290 Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 6a 73 2f 76 34 2d 73 68 69 6d 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:29.244128942 CEST	630	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.370587111 CEST	656	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 Content-Length: 316 Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 73 73 65 6e 74 69 61 6c 2d 61 64 64 6f 6e 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 74 65 2f 61 73 73 65 74 73 2f 66 72 6f 6e 74 2d 65 6e 64 2f 6a 73 2f 76 69 65 77 2f 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 39 2e 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22">here</a>.</p></body></html>
May 28, 2024 07:14:31.078847885 CEST	561	OUT	GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
May 28, 2024 07:14:31.209007978 CEST	518	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:31 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3 Content-Length: 247 Keep-Alive: timeout=5, max=68 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 65 6d 6f 6a 69 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/wp-emoji.js?ver=6.5.3">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49805	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:28.303098917 CEST	630	OUT	GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.811100006 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 Content-Length: 301 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2f 70 75 62 6c 69 63 2f 66 6f 6e 74 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 30 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.821446896 CEST	613	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.943878889 CEST	622	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 Content-Length: 299 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 65 61 65 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5">here</a>.</p></body></html>
May 28, 2024 07:14:28.968123913 CEST	611	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.095542908 CEST	618	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 Content-Length: 297 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 62 75 69 6c 64 2f 69 6e 64 65 78 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49807	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:28.305444002 CEST	630	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.810168982 CEST	626	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 Content-Length: 301 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 65 61 65 2e 63 73 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5">here</a>.</p></body></html>
May 28, 2024 07:14:28.987823009 CEST	621	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.113701105 CEST	638	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 Content-Length: 307 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 76 65 67 61 73 2f 76 65 67 61 73 2e 6a 73 3f 76 65 72 3d 32 2e 34 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49808	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:28.305681944 CEST	621	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.807394981 CEST	608	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 Content-Length: 292 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 63 73 73 2f 76 34 2d 73 68 69 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:28.811930895 CEST	566	OUT	GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.938602924 CEST	528	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1 Content-Length: 252 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2e 6a 73 3f 76 65 72 3d 33 2e 37 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/jquery/jquery.js?ver=3.7.1">here</a>.</p></body></html>
May 28, 2024 07:14:28.986673117 CEST	620	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.111247063 CEST	636	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 Content-Length: 306 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6a 73 2f 61 6e 69 6d 61 74 65 64 2d 6d 61 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0">here</a>.</p></body></html>
May 28, 2024 07:14:29.340121031 CEST	1093	OUT	POST /?ob=open-bridge/events HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Content-Length: 449 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://www.campobahia.com Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0 Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 38 64 36 61 31 66 39 32 30 63 31 65 38 63 39 37 30 36 64 37 62 33 66 31 38 61 38 66 63 66 33 65 38 32 63 62 65 39 61 33 66 64 37 33 37 38 30 38 38 31 39 62 63 33 31 65 61 65 34 38 63 39 61 34 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 32 31 35 30 35 39 37 31 37 33 34 39 38 30 36 22 2c 22 66 62 2e 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 22 3a 7b 7d 2c 22 77 65 62 73 69 74 65 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 39 2f 50 6f 70 2d 75 70 2d 4e 6f 76 65 6d 62 72 6f 2d 43 61 6d 70 6f 2d 42 61 68 69 61 50 72 61 6e 63 68 [TRUNCATED] Data Ascii: {"event_name":"PageView","fb.dynamic_product_ads":{},"custom_data":{},"event_id":"ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4","fb.pixel_id":"215059717349806","fb.advanced_matching":{},"website_context":{"location":"http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg#content","referrer":"","isInIFrame":false},"fb.fbp":"fb.1.1716873256113.429051690950261479"}
May 28, 2024 07:14:29.465763092 CEST	490	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/?ob=open-bridge/events Content-Length: 233 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 3f 6f 62 3d 6f 70 65 6e 2d 62 72 69 64 67 65 2f 65 76 65 6e 74 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/?ob=open-bridge/events">here</a>.</p></body></html>
May 28, 2024 07:14:31.078450918 CEST	560	OUT	GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
May 28, 2024 07:14:31.203145981 CEST	516	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:31 GMT Server: Apache Location: https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3 Content-Length: 246 Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-includes/js/twemoji.js?ver=6.5.3">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49806	50.116.87.228	80	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 07:14:28.305681944 CEST	636	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.799628019 CEST	638	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 Content-Length: 307 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 70 65 65 6c 2f 70 65 65 6c 2e 63 73 73 3f 76 65 72 3d 31 2e 31 33 2e 35 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5">here</a>.</p></body></html>
May 28, 2024 07:14:28.800654888 CEST	647	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:28.925368071 CEST	660	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:28 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 Content-Length: 318 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 73 73 65 6e 74 69 61 6c 2d 61 64 64 6f 6e 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 74 65 2f 61 73 73 65 74 73 2f 66 72 6f 6e 74 2d 65 6e 64 2f 63 73 73 2f 76 69 65 77 2f 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 35 2e 39 2e 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22">here</a>.</p></body></html>
May 28, 2024 07:14:28.987533092 CEST	618	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.111155033 CEST	632	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 Content-Length: 304 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 64 64 6f 6e 2d 65 6c 65 6d 65 6e 74 73 2d 66 6f 72 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 62 75 69 6c 64 65 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 6d 61 67 6e 69 66 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 31 2e 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0">here</a>.</p></body></html>
May 28, 2024 07:14:29.244311094 CEST	592	OUT	GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
May 28, 2024 07:14:29.365051985 CEST	580	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:29 GMT Server: Apache Location: https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 Content-Length: 278 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 61 73 73 65 74 73 2f 6a 73 2f 62 75 69 6c 64 2f 6d 6f 64 65 72 6e 2f 66 72 6f 6e 74 65 6e 64 2e 6a 73 3f 76 65 72 3d 33 2e 31 2e 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.campobahia.com/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1">here</a>.</p></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49726	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	500	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 15635 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	7937	IN	Data Raw: 2e 76 65 67 61 73 2d 77 72 61 70 70 65 72 2c 0a 2e 76 65 67 61 73 2d 6f 76 65 72 6c 61 79 2c 0a 2e 76 65 67 61 73 2d 74 69 6d 65 72 2c 0a 2e 76 65 67 61 73 2d 73 6c 69 64 65 2c 0a 2e 76 65 67 61 73 2d 73 6c 69 64 65 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 6f Data Ascii: .vegas-wrapper,.vegas-overlay,.vegas-timer,.vegas-slide,.vegas-slide-inner { position: absolute; top: 0; left: 0; bottom: 0; right: 0; overflow: hidden; border: none; padding: 0; margin: 0;}.vegas-overlay { o
2024-05-28 05:14:09 UTC	7698	IN	Data Raw: 6e 2d 7a 6f 6f 6d 4f 75 74 32 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 7a 6f 6f 6d 4f 75 74 2d 69 6e 2c 0a 2e 76 65 67 61 73 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 7a 6f 6f 6d 4f 75 74 32 2d 69 6e 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 74 72 61 Data Ascii: n-zoomOut2 { -webkit-transform: scale(2); transform: scale(2); opacity: 0;}.vegas-transition-zoomOut-in,.vegas-transition-zoomOut2-in { -webkit-transform: scale(1); transform: scale(1); opacity: 1;}.vegas-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49724	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	493	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:15 GMT Accept-Ranges: bytes Content-Length: 67192 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	7937	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 54 65 73 74 69 6d 6f 6e 69 61 6c 20 53 6c 69 64 65 72 20 61 6e 64 20 53 68 6f 77 63 61 73 65 20 50 72 6f 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 73 75 70 70 6f 72 74 40 72 61 64 69 75 73 74 68 65 6d 65 2e 63 6f 6d 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 40 20 52 Data Ascii: /*************************************************************//*************** Testimonial Slider and Showcase Pro ******************//*************** support@radiustheme.com ***************//************* copyright (c) 2017 @ R
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 69 6c 69 74 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 75 74 69 6c 69 74 79 20 2e 72 74 2d 62 75 74 74 6f 6e 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 69 73 6f 2d 62 75 74 74 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 36 66 36 66 36 66 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: ility {margin: 15px 0;text-align: center;}.tss-wrapper .tss-utility .rt-button,.tss-wrapper .tss-isotope-button-wrapper .rt-iso-button {background: #6f6f6f;border: 0;border-radius: 2px;color: #fff;font-size: 16px;line-heigh
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 3a 68 6f 76 65 72 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 2e 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 35 35 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 3a 68 6f 76 65 72 20 73 70 61 6e 3a 68 6f 76 65 72 20 7e 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 20 73 70 61 6e 2e 61 63 74 69 76 65 20 7e 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 Data Ascii: wrapper .rt-rating:hover span:before,.tss-submit-wrapper .rt-rating.selected:hover span:before {content: "\f155";}.tss-submit-wrapper .rt-rating:hover span:hover ~ span:before,.tss-submit-wrapper .rt-rating span.active ~ span:before,.tss-su
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 6f 75 74 33 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 31 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 76 69 64 65 6f 31 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 33 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 46 31 30 44 22 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 65 61 65 61 65 61 3b 0d 0a 09 70 6f 73 69 74 69 Data Ascii: out3 .item-content-wrapper:before,.tss-wrapper .tss-isotope1 .item-content-wrapper:before,.tss-wrapper .tss-video1 .item-content-wrapper:before,.tss-wrapper .tss-carousel3 .item-content-wrapper:before {content: "\F10D";color: #eaeaea;positi
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 61 75 74 68 6f 72 2d 73 6f 63 69 61 6c 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 61 75 74 68 6f 72 2d 73 6f 63 69 61 6c 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 73 6f 63 69 61 6c 2d 73 68 61 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d Data Ascii: relative;}.tss-wrapper .tss-layout6 .single-item-wrapper .author-social,.tss-wrapper .tss-carousel6 .single-item-wrapper .author-social,.tss-wrapper .tss-layout6 .single-item-wrapper .tss-social-share,.tss-wrapper .tss-carousel6 .single-item-
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 39 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 34 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 39 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 Data Ascii: ansition: all 0.5s ease-out;-o-transition: all 0.5s ease-out;transition: all 0.5s ease-out;}.tss-wrapper .tss-layout9 .profile-img-wrapper:after,.tss-wrapper .tss-isotope4 .profile-img-wrapper:after,.tss-wrapper .tss-carousel9 .profile-img
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 31 31 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 20 69 6d 67 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 Data Ascii: -webkit-transition: all 0.7s ease-out;-moz-transition: all 0.7s ease-out;-ms-transition: all 0.7s ease-out;-o-transition: all 0.7s ease-out;transition: all 0.7s ease-out;}.tss-wrapper .tss-carousel11 .swiper-slide-active img,.tss-wrapp
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 0d 0a 09 2e 72 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 32 34 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 31 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 32 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 33 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 34 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 35 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 36 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 37 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 38 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 39 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 31 30 2c 0d Data Ascii: .rt-container {width: 1170px;}}@media (min-width: 768px) {.rt-col-sm-24,.rt-col-sm-1,.rt-col-sm-2,.rt-col-sm-3,.rt-col-sm-4,.rt-col-sm-5,.rt-col-sm-6,.rt-col-sm-7,.rt-col-sm-8,.rt-col-sm-9,.rt-col-sm-10,
2024-05-28 05:14:09 UTC	3255	IN	Data Raw: 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 09 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 20 7b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 Data Ascii: m: rotate(180deg);-o-transform: rotate(180deg);transform: rotate(180deg);}100% {-webkit-transform: rotate(360deg);-moz-transform: rotate(360deg);-o-transform: rotate(360deg);transform: rotate(360deg);}}@-webkit-key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49722	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	499	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 985 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	985	IN	Data Raw: 0a 2e 70 65 65 6c 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 72 65 61 64 79 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 73 76 67 2d 63 6c 69 70 2d 65 6c 65 6d 65 6e 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 2d 31 30 30 30 30 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 2d 31 30 30 30 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 6c 61 79 65 72 Data Ascii: .peel { position: relative; opacity: 0; } .peel-ready { opacity: 1; } .peel-svg-clip-element { position: absolute; top: -10000px; left: -10000px; width: 1px; height: 1px; opacity: 0; } .peel-layer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49723	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	479	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 59344 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 Data Ascii: /! Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webki
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 33 22 7d 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 2d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: .fa-bluetooth:before{content:"\f293"}.fa-bluetooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bong:before{content:"\f55c"}.fa-book:before{con
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 74 3a 22 5c 66 31 62 32 22 7d 2e 66 61 2d 63 75 62 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 33 22 7d 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2d 63 75 74 74 6c 65 66 69 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 63 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 64 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 2d 62 65 79 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 61 22 7d 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: t:"\f1b2"}.fa-cubes:before{content:"\f1b3"}.fa-cut:before{content:"\f0c4"}.fa-cuttlefish:before{content:"\f38c"}.fa-d-and-d:before{content:"\f38d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\e052"}.fa-dashcube:before{content
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 2d 67 69 74 6b 72 61 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 36 22 7d 2e 66 61 2d 67 69 74 6c 61 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 36 22 7d 2e 66 61 2d 67 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 36 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 63 68 65 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 66 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 62 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 77 68 69 73 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: -gitkraken:before{content:"\f3a6"}.fa-gitlab:before{content:"\f296"}.fa-gitter:before{content:"\f426"}.fa-glass-cheers:before{content:"\f79f"}.fa-glass-martini:before{content:"\f000"}.fa-glass-martini-alt:before{content:"\f57b"}.fa-glass-whiskey:before{co
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 71 75 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 37 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 65 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 66 22 7d 2e 66 61 2d 6c 69 66 65 2d 72 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 64 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 30 22 7d 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 31 22 7d 2e 66 61 2d 6c 69 6e Data Ascii: qual:before{content:"\f537"}.fa-level-down-alt:before{content:"\f3be"}.fa-level-up-alt:before{content:"\f3bf"}.fa-life-ring:before{content:"\f1cd"}.fa-lightbulb:before{content:"\f0eb"}.fa-line:before{content:"\f3c0"}.fa-link:before{content:"\f0c1"}.fa-lin
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 74 3a 22 5c 66 36 38 34 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 31 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 35 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 36 22 7d 2e 66 61 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 66 22 7d 2e 66 61 2d 70 72 6f 63 65 64 75 72 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 37 22 7d 2e 66 61 2d 70 72 6f 64 75 63 74 2d 68 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 Data Ascii: t:"\f684"}.fa-prescription:before{content:"\f5b1"}.fa-prescription-bottle:before{content:"\f485"}.fa-prescription-bottle-alt:before{content:"\f486"}.fa-print:before{content:"\f02f"}.fa-procedures:before{content:"\f487"}.fa-product-hunt:before{content:"\f2
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 66 22 7d 2e 66 61 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 65 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 66 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 61 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 30 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 31 22 7d 2e 66 61 2d 73 74 72 61 76 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 38 22 7d 2e 66 61 2d 73 74 72 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 30 22 7d 2e 66 61 2d 73 74 72 65 65 74 2d 76 69 65 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: f"}.fa-store:before{content:"\f54e"}.fa-store-alt:before{content:"\f54f"}.fa-store-alt-slash:before{content:"\e070"}.fa-store-slash:before{content:"\e071"}.fa-strava:before{content:"\f428"}.fa-stream:before{content:"\f550"}.fa-street-view:before{content:"
2024-05-28 05:14:09 UTC	3407	IN	Data Raw: 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 39 36 22 7d 2e 66 61 2d 77 65 69 67 68 74 2d 68 61 6e 67 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 64 22 7d 2e 66 61 2d 77 65 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 37 22 7d 2e 66 61 2d 77 68 61 74 73 61 70 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 32 22 7d 2e 66 61 2d 77 68 61 74 73 61 70 70 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 63 22 7d 2e 66 61 2d 77 68 65 65 6c 63 68 61 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 33 22 7d 2e 66 61 2d 77 68 6d 63 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 64 22 7d 2e 66 61 2d Data Ascii: t:before{content:"\f496"}.fa-weight-hanging:before{content:"\f5cd"}.fa-weixin:before{content:"\f1d7"}.fa-whatsapp:before{content:"\f232"}.fa-whatsapp-square:before{content:"\f40c"}.fa-wheelchair:before{content:"\f193"}.fa-whmcs:before{content:"\f40d"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49727	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	467	OUT	GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 Dec 2021 11:56:20 GMT Accept-Ranges: bytes Content-Length: 48153 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	7937	IN	Data Raw: 2e 62 74 6e 2c 2e 62 75 74 74 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 61 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 Data Ascii: .btn,.button,.wp-block-button a,button,input[type=button],input[type=submit]{font-size:.8em;font-weight:600;padding:8px 12px;transition:all .15s ease-in-out;text-align:center;vertical-align:middle;border:1px solid transparent;border-radius:3px;text-transf
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 78 74 2d 64 61 72 6b 2d 62 67 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 31 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 31 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 32 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 32 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 32 29 21 69 6d 70 6f 72 74 61 Data Ascii: xt-dark-bg)!important}.has-nv-c-1-color{color:var(--nv-c-1)!important}.has-nv-c-1-background-color{background-color:var(--nv-c-1)!important}.has-nv-c-2-color{color:var(--nv-c-2)!important}.has-nv-c-2-background-color{background-color:var(--nv-c-2)!importa
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 7a 65 3a 31 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 73 69 74 65 2d 62 67 29 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 2c 73 65 6c 65 63 74 7b 64 69 73 70 6c 61 79 3a Data Ascii: ze:14px;transition:all .3s ease;padding:7px 12px;border:1px solid #ddd;border-radius:3px;-webkit-appearance:none;-moz-appearance:none;appearance:none;outline:0;color:var(--nv-text-color);background-color:var(--nv-site-bg)}input[type=color],select{display:
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 70 72 69 6d 61 72 79 2d 61 63 63 65 6e 74 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 76 2d 70 72 69 6d 61 72 79 2d 61 63 63 65 6e 74 29 7d 23 63 6f 6d 6d 65 6e 74 73 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 76 2d 6c 69 67 68 74 2d 62 67 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 23 63 6f 6d 6d 65 6e 74 73 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 23 63 6f 6d 6d 65 6e 74 73 20 6f 6c 3e 6f 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 6e 76 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 7d 23 Data Ascii: lor:var(--nv-primary-accent);border:1px solid var(--nv-primary-accent)}#comments{border-top:1px solid var(--nv-light-bg);margin-top:10px}#comments ol{list-style:none}#comments ol>ol{padding-left:10px}#comments .nv-content-wrap ol{list-style-type:decimal}#
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 66 67 2d 69 73 2d 67 72 6f 75 70 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 20 2e 62 75 69 6c Data Ascii: -10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-sm-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-sm-12{flex:0 0 100%;max-width:100%}.hfg-is-group.tablet-right{justify-content:flex-end}.tablet-right{text-align:right}.tablet-right .buil
2024-05-28 05:14:09 UTC	8000	IN	Data Raw: 65 72 28 2e 37 39 2c 2e 31 34 2c 2e 31 35 2c 2e 38 36 29 7d 2e 6d 65 6e 75 5f 73 69 64 65 62 61 72 5f 66 75 6c 6c 5f 63 61 6e 76 61 73 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2d 69 6e 6e 65 72 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 68 69 64 69 6e 67 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 39 2c 2e 31 34 2c 2e 31 35 2c 2e 38 36 29 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 68 69 64 69 6e 67 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2e 6d 65 6e 75 5f 73 69 64 65 62 61 72 5f 73 6c 69 64 65 5f 6c 65 66 74 20 2e 68 65 61 64 65 72 2d Data Ascii: er(.79,.14,.15,.86)}.menu_sidebar_full_canvas .header-menu-sidebar-inner{flex-grow:1}.hiding-header-menu-sidebar .header-menu-sidebar{transition:all .3s cubic-bezier(.79,.14,.15,.86);height:100%}.hiding-header-menu-sidebar.menu_sidebar_slide_left .header-
2024-05-28 05:14:09 UTC	216	IN	Data Raw: 2e 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 68 66 67 2d 67 72 69 64 20 2e 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 2c 2e 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 30 7d 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 66 6f 6f 74 65 72 5f 63 6f 70 79 72 69 67 68 74 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d Data Ascii: .hide-on-tablet{display:none}}@media (max-width:576px){.hfg-grid .hide-on-mobile,.hide-on-mobile{display:none}}.component-wrap{display:flex;margin:4px 0}.builder-item--footer_copyright .component-wrap{display:inline}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:09 UTC	487	OUT	GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:09 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 May 2022 08:50:10 GMT Accept-Ranges: bytes Content-Length: 587 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:09 UTC	587	IN	Data Raw: 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 61 64 64 74 68 69 73 5f 74 6f 6f 6c 62 6f 78 2c 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 2c 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 61 64 64 74 68 69 73 5f 74 6f 6f 6c 62 6f 78 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 31 30 70 78 20 30 7d 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 5f 74 77 65 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 38 33 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 61 74 77 69 64 67 65 74 20 69 66 72 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 61 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 2c 61 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 3a Data Ascii: .entry-content .addthis_button,.entry-content .addthis_toolbox,.entry-header .addthis_button,.entry-header .addthis_toolbox{margin:10px 0 10px 0}.addthis_button_tweet{min-width:83px;float:left}.atwidget iframe{max-width:none}a.at-share-btn,a.at-share-btn:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	493	OUT	GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 May 2024 20:33:47 GMT Accept-Ranges: bytes Content-Length: 3459 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	3459	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 77 65 61 74 68 65 72 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f Data Ascii: @font-face{font-display:block;font-family:weathericons;src:url(../weather-icons/weathericons-regular-webfont.eot);src:url(../weather-icons/weathericons-regular-webfont.eot?#iefix) format('embedded-opentype'),url(../weather-icons/weathericons-regular-webfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49731	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	484	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 26702 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 Data Ascii: /! Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font A
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 31 39 22 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 61 22 7d 2e 66 61 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 63 22 7d 2e 66 61 2e 66 61 2d 66 6c 61 67 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 Data Ascii: 19"}.fa.fa-meh-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-meh-o:before{content:"\f11a"}.fa.fa-keyboard-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-keyboard-o:before{content:"\f11c"}.fa.fa-flag-o{font-family:"Font Awesome 5 F
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 75 70 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 64 22 7d 2e 66 61 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 2d 6e 6f 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 65 22 7d 2e 66 61 2e 66 61 2d 72 61 2c 2e 66 61 2e 66 61 2d 72 65 62 65 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 30 22 7d 2e 66 61 2e 66 61 2d 72 65 73 69 73 74 61 6e 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 Data Ascii: 5 Free";font-weight:400}.fa.fa-support:before{content:"\f1cd"}.fa.fa-circle-o-notch:before{content:"\f1ce"}.fa.fa-ra,.fa.fa-rebel{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-ra:before{content:"\f1d0"}.fa.fa-resistance{font-family:"Font Awes
2024-05-28 05:14:10 UTC	2765	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 6f 66 66 69 63 69 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 33 22 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 63 69 72 63 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 33 22 7d 2e 66 61 2e 66 61 2d 66 61 2c 2e 66 61 2e 66 61 2d 66 6f 6e 74 2d 61 77 Data Ascii: {font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-google-plus-official:before{content:"\f2b3"}.fa.fa-google-plus-circle{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-google-plus-circle:before{content:"\f2b3"}.fa.fa-fa,.fa.fa-font-aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	485	OUT	GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 May 2024 20:33:47 GMT Accept-Ranges: bytes Content-Length: 4024 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	4024	IN	Data Raw: 2e 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 77 72 61 70 70 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 77 72 61 70 70 65 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 Data Ascii: .weather-atlas-wrapper{font-family:'Open Sans', sans-serif;font-size:1em;line-height:1.5;text-shadow:1px 1px 0 rgba(0, 0, 0, 1);text-align:center}.weather-atlas-wrapper a{text-decoration:none !important;box-shadow:none !important;border:none !important;ou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-28 05:14:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125704 Date: Tue, 28 May 2024 05:14:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49732	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	493	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 280643 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	7936	IN	Data Raw: 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 74 73 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 74 73 2d 65 61 65 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 7b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 77 74 73 2d 65 61 65 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 7b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 2d 72 65 Data Ascii: .elementor-widget-wts-textseparator .elementor-widget-container { overflow: hidden;}.wts-eae-textseparator { align-items: center; display: flex; flex-flow: row nowrap; margin: auto;}body.rtl .wts-eae-textseparator { flex-direction: row-re
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 74 6d 61 6e 20 31 73 20 32 20 61 6c 74 65 72 6e 61 74 65 20 6c 69 6e 65 61 72 3b 0a 7d 0a 0a 2f 2a 20 43 75 62 65 20 41 6e 69 6d 61 74 69 6f 6e 20 2a 2f 0a 0a 2e 65 61 65 2d 66 62 2d 61 6e 69 6d 61 74 65 2d 66 6c 69 70 63 61 72 64 20 2e 65 61 65 2d 66 6c 69 70 2d 62 6f 78 2d 66 72 6f 6e 74 2c 0a 2e 65 61 65 2d 66 62 2d 61 6e 69 6d 61 74 65 2d 66 6c 69 70 63 61 72 64 20 2e 65 61 65 2d 66 6c 69 70 2d 62 6f 78 2d 62 61 63 6b 20 7b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 34 73 20 65 61 73 65 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 2d 31 35 30 70 78 3b 0a Data Ascii: { z-index: 10; animation: batman 1s 2 alternate linear;}/* Cube Animation */.eae-fb-animate-flipcard .eae-flip-box-front,.eae-fb-animate-flipcard .eae-flip-box-back { transition: transform 0.4s ease; transform-origin: center center -150px;
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c Data Ascii: le(0.9); -moz-transform: translateY(-50%) scale(0.9); -ms-transform: translateY(-50%) scale(0.9); -o-transform: translateY(-50%) scale(0.9); transform: translateY(-50%) scale(0.9); opacity: 0; } 100% { -webkit-transform: transl
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6d 65 64 69 75 6d 20 69 6e 73 65 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6d 66 70 2d 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 20 20 74 6f 70 3a 20 38 70 78 3b 0a 7d 0a 2e 6d 66 70 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 32 31 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 32 31 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0a 7d 0a 0a 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 7b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e Data Ascii: x; border: medium inset transparent;}.mfp-arrow:after { border-top-width: 13px; border-bottom-width: 13px; top: 8px;}.mfp-arrow:before { border-top-width: 21px; border-bottom-width: 21px; opacity: 0.7;}.mfp-arrow-left { left: 0;}.
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 3b 0a 7d 0a 2e 73 6b 69 6e 2d 31 20 2e 72 61 74 69 6e 67 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 65 63 63 31 66 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 73 6b 69 6e 2d 34 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2e 73 6b 69 6e 2d 34 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 66 62 66 62 36 62 64 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 20 20 62 6f 78 2d Data Ascii: ;}.skin-1 .rating-wrapper { color: #fecc1f;}/------------------------skin-4------------------/.skin-4.testimonial-wrapper { flex-direction: column; display: flex; background-color: #bfbfb6bd; min-height: 300px; padding: 10px 0; box-
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 65 6d 5f 5f 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 7b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 68 65 69 67 68 74 3a 20 39 31 25 3b 0a 20 20 77 69 64 74 68 3a 20 39 31 25 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 Data Ascii: em__content-wrap { visibility: visible; display: none; height: 91%; width: 91%; opacity: 0; top: 50%; transform: translateY(-50%) translateX(-50%); position: absolute; left: 50%; border-radius: 50%; overflow: hidden; -webkit-box-si
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 63 75 73 74 6f 6d 2d 69 6d 61 67 65 2d 73 74 79 6c 65 2d 6e 6f 2e 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 2c 0a 2e 63 75 73 74 6f 6d 2d 69 6d 61 67 65 2d 73 74 79 6c 65 2d 2e 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 65 61 65 2d 70 62 2d 69 6e 6e 65 72 2d 6c 69 6e 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 64 35 61 63 33 3b 0a 7d 0a 0a 2e 65 61 Data Ascii: tl-item-image { margin: auto;}.custom-image-style-no.image-position-column .eae-tl-item-image,.custom-image-style-.image-position-column .eae-tl-item-image { margin: 0 auto;}.eae-pb-inner-line { width: 100%; background-color: #3d5ac3;}.ea
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 61 79 6f 75 74 2d 6c 65 66 74 0a 20 20 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 0a 20 20 20 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2e 65 61 65 2d 6c 61 79 6f 75 74 2d 63 65 6e 74 65 72 2e 65 61 65 2d 74 6c 2d 63 65 6e 74 65 72 2e 65 61 65 2d 74 6c 2d 72 65 73 2d 73 74 79 6c 65 2d 6d 6f 62 69 6c 65 2e 65 61 65 2d 74 6c 2d 72 65 73 2d 6c 61 79 6f 75 74 2d 6c 65 66 74 0a 20 20 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 0a 20 20 20 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2e 65 61 65 2d Data Ascii: ayout-left .eae-timeline-item .eae-tl-item-content::before, .eae-timeline.eae-layout-center.eae-tl-center.eae-tl-res-style-mobile.eae-tl-res-layout-left .eae-timeline-item:nth-child(odd) .eae-tl-item-content::before, .eae-timeline.eae-
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 20 75 6c 0a 20 20 6c 69 0a 20 20 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 2d 6d 6f 7a 2d 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 65 61 65 2d 65 76 65 72 67 72 65 65 6e 2d 74 69 6d 65 Data Ascii: ul li a { display: block; height: 100%; -webkit-perspective: 200px; -moz-perspective: 200px; perspective: 200px; margin: 0 !important; overflow: visible !important; cursor: default !important;}[data-element_type="eae-evergreen-time
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 76 65 72 67 72 65 65 6e 2d 74 69 6d 65 72 2e 73 6b 69 6e 32 22 5d 0a 20 20 2e 65 61 65 2d 66 6c 69 70 2d 63 6c 6f 63 6b 2d 77 72 61 70 70 65 72 0a 20 20 75 6c 2e 70 6c 61 79 0a 20 20 6c 69 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 0a 20 20 2e 64 6f 77 6e 0a 20 20 2e 73 68 61 64 6f 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 62 6c 61 63 6b 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 0a 20 20 20 20 6c 69 6e 65 61 72 2c 0a 20 20 20 20 6c 65 66 74 20 74 6f 70 2c 0a 20 20 20 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 0a 20 20 Data Ascii: vergreen-timer.skin2"] .eae-flip-clock-wrapper ul.play li.flip-clock-active .down .shadow { background: -moz-linear-gradient(top, black 0%, rgba(0, 0, 0, 0.1) 100%); background: -webkit-gradient( linear, left top, left bottom,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49733	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	458	OUT	GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:36:43 GMT Accept-Ranges: bytes Content-Length: 3658 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	3658	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 20 20 4e 65 76 65 20 43 68 69 6c 64 0a 54 68 65 6d 65 20 55 52 49 3a 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 69 73 6c 65 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 0a 54 65 6d 70 6c 61 74 65 3a 20 6e 65 76 65 0a 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 54 68 65 6d 65 49 73 6c 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 69 73 6c 65 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 20 20 4e 65 76 65 20 69 73 20 61 20 73 75 70 65 72 20 66 61 73 74 2c 20 65 61 73 69 6c 79 20 63 75 73 74 6f 6d 69 7a 61 62 6c 65 2c 20 6d 75 6c 74 69 2d 70 75 72 70 6f 73 65 20 74 68 65 6d 65 2e 20 49 74 e2 80 99 73 20 70 65 72 66 65 63 74 20 Data Ascii: /*Theme Name: Neve ChildTheme URI: https://themeisle.com/themes/neve/Template: neveAuthor: ThemeIsleAuthor URI: https://themeisle.comDescription: Neve is a super fast, easily customizable, multi-purpose theme. Its perfect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	466	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:10 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 196554 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:10 UTC	7936	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 65 2d 61 2d 62 67 2d 64 65 66 61 75 6c 74 29 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 64 69 61 6c 6f 67 2d 6d 65 73 Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /@charset "UTF-8";.dialog-widget-content { background-color: var(--e-a-bg-default); position: absolute; border-radius: 3px; box-shadow: 2px 8px 23px 3px rgba(0, 0, 0, 0.2); overflow: hidden;}.dialog-mes
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e Data Ascii: ton.e-btn-txt.dialog-take_over, .dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-primary.dialog-cancel, .dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel.dialog-take_over, .dialog-type-confirm .dialog-buttons-wrapper .
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 69 74 69 61 6c 3b 0a 7d 0a 2e 66 6c 61 74 70 69 63 Data Ascii: pper .dialog-button:visited,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:hover,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:visited { color: initial;}.flatpic
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e Data Ascii: tor-tablet_extra-align-left { text-align: left; } .elementor-tablet_extra-align-left .elementor-button { width: auto; } .elementor-tablet_extra-align-justify .elementor-button { width: 100%; }}@media (max-width: 1024px) { .elemen
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 78 73 2d 39 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 78 73 2d 31 30 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6d 2d 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 25 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6d 2d 31 31 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 31 2e 31 31 31 25 3b 0a 20 20 7d Data Ascii: -column.elementor-xs-90 { width: 90%; } .elementor-column.elementor-xs-100 { width: 100%; }}@media (max-width: 767px) { .elementor-column.elementor-sm-10 { width: 10%; } .elementor-column.elementor-sm-11 { width: 11.111%; }
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 20 7b 0a 20 20 20 20 6f 72 64 65 72 3a 20 31 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 2d 31 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0a 20 20 20 20 6f 72 64 65 72 3a 20 31 30 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e Data Ascii: erse-tablet > .elementor-container > :nth-child(10) { order: 1; }}@media (min-width: -1) and (max-width: 1024px) { .elementor-reverse-tablet > .elementor-container > :nth-child(1) { order: 10; } .elementor-reverse-tablet > .elementor-con
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 37 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 6c 61 70 74 6f 70 2d 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 38 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 6c 61 70 74 6f 70 2d 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 39 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f Data Ascii: entor-grid { grid-template-columns: repeat(7, 1fr); } .elementor-grid-laptop-8 .elementor-grid { grid-template-columns: repeat(8, 1fr); } .elementor-grid-laptop-9 .elementor-grid { grid-template-columns: repeat(9, 1fr); } .elemento
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 2d 2d 7a 2d 69 6e 64 65 78 3a 20 72 65 76 65 72 74 3b 0a 20 20 2d 2d 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 2d 2d 67 61 70 3a 20 76 61 72 28 2d 2d 77 69 64 67 65 74 73 2d 73 70 61 63 69 6e 67 2c 20 32 30 70 78 29 3b 0a 20 20 2d 2d 6f 76 65 72 6c Data Ascii: , 10px); --padding-bottom: var(--container-default-padding-bottom, 10px); --padding-left: var(--container-default-padding-left, 10px); --position: relative; --z-index: revert; --overflow: visible; --gap: var(--widgets-spacing, 20px); --overl
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 66 32 31 32 34 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 69 6e 73 65 74 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 3a 3a 2d 6d 6f 7a 2d 70 Data Ascii: r: transparent; color: #1f2124; vertical-align: middle; flex-grow: 1;}.elementor-field-group .elementor-field-textual:focus { box-shadow: 0 0 0 1px rgba(0, 0, 0, 0.1) inset; outline: 0;}.elementor-field-group .elementor-field-textual::-moz-p
2024-05-28 05:14:10 UTC	8000	IN	Data Raw: 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 73 74 61 72 74 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 65 6e 64 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 2d 66 6f 72 6d 5f Data Ascii: bile-button-align-start .e-form__buttons__wrapper, .elementor-mobile-button-align-end .e-form__buttons__wrapper { flex-grow: initial; } .elementor-mobile-button-align-center .e-form__buttons__wrapper, .elementor-mobile-button-align-center .e-form_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	510	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 22 May 2024 20:34:10 GMT Accept-Ranges: bytes Content-Length: 3829 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:11 UTC	3829	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 3a 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f Data Ascii: .clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49736	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:10 UTC	481	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 4036 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:11 UTC	4036	IN	Data Raw: 77 69 6e 64 6f 77 2e 65 61 65 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 72 65 6e 64 65 72 49 63 6f 6e 48 74 6d 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 76 69 65 77 2c 65 6c 65 6d 65 6e 74 6f 72 2c 73 65 74 74 2c 63 6f 6e 74 72 6f 6c 5f 6e 61 6d 65 2c 20 77 43 6c 61 73 73 20 3d 20 27 27 2c 20 69 6e 64 65 78 3d 27 27 29 7b 0a 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 56 69 65 77 20 3d 3e 20 22 2c 20 76 69 65 77 29 3b 0a 20 20 20 20 2f 2f 20 64 61 74 61 2e 61 64 64 52 65 6e 64 65 72 41 74 74 72 69 62 75 74 65 28 27 6b 65 79 27 2c 20 27 63 6f 6e 74 65 78 74 27 2c 20 27 76 61 6c 75 65 27 29 3b 0a 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 61 74 61 2e 67 65 74 52 65 6e 64 65 72 41 74 74 72 69 62 75 74 65 53 74 72 69 6e 67 28 27 Data Ascii: window.eae = {};window.renderIconHtml = function(view,elementor,sett,control_name, wClass = '', index=''){ // console.log("View => ", view); // data.addRenderAttribute('key', 'context', 'value'); // console.log(data.getRenderAttributeString('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:11 UTC	430	OUT	GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 Nov 2023 20:33:57 GMT Accept-Ranges: bytes Content-Length: 285334 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:11 UTC	7922	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 38 2d 32 38 54 31 33 3a 33 37 5a 0a 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 0a 09 22 75 73 Data Ascii: /! jQuery JavaScript Library v3.7.1 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-08-28T13:37Z */( function( global, factory ) {"us
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 21 63 6f 70 79 49 73 41 72 72 61 79 20 26 26 20 21 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 20 73 72 63 20 29 20 29 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 7b 7d 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 63 6f 70 79 49 73 41 72 72 61 79 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 Data Ascii: !copyIsArray && !jQuery.isPlainObject( src ) ) {clone = {};} else {clone = src;}copyIsArray = false;// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't b
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 36 7d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 09 09 22 3f 7c 5c 5c 5c 5c 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 0a 0a 09 2f 2f 20 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 73 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 73 65 6c 65 63 74 6f 72 73 2f 23 61 74 74 72 69 62 75 74 65 2d 73 65 6c 65 63 74 6f 72 73 0a 09 61 74 74 72 69 62 75 74 65 73 20 3d 20 22 5c 5c 5b 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 0a 09 09 2f 2f 20 4f 70 65 72 61 74 6f 72 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2a 28 5b 2a 5e Data Ascii: 6}" + whitespace +"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",// Attribute selectors: https://www.w3.org/TR/selectors/#attribute-selectorsattributes = "\\[" + whitespace + "(" + identifier + ")(?:" + whitespace +// Operator (capture 2)"([*^
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 09 09 74 72 79 20 7b 0a 09 09 09 09 09 70 75 73 68 2e 61 70 70 6c 79 28 20 72 65 73 75 6c 74 73 2c 0a 09 09 09 09 09 09 6e 65 77 43 6f 6e 74 65 78 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 20 6e 65 77 53 65 6c 65 63 74 6f 72 20 29 0a 09 09 09 09 09 29 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 71 73 61 45 72 72 6f 72 20 29 20 7b 0a 09 09 09 09 09 6e 6f 6e 6e 61 74 69 76 65 53 65 6c 65 63 74 6f 72 43 61 63 68 65 28 20 73 65 6c 65 63 74 6f 72 2c 20 74 72 75 65 20 29 3b 0a 09 09 09 09 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 09 09 09 09 09 69 66 20 28 20 6e 69 64 20 3d 3d 3d 20 65 78 70 61 6e 64 6f 20 29 20 7b 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 76 65 41 74 74 Data Ascii: try {push.apply( results,newContext.querySelectorAll( newSelector ));return results;} catch ( qsaError ) {nonnativeSelectorCache( selector, true );} finally {if ( nid === expando ) {context.removeAtt
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 63 61 75 73 65 20 75 73 65 20 6f 66 20 60 3a 68 61 73 28 29 60 20 69 6e 20 73 75 63 68 0a 09 2f 2f 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 69 6c 6c 20 66 61 69 6c 20 69 6e 20 74 68 65 20 71 53 41 20 70 61 74 68 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 74 6f 20 6a 51 75 65 72 79 20 74 72 61 76 65 72 73 61 6c 0a 09 2f 2f 20 61 6e 79 77 61 79 2e 0a 09 73 75 70 70 6f 72 74 2e 63 73 73 48 61 73 20 3d 20 61 73 73 65 72 74 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 74 72 79 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 20 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 72 65 74 Data Ascii: cause use of `:has()` in such// environments will fail in the qSA path and fall back to jQuery traversal// anyway.support.cssHas = assert( function() {try {document.querySelector( ":has(*,:jqfake)" );return false;} catch ( e ) {ret
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 09 09 09 09 09 65 6c 65 6d 2e 64 6f 63 75 6d 65 6e 74 20 26 26 20 65 6c 65 6d 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 31 31 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 6e 6f 6e 6e 61 74 69 76 65 53 65 6c 65 63 74 6f 72 43 61 63 68 65 28 20 65 78 70 72 2c 20 74 72 75 65 20 29 3b 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 66 69 6e 64 28 20 65 78 70 72 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 6e 75 6c 6c 2c 20 5b 20 65 6c 65 6d 20 5d 20 29 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 7d 3b 0a 0a 66 69 6e 64 2e 63 6f 6e 74 61 69 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 6f 6e 74 65 78 74 2c 20 65 6c 65 6d 20 29 20 7b 0a 0a 09 2f 2f Data Ascii: elem.document && elem.document.nodeType !== 11 ) {return ret;}} catch ( e ) {nonnativeSelectorCache( expr, true );}}return find( expr, document, null, [ elem ] ).length > 0;};find.contains = function( context, elem ) {//
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 6e 74 5b 20 65 78 70 61 6e 64 6f 20 5d 20 7c 7c 20 28 20 70 61 72 65 6e 74 5b 20 65 78 70 61 6e 64 6f 20 5d 20 3d 20 7b 7d 20 29 3b 0a 09 09 09 09 09 09 09 63 61 63 68 65 20 3d 20 6f 75 74 65 72 43 61 63 68 65 5b 20 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 Data Ascii: nt[ expando ] \|\| ( parent[ expando ] = {} );cache = outerCache[ type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 68 2c 20 61 72 67 75 6d 65 6e 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 5b 20 61 72 67 75 6d 65 6e 74 20 3c 20 30 20 3f 20 61 72 67 75 6d 65 6e 74 20 2b 20 6c 65 6e 67 74 68 20 3a 20 61 72 67 75 6d 65 6e 74 20 5d 3b 0a 09 09 7d 20 29 2c 0a 0a 09 09 65 76 65 6e 3a 20 63 72 65 61 74 65 50 6f 73 69 74 69 6f 6e 61 6c 50 73 65 75 64 6f 28 20 66 75 6e 63 74 69 6f 6e 28 20 6d 61 74 63 68 49 6e 64 65 78 65 73 2c 20 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 76 61 72 20 69 20 3d 20 30 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 32 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 49 6e 64 65 78 65 73 2e 70 75 73 68 28 20 69 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 6d 61 74 63 68 49 6e 64 65 78 65 73 3b 0a Data Ascii: h, argument ) {return [ argument < 0 ? argument + length : argument ];} ),even: createPositionalPseudo( function( matchIndexes, length ) {var i = 0;for ( ; i < length; i += 2 ) {matchIndexes.push( i );}return matchIndexes;
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 65 72 20 3f 20 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 20 73 65 65 64 2c 20 65 6c 65 6d 20 29 20 3a 20 70 72 65 4d 61 70 5b 20 69 20 5d 20 29 20 3e 20 2d 31 20 29 20 7b 0a 0a 09 09 09 09 09 09 73 65 65 64 5b 20 74 65 6d 70 20 5d 20 3d 20 21 28 20 72 65 73 75 6c 74 73 5b 20 74 65 6d 70 20 5d 20 3d 20 65 6c 65 6d 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 Data Ascii: er ? indexOf.call( seed, elem ) : preMap[ i ] ) > -1 ) {seed[ temp ] = !( results[ temp ] = elem );}}}// Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 6c 74 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 2f 2f 20 54 72 79 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 6f 70 65 72 61 74 69 6f 6e 73 20 69 66 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 73 65 6c 65 63 74 6f 72 20 69 6e 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 6e 6f 20 73 65 65 64 0a 09 2f 2f 20 28 74 68 65 20 6c 61 74 74 65 72 20 6f 66 20 77 68 69 63 68 20 67 75 61 72 61 6e 74 65 65 73 20 75 73 20 63 6f 6e 74 65 78 74 29 0a 09 69 66 20 28 20 6d 61 74 63 68 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 29 20 7b 0a 0a 09 09 2f 2f 20 52 65 64 75 63 65 20 63 6f 6e 74 65 78 74 20 69 66 20 74 68 65 20 6c 65 61 64 69 6e 67 20 63 6f 6d 70 6f 75 6e 64 20 73 65 6c 65 63 74 6f 72 20 69 73 20 61 6e 20 49 44 0a 09 09 74 6f 6b 65 6e 73 20 3d 20 6d 61 74 63 68 5b 20 Data Ascii: lts \|\| [];// Try to minimize operations if there is only one selector in the list and no seed// (the latter of which guarantees us context)if ( match.length === 1 ) {// Reduce context if the leading compound selector is an IDtokens = match[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49740	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:11 UTC	438	OUT	GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 08 Aug 2023 20:34:14 GMT Accept-Ranges: bytes Content-Length: 31978 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:11 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 2d 20 76 33 2e 34 2e 31 20 2d 20 32 30 32 33 2d 30 32 2d 32 33 54 31 35 3a 33 31 5a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a 09 09 64 65 66 69 6e 65 28 Data Ascii: /! jQuery Migrate - v3.4.1 - 2023-02-23T15:31Z * Copyright OpenJS Foundation and other contributors */( function( factory ) {"use strict";if ( typeof define === "function" && define.amd ) {// AMD. Register as an anonymous module.define(
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 09 09 6d 69 67 72 61 74 65 57 61 72 6e 28 20 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 0a 09 09 09 09 09 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 20 2b 20 61 72 67 73 5b 20 30 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 6f 6c 64 46 69 6e 64 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 7d 2c 20 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 20 29 3b 0a 0a 2f 2f 20 43 6f 70 79 20 70 72 6f 70 65 72 74 69 65 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 6f 72 69 67 69 6e 61 6c 20 6a 51 75 65 72 79 2e 66 69 6e 64 20 6d 65 74 68 6f 64 20 28 65 2e 67 2e 20 2e 61 74 74 72 2c 20 2e 69 73 58 4d 4c 29 0a 66 6f 72 20 Data Ascii: migrateWarn( "selector-hash","Attribute selector with '#' was not fixed: " + args[ 0 ] );}}}return oldFind.apply( this, args );}, "selector-hash" );// Copy properties attached to original jQuery.find method (e.g. .attr, .isXML)for
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 7c 20 20 2f 20 4d 61 72 67 69 6e 20 20 5c 20 20 7c 20 20 20 7c 20 7c 20 52 69 67 68 74 20 20 7c 20 7c 20 20 20 20 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 2d 7c 20 20 20 20 20 20 20 20 20 20 20 7c 2d 2b 2d 2d 2d 2b 2d 7c 20 42 6f 74 74 6f 6d 20 7c 2d 2b 2d 2d 2d 2d 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 5c 20 50 61 64 64 69 6e 67 20 2f 20 20 20 20 20 20 20 20 20 5c 20 4c 65 66 74 20 2f 20 20 20 20 20 20 20 7c 0a 09 2f 2f 20 42 45 47 49 4e 20 2d 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2d 2d 2d Data Ascii: \| / Margin \ \| \| \| Right \| \| \|// \|---------+-\| \|-+---+-\| Bottom \|-+----\|// \| \ Padding / \ Left / \|// BEGIN -\| \|// \| /---
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 69 66 20 28 20 28 20 70 72 6f 70 73 20 3d 20 66 69 78 48 6f 6f 6b 2e 70 72 6f 70 73 20 29 20 26 26 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 77 68 69 6c 65 20 28 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 20 70 72 6f 70 73 2e 70 6f 70 28 29 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 65 76 65 6e 74 20 3d 20 6f 72 69 67 69 6e 61 6c 46 69 78 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 20 29 3b 0a 0a 09 72 65 74 75 72 6e 20 66 69 78 48 6f 6f 6b 20 26 26 20 66 69 78 48 6f 6f 6b 2e 66 69 6c 74 65 72 20 3f 0a 09 09 66 69 78 48 6f 6f 6b 2e 66 69 6c 74 65 72 28 20 65 76 65 6e 74 2c 20 6f 72 69 67 69 6e 61 6c 45 76 Data Ascii: if ( ( props = fixHook.props ) && props.length ) {while ( props.length ) {jQuery.event.addProp( props.pop() );}}}event = originalFix.call( this, originalEvent );return fixHook && fixHook.filter ?fixHook.filter( event, originalEv
2024-05-28 05:14:11 UTC	55	IN	Data Raw: 6b 20 3d 20 6f 6c 64 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3b 0a 0a 7d 0a 0a 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3b 0a 7d 20 29 3b 0a Data Ascii: k = oldDeferred.exceptionHook;}return jQuery;} );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49739	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:11 UTC	616	OUT	GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1 Host: campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:41:34 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:11 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:11 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-28 05:14:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125786 Date: Tue, 28 May 2024 05:14:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-28 05:14:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49741	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:11 UTC	617	OUT	GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:11 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:51:15 GMT Accept-Ranges: bytes Content-Length: 17562 Content-Type: image/png
2024-05-28 05:14:11 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 64 08 06 00 00 00 d9 9f c8 ac 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRTdtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:11 UTC	8000	IN	Data Raw: 00 75 2a 20 be 0c e6 ca ae 68 f4 ed d0 02 5f c3 98 6e 0f 99 2e 02 53 cd f8 6f 6e 41 66 9f f7 d1 52 b3 22 00 71 5d ea 55 8a 5c 0c 70 5f 90 d1 89 dd 09 a5 72 00 2c 6e 0a fe e0 7d bc f7 90 03 ea dc 97 39 79 13 e4 32 b7 00 75 69 0b 82 89 5f 00 7c 64 2a 8d b7 9a 29 c7 e4 0f d4 24 cc 56 96 9c c1 5d be 9b d3 00 53 69 7c c5 75 9d 8c 3f 73 72 0a 1f e9 aa f8 5c 2f b4 60 0b 0c cd a6 6f 0a b0 ae 8f 5b 42 e6 b4 26 cc ae 03 f0 7f 07 e4 9c 2f c4 39 ad 2f e5 b9 5a 02 ec ed 30 2f 0e c4 0f 33 1a 3a 9f c6 fc 5d 1d 56 bb 5f 09 03 73 3a e7 6a 5d ff c6 28 26 7f 02 a9 a3 c5 af e2 c8 25 97 5c ea 00 a0 ae 60 41 fc e9 cf 9e df e9 57 ab 39 19 21 93 7f 28 ec 30 6a 45 87 00 ee 06 58 e5 18 0b c2 46 dc d2 c8 cf f8 5e 66 72 52 b6 f5 5b 60 81 9a 75 bd 8d ef be a1 28 7c 63 2d cc fe 7d 3c Data Ascii: u* h_n.SonAfR"q]U\p_r,n}9y2ui_\|d*)$V]Si\|u?sr\/`o[B&/9/Z0/3:]V_s:j](&%\`AW9!(0jEXF^frR[`u(\|c-}<
2024-05-28 05:14:11 UTC	1603	IN	Data Raw: 78 65 04 18 ce f0 da 25 ec 5a ba 02 b3 5f 16 a0 9b 88 7c 18 0b a2 79 0e 85 b5 64 1e 7a 19 fb d3 48 63 fc 49 3d bc 0e b6 05 fe a5 33 bc e3 fa a2 f5 97 82 4d c8 1d f0 23 a6 f8 64 3a f7 48 4b 9e 10 72 c1 cf ef 7a a6 5a a9 b2 a3 05 d9 fe 3b 32 d0 4a 09 5d 72 83 74 15 ae a5 99 63 37 29 e2 b6 65 b9 c4 bb f6 cf b0 c4 71 f3 e9 fd ae c6 20 6a c2 a0 95 22 88 8a 15 ee 82 b2 f8 1d 9f e1 b2 58 20 9a b4 90 0f 5b 31 a6 9a f5 ff cb 33 af bb a0 14 fd e4 37 eb c3 88 3e 0e 7d bf 11 00 fd 99 d5 8c 81 75 6e 94 95 01 b2 b8 58 e6 e6 80 d0 57 80 c5 72 d4 69 ba e7 12 58 05 f0 f5 7d dc 3d b0 74 86 53 ff 75 31 b1 27 f2 5c 4d b8 6f 94 6f bb 19 c7 37 e2 59 bf 28 f3 7d 88 3d 2f ef 99 e8 2e 1b fe 18 8b 9e d8 dd 84 77 a1 fb be 87 a2 9b 09 63 5e de 7b 47 33 3d bf b5 de cd 07 d4 bd 1b 84 Data Ascii: xe%Z_\|ydzHcI=3M#d:HKrzZ;2J]rtc7)eq j"X [137>}unXWriX}=tSu1'\Moo7Y(}=/.wc^{G3=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49742	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	616	OUT	GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1 Host: campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:57:31 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:12 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:12 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49744	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	619	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	1002	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: ASP.NET_SessionId=arqj4iktuy35ywjkryrwdvxg; path=/; HttpOnly; SameSite=Lax Set-Cookie: llbrMachine_593579=19998811=19998811; expires=Sun, 28-May-2524 05:14:12 GMT; path=/ X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IpRoVym7QUrDSJ2RkUo6N44LsmVsKgJ7s9NlV9VU7x1b3knDnAlPTyAbbZ%2F6eFCIsVb8%2FXVK2M%2BrvnXZ2sQhGZ7pMjG6urxdYp8854nblpIkDn0P9oWmS6cgIAg8njA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2832bdd424c-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:12 UTC	367	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:12 UTC	273	IN	Data Raw: 6b 51 56 33 58 35 53 77 38 41 38 4f 2f 55 50 5a 45 32 6b 48 46 36 69 33 77 3d 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 76 61 6c 75 65 3d 22 31 38 44 36 43 36 44 30 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 3c 2f Data Ascii: kQV3X5Sw8A8O/UPZE2kHF6i3w=" /></div><div class="aspNetHidden"><input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" /></div> <div> <span id="lbl"></span> </div> </form></
2024-05-28 05:14:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49747	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	424	OUT	GET /releases/4.0.0/cookie-consent.js HTTP/1.1 Host: www.cookieconsent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	640	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 28 May 2024 05:14:12 GMT Content-Length: 0 Connection: close location: https://www.termsfeed.com/public/cookie-consent/4.0.0/cookie-consent.js CF-Cache-Status: HIT Age: 1117 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n0wqX%2BK0L71FUXk%2BAnpbJQOad46wbkcPb2tO%2BOdDYwo40EvmVCWH8pX%2Fl0JAz2xYqHEo6lRzKXy5fIQNDhnc8FLOWrXQWGJVsKK7DnO2EGwI28BgdsX8PjxiGbgYpzIXePOaZEEa4hA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2835a35426b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49745	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	477	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 158087 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	7922	IN	Data Raw: 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 0a 20 20 20 20 22 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 77 74 73 2d 67 6d 61 70 2e 64 65 66 61 75 6c 74 22 2c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 24 77 72 61 70 70 65 72 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 6d 61 72 6b 65 72 73 22 29 3b 0a 20 20 20 20 20 20 69 66 28 24 77 72 61 70 70 65 72 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 7b 0a 20 20 20 20 20 20 Data Ascii: jQuery(window).on("elementor/frontend/init", function () { elementorFrontend.hooks.addAction( "frontend/element_ready/wts-gmap.default", function ($scope) { var $wrapper = $scope.find(".eae-markers"); if($wrapper.length == 0){
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 6f 20 35 30 25 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 73 74 61 72 74 5f 70 6f 73 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 2f 2a 63 72 65 61 74 65 20 73 6c 69 64 65 72 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 69 6d 67 2d 63 6f 6d 70 2d 73 6c 69 64 65 72 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 20 3d 20 73 6c 69 64 65 72 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 2f 2a 70 6f 73 69 74 69 6f 6e 20 74 68 65 20 73 6c 69 64 65 72 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 74 6f 70 20 3d 20 68 20 2f 20 32 20 2d Data Ascii: o 50%:/ img.style.width = start_pos + "px"; /create slider:/ slider = $scope.find(".eae-img-comp-slider"); slider = slider[0]; /position the slider in the middle:*/ slider.style.top = h / 2 -
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6c 69 64 65 28 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 72 65 73 69 7a 65 20 74 68 65 20 69 6d 61 67 65 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 78 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 70 6f 73 69 74 69 6f 6e 20 74 68 65 20 73 6c 69 64 65 72 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 74 6f 70 20 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 20 2d 0a 20 20 20 20 20 20 Data Ascii: } function slide(x) { /resize the image:/ img.style.height = x + "px"; /position the slider:/ slider.style.top = img.offsetHeight - slider.offsetHeight / 2 -
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 72 61 70 70 65 72 2e 64 61 74 61 28 22 63 6c 69 63 6b 61 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 62 6f 61 72 64 20 3d 20 6f 75 74 65 72 5f 77 72 61 70 70 65 72 2e 64 61 74 61 28 22 6b 65 79 62 6f 61 72 64 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 6f 6c 6c 62 61 72 20 3d 20 6f 75 74 65 72 5f 77 72 61 70 70 65 72 2e 64 61 74 61 28 22 73 63 72 6f 6c 6c 62 61 72 22 29 3b 0a 20 20 20 20 20 20 20 20 61 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 64 69 72 65 63 74 69 6f 6e 2c 0a 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 3a 20 65 66 66 65 63 74 2c 0a 20 20 20 20 20 20 20 20 20 20 73 70 61 63 65 42 65 74 77 65 65 6e 3a 20 73 70 61 63 65 2e 64 65 73 6b 74 6f 70 2c 0a 20 20 Data Ascii: rapper.data("clickable"); var keyboard = outer_wrapper.data("keyboard"); var scrollbar = outer_wrapper.data("scrollbar"); adata = { direction: direction, effect: effect, spaceBetween: space.desktop,
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 61 79 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 64 2e 73 65 74 54 69 6d 65 28 64 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 65 78 64 61 79 73 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 31 30 30 30 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 65 78 70 20 74 69 6d 65 27 2c 63 6f 6f 6b 69 65 5f 65 78 70 69 72 65 29 3b 0a 20 20 20 20 20 20 2f 2f 64 2e 73 65 74 54 69 6d 65 28 64 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 28 20 65 78 64 61 79 73 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 31 30 30 30 29 29 3b 0a 20 20 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 20 2b 20 64 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 64 Data Ascii: ays) { var d = new Date(); d.setTime(d.getTime() + exdays * 60 * 60 * 1000); //console.log('exp time',cookie_expire); //d.setTime(d.getTime() + ( exdays * 60 * 60 * 1000)); var expires = "expires=" + d.toUTCString(); d
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 6e 6f 6e 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 6d 65 73 73 61 67 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 65 67 74 2d 6d 65 73 73 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 68 69 64 65 5f 70 61 72 65 6e 74 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 73 63 Data Ascii: e").css("display", "none"); } if (value === "message") { $scope.find(".eae-egt-message").css("display", "block"); } if (value === "hide_parent") { if (!$sc
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 65 66 20 3d 20 24 75 72 6c 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 68 69 64 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 73 63 6f 70 65 2e 68 61 73 43 6c 61 73 73 28 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 64 69 74 2d 6d 6f 64 65 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ef = $url1; } } } if (value === "hide") { if (!$scope.hasClass("elementor-element-edit-mode")) { $scope .find("." + unqId)
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 65 78 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 62 65 66 6f 72 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e Data Ascii: .find(b) .addClass("flip-clock-active"); $scope .find("." + unqId) .find(b) .next() .addClass("flip-clock-before"); } else { $scope .fin
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 65 78 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 62 65 66 6f 72 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 Data Ascii: lip-clock-active"); $scope .find("." + unqId) .find(b) .next() .addClass("flip-clock-before"); } else { $scope .find("." + unqId) .find("
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 75 6e 74 44 6f 77 6e 44 61 74 65 20 3d 20 64 61 74 65 31 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2a 20 69 66 20 28 65 6c 65 6d 65 6e 74 5f 74 79 70 65 20 3d 3d 3d 20 27 63 6f 75 6e 74 64 6f 77 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 65 31 20 3d 20 6e 65 77 20 44 61 74 65 28 63 6f 75 6e 74 44 6f 77 6e 44 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 44 6f 77 6e 44 61 74 65 20 3d 20 64 61 74 65 31 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 69 72 73 Data Ascii: untDownDate = date1.getTime(); } } /* if (element_type === 'countdown') { date1 = new Date(countDownDate); countDownDate = date1.getTime(); } else { var firs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49749	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	482	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 60404 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	7923	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 31 2e 31 2e 30 20 2d 20 32 30 31 36 2d 30 32 2d 32 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a Data Ascii: /! Magnific Popup - v1.1.0 - 2016-02-20 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2016 Dmitry Semenov; */;(function (factory) { if (typeof define === 'function' && define.amd) { // AMD. Register as an anonymous module.
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 28 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 5b 27 69 6e 69 74 27 2b 6e 5d 2e 63 61 6c 6c 28 6d 66 70 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 6d 66 70 54 72 69 67 67 65 72 28 27 42 65 66 6f 72 65 4f 70 65 6e 27 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 66 70 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 6f 73 65 20 62 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 6d 66 70 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 77 72 61 70 2e 61 70 70 65 6e 64 28 20 5f 67 Data Ascii: (1); mfp['init'+n].call(mfp); } _mfpTrigger('BeforeOpen'); if(mfp.st.showCloseBtn) { // Close button if(!mfp.st.closeBtnInside) { mfp.wrap.append( _g
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 2f 2f 20 61 6c 6c 6f 77 73 20 74 6f 20 6d 6f 64 69 66 79 20 6d 61 72 6b 75 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 6d 66 70 54 72 69 67 67 65 72 28 27 46 69 72 73 74 4d 61 72 6b 75 70 50 61 72 73 65 27 2c 20 6d 61 72 6b 75 70 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 61 72 6b 75 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 74 79 70 65 5d 20 3d 20 24 28 6d 61 72 6b 75 70 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 72 6b 75 70 20 66 6f 75 6e 64 20 77 65 20 6a 75 73 74 20 Data Ascii: // allows to modify markup _mfpTrigger('FirstMarkupParse', markup); if(markup) { mfp.currTemplate[type] = $(markup); } else { // if there is no markup found we just
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 28 29 29 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 5f 73 65 74 46 6f 63 75 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 6d 66 70 2e 73 74 2e 66 6f 63 75 73 20 3f 20 6d 66 70 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 6d 66 70 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 20 3a 20 6d 66 70 2e 77 72 61 70 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 5f 6f 6e 46 6f 63 75 73 49 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 65 2e 74 61 72 67 65 74 20 21 3d 3d 20 6d 66 70 2e 77 72 61 70 5b 30 5d 20 26 26 20 21 24 2e 63 6f 6e 74 61 69 6e 73 28 6d 66 70 2e 77 72 61 70 5b 30 5d 2c 20 65 2e 74 61 72 Data Ascii: ()) ); }, _setFocus: function() { (mfp.st.focus ? mfp.content.find(mfp.st.focus).eq(0) : mfp.wrap).focus(); }, _onFocusIn: function(e) { if( e.target !== mfp.wrap[0] && !$.contains(mfp.wrap[0], e.tar
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 27 72 65 61 64 79 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 5f 70 61 72 73 65 4d 61 72 6b 75 70 28 74 65 6d 70 6c 61 74 65 2c 20 7b 7d 2c 20 69 74 65 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 65 6d 70 6c 61 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 2f 2a 3e 3e 69 6e 6c 69 6e 65 2a 2f 0a 0a 20 20 20 20 2f 2a 3e 3e 61 6a 61 78 2a 2f 0a 20 20 20 20 76 61 72 20 41 4a 41 58 5f 4e 53 20 3d 20 27 61 6a 61 78 27 2c 0a 20 20 20 20 20 20 20 20 5f 61 6a 61 78 43 75 72 2c 0a 20 20 20 20 20 20 20 20 5f 72 65 6d 6f 76 65 41 6a 61 78 43 75 Data Ascii: mfp.updateStatus('ready'); mfp._parseMarkup(template, {}, item); return template; } } }); />>inline/ />>ajax/ var AJAX_NS = 'ajax', _ajaxCur, _removeAjaxCu
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 69 66 28 67 75 61 72 64 20 3c 20 32 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 6f 6e 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 2c 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 4c 6f 61 64 45 72 72 6f 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if(guard < 200) { setTimeout(onLoadComplete,100); } else { onLoadError(); } }
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 66 70 2e 63 75 72 72 49 74 65 6d 2e 68 61 73 53 69 7a 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6d 66 70 2e 63 75 72 72 49 74 65 6d 2e 69 6d 67 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 65 6c 65 6d 65 6e 74 20 70 6f 73 74 69 6f 6e 20 72 65 6c 61 74 69 76 65 20 74 6f 20 76 69 65 77 70 6f 72 74 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ion() { if(mfp.currItem.hasSize) { return mfp.currItem.img; } else { return false; } }, // Get element postion relative to viewport
2024-05-28 05:14:12 UTC	4481	IN	Data Raw: 69 74 6c 65 25 2f 67 69 2c 20 67 53 74 2e 74 50 72 65 76 29 2e 72 65 70 6c 61 63 65 28 2f 25 64 69 72 25 2f 67 69 2c 20 27 6c 65 66 74 27 29 20 29 2e 61 64 64 43 6c 61 73 73 28 50 52 45 56 45 4e 54 5f 43 4c 4f 53 45 5f 43 4c 41 53 53 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 6f 77 52 69 67 68 74 20 3d 20 6d 66 70 2e 61 72 72 6f 77 52 69 67 68 74 20 3d 20 24 28 20 6d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 2f 25 74 69 74 6c 65 25 2f 67 69 2c 20 67 53 74 2e 74 4e 65 78 74 29 2e 72 65 70 6c 61 63 65 28 2f 25 64 69 72 25 2f 67 69 2c 20 27 72 69 67 68 74 27 29 20 29 2e 61 64 64 43 6c 61 73 73 28 50 52 45 56 45 4e 54 5f 43 4c 4f 53 45 5f 43 4c 41 53 53 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: itle%/gi, gSt.tPrev).replace(/%dir%/gi, 'left') ).addClass(PREVENT_CLOSE_CLASS), arrowRight = mfp.arrowRight = $( markup.replace(/%title%/gi, gSt.tNext).replace(/%dir%/gi, 'right') ).addClass(PREVENT_CLOSE_CLASS);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49748	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	475	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 158217 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	7922	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 20 3d 20 28 7b 0a 0a 2f 2a 2a 2a 2f 20 34 38 30 3a 0a 2f 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 63 6f 6e 73 74 20 45 41 45 41 64 64 54 6f 43 61 6c 65 6e 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 29 20 7b 0a 09 09 63 6f 6e 73 74 20 65 49 64 20 3d 20 24 73 63 6f 70 65 2e 61 74 74 72 28 27 64 61 74 61 2d 69 64 27 29 3b 0a 09 09 63 6f 6e 73 74 20 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 6c 65 6d 65 6e 74 Data Ascii: /****/ (() => { // webpackBootstrap/**/ var __webpack_modules__ = ({// 480:/**/ (() => {(function ($) {const EAEAddToCalender = function ($scope) {const eId = $scope.attr('data-id');const element = document.querySelector('.element
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 64 65 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 63 6c 61 73 73 20 53 77 69 70 65 72 42 61 73 65 7b 0a 0a 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 64 61 74 61 2c 20 77 69 64 2c 20 73 63 6f 70 65 20 3d 20 6e 75 6c 6c 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 77 69 70 65 72 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 20 3d 20 27 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 27 20 2b 20 77 69 64 20 2b 20 27 20 2e 65 61 65 2d 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 27 3b 0a 09 09 6c 65 74 20 61 63 74 69 76 65 5f 62 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f Data Ascii: de = () => { return false;}class SwiperBase{ constructor(data, wid, scope = null) { let swiper = []; let swiperContainer = '.elementor-element-' + wid + ' .eae-swiper-container';let active_breakpoints = elementorFrontend.co
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 73 20 3d 20 74 65 73 74 69 6d 6f 6e 69 61 6c 53 6c 69 64 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6d 61 67 65 2e 65 61 65 2d 70 72 65 73 65 74 2d 32 27 29 3b 0a 0a 09 09 09 09 09 09 69 66 28 74 65 73 74 69 6d 6f 6e 69 61 6c 53 6c 69 64 65 72 20 21 3d 3d 20 6e 75 6c 6c 29 7b 0a 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 09 09 09 09 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 3d 20 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3b 0a 09 09 09 09 09 09 09 09 69 66 28 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 Data Ascii: s = testimonialSlider.querySelectorAll('.eae-additional-image.eae-preset-2');if(testimonialSlider !== null){window.addEventListener("resize", function(){const currentWindowWidth = this.window.innerWidth;if(currentWindowWi
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 20 20 20 2f 2f 20 69 6e 63 69 63 61 74 6f 72 4c 65 66 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 70 65 6e 57 72 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 57 72 6e 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 73 65 74 74 69 6e 67 73 2e 6f 70 65 6e 57 72 6e 4d 73 67 54 78 74 20 2b 20 22 20 22 20 2b 20 6f 70 65 6e 6d 69 6e 74 73 20 2b 20 22 20 4d 69 6e 75 74 65 73 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: // incicatorLeft.appendChild(openWrn); openWrn.innerHTML = settings.openWrnMsgTxt + " " + openmints + " Minutes"; } }
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 7d 65 6c 73 65 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 64 69 65 6e 74 43 6f 6c 6f 72 41 67 20 3d 20 28 4d 61 74 68 2e 50 49 2f 31 38 30 29 20 20 2a 20 28 28 28 33 36 30 20 2d 20 28 39 30 20 2d 20 73 74 61 72 74 41 6e 67 6c 65 29 29 20 2d 20 28 64 61 74 61 2e 70 72 6f 67 72 65 73 73 5f 77 69 64 74 68 2f 32 29 29 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 52 65 73 75 6c 74 20 3d 20 20 28 76 Data Ascii: }else{ gradientColorAg = (Math.PI/180) * (((360 - (90 - startAngle)) - (data.progress_width/2)) ); } } }else{ pointResult = (v
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 20 70 65 72 63 65 6e 74 20 3e 3d 20 72 65 73 75 6c 74 20 7c 7c 20 72 65 73 75 6c 74 20 3d 3d 20 31 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 63 72 49 6e 74 65 72 76 61 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 76 61 6c 75 65 43 6f 6e 74 61 69 6e 65 72 20 21 3d 3d 20 6e 75 6c 6c 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 43 6f 6e 74 61 69 6e 65 72 2e 69 6e 6e 65 72 48 54 4d 4c Data Ascii: } if( percent >= result \|\| result == 1){ clearInterval(acrInterval); if(valueContainer !== null){ valueContainer.innerHTML
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 6d 65 28 77 72 61 70 70 65 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 20 3a 20 27 62 6f 74 74 6f 6d 2d 69 6e 2d 76 69 65 77 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 61 62 6e 6f 6c 49 66 72 61 6d 65 28 65 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 69 64 65 6f 54 79 70 65 20 3d 20 65 6c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 76 69 64 65 6f 2d Data Ascii: me(wrapper); }, offset : 'bottom-in-view' }); } } } function labnolIframe(ele) { let videoType = ele.getAttribute('data-video-
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 66 72 6f 6d 7d 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 3a 20 20 7b 20 27 74 72 61 6e 73 66 6f 72 6d 27 3a 20 74 6f 20 7d 20 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 69 74 65 6d 73 29 2e 70 6c 61 79 4b 65 79 66 72 61 6d 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 20 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 3a 20 44 61 74 61 2e 44 75 72 61 74 69 6f 6e 2b 27 6d 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 3a 20 27 6c 69 6e 65 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 61 79 3a 20 Data Ascii: from}, to: { 'transform': to } , }); $(items).playKeyframe({ name:animationName , duration: Data.Duration+'ms', timingFunction: 'linear', delay:
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 6b 65 72 73 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 69 68 2d 6d 61 72 6b 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 6f 6c 74 69 70 73 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 69 68 2d 74 6f 6f 6c 74 69 70 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 61 6e 69 6d 61 74 69 6f 6e 20 3d 20 73 65 74 74 69 6e 67 73 2e 74 6f 6f 6c 74 69 70 5f 61 6e 69 6d 61 74 69 6f 6e 5f 74 79 70 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 72 65 76 69 65 77 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e Data Ascii: kers = wrapper.querySelectorAll('.eae-ih-marker'); const tooltips = wrapper.querySelectorAll('.eae-ih-tooltip'); const animation = settings.tooltip_animation_type; const preview = wrapper.querySelectorAll(".
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 74 20 74 69 70 70 79 5f 69 6e 64 65 78 20 3d 20 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6d 61 72 6b 65 72 27 29 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 69 66 28 6d 61 72 6b 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 65 61 65 2d 69 68 2d 72 65 70 2d 74 6f 6f 6c 74 69 70 2d 73 68 6f 77 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 69 66 20 28 74 69 70 70 79 49 6e 73 74 61 6e 63 65 5b 74 69 70 70 79 5f 69 6e 64 65 78 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: // const tippy_index = this.getAttribute('data-marker') - 1; // if(marker.classList.contains('eae-ih-rep-tooltip-show')){ // if (tippyInstance[tippy_index]) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49751	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	468	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 15073 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6c 2c 61 3b 6c 3d 74 68 69 73 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6c 3d 7b 7d 2c 61 3d 7b 7d 3b 74 72 Data Ascii: /! Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */(function(){var l,a;l=this,a=function(){"use strict";var l={},a={};tr
2024-05-28 05:14:12 UTC	7150	IN	Data Raw: 64 66 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 70 64 66 22 5d 2c 5b 22 66 69 6c 65 2d 77 6f 72 64 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 77 6f 72 64 22 5d 2c 5b 22 66 69 6c 65 2d 65 78 63 65 6c 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 65 78 63 65 6c 22 5d 2c 5b 22 66 69 6c 65 2d 70 6f 77 65 72 70 6f 69 6e 74 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 70 6f 77 65 72 70 6f 69 6e 74 22 5d 2c 5b 22 66 69 6c 65 2d 69 6d 61 67 65 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c 65 2d 70 68 6f 74 6f 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c 65 2d 70 69 63 74 75 72 65 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c Data Ascii: df-o","far","file-pdf"],["file-word-o","far","file-word"],["file-excel-o","far","file-excel"],["file-powerpoint-o","far","file-powerpoint"],["file-image-o","far","file-image"],["file-photo-o","far","file-image"],["file-picture-o","far","file-image"],["fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49752	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	482	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 42983 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	7923	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2a 20 41 75 74 68 6f 72 20 3a 20 56 69 6e 63 65 6e 74 20 47 61 72 72 65 61 75 20 20 2d 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 0a 2f 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 2f 2a 20 44 65 6d 6f 20 2f 20 47 65 6e 65 72 61 74 6f 72 20 3a 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 2f 70 61 72 74 69 63 6c 65 73 2e 6a 73 0a 2f 2a 20 47 69 74 48 75 62 20 3a 20 67 69 74 68 75 62 2e 63 6f 6d 2f 56 69 6e 63 65 6e 74 47 61 72 72 65 61 75 2f 70 61 72 74 69 63 6c 65 73 2e 6a Data Ascii: /* -----------------------------------------------/* Author : Vincent Garreau - vincentgarreau.com/* MIT license: http://opensource.org/licenses/MIT/* Demo / Generator : vincentgarreau.com/particles.js/* GitHub : github.com/VincentGarreau/particles.j
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 35 20 2d 20 30 20 2b 20 31 29 29 20 2b 20 30 29 2c 0a 20 20 20 20 20 20 20 20 62 3a 20 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 28 32 35 35 20 2d 20 30 20 2b 20 31 29 29 20 2b 20 30 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 28 63 6f 6c 6f 72 2e 76 61 6c 75 65 29 20 3d 3d 20 27 73 74 72 69 6e 67 27 29 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6c 6f 72 20 3d 20 63 6f 6c 6f 72 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6c 6f 72 2e 72 67 62 20 3d 20 68 65 78 54 6f 52 67 62 28 74 68 69 73 2e 63 6f 6c 6f 72 2e 76 61 6c 75 65 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 6f 70 61 63 69 74 79 20 2a 2f 0a 20 20 20 20 74 68 69 73 2e 6f 70 61 63 69 74 79 Data Ascii: 5 - 0 + 1)) + 0), b: (Math.floor(Math.random() * (255 - 0 + 1)) + 0) } } else if(typeof(color.value) == 'string'){ this.color = color; this.color.rgb = hexToRgb(this.color.value); } /* opacity */ this.opacity
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 3d 20 2d 70 2e 76 78 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 2e 79 20 2b 20 70 2e 72 61 64 69 75 73 20 3e 20 70 4a 53 2e 63 61 6e 76 61 73 2e 68 29 20 70 2e 76 79 20 3d 20 2d 70 2e 76 79 3b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 2e 79 20 2d 20 70 2e 72 61 64 69 75 73 20 3c 20 30 29 20 70 2e 76 79 20 3d 20 2d 70 2e 76 79 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2a 20 65 76 65 6e 74 73 20 2a 2f 0a 20 20 20 20 20 20 69 66 28 69 73 49 6e 41 72 72 61 79 28 27 67 72 61 62 27 2c 20 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 65 76 65 6e 74 73 2e 6f 6e 68 6f 76 65 72 2e 6d 6f 64 65 29 29 7b 0a 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 6d 6f 64 65 73 2e 67 Data Ascii: = -p.vx; if (p.y + p.radius > pJS.canvas.h) p.vy = -p.vy; else if (p.y - p.radius < 0) p.vy = -p.vy; break; } /* events */ if(isInArray('grab', pJS.interactivity.events.onhover.mode)){ pJS.fn.modes.g
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 20 20 20 69 66 28 62 75 62 62 6c 65 5f 70 61 72 61 6d 20 21 3d 20 70 61 72 74 69 63 6c 65 73 5f 70 61 72 61 6d 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 28 21 70 4a 53 2e 74 6d 70 2e 62 75 62 62 6c 65 5f 64 75 72 61 74 69 6f 6e 5f 65 6e 64 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 69 73 74 5f 6d 6f 75 73 65 20 3c 3d 20 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 6f 64 65 73 2e 62 75 62 62 6c 65 2e 64 69 73 74 61 6e 63 65 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 70 5f 6f 62 6a 5f 62 75 62 62 6c 65 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 76 61 72 20 6f 62 6a 20 3d 20 70 5f 6f 62 6a 5f 62 75 62 62 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 76 61 72 20 6f 62 6a 20 3d 20 70 5f Data Ascii: if(bubble_param != particles_param){ if(!pJS.tmp.bubble_duration_end){ if(dist_mouse <= pJS.interactivity.modes.bubble.distance){ if(p_obj_bubble != undefined) var obj = p_obj_bubble; else var obj = p_
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 5f 6e 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 72 65 6d 6f 76 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 6d 6f 64 65 73 2e 72 65 6d 6f 76 65 50 61 72 74 69 63 6c 65 73 28 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 6f 64 65 73 2e 72 65 6d 6f 76 65 2e 70 61 72 74 69 63 6c 65 73 5f 6e 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 62 75 62 62 6c 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 4a 53 2e 74 6d 70 2e 62 75 62 62 6c 65 5f 63 6c 69 Data Ascii: _nb); } } break; case 'remove': pJS.fn.modes.removeParticles(pJS.interactivity.modes.remove.particles_nb); break; case 'bubble': pJS.tmp.bubble_cli
2024-05-28 05:14:12 UTC	3060	IN	Data Raw: 6d 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 72 65 74 75 72 6e 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 77 65 62 6b 69 74 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6d 6f 7a 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 20 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 20 7c 7c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 7b 0a 20 20 20 Data Ascii: me = (function(){ return window.requestAnimationFrame \|\| window.webkitRequestAnimationFrame \|\| window.mozRequestAnimationFrame \|\| window.oRequestAnimationFrame \|\| window.msRequestAnimationFrame \|\| function(callback){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49750	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	484	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 4572 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:12 UTC	4572	IN	Data Raw: 2f 2f 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 65 6c 65 6d 65 6e 74 6f 72 2f 72 65 6e 64 65 72 2f 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 27 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 6a 51 75 65 72 79 28 22 2e 65 61 65 2d 61 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 2d 77 72 61 70 70 65 72 20 2e 65 61 65 2d 61 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 22 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 76 69 73 69 62 6c 65 22 29 3b 0a 0a 09 2f 2f 73 65 74 20 61 6e 69 6d 61 74 69 6f 6e 20 74 69 6d 69 6e 67 0a 09 76 61 72 20 61 6e 69 6d 61 74 69 6f 6e 44 65 6c 61 79 20 3d 20 32 35 30 30 2c 0a 09 2f 2f 6c 6f 61 64 69 6e 67 Data Ascii: //jQuery.noConflict();jQuery(document).on('elementor/render/animation-text',function(e){jQuery(".eae-at-animation-text-wrapper .eae-at-animation-text:first-child").addClass("is-visible");//set animation timingvar animationDelay = 2500,//loading

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49753	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:12 UTC	379	OUT	GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1 Host: campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:12 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:41:34 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:12 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:12 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:12 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49754	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	380	OUT	GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:51:15 GMT Accept-Ranges: bytes Content-Length: 17562 Content-Type: image/png
2024-05-28 05:14:13 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 64 08 06 00 00 00 d9 9f c8 ac 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRTdtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:13 UTC	8000	IN	Data Raw: 00 75 2a 20 be 0c e6 ca ae 68 f4 ed d0 02 5f c3 98 6e 0f 99 2e 02 53 cd f8 6f 6e 41 66 9f f7 d1 52 b3 22 00 71 5d ea 55 8a 5c 0c 70 5f 90 d1 89 dd 09 a5 72 00 2c 6e 0a fe e0 7d bc f7 90 03 ea dc 97 39 79 13 e4 32 b7 00 75 69 0b 82 89 5f 00 7c 64 2a 8d b7 9a 29 c7 e4 0f d4 24 cc 56 96 9c c1 5d be 9b d3 00 53 69 7c c5 75 9d 8c 3f 73 72 0a 1f e9 aa f8 5c 2f b4 60 0b 0c cd a6 6f 0a b0 ae 8f 5b 42 e6 b4 26 cc ae 03 f0 7f 07 e4 9c 2f c4 39 ad 2f e5 b9 5a 02 ec ed 30 2f 0e c4 0f 33 1a 3a 9f c6 fc 5d 1d 56 bb 5f 09 03 73 3a e7 6a 5d ff c6 28 26 7f 02 a9 a3 c5 af e2 c8 25 97 5c ea 00 a0 ae 60 41 fc e9 cf 9e df e9 57 ab 39 19 21 93 7f 28 ec 30 6a 45 87 00 ee 06 58 e5 18 0b c2 46 dc d2 c8 cf f8 5e 66 72 52 b6 f5 5b 60 81 9a 75 bd 8d ef be a1 28 7c 63 2d cc fe 7d 3c Data Ascii: u* h_n.SonAfR"q]U\p_r,n}9y2ui_\|d*)$V]Si\|u?sr\/`o[B&/9/Z0/3:]V_s:j](&%\`AW9!(0jEXF^frR[`u(\|c-}<
2024-05-28 05:14:13 UTC	1603	IN	Data Raw: 78 65 04 18 ce f0 da 25 ec 5a ba 02 b3 5f 16 a0 9b 88 7c 18 0b a2 79 0e 85 b5 64 1e 7a 19 fb d3 48 63 fc 49 3d bc 0e b6 05 fe a5 33 bc e3 fa a2 f5 97 82 4d c8 1d f0 23 a6 f8 64 3a f7 48 4b 9e 10 72 c1 cf ef 7a a6 5a a9 b2 a3 05 d9 fe 3b 32 d0 4a 09 5d 72 83 74 15 ae a5 99 63 37 29 e2 b6 65 b9 c4 bb f6 cf b0 c4 71 f3 e9 fd ae c6 20 6a c2 a0 95 22 88 8a 15 ee 82 b2 f8 1d 9f e1 b2 58 20 9a b4 90 0f 5b 31 a6 9a f5 ff cb 33 af bb a0 14 fd e4 37 eb c3 88 3e 0e 7d bf 11 00 fd 99 d5 8c 81 75 6e 94 95 01 b2 b8 58 e6 e6 80 d0 57 80 c5 72 d4 69 ba e7 12 58 05 f0 f5 7d dc 3d b0 74 86 53 ff 75 31 b1 27 f2 5c 4d b8 6f 94 6f bb 19 c7 37 e2 59 bf 28 f3 7d 88 3d 2f ef 99 e8 2e 1b fe 18 8b 9e d8 dd 84 77 a1 fb be 87 a2 9b 09 63 5e de 7b 47 33 3d bf b5 de cd 07 d4 bd 1b 84 Data Ascii: xe%Z_\|ydzHcI=3M#d:HKrzZ;2J]rtc7)eq j"X [137>}unXWriX}=tSu1'\Moo7Y(}=/.wc^{G3=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49756	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	485	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 23844 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:13 UTC	7923	IN	Data Raw: 2f 2a 21 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 56 65 67 61 73 20 2d 20 46 75 6c 6c 73 63 72 65 65 6e 20 42 61 63 6b 67 72 6f 75 6e 64 73 20 61 6e 64 20 53 6c 69 64 65 73 68 6f 77 73 2e 0a 20 2a 20 76 32 2e 34 2e 30 20 2d 20 62 75 69 6c 74 20 32 30 31 37 2d 30 31 2d 30 34 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 76 65 67 61 73 2e 6a 61 79 73 61 6c 76 61 74 2e 63 6f 6d 2f 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /!----------------------------------------------------------------------------- Vegas - Fullscreen Backgrounds and Slideshows. * v2.4.0 - built 2017-01-04 * Licensed under the MIT License. * http://vegas.jaysalvat.com/ * --------------------------
2024-05-28 05:14:13 UTC	8000	IN	Data Raw: 73 68 6f 77 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 6e 65 78 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 28 27 64 65 6c 61 79 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 5f 74 69 6d 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: show) { this.timeout = setTimeout(function () { self.next(); }, this._options('delay')); } }, _timer: function (state) { var self = this; clearTimeou
2024-05-28 05:14:13 UTC	7921	IN	Data Raw: 74 61 6c 20 2d 20 31 29 2e 61 66 74 65 72 28 24 73 6c 69 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 65 6c 6d 74 2e 70 72 65 70 65 6e 64 28 24 73 6c 69 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 6c 69 64 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 73 73 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 2c 20 27 61 6c 6c 20 30 6d 73 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 20 20 3d 20 27 76 65 67 61 73 2d 73 6c 69 64 Data Ascii: tal - 1).after($slide); } else { this.$elmt.prepend($slide); } $slides .css('transition', 'all 0ms') .each(function () { this.className = 'vegas-slid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49757	172.67.75.149	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	433	OUT	GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1 Host: www.termsfeed.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	989	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Content-Type: application/javascript Content-Length: 206909 Connection: close Age: 23758 Cache-Control: public, immutable, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=206910 etag: "5eefb438a570c1ac15e2deee89dc27ef" expires: Mon, 27 May 2024 23:38:15 GMT last-modified: Mon, 27 May 2024 21:38:15 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-priority: 5/n x-xss-protection: 1; mode=block x-z: 3246 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=22uLMEodKz5jG1ZQ6Hl9GqUhAaJauDE9dyKMQvq296rw9WrTunLLs7anFjXN63TtdQt6j5%2Ff9%2FZ0RyjWZJlPecLR6vaOpov94K9AvExR7bpazQa8hVT2VNVUiGsH2TZfwSY8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc289c802420b-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:13 UTC	380	IN	Data Raw: 76 61 72 20 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 Data Ascii: var cookieconsent=function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumer
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 69 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 69 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,va
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 6f 2c 61 3d 7b 7d 2c 72 3d 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 26 26 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 26 26 21 77 69 6e 64 6f 77 2e 61 74 6f 62 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 2c 6f 7d 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: ,t,i){var n,o,a={},r=(n=function(){return window&&document&&document.all&&!window.atob},function(){return void 0===o&&(o=n.apply(this,arguments)),o}),s=function(e,t){return t?t.querySelector(e):document.querySelector(e)},c=function(e){var t={};return func
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 65 2e 69 6e 73 65 72 74 41 74 7c 7c 21 65 2e 69 6e 73 65 72 74 41 74 2e 62 65 66 6f 72 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5b 53 74 79 6c 65 20 4c 6f 61 64 65 72 5d 5c 6e 5c 6e 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 66 6f 72 20 70 61 72 61 6d 65 74 65 72 20 27 69 6e 73 65 72 74 41 74 27 20 28 27 6f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 41 74 27 29 20 66 6f 75 6e 64 2e 5c 6e 20 4d 75 73 74 20 62 65 20 27 74 6f 70 27 2c 20 27 62 6f 74 74 6f 6d 27 2c 20 6f 72 20 4f 62 6a 65 63 74 2e 5c 6e 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2d 63 6f 6e 74 72 69 62 2f 73 74 79 6c 65 2d 6c 6f 61 64 65 72 23 69 6e 73 65 72 74 61 74 29 5c 6e 22 29 3b 76 61 72 20 6f 3d 63 28 65 Data Ascii: !=typeof e.insertAt\|\|!e.insertAt.before)throw new Error("[Style Loader]\n\n Invalid value for parameter 'insertAt' ('options.insertAt') found.\n Must be 'top', 'bottom', or Object.\n (https://github.com/webpack-contrib/style-loader#insertat)\n");var o=c(e
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 6e 75 6c 6c 2c 69 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 28 69 29 7d 29 3b 72 65 74 75 72 6e 20 6e 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 7b 69 66 28 74 2e 63 73 73 3d 3d 3d 65 2e 63 73 73 26 26 74 2e 6d 65 64 69 61 3d 3d 3d 65 2e 6d 65 64 69 61 26 26 74 2e 73 6f 75 72 63 65 4d 61 70 3d 3d 3d 65 2e 73 6f 75 72 63 65 4d 61 70 29 72 65 74 75 72 6e 3b 6e 28 65 3d 74 29 7d 65 6c 73 65 20 6f 28 29 7d 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 44 45 42 55 47 26 26 44 45 42 55 47 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 73 74 Data Ascii: null,i),o=function(){v(i)});return n(e),function(t){if(t){if(t.css===e.css&&t.media===e.media&&t.sourceMap===e.sourceMap)return;n(e=t)}else o()}}e.exports=function(e,t){if("undefined"!=typeof DEBUG&&DEBUG&&"object"!=typeof document)throw new Error("The st
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 73 65 36 34 2c 22 2b 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 29 29 29 2b 22 20 2a 2f 22 29 3b 76 61 72 20 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 6e 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 63 73 73 22 7d 29 2c 73 3d 65 2e 68 72 65 66 3b 65 2e 68 72 65 66 3d 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 72 29 2c 73 26 26 55 52 4c 2e 72 65 76 6f 6b 65 4f 62 6a 65 63 74 55 52 4c 28 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 69 31 38 6e 22 3a 7b 22 61 63 74 69 76 65 22 Data Ascii: ingURL=data:application/json;base64,"+btoa(unescape(encodeURIComponent(JSON.stringify(o))))+" */");var r=new Blob([n],{type:"text/css"}),s=e.href;e.href=URL.createObjectURL(r),s&&URL.revokeObjectURL(s)}},function(e){e.exports=JSON.parse('{"i18n":{"active"
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 72 65 66 65 72 65 6e 63 65 73 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 31 22 3a 22 53 74 72 69 63 74 6c 79 20 6e 65 63 65 73 73 61 72 79 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 73 65 72 76 69 63 65 73 20 61 76 61 69 6c 61 62 6c 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 77 65 62 73 69 74 65 20 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 79 6f 75 20 74 6f 20 75 73 65 20 63 65 72 74 61 69 6e 20 66 65 61 74 75 72 65 73 20 6f 66 20 6f 75 72 20 77 65 62 73 69 74 65 2e 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 33 22 3a 22 57 69 74 68 6f 75 74 20 74 Data Ascii: references","pc_sncssr_text_1":"Strictly necessary cookies","pc_sncssr_text_2":"These cookies are essential to provide you with services available through our website and to enable you to use certain features of our website.","pc_sncssr_text_3":"Without t
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 20 74 6f 20 72 65 6d 6f 76 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 73 65 20 74 61 72 67 65 74 69 6e 67 20 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 6f 6f 6b 69 65 73 2c 20 79 6f 75 20 77 69 6c 6c 20 73 74 69 6c 6c 20 73 65 65 20 61 64 76 65 72 74 73 20 62 75 74 20 74 68 65 79 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 2e 22 2c 22 70 63 5f 79 70 72 69 76 61 63 79 5f 74 65 78 74 5f 31 22 3a 22 59 6f 75 72 20 70 72 69 76 61 63 79 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 75 73 22 2c 22 70 63 5f 79 70 72 69 76 61 63 79 5f 74 65 78 74 5f 32 22 3a 22 43 6f 6f 6b 69 65 73 20 61 72 65 20 76 65 72 79 20 73 6d 61 6c 6c 20 74 65 78 74 20 66 69 6c 65 73 20 74 68 61 74 20 61 72 65 20 73 74 6f 72 65 64 20 6f Data Ascii: to remove or disable these targeting or advertising cookies, you will still see adverts but they may not be relevant to you.","pc_yprivacy_text_1":"Your privacy is important to us","pc_yprivacy_text_2":"Cookies are very small text files that are stored o
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 69 6e 67 20 66 72 6f 6d 2e 22 2c 22 6e 62 5f 74 69 74 6c 65 22 3a 22 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 66 6e 63 74 5f 74 65 78 74 5f 31 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 66 6e 63 74 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 73 65 64 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 20 61 6e 64 20 74 6f 20 72 65 6d 65 6d 62 65 72 20 63 68 6f 69 63 65 73 20 79 6f 75 20 6d 61 6b 65 20 77 68 65 6e 20 79 6f 75 20 75 73 65 20 6f 75 72 20 77 65 62 73 69 74 65 2e 22 2c 22 70 63 5f 66 6e 63 74 Data Ascii: ing from.","nb_title":"We use cookies","pc_fnct_text_1":"Functionality cookies","pc_fnct_text_2":"These cookies are used to provide you with a more personalised experience on our website and to remember choices you make when you use our website.","pc_fnct
2024-05-28 05:14:13 UTC	1369	IN	Data Raw: 6d 70 72 6f 76 65 20 6f 75 72 20 77 65 62 73 69 74 65 20 66 6f 72 20 79 6f 75 2e 22 2c 22 70 63 5f 74 72 63 6b 5f 74 65 78 74 5f 34 22 3a 22 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6c 6c 65 63 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 73 65 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 6f 6f 6b 69 65 73 20 64 6f 20 6e 6f 74 20 69 64 65 6e 74 69 66 79 20 61 6e 79 20 69 6e 64 69 76 69 64 75 61 6c 20 76 69 73 69 74 6f 72 2e 22 2c 22 70 63 5f 74 72 67 74 5f 74 65 78 74 5f 31 22 3a 22 54 61 72 67 65 74 69 6e 67 20 61 6e 64 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 74 72 67 74 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 Data Ascii: mprove our website for you.","pc_trck_text_4":"The information collected through these tracking and performance cookies do not identify any individual visitor.","pc_trgt_text_1":"Targeting and advertising cookies","pc_trgt_text_2":"These cookies are used

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49758	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	494	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 22 May 2024 20:34:10 GMT Accept-Ranges: bytes Content-Length: 10364 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:13 UTC	7923	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun
2024-05-28 05:14:13 UTC	2441	IN	Data Raw: 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 75 63 63 65 73 73 26 26 28 6c 6f 63 61 6c 69 7a 65 2e 6e 6f 6e 63 65 3d 65 2e 64 61 74 61 2e 6e 6f 6e 63 65 2c 65 61 2e 6e 6f 6e 63 65 67 65 6e 65 72 61 74 65 64 3d 21 30 29 7d 7d 29 7d 2c 65 61 2e 73 61 6e 69 74 69 7a 65 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 22 29 7c 7c 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 23 22 29 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 65 29 3b 69 66 28 21 5b 22 68 74 74 70 3a 22 2c 22 68 74 74 70 73 3a 22 2c 22 66 74 70 3a 22 2c 22 66 74 70 73 3a 22 2c 22 6d 61 69 6c 74 6f 3a 22 2c 22 6e 65 77 73 3a 22 2c 22 69 72 63 3a 22 2c 22 69 72 63 36 3a 22 2c 22 69 72 63 73 Data Ascii: cess:function(e){e.success&&(localize.nonce=e.data.nonce,ea.noncegenerated=!0)}})},ea.sanitizeURL=function(e){if(e.startsWith("/")\|\|e.startsWith("#"))return e;try{var t=new URL(e);if(!["http:","https:","ftp:","ftps:","mailto:","news:","irc:","irc6:","ircs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49759	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	617	OUT	GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:38:45 GMT Accept-Ranges: bytes Content-Length: 4066 Content-Type: image/png
2024-05-28 05:14:13 UTC	4066	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49760	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	529	OUT	OPTIONS /report/v4?s=IpRoVym7QUrDSJ2RkUo6N44LsmVsKgJ7s9NlV9VU7x1b3knDnAlPTyAbbZ%2F6eFCIsVb8%2FXVK2M%2BrvnXZ2sQhGZ7pMjG6urxdYp8854nblpIkDn0P9oWmS6cgIAg8njA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://llimages.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 28 May 2024 05:14:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49764	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	619	OUT	GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:22:33 GMT Accept-Ranges: bytes Content-Length: 4090 Content-Type: image/png
2024-05-28 05:14:13 UTC	4090	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49766	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	379	OUT	GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1 Host: campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:57:31 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:13 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:13 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:13 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:13 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:13 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49763	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	456	OUT	GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 Dec 2021 11:56:20 GMT Accept-Ranges: bytes Content-Length: 6800 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:13 UTC	6800	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 4c 69 73 74 3f 65 3a 5b 65 5d 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 74 3d 3e 6e 28 74 2c 65 29 29 29 7d 2c 74 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 74 6f 67 67 6c 65 22 29 7d 2c 6e 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 61 64 64 22 29 7d 2c 6f 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 72 65 6d 6f 76 65 22 29 7d 2c 72 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 74 2e 73 70 6c 69 74 28 22 20 22 29 3b 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 4c 69 73 74 3f 65 3a 5b Data Ascii: !function(){"use strict";const e=(e,t,n)=>{(e instanceof NodeList?e:[e]).forEach(e=>e.addEventListener(t,t=>n(t,e)))},t=(e,t)=>{r(e,t,"toggle")},n=(e,t)=>{r(e,t,"add")},o=(e,t)=>{r(e,t,"remove")},r=(e,t,n)=>{const o=t.split(" ");(e instanceof NodeList?e:[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49767	188.114.96.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	382	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	1010	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; path=/; HttpOnly; SameSite=Lax Set-Cookie: llbrMachine_593579=19998811=19998811; expires=Sun, 28-May-2524 05:14:14 GMT; path=/ X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KSzUk0G8AXJh75Jdf%2FYFgLrBx%2BK9evUZbvqnpb%2Bo%2FLoyoJkluq5WjxJDZ7D0VpQ4XsYtvBhYq6ih3ZYHehA2HPQ84h%2FGKkNV6uAKlHhoaNmV17ZTZhpLRy%2BYkWKUe%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc28b786c17fd-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:13 UTC	359	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:13 UTC	281	IN	Data Raw: 55 34 34 74 68 78 35 59 55 4f 51 58 68 4c 43 71 76 76 72 33 73 41 74 74 41 46 55 52 78 2f 30 58 4d 3d 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 76 61 6c 75 65 3d 22 31 38 44 36 43 36 44 30 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 Data Ascii: U44thx5YUOQXhLCqvvr3sAttAFURx/0XM=" /></div><div class="aspNetHidden"><input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" /></div> <div> <span id="lbl"></span> </div> </f
2024-05-28 05:14:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49765	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	617	OUT	GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:42:40 GMT Accept-Ranges: bytes Content-Length: 3303 Content-Type: image/png
2024-05-28 05:14:13 UTC	3303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49761	157.240.252.13	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	545	OUT	GET /en_US/fbevents.js?v=next HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:14 UTC	1732	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f Data Ascii: "error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterato
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 Data Ascii: ypeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 Data Ascii: undefined":i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})()
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e Data Ascii: n(a){return{error:null,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 72 65 67 4b 65 79 2b 2b 3b 74 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 3d 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 62 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 4f 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 26 26 62 28 29 3b 62 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 3d 74 68 69 73 2e 6c 69 73 74 65 6e 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 Data Ascii: regKey++;this._subscriptions[c]=a;return function(){delete b._subscriptions[c]}}},{key:"listenOnce",value:function(a){var b=null,c=function(){b&&b();b=null;return a.apply(void 0,arguments)};b=this.listen(c);return b}},{key:"trigger",value:function(){var a
2024-05-28 05:14:14 UTC	845	IN	Data Raw: 65 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 5f 63 62 28 74 68 69 73 2e 5f 64 61 74 61 29 2c 74 68 69 73 2e 5f 64 61 74 61 3d 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 69 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e Data Ascii: e=null),this._data.length>0&&this._cb(this._data),this._data=[]}}]);return a}();l.exports=i})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBrowserPropertiesConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 64 65 6c 61 79 49 6e 4d 73 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 65 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 61 62 6c 65 4d Data Ascii: edef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a=b.objectWithFields({delayInMs:b.number(),experimentName:b.allowNull(b.string()),enableM
2024-05-28 05:14:14 UTC	1500	IN	Data Raw: 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6c 69 65 6e 74 53 69 64 65 50 69 78 65 6c 46 6f 72 6b 69 6e 67 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 61 2e 54 79 70 65 64 3b 61 3d 61 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 6f 72 6b 65 64 50 69 78 65 Data Ascii: egistered("SignalsFBEventsClientSidePixelForkingConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped");a.coerce;a=a.Typed;a=a.objectWithFields({forkedPixe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49768	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:13 UTC	618	OUT	GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:13 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:46 GMT Accept-Ranges: bytes Content-Length: 3146 Content-Type: image/png
2024-05-28 05:14:13 UTC	3146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49769	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	642	OUT	GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 04 Mar 2024 14:06:04 GMT Accept-Ranges: bytes Content-Length: 219015 Content-Type: image/jpeg
2024-05-28 05:14:14 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 64 00 64 00 00 ff e1 10 53 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 00 00 64 00 00 00 01 00 00 00 64 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 30 34 20 31 31 3a 30 33 3a 33 35 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1b 58 a0 03 00 04 00 00 00 01 00 00 0f a0 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 Data Ascii: JFIFddSExifMM*bj(1!r2iddAdobe Photoshop 25.0 (Macintosh)2024:03:04 11:03:35X
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 18 e4 07 f4 ff 00 8d 5b ae b7 2d e0 e0 54 66 41 25 4d 21 5f 28 e0 73 de b8 f4 cc 6e 41 76 6b 8e bb a4 ea 6e 21 f9 4a 69 f7 50 b5 84 96 db af 96 80 1f 4e 3b d5 5e 4d 8d 34 eb d2 5d d4 b6 4e d3 c9 5f 92 a4 39 f2 97 5b 41 3f 30 03 91 b8 91 d7 f9 46 05 94 68 6b 81 0c 44 89 11 b2 82 d2 96 bd ee 1e 56 7b 74 3c 13 79 5a ce 9e fc dd 55 0d 3f 05 71 61 c0 61 49 6d c4 b9 ff 00 11 6b 48 dd 5d e8 59 e7 d7 2d a7 ea cd 69 b2 a0 46 7a ee 6b a5 94 aa c0 09 21 25 5c fe 95 f7 ce 63 c4 1e 37 f8 8d 4f fd 9c f0 f2 fc e9 ea 3b 5f 94 00 2d c5 4f 7e 7b aa bb 76 fe 98 46 da 22 35 2e 3b 2e e9 0c 23 ca 7c fc 3b a5 c5 90 a4 b0 0d 1d 95 cf 51 fa fd 73 71 2f 88 b2 5a d3 cc 49 4c 36 c8 22 3b 89 4a 8b 68 4a 41 f9 96 6e ab 8e fc f3 f7 ca 9f 0c c5 6f c3 6b 78 c6 63 cd 83 e4 79 cf 4e 76 c2 Data Ascii: [-TfA%M!_(snAvkn!JiPN;^M4]N_9[A?0FhkDV{t<yZU?qaaImkH]Y-iFzk!%\c7O;_-O~{vF"5.;.#\|;Qsq/ZIL6";JhJAnokxcyNv
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 91 7e b8 46 42 78 c3 71 e8 06 41 b6 8e d0 0a 8d 8e b9 34 5a 78 e3 20 60 10 39 a1 88 0e 70 29 37 c1 c4 14 01 da 7a e1 52 16 49 07 15 02 2e eb 22 e5 10 00 34 72 49 47 15 60 e5 46 3e e7 26 9b 3c 64 d2 90 3a e0 a3 fc b8 54 76 d7 7c 8e ea 57 1c e3 22 c7 5c 40 51 bc 07 77 d6 fe d8 58 f7 c3 e6 3d 00 c5 5d ce 10 c2 b9 20 9c 9d f1 f5 cc 24 d2 ae b9 c9 83 fa 61 49 4b e7 e5 15 58 d2 6f ae 2d b6 6f be 48 36 13 c9 c0 43 8e d8 12 38 ea 32 44 f1 c6 63 36 a3 cf 4c 09 93 e9 ce 2f 5e 0e 14 07 7c 44 ff 00 29 c0 90 a3 c7 38 c0 fe 99 8c 92 08 e4 7b e4 c1 e2 8e 00 09 24 e4 c7 4c 69 db 5e f8 f8 ac 04 6a ff 00 36 2a e3 9e 70 f5 ba c7 b4 1e 6f 02 03 d7 11 e0 f4 c9 2b 8e 30 bf a6 04 7b 1f 5c 90 55 8a c8 a5 5d 41 c2 ba d6 04 b8 ac 45 49 1f 2e 46 af a9 c8 ba ca 96 92 10 a0 0f ae 11 Data Ascii: ~FBxqA4Zx `9p)7zRI."4rIG`F>&<d:Tv\|W"\@QwX=] $aIKXo-oH6C82Dc6L/^\|D)8{$Li^j6*po+0{\U]AEI.F
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 14 36 59 5a d5 d0 b8 13 df db 34 d4 c4 04 99 34 dc c7 67 3d b6 4a e3 a5 7f 39 21 56 00 27 8a 1b 80 eb d2 b3 34 2f 0f 23 4d 9a cb 71 3c c8 fa 7b 48 2e ac 6f 24 bc e1 b0 77 1b b3 40 0e bc 61 5a 31 76 a5 7a 73 b1 9c 54 9d 49 6c b4 87 5d 50 b4 a5 02 d2 56 47 07 ba ab d7 af 6c b3 4c e6 1f d4 9f 69 a2 eb ae 46 28 8c e2 36 90 d9 52 ad 44 fd 40 cd 57 11 03 52 11 24 69 c1 e5 30 eb d4 e1 61 25 3b 83 76 90 09 35 40 1e dd eb 20 ef 88 59 9e ea 62 3a 64 69 ef 79 a0 16 d1 c9 72 f8 16 45 1e 2f 90 3a 11 84 6d 86 9c 70 cc 9f 2e 3b 61 9f 29 6d 2e 2a 1b 05 4f 24 13 5b bb 9e 3a 0f ed 1c d1 76 24 04 29 d8 f3 9f 79 b5 bc e0 d4 50 94 24 82 d2 5b a2 01 3f 6a c9 49 6e 3c 09 ae 8f f7 ef 87 63 74 c7 9d 42 b8 79 c5 ab 68 45 f7 a1 db a0 e3 33 7c 44 1d 27 4c 4a e7 36 b5 30 d3 29 4a 03 Data Ascii: 6YZ44g=J9!V'4/#Mq<{H.o$w@aZ1vzsTIl]PVGlLiF(6RD@WR$i0a%;v5@ Yb:diyrE/:mp.;a)m.*O$[:v$)yP$[?jIn<ctByhE3\|D'LJ60)J
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 87 66 30 80 4d 12 00 5e eb 00 f0 4f cb d0 e5 dc 3f 12 68 da 8a 02 a2 6a 71 1e be 7e 47 01 3f a6 68 78 c3 4b 99 ab 69 f1 dc d2 d4 d3 ef c5 90 97 c3 2b 73 6a 1d 00 10 41 34 6b ad 8f 71 95 1c 46 9f a9 c1 80 a7 0c 88 9a 9b 52 1c 36 ec 89 4c 29 6a 70 fa 95 0b 1f 6e 83 2c 9b d7 b4 a7 54 12 9d 46 2e e3 fc 25 c0 0f e8 71 36 fe be c9 52 27 78 66 6a 54 0f 0a 8a b4 bc 82 3f 50 6f ed 94 1a d3 91 f5 fd 73 46 d3 de 86 f3 7b 5f 75 c7 d9 96 c1 41 21 08 e9 44 72 2d 43 a7 19 1a d7 47 35 b7 ad a9 fa 7b bb 66 45 25 6d 10 78 70 77 42 bf b2 af fa 1e d9 5c 9d 64 32 f0 d5 23 30 e9 42 9c f8 e8 c8 4a 4a 8a 41 bf 35 a5 57 e5 37 bc 73 c7 23 d3 33 9f 0b e9 a8 4f fb a2 1c 80 bf e7 88 b2 d9 fe 9c 1f b8 cb 0f 01 c2 1a 44 9f 10 38 66 c8 7d 28 f2 cf ef 8a 7e 5f 94 a8 9e 00 eb 78 88 e9 fc Data Ascii: f0M^O?hjq~G?hxKi+sjA4kqFR6L)jpn,TF.%q6R'xfjT?PosF{_uA!Dr-CG5{fE%mxpwB\d2#0BJJA5W7s#3OD8f}(~_x
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 02 09 be 72 47 18 ae a7 24 2b a5 61 10 a2 48 3b b3 25 58 e3 ae 2c 12 48 ed 85 22 92 4e 23 b4 63 37 7c 60 13 7d 70 1d 27 8a c2 c6 3b 08 15 df 22 55 64 00 39 38 05 64 53 d4 64 a9 5d 0e 22 76 e0 4c 00 45 e2 ac 48 55 0e bc 64 8a 8f 15 84 20 47 22 b1 6d dd df 1f 4e 70 07 9c 29 14 11 df 28 3c 6b e1 28 be 2f d0 9e d3 df 48 f3 47 ce c3 9d d0 b1 d3 fe 99 d1 f6 e3 20 a5 84 a4 95 50 ae f8 47 8f fe 08 c7 4c 4d 67 5e 61 4f ba 1d 60 86 95 1d e1 f3 a6 96 a3 67 d7 af a7 7c f4 cd 56 2c 8a f8 c8 2d 25 c9 a9 41 69 01 7f 97 6a 88 2a b1 63 d3 3c eb f0 9d a4 ca f1 7f 88 35 74 95 94 cd 5b aa 49 50 eb 4e 0e 9f 6a cf 4b 9c 87 4f 94 f2 25 79 09 65 61 6b bf ca a4 f7 07 ed 82 2b 7e 29 b8 da d4 66 16 d3 ec 7c cb 61 96 5b 1f bb 50 34 a2 e1 f6 be 3e ff 00 5c cf ab 34 d6 95 19 13 16 a7 Data Ascii: rG$+aH;%X,H"N#c7\|`}p';"Ud98dSd]"vLEHUd G"mNp)(<k(/HG PGLMg^aO`g\|V,-%Aij*c<5t[IPNjKO%yeak+~)f\|a[P4>\4
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 88 37 99 0d 72 6f 01 26 bb e2 ba fe 1c 45 5c 64 16 fa 50 92 54 40 09 16 49 3c 0c 09 9a 49 a2 79 ca f4 e9 ce c8 94 e9 98 b4 ba ca 5c 0e 47 db f2 96 cf 22 b8 eb 90 12 de 7d d7 92 96 cc 77 12 e0 4a 14 f8 f9 1d 4f 5b 49 07 9b 17 95 12 a4 89 2c 39 a8 fc 4c a5 47 6e 52 10 db 68 f9 49 56 ea 04 73 d3 91 c7 7a f7 c0 ce cf c6 c5 7a 3a 96 53 a7 c6 43 8f 36 e4 67 14 14 1e dc 6d 2b 4a 87 7e bc 7d 46 6b c7 d4 e0 98 d0 21 b2 fb de 42 12 14 d3 e2 c2 96 b4 92 0a 28 f4 be 46 6e 31 f1 a9 f2 62 4b 8e ec c4 99 4b 4f 9c e5 82 10 07 e6 ff 00 3f b6 42 2c 29 1a 62 5a 8f 21 c4 b6 17 31 6e 20 b2 91 b7 6f 2a 21 5d 3a f2 7f eb 81 1d 29 d7 5f 31 1e 69 a5 b8 c6 a2 a7 1e 74 b8 2f c9 e3 80 08 f5 be be 83 2c 3c 3c b8 a2 3a e3 40 0a f8 78 ab 53 36 ae ea 1d 7f ae 53 a7 58 d4 22 ba da 9b 97 Data Ascii: 7ro&E\dPT@I<Iy\G"}wJO[I,9LGnRhIVszz:SC6gm+J~}Fk!B(Fn1bKKO?B,)bZ!1n o*!]:)_1it/,<<:@xS6SX"
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 18 4d 71 90 32 e0 42 77 2d 41 23 d4 9c a3 5e ae 89 8e aa 52 3f 76 d4 02 a5 3b b9 22 ca 68 8e 0f bd 74 f7 07 37 35 b2 d9 d2 25 a1 e6 56 fa 16 8d 85 b4 1a 52 af 8e 0f df 2b 15 0d b8 8c 27 45 32 50 cc 57 83 4c c6 6d 09 25 c0 00 b3 b8 fd 12 47 b7 19 60 d5 d3 34 96 04 76 13 10 21 61 6e b8 77 be 12 1d 42 8a 88 5e da e9 5b 47 4c c0 c3 70 a1 b0 a6 dd 6a 74 83 01 4a 61 2a 26 92 bf 95 45 4a e4 f0 38 27 af a7 b6 5c cb f0 dc 79 2e 37 e4 4c 72 3a da 56 f4 84 2f a9 dd b9 5f a9 3c 9e d7 98 e4 99 71 26 7f bd be 1f d3 9b 8a 03 8d f0 a2 b5 74 e6 c5 92 49 15 db 83 84 60 5e 93 2e 73 50 db 9b 12 1b 8c 2c 2d a9 4d a5 02 cb 47 f2 00 7b 57 04 d6 6b bc e4 d6 21 34 ea e4 25 fd 8a 28 63 e1 4d a7 68 aa 5f 5e c4 51 be c7 f5 da d3 f5 b7 13 a8 32 b5 38 fc a4 ea 60 2d 96 02 3e 58 c8 49 Data Ascii: Mq2Bw-A#^R?v;"ht75%VR+'E2PWLm%G`4v!anwB^[GLpjtJa*&EJ8'\y.7Lr:V/_<q&tI`^.sP,-MG{Wk!4%(cMh_^Q28`->XI
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 65 a3 52 21 78 de 0a a3 3a 15 03 58 89 c9 48 55 ad 85 91 c2 92 7f 89 07 f4 23 ae 07 47 a6 6a 31 b5 58 4d cb 8a e0 5b 4e 0e bd 08 3d c1 1d 88 e8 46 69 b2 9f 37 c5 32 5c e3 f7 10 db 6f de d4 b5 13 ff 00 84 67 9e 45 f1 14 df 0d ce 95 29 11 5f 0b 43 a5 a9 b1 10 da 96 d3 eb 48 16 b4 28 7e 55 57 af 5e fe b9 d9 f8 2b 59 63 c4 83 52 d6 a2 a1 d4 c7 90 f8 6d af 35 3b 54 43 68 00 f1 fd ed d9 51 d3 1e 46 20 28 56 25 12 47 1d 70 1b b3 2a 54 49 ad dc 0e d9 2d 80 0b 27 22 01 bb ef 8c 27 8b 27 01 70 45 0e b9 10 e5 2b 68 19 2a be 98 26 b9 bc a2 5b 88 3c 8c 60 58 b3 90 3b af 8e 87 1a 77 0c 06 00 49 e9 92 20 90 73 1e fe 72 42 d5 d0 e0 3d a0 27 ae 34 9b 07 9c 5b 4f 22 b2 3b 4a 4d 8c 09 04 d1 e7 03 c6 16 76 f4 c0 f1 d7 02 02 ec 9c 95 58 e4 62 3f 30 e3 12 54 48 38 0c 04 64 82 Data Ascii: eR!x:XHU#Gj1XM[N=Fi72\ogE)_CH(~UW^+YcRm5;TChQF (V%GpTI-'"''pE+h&[<`X;wI srB='4[O";JMvXb?0TH8d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49770	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	623	OUT	GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:00:11 GMT Accept-Ranges: bytes Content-Length: 7301 Content-Type: image/png
2024-05-28 05:14:14 UTC	7301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 37 49 44 41 54 78 9c ed 9d 7f b0 55 d5 95 e7 bf df 53 af 28 8a 7a 43 31 14 45 bd a2 18 eb 15 43 31 34 45 31 84 38 c8 30 c4 71 0c a1 69 63 a2 31 09 da 6a 8c 2d da 89 49 67 1c 8d 3f 62 8c 63 39 94 ed 18 da 71 6c 86 58 86 61 12 db a8 69 7f 84 ee 16 a2 d1 44 8d 1a 34 a8 48 33 36 cd 18 82 84 20 22 22 22 22 22 c1 f5 9d 3f d6 3a 8f 7d cf 3d f7 be fb 00 95 97 ec 4f d5 ad 7b ef 39 fb ec b3 f6 3e 7b ef b3 f6 da 7b af 0d 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c Data Ascii: PNGIHDR,QhpHYs+7IDATxUS(zC1EC14E180qic1j-Ig?bc9qlXaiD4H36 """""?:}=O{9>{{d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49771	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	474	OUT	POST /report/v4?s=IpRoVym7QUrDSJ2RkUo6N44LsmVsKgJ7s9NlV9VU7x1b3knDnAlPTyAbbZ%2F6eFCIsVb8%2FXVK2M%2BrvnXZ2sQhGZ7pMjG6urxdYp8854nblpIkDn0P9oWmS6cgIAg8njA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 454 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	454	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 Data Ascii: [{"age":18,"body":{"elapsed_time":1189,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"http://www.campobahia.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":200,"type":"abandoned"},"type":"network-error","url"
2024-05-28 05:14:14 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 28 May 2024 05:14:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49772	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	380	OUT	GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:38:45 GMT Accept-Ranges: bytes Content-Length: 4066 Content-Type: image/png
2024-05-28 05:14:14 UTC	4066	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49773	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	643	OUT	GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:49 GMT Accept-Ranges: bytes Content-Length: 6566 Content-Type: image/png
2024-05-28 05:14:14 UTC	6566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 19 58 49 44 41 54 78 9c ed dd 7b 90 1d c5 7d 2f f0 6f 77 cf cc 39 3a 7b b4 5a ad 16 59 ec c5 62 bd 16 32 21 2a ae 82 29 22 0b ae 90 81 a8 28 19 53 32 e8 02 b6 49 11 0c d8 c6 2f c0 84 dc e4 9a 24 45 5c 94 cb e5 a2 08 21 18 ab 88 4c 9c 80 b1 2e 65 f3 30 c6 04 30 8a c1 c2 88 57 0c 36 0a 08 09 4b 2b 24 ad d6 da 87 ce 9e e7 74 ff 7e bf fb c7 ce 92 65 75 9e bb 5a 0c 9b fe 54 9d 92 76 4e f7 74 cf e3 f4 f4 f4 74 f7 00 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e Data Ascii: PNGIHDR,QhpHYs+XIDATx{}/ow9:{ZYb2!*)"(S2I/$E\!L.e00W6K+$t~euZTvNttyyyyyyyyyyyyyyyyyyyy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49774	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	382	OUT	GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:22:33 GMT Accept-Ranges: bytes Content-Length: 4090 Content-Type: image/png
2024-05-28 05:14:14 UTC	4090	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49778	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	475	OUT	GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:42:40 GMT Accept-Ranges: bytes Content-Length: 3303 Content-Type: image/png
2024-05-28 05:14:14 UTC	3303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49776	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	637	OUT	GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:01:22 GMT Accept-Ranges: bytes Content-Length: 7334 Content-Type: image/png
2024-05-28 05:14:14 UTC	7334	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 58 49 44 41 54 78 9c ed 5d 6b 8c 9e c5 75 7e ce 68 b5 dd ae b6 5b 6b b5 b1 2c cb 5d ad b6 96 8b 2c 97 5a 94 5a 88 38 84 10 e2 10 02 ae a1 09 09 d7 12 20 21 80 53 02 a4 90 00 09 a2 28 b1 1c 44 91 e5 a6 04 08 a5 24 21 16 f7 7b 08 57 43 b8 84 fb 1d 63 8c 83 89 31 c6 18 63 9b f5 62 cc 7a f7 3c fd 71 ce ec ce be fb be df 7e 26 b5 cd ae e7 91 3e 7d b7 b9 9c 99 77 e6 cc 39 73 ce 9c 01 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: PNGIHDR,QhpHYs+XIDATx]ku~h[k,],ZZ8 !S(D$!{WCc1cbz<q~&>}w9s22222222222222222222222222222222222222222222222222222222222222222222222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49775	142.250.185.142	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	1127	OUT	POST /g/collect?v=2&tid=G-J2E85P7SPT&gtm=45je45m0v872729742za200&_p=1716873250250&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZTNiMT&cid=648733769.1716873252&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_s=1&sid=1716873252&sct=1&seg=0&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Campo%20Bahia&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=7557 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://www.campobahia.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://www.campobahia.com Date: Tue, 28 May 2024 05:14:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49779	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	424	OUT	GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 02 Apr 2024 20:35:16 GMT Accept-Ranges: bytes Content-Length: 32934 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:14 UTC	7923	IN	Data Raw: 2f 2a 6a 73 6c 69 6e 74 20 69 6e 64 65 6e 74 3a 20 32 2c 20 62 72 6f 77 73 65 72 3a 20 74 72 75 65 2c 20 62 69 74 77 69 73 65 3a 20 74 72 75 65 2c 20 70 6c 75 73 70 6c 75 73 3a 20 74 72 75 65 20 2a 2f 0a 76 61 72 20 74 77 65 6d 6f 6a 69 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 0a 20 20 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 54 77 69 74 74 65 72 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 2f 2a 0a 20 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 2f 62 6c 6f 62 2f 67 68 2d 70 61 67 65 73 2f 4c 49 43 45 4e 53 45 0a 20 20 2a 2f 0a 0a 20 20 2f 2f 20 57 41 52 4e 49 4e 47 3a 20 20 20 74 Data Ascii: /jslint indent: 2, browser: true, bitwise: true, plusplus: true /var twemoji = (function ( /! Copyright Twitter Inc. and other contributors. Licensed under MIT //* https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE */ // WARNING: t
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 64 61 72 64 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 28 73 74 72 2c 20 63 61 6c 6c 62 61 63 6b 29 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 75 6d 65 6e 74 73 20 73 75 63 68 3a 0a 20 20 20 20 20 20 20 2a 20 20 63 61 6c 6c 62 61 63 6b 28 0a 20 20 20 20 20 20 20 2a 20 20 20 20 72 61 77 54 65 78 74 2c 20 20 2f 2f 20 74 68 65 20 65 6d 6f 6a 69 20 6d 61 74 63 68 0a 20 20 20 20 20 20 20 2a 20 20 29 3b 0a 20 20 20 20 20 20 20 2a 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 64 20 6f 74 68 65 72 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 63 65 69 76 65 Data Ascii: dard * String.prototype.replace(str, callback) * arguments such: * callback( * rawText, // the emoji match * ); * * and others commonly receive
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 Data Ascii: ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d\udc66\u200d\ud83d\udc66\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud
2024-05-28 05:14:14 UTC	8000	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 0a 20 20 20 20 20 20 73 75 62 6e 6f 64 65 2c 0a 20 20 20 20 20 20 6e 6f 64 65 54 79 70 65 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 20 20 20 20 20 20 73 75 62 6e 6f 64 65 20 3d 20 63 68 69 6c 64 4e 6f 64 65 73 5b 6c 65 6e 67 74 68 5d 3b 0a 20 20 20 20 20 20 6e 6f 64 65 54 79 70 65 20 3d 20 73 75 62 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3b 0a 20 20 20 20 20 20 2f 2f 20 70 61 72 73 65 20 65 6d 6f 6a 69 20 6f 6e 6c 79 20 69 6e 20 74 65 78 74 20 6e 6f 64 65 73 0a 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 33 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 6f 6c 6c 65 63 74 20 74 68 65 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 65 6d 6f 6a 69 20 6c 61 74 65 72 0a 20 20 20 20 20 20 Data Ascii: .length, subnode, nodeType; while (length--) { subnode = childNodes[length]; nodeType = subnode.nodeType; // parse emoji only in text nodes if (nodeType === 3) { // collect them to process emoji later
2024-05-28 05:14:14 UTC	1011	IN	Data Raw: 79 70 65 6f 66 20 68 6f 77 2e 62 61 73 65 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 20 3f 20 68 6f 77 2e 62 61 73 65 20 3a 20 74 77 65 6d 6f 6a 69 2e 62 61 73 65 2c 0a 20 20 20 20 20 20 65 78 74 3a 20 20 20 20 20 20 20 20 68 6f 77 2e 65 78 74 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 65 78 74 2c 0a 20 20 20 20 20 20 73 69 7a 65 3a 20 20 20 20 20 20 20 68 6f 77 2e 66 6f 6c 64 65 72 20 7c 7c 20 74 6f 53 69 7a 65 53 71 75 61 72 65 64 41 73 73 65 74 28 68 6f 77 2e 73 69 7a 65 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 73 69 7a 65 29 2c 0a 20 20 20 20 20 20 63 6c 61 73 73 4e 61 6d 65 3a 20 20 68 6f 77 2e 63 6c 61 73 73 4e 61 6d 65 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 63 6c 61 73 73 4e 61 6d 65 2c 0a 20 20 20 20 20 20 6f 6e 65 72 72 6f 72 3a 20 20 20 20 68 6f 77 2e 6f 6e 65 72 Data Ascii: ypeof how.base === 'string' ? how.base : twemoji.base, ext: how.ext \|\| twemoji.ext, size: how.folder \|\| toSizeSquaredAsset(how.size \|\| twemoji.size), className: how.className \|\| twemoji.className, onerror: how.oner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49782	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	476	OUT	GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:46 GMT Accept-Ranges: bytes Content-Length: 3146 Content-Type: image/png
2024-05-28 05:14:14 UTC	3146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49780	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	425	OUT	GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 29 Mar 2023 18:58:10 GMT Accept-Ranges: bytes Content-Length: 8969 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:14 UTC	7924	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 77 70 2d 65 6d 6f 6a 69 2e 6a 73 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 70 6c 61 63 65 20 65 6d 6f 6a 69 20 77 69 74 68 20 69 6d 61 67 65 73 20 69 6e 20 62 72 6f 77 73 65 72 73 20 77 68 65 6e 20 74 68 65 20 62 72 6f 77 73 65 72 0a 20 2a 20 64 6f 65 73 6e 27 74 20 73 75 70 70 6f 72 74 20 65 6d 6f 6a 69 20 6e 61 74 69 76 65 6c 79 2e 0a 20 2a 0a 20 2a 20 40 6f 75 74 70 75 74 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 65 6d 6f 6a 69 2e 6a 73 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 73 65 74 74 69 6e 67 73 20 29 20 7b 0a 09 2f 2a 2a 0a 09 20 2a 20 52 65 70 6c 61 63 65 73 20 65 6d 6f 6a 69 20 77 69 74 68 20 69 6d 61 67 65 73 20 77 68 65 6e 20 62 72 6f 77 73 65 72 73 20 64 6f 6e 27 74 20 Data Ascii: /** * wp-emoji.js is used to replace emoji with images in browsers when the browser * doesn't support emoji natively. * * @output wp-includes/js/wp-emoji.js /( function( window, settings ) {/* * Replaces emoji with images when browsers don't
2024-05-28 05:14:14 UTC	1045	IN	Data Raw: 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 65 72 72 6f 72 27 2c 20 27 6c 6f 61 64 2d 66 61 69 6c 65 64 27 20 29 3b 0a 09 09 09 09 09 09 74 77 65 6d 6f 6a 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 20 74 77 65 6d 6f 6a 69 2e 61 6c 74 20 29 2c 20 74 77 65 6d 6f 6a 69 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 2c 0a 09 09 09 09 64 6f 4e 6f 74 50 61 72 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6e 6f 64 65 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 0a 09 09 09 09 09 09 6e 6f 64 65 20 26 26 0a 09 09 09 09 09 09 6e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 20 26 26 0a 09 09 09 09 09 09 74 79 70 65 6f 66 20 6e 6f 64 65 2e 63 6c 61 Data Ascii: s.setAttribute( 'data-error', 'load-failed' );twemoji.parentNode.replaceChild( document.createTextNode( twemoji.alt ), twemoji );}},doNotParse: function( node ) {if (node &&node.className &&typeof node.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49781	142.250.110.157	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	797	OUT	POST /g/collect?v=2&tid=G-J2E85P7SPT&cid=648733769.1716873252&gtm=45je45m0v872729742za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://www.campobahia.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:14 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://www.campobahia.com Date: Tue, 28 May 2024 05:14:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49783	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	481	OUT	GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:14 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:00:11 GMT Accept-Ranges: bytes Content-Length: 7301 Content-Type: image/png
2024-05-28 05:14:14 UTC	7301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 37 49 44 41 54 78 9c ed 9d 7f b0 55 d5 95 e7 bf df 53 af 28 8a 7a 43 31 14 45 bd a2 18 eb 15 43 31 34 45 31 84 38 c8 30 c4 71 0c a1 69 63 a2 31 09 da 6a 8c 2d da 89 49 67 1c 8d 3f 62 8c 63 39 94 ed 18 da 71 6c 86 58 86 61 12 db a8 69 7f 84 ee 16 a2 d1 44 8d 1a 34 a8 48 33 36 cd 18 82 84 20 22 22 22 22 22 c1 f5 9d 3f d6 3a 8f 7d cf 3d f7 be fb 00 95 97 ec 4f d5 ad 7b ef 39 fb ec b3 f6 3e 7b ef b3 f6 da 7b af 0d 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c Data Ascii: PNGIHDR,QhpHYs+7IDATxUS(zC1EC14E180qic1j-Ig?bc9qlXaiD4H36 """""?:}=O{9>{{d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49784	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:14 UTC	501	OUT	GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:15 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:49 GMT Accept-Ranges: bytes Content-Length: 6566 Content-Type: image/png
2024-05-28 05:14:15 UTC	6566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 19 58 49 44 41 54 78 9c ed dd 7b 90 1d c5 7d 2f f0 6f 77 cf cc 39 3a 7b b4 5a ad 16 59 ec c5 62 bd 16 32 21 2a ae 82 29 22 0b ae 90 81 a8 28 19 53 32 e8 02 b6 49 11 0c d8 c6 2f c0 84 dc e4 9a 24 45 5c 94 cb e5 a2 08 21 18 ab 88 4c 9c 80 b1 2e 65 f3 30 c6 04 30 8a c1 c2 88 57 0c 36 0a 08 09 4b 2b 24 ad d6 da 87 ce 9e e7 74 ff 7e bf fb c7 ce 92 65 75 9e bb 5a 0c 9b fe 54 9d 92 76 4e f7 74 cf e3 f4 f4 f4 74 f7 00 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e Data Ascii: PNGIHDR,QhpHYs+XIDATx{}/ow9:{ZYb2!*)"(S2I/$E\!L.e00W6K+$t~euZTvNttyyyyyyyyyyyyyyyyyyyy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49787	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:15 UTC	495	OUT	GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:15 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:01:22 GMT Accept-Ranges: bytes Content-Length: 7334 Content-Type: image/png
2024-05-28 05:14:15 UTC	7334	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 58 49 44 41 54 78 9c ed 5d 6b 8c 9e c5 75 7e ce 68 b5 dd ae b6 5b 6b b5 b1 2c cb 5d ad b6 96 8b 2c 97 5a 94 5a 88 38 84 10 e2 10 02 ae a1 09 09 d7 12 20 21 80 53 02 a4 90 00 09 a2 28 b1 1c 44 91 e5 a6 04 08 a5 24 21 16 f7 7b 08 57 43 b8 84 fb 1d 63 8c 83 89 31 c6 18 63 9b f5 62 cc 7a f7 3c fd 71 ce ec ce be fb be df 7e 26 b5 cd ae e7 91 3e 7d b7 b9 9c 99 77 e6 cc 39 73 ce 9c 01 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: PNGIHDR,QhpHYs+XIDATx]ku~h[k,],ZZ8 !S(D$!{WCc1cbz<q~&>}w9s22222222222222222222222222222222222222222222222222222222222222222222222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49788	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:15 UTC	500	OUT	GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252
2024-05-28 05:14:15 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 04 Mar 2024 14:06:04 GMT Accept-Ranges: bytes Content-Length: 219015 Content-Type: image/jpeg
2024-05-28 05:14:15 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 64 00 64 00 00 ff e1 10 53 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 00 00 64 00 00 00 01 00 00 00 64 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 30 34 20 31 31 3a 30 33 3a 33 35 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1b 58 a0 03 00 04 00 00 00 01 00 00 0f a0 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 Data Ascii: JFIFddSExifMM*bj(1!r2iddAdobe Photoshop 25.0 (Macintosh)2024:03:04 11:03:35X
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 18 e4 07 f4 ff 00 8d 5b ae b7 2d e0 e0 54 66 41 25 4d 21 5f 28 e0 73 de b8 f4 cc 6e 41 76 6b 8e bb a4 ea 6e 21 f9 4a 69 f7 50 b5 84 96 db af 96 80 1f 4e 3b d5 5e 4d 8d 34 eb d2 5d d4 b6 4e d3 c9 5f 92 a4 39 f2 97 5b 41 3f 30 03 91 b8 91 d7 f9 46 05 94 68 6b 81 0c 44 89 11 b2 82 d2 96 bd ee 1e 56 7b 74 3c 13 79 5a ce 9e fc dd 55 0d 3f 05 71 61 c0 61 49 6d c4 b9 ff 00 11 6b 48 dd 5d e8 59 e7 d7 2d a7 ea cd 69 b2 a0 46 7a ee 6b a5 94 aa c0 09 21 25 5c fe 95 f7 ce 63 c4 1e 37 f8 8d 4f fd 9c f0 f2 fc e9 ea 3b 5f 94 00 2d c5 4f 7e 7b aa bb 76 fe 98 46 da 22 35 2e 3b 2e e9 0c 23 ca 7c fc 3b a5 c5 90 a4 b0 0d 1d 95 cf 51 fa fd 73 71 2f 88 b2 5a d3 cc 49 4c 36 c8 22 3b 89 4a 8b 68 4a 41 f9 96 6e ab 8e fc f3 f7 ca 9f 0c c5 6f c3 6b 78 c6 63 cd 83 e4 79 cf 4e 76 c2 Data Ascii: [-TfA%M!_(snAvkn!JiPN;^M4]N_9[A?0FhkDV{t<yZU?qaaImkH]Y-iFzk!%\c7O;_-O~{vF"5.;.#\|;Qsq/ZIL6";JhJAnokxcyNv
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 91 7e b8 46 42 78 c3 71 e8 06 41 b6 8e d0 0a 8d 8e b9 34 5a 78 e3 20 60 10 39 a1 88 0e 70 29 37 c1 c4 14 01 da 7a e1 52 16 49 07 15 02 2e eb 22 e5 10 00 34 72 49 47 15 60 e5 46 3e e7 26 9b 3c 64 d2 90 3a e0 a3 fc b8 54 76 d7 7c 8e ea 57 1c e3 22 c7 5c 40 51 bc 07 77 d6 fe d8 58 f7 c3 e6 3d 00 c5 5d ce 10 c2 b9 20 9c 9d f1 f5 cc 24 d2 ae b9 c9 83 fa 61 49 4b e7 e5 15 58 d2 6f ae 2d b6 6f be 48 36 13 c9 c0 43 8e d8 12 38 ea 32 44 f1 c6 63 36 a3 cf 4c 09 93 e9 ce 2f 5e 0e 14 07 7c 44 ff 00 29 c0 90 a3 c7 38 c0 fe 99 8c 92 08 e4 7b e4 c1 e2 8e 00 09 24 e4 c7 4c 69 db 5e f8 f8 ac 04 6a ff 00 36 2a e3 9e 70 f5 ba c7 b4 1e 6f 02 03 d7 11 e0 f4 c9 2b 8e 30 bf a6 04 7b 1f 5c 90 55 8a c8 a5 5d 41 c2 ba d6 04 b8 ac 45 49 1f 2e 46 af a9 c8 ba ca 96 92 10 a0 0f ae 11 Data Ascii: ~FBxqA4Zx `9p)7zRI."4rIG`F>&<d:Tv\|W"\@QwX=] $aIKXo-oH6C82Dc6L/^\|D)8{$Li^j6*po+0{\U]AEI.F
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 14 36 59 5a d5 d0 b8 13 df db 34 d4 c4 04 99 34 dc c7 67 3d b6 4a e3 a5 7f 39 21 56 00 27 8a 1b 80 eb d2 b3 34 2f 0f 23 4d 9a cb 71 3c c8 fa 7b 48 2e ac 6f 24 bc e1 b0 77 1b b3 40 0e bc 61 5a 31 76 a5 7a 73 b1 9c 54 9d 49 6c b4 87 5d 50 b4 a5 02 d2 56 47 07 ba ab d7 af 6c b3 4c e6 1f d4 9f 69 a2 eb ae 46 28 8c e2 36 90 d9 52 ad 44 fd 40 cd 57 11 03 52 11 24 69 c1 e5 30 eb d4 e1 61 25 3b 83 76 90 09 35 40 1e dd eb 20 ef 88 59 9e ea 62 3a 64 69 ef 79 a0 16 d1 c9 72 f8 16 45 1e 2f 90 3a 11 84 6d 86 9c 70 cc 9f 2e 3b 61 9f 29 6d 2e 2a 1b 05 4f 24 13 5b bb 9e 3a 0f ed 1c d1 76 24 04 29 d8 f3 9f 79 b5 bc e0 d4 50 94 24 82 d2 5b a2 01 3f 6a c9 49 6e 3c 09 ae 8f f7 ef 87 63 74 c7 9d 42 b8 79 c5 ab 68 45 f7 a1 db a0 e3 33 7c 44 1d 27 4c 4a e7 36 b5 30 d3 29 4a 03 Data Ascii: 6YZ44g=J9!V'4/#Mq<{H.o$w@aZ1vzsTIl]PVGlLiF(6RD@WR$i0a%;v5@ Yb:diyrE/:mp.;a)m.*O$[:v$)yP$[?jIn<ctByhE3\|D'LJ60)J
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 87 66 30 80 4d 12 00 5e eb 00 f0 4f cb d0 e5 dc 3f 12 68 da 8a 02 a2 6a 71 1e be 7e 47 01 3f a6 68 78 c3 4b 99 ab 69 f1 dc d2 d4 d3 ef c5 90 97 c3 2b 73 6a 1d 00 10 41 34 6b ad 8f 71 95 1c 46 9f a9 c1 80 a7 0c 88 9a 9b 52 1c 36 ec 89 4c 29 6a 70 fa 95 0b 1f 6e 83 2c 9b d7 b4 a7 54 12 9d 46 2e e3 fc 25 c0 0f e8 71 36 fe be c9 52 27 78 66 6a 54 0f 0a 8a b4 bc 82 3f 50 6f ed 94 1a d3 91 f5 fd 73 46 d3 de 86 f3 7b 5f 75 c7 d9 96 c1 41 21 08 e9 44 72 2d 43 a7 19 1a d7 47 35 b7 ad a9 fa 7b bb 66 45 25 6d 10 78 70 77 42 bf b2 af fa 1e d9 5c 9d 64 32 f0 d5 23 30 e9 42 9c f8 e8 c8 4a 4a 8a 41 bf 35 a5 57 e5 37 bc 73 c7 23 d3 33 9f 0b e9 a8 4f fb a2 1c 80 bf e7 88 b2 d9 fe 9c 1f b8 cb 0f 01 c2 1a 44 9f 10 38 66 c8 7d 28 f2 cf ef 8a 7e 5f 94 a8 9e 00 eb 78 88 e9 fc Data Ascii: f0M^O?hjq~G?hxKi+sjA4kqFR6L)jpn,TF.%q6R'xfjT?PosF{_uA!Dr-CG5{fE%mxpwB\d2#0BJJA5W7s#3OD8f}(~_x
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 02 09 be 72 47 18 ae a7 24 2b a5 61 10 a2 48 3b b3 25 58 e3 ae 2c 12 48 ed 85 22 92 4e 23 b4 63 37 7c 60 13 7d 70 1d 27 8a c2 c6 3b 08 15 df 22 55 64 00 39 38 05 64 53 d4 64 a9 5d 0e 22 76 e0 4c 00 45 e2 ac 48 55 0e bc 64 8a 8f 15 84 20 47 22 b1 6d dd df 1f 4e 70 07 9c 29 14 11 df 28 3c 6b e1 28 be 2f d0 9e d3 df 48 f3 47 ce c3 9d d0 b1 d3 fe 99 d1 f6 e3 20 a5 84 a4 95 50 ae f8 47 8f fe 08 c7 4c 4d 67 5e 61 4f ba 1d 60 86 95 1d e1 f3 a6 96 a3 67 d7 af a7 7c f4 cd 56 2c 8a f8 c8 2d 25 c9 a9 41 69 01 7f 97 6a 88 2a b1 63 d3 3c eb f0 9d a4 ca f1 7f 88 35 74 95 94 cd 5b aa 49 50 eb 4e 0e 9f 6a cf 4b 9c 87 4f 94 f2 25 79 09 65 61 6b bf ca a4 f7 07 ed 82 2b 7e 29 b8 da d4 66 16 d3 ec 7c cb 61 96 5b 1f bb 50 34 a2 e1 f6 be 3e ff 00 5c cf ab 34 d6 95 19 13 16 a7 Data Ascii: rG$+aH;%X,H"N#c7\|`}p';"Ud98dSd]"vLEHUd G"mNp)(<k(/HG PGLMg^aO`g\|V,-%Aij*c<5t[IPNjKO%yeak+~)f\|a[P4>\4
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 88 37 99 0d 72 6f 01 26 bb e2 ba fe 1c 45 5c 64 16 fa 50 92 54 40 09 16 49 3c 0c 09 9a 49 a2 79 ca f4 e9 ce c8 94 e9 98 b4 ba ca 5c 0e 47 db f2 96 cf 22 b8 eb 90 12 de 7d d7 92 96 cc 77 12 e0 4a 14 f8 f9 1d 4f 5b 49 07 9b 17 95 12 a4 89 2c 39 a8 fc 4c a5 47 6e 52 10 db 68 f9 49 56 ea 04 73 d3 91 c7 7a f7 c0 ce cf c6 c5 7a 3a 96 53 a7 c6 43 8f 36 e4 67 14 14 1e dc 6d 2b 4a 87 7e bc 7d 46 6b c7 d4 e0 98 d0 21 b2 fb de 42 12 14 d3 e2 c2 96 b4 92 0a 28 f4 be 46 6e 31 f1 a9 f2 62 4b 8e ec c4 99 4b 4f 9c e5 82 10 07 e6 ff 00 3f b6 42 2c 29 1a 62 5a 8f 21 c4 b6 17 31 6e 20 b2 91 b7 6f 2a 21 5d 3a f2 7f eb 81 1d 29 d7 5f 31 1e 69 a5 b8 c6 a2 a7 1e 74 b8 2f c9 e3 80 08 f5 be be 83 2c 3c 3c b8 a2 3a e3 40 0a f8 78 ab 53 36 ae ea 1d 7f ae 53 a7 58 d4 22 ba da 9b 97 Data Ascii: 7ro&E\dPT@I<Iy\G"}wJO[I,9LGnRhIVszz:SC6gm+J~}Fk!B(Fn1bKKO?B,)bZ!1n o*!]:)_1it/,<<:@xS6SX"
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 18 4d 71 90 32 e0 42 77 2d 41 23 d4 9c a3 5e ae 89 8e aa 52 3f 76 d4 02 a5 3b b9 22 ca 68 8e 0f bd 74 f7 07 37 35 b2 d9 d2 25 a1 e6 56 fa 16 8d 85 b4 1a 52 af 8e 0f df 2b 15 0d b8 8c 27 45 32 50 cc 57 83 4c c6 6d 09 25 c0 00 b3 b8 fd 12 47 b7 19 60 d5 d3 34 96 04 76 13 10 21 61 6e b8 77 be 12 1d 42 8a 88 5e da e9 5b 47 4c c0 c3 70 a1 b0 a6 dd 6a 74 83 01 4a 61 2a 26 92 bf 95 45 4a e4 f0 38 27 af a7 b6 5c cb f0 dc 79 2e 37 e4 4c 72 3a da 56 f4 84 2f a9 dd b9 5f a9 3c 9e d7 98 e4 99 71 26 7f bd be 1f d3 9b 8a 03 8d f0 a2 b5 74 e6 c5 92 49 15 db 83 84 60 5e 93 2e 73 50 db 9b 12 1b 8c 2c 2d a9 4d a5 02 cb 47 f2 00 7b 57 04 d6 6b bc e4 d6 21 34 ea e4 25 fd 8a 28 63 e1 4d a7 68 aa 5f 5e c4 51 be c7 f5 da d3 f5 b7 13 a8 32 b5 38 fc a4 ea 60 2d 96 02 3e 58 c8 49 Data Ascii: Mq2Bw-A#^R?v;"ht75%VR+'E2PWLm%G`4v!anwB^[GLpjtJa*&EJ8'\y.7Lr:V/_<q&tI`^.sP,-MG{Wk!4%(cMh_^Q28`->XI
2024-05-28 05:14:15 UTC	8000	IN	Data Raw: 65 a3 52 21 78 de 0a a3 3a 15 03 58 89 c9 48 55 ad 85 91 c2 92 7f 89 07 f4 23 ae 07 47 a6 6a 31 b5 58 4d cb 8a e0 5b 4e 0e bd 08 3d c1 1d 88 e8 46 69 b2 9f 37 c5 32 5c e3 f7 10 db 6f de d4 b5 13 ff 00 84 67 9e 45 f1 14 df 0d ce 95 29 11 5f 0b 43 a5 a9 b1 10 da 96 d3 eb 48 16 b4 28 7e 55 57 af 5e fe b9 d9 f8 2b 59 63 c4 83 52 d6 a2 a1 d4 c7 90 f8 6d af 35 3b 54 43 68 00 f1 fd ed d9 51 d3 1e 46 20 28 56 25 12 47 1d 70 1b b3 2a 54 49 ad dc 0e d9 2d 80 0b 27 22 01 bb ef 8c 27 8b 27 01 70 45 0e b9 10 e5 2b 68 19 2a be 98 26 b9 bc a2 5b 88 3c 8c 60 58 b3 90 3b af 8e 87 1a 77 0c 06 00 49 e9 92 20 90 73 1e fe 72 42 d5 d0 e0 3d a0 27 ae 34 9b 07 9c 5b 4f 22 b2 3b 4a 4d 8c 09 04 d1 e7 03 c6 16 76 f4 c0 f1 d7 02 02 ec 9c 95 58 e4 62 3f 30 e3 12 54 48 38 0c 04 64 82 Data Ascii: eR!x:XHU#Gj1XM[N=Fi72\ogE)_CH(~UW^+YcRm5;TChQF (V%GpTI-'"''pE+h&[<`X;wI srB='4[O";JMvXb?0TH8d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49785	157.240.252.13	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:15 UTC	558	OUT	GET /signals/plugins/openbridge3.js?v=next HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:15 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:15 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 66 28 64 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 6c 66 6f 72 6d 65 64 20 74 69 65 72 3a 20 22 2b 63 29 3b 72 65 74 75 72 6e 20 64 5b 31 5d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: f(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 74 75 72 6e 20 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 2e 73 68 6f 77 43 6f 6e 66 69 72 6d 4d 6f 64 61 6c 28 62 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 2c 62 2c 63 29 7b 6e 2e 73 65 74 49 74 65 6d 28 6d 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 67 72 61 70 68 54 6f 6b 65 6e 3a 61 2c 70 69 78 65 6c 49 44 3a 62 2c 73 65 73 73 69 6f 6e 53 74 61 72 74 54 69 6d 65 3a 63 7d 29 29 2c 71 28 29 7d 63 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 67 72 61 70 68 54 6f 6b 65 6e 3b 62 3d 62 2e 70 69 78 65 6c 49 44 3b 73 28 63 2c 62 29 3b 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 53 65 73 73 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6d 29 7d 7d 29 Data Ascii: turn a.FacebookIWL.showConfirmModal(b)})}function s(a,b,c){n.setItem(m,JSON.stringify({graphToken:a,pixelID:b,sessionStartTime:c})),q()}c.listen(function(b){var c=b.graphToken;b=b.pixelID;s(c,b);a.FacebookIWLSessionEnd=function(){return n.removeItem(m)}})
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d Data Ascii: this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 34 32 30 35 29 7d 2c 33 33 34 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 37 34 31 31 29 7d 2c 35 30 37 36 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 33 32 33 33 29 7d 2c 33 34 31 34 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 39 34 36 35 29 7d 2c 32 32 36 37 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 33 32 33 32 29 7d 2c 33 35 36 30 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 35 30 30 31 29 7d 2c 33 32 39 36 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 37 32 31 29 7d 2c 38 37 34 35 3a 66 75 6e 63 74 Data Ascii: 4205)},334:function(a,c,b){a.exports=b(7411)},5076:function(a,c,b){a.exports=b(3233)},3414:function(a,c,b){a.exports=b(9465)},2267:function(a,c,b){a.exports=b(3232)},3560:function(a,c,b){a.exports=b(5001)},3296:function(a,c,b){a.exports=b(721)},8745:funct
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 63 3b 61 2b 2b 29 64 5b 61 5d 3d 62 5b 61 5d 3b 72 65 74 75 72 6e 20 64 7d 61 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 35 36 37 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 39 33 34 35 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 69 66 28 64 28 61 29 29 72 65 74 75 72 6e 20 61 7d 61 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 33 39 36 33 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 39 33 34 35 29 2c 66 3d 62 28 39 35 35 31 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 69 66 28 64 28 61 29 29 72 65 74 75 72 6e 20 66 28 61 29 7d 61 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 69 66 28 61 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 Data Ascii: c;a++)d[a]=b[a];return d}a.exports=b},567:function(a,c,b){var d=b(9345);function c(a){if(d(a))return a}a.exports=c},3963:function(a,c,b){var d=b(9345),f=b(9551);function c(a){if(d(a))return f(a)}a.exports=c},669:function(a){function b(a){if(a===void 0)thr
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 33 33 35 33 29 2c 66 3d 62 28 37 38 30 31 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 3d 66 3f 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 64 28 61 29 7d 3b 72 65 74 75 72 6e 20 63 28 62 29 7d 61 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 33 37 34 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 33 37 37 36 29 2c 66 3d 62 28 33 30 31 33 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 Data Ascii: :function(a,c,b){var d=b(3353),f=b(7801);function c(b){a.exports=c=f?d:function(a){return a.__proto__\|\|d(a)};return c(b)}a.exports=c},374:function(a,c,b){var d=b(3776),f=b(3013);function c(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 61 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 39 39 37 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 31 38 39 29 2c 66 3d 62 28 36 36 39 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 26 26 28 64 28 62 29 3d 3d 3d 22 6f 62 6a 65 63 74 Data Ascii: (){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}a.exports=b},997:function(a,c,b){var d=b(189),f=b(669);function c(a,b){return b&&(d(b)==="object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49786	157.240.252.13	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:15 UTC	1311	OUT	GET /signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:15 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:15 UTC	1730	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-28 05:14:15 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-28 05:14:15 UTC	424	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49790	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:18 UTC	953	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:18 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49789	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:18 UTC	990	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:18 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:14:18 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49792	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:19 UTC	617	OUT	GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:19 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:19 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:49:37 GMT Accept-Ranges: bytes Content-Length: 9191 Content-Type: image/png
2024-05-28 05:14:19 UTC	7960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 65 00 00 00 64 08 06 00 00 00 9f 20 fe 6a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRed jtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:19 UTC	1231	IN	Data Raw: 0e 6e c3 b5 cc 2f 0d 1d 54 de b6 0c 0e 49 29 ba bd 0c 97 53 9a 44 bc 98 d8 19 c7 0d 57 14 85 51 52 0a bb db 84 b6 93 84 95 2b 54 ee 7b 02 24 d9 b1 78 cd 58 0c 21 94 76 1a af ab 83 82 75 9f 0b 02 4f af 84 70 be 52 a0 28 53 64 76 50 f6 a6 37 1a a0 bc 48 4e eb 28 ae ff 5c b0 45 75 54 08 ae db 80 6a 3b 07 08 46 c3 bf 7f 10 3b 7b 08 ee aa 57 98 09 3f 8e 9c 62 7e a4 73 79 18 e7 9a 89 ac a3 f8 d3 54 d1 a3 28 6a a9 f2 be 73 c4 53 84 ae 63 2a fe 8f f9 cc 43 21 3d 45 0d 72 8b b1 3a 16 6c 67 43 f9 4d ae a3 a0 af a3 a2 5a 5d 22 42 43 24 58 7c bb 72 ff e9 f1 60 da 1c 64 b6 0a 7f ab da 8a 58 ba 0e 37 8d e1 f5 16 13 3e f5 fc 4c 0d 0f e8 31 13 f9 74 a0 50 c8 e7 40 df 7f 09 82 31 0e 25 ad 0a a5 a3 a1 fe 7a 9d 0e 45 7f 17 b1 be 32 f1 74 0c 9d b9 03 a5 b0 52 85 b6 d0 40 b6 Data Ascii: n/TI)SDWQR+T{$xX!vuOpR(SdvP7HN(\EuTj;F;{W?b~syT(jsSc*C!=Er:lgCMZ]"BC$X\|r`dX7>L1tP@1%zE2tR@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49791	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:19 UTC	716	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:19 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49793	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:19 UTC	753	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&rl=&if=false&ts=1716873256116&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873253114&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:19 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:14:19 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49795	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:20 UTC	519	OUT	GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_J2E85P7SPT=GS1.1.1716873252.1.0.1716873252.60.0.0; _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479
2024-05-28 05:14:20 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:49:37 GMT Accept-Ranges: bytes Content-Length: 9191 Content-Type: image/png
2024-05-28 05:14:20 UTC	7960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 65 00 00 00 64 08 06 00 00 00 9f 20 fe 6a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRed jtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:20 UTC	1231	IN	Data Raw: 0e 6e c3 b5 cc 2f 0d 1d 54 de b6 0c 0e 49 29 ba bd 0c 97 53 9a 44 bc 98 d8 19 c7 0d 57 14 85 51 52 0a bb db 84 b6 93 84 95 2b 54 ee 7b 02 24 d9 b1 78 cd 58 0c 21 94 76 1a af ab 83 82 75 9f 0b 02 4f af 84 70 be 52 a0 28 53 64 76 50 f6 a6 37 1a a0 bc 48 4e eb 28 ae ff 5c b0 45 75 54 08 ae db 80 6a 3b 07 08 46 c3 bf 7f 10 3b 7b 08 ee aa 57 98 09 3f 8e 9c 62 7e a4 73 79 18 e7 9a 89 ac a3 f8 d3 54 d1 a3 28 6a a9 f2 be 73 c4 53 84 ae 63 2a fe 8f f9 cc 43 21 3d 45 0d 72 8b b1 3a 16 6c 67 43 f9 4d ae a3 a0 af a3 a2 5a 5d 22 42 43 24 58 7c bb 72 ff e9 f1 60 da 1c 64 b6 0a 7f ab da 8a 58 ba 0e 37 8d e1 f5 16 13 3e f5 fc 4c 0d 0f e8 31 13 f9 74 a0 50 c8 e7 40 df 7f 09 82 31 0e 25 ad 0a a5 a3 a1 fe 7a 9d 0e 45 7f 17 b1 be 32 f1 74 0c 9d b9 03 a5 b0 52 85 b6 d0 40 b6 Data Ascii: n/TI)SDWQR+T{$xX!vuOpR(SdvP7HN(\EuTj;F;{W?b~syT(jsSc*C!=Er:lgCMZ]"BC$X\|r`dX7>L1tP@1%zE2tR@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49809	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:28 UTC	619	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:29 UTC	1006	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: ASP.NET_SessionId=kkum2kyzqmo2wvkrri0zx1je; path=/; HttpOnly; SameSite=Lax Set-Cookie: llbrMachine_593579=19998811=19998811; expires=Sun, 28-May-2524 05:14:29 GMT; path=/ X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vKRTqH%2FymTxUFWQ42tbWW9Ca%2Fb0nAGd7O4TBn7q0IBUWwpdww9g7wXq3RmV2QPZuz%2Bgyr6kyjorY2diDClAlEEVFe%2Fe9E5U5KV1COArxA8Q%2F1r7qTHn01N2VqVPexvw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2ea9e4e7285-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:29 UTC	363	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:29 UTC	277	IN	Data Raw: 43 63 47 6f 48 2b 6e 71 73 66 70 55 71 49 6d 47 49 62 71 6f 78 6b 66 79 63 66 68 78 34 3d 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 76 61 6c 75 65 3d 22 31 38 44 36 43 36 44 30 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e Data Ascii: CcGoH+nqsfpUqImGIbqoxkfycfhx4=" /></div><div class="aspNetHidden"><input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" /></div> <div> <span id="lbl"></span> </div> </form>
2024-05-28 05:14:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49812	172.67.75.149	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:29 UTC	507	OUT	GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1 Host: www.termsfeed.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=195528-195528 If-Range: "5eefb438a570c1ac15e2deee89dc27ef"
2024-05-28 05:14:29 UTC	1018	IN	HTTP/1.1 206 Partial Content Date: Tue, 28 May 2024 05:14:29 GMT Content-Type: application/javascript Content-Length: 1 Connection: close Age: 23774 Cache-Control: public, immutable, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=206910 etag: "5eefb438a570c1ac15e2deee89dc27ef" expires: Mon, 27 May 2024 23:38:15 GMT last-modified: Mon, 27 May 2024 21:38:15 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-priority: 5/n x-xss-protection: 1; mode=block x-z: 3246 CF-Cache-Status: HIT Content-Range: bytes 195528-195528/206909 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ifiF%2BKvuXwz6jXw1FQK3IFo2WXDEyV0oyPVj6QE8riZVTpptRlELyhifkNYlCRZsIOahXKLWLNNprvCeCdltuUWBV62FNUMCMeQGqyoEM9%2Bj0m3RXOlJdoieFVDjIRpotiq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2efcafcc359-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:29 UTC	1	IN	Data Raw: 65 Data Ascii: e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49813	188.114.96.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:29 UTC	472	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
2024-05-28 05:14:30 UTC	819	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:30 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UvboPijm2xOlK796CG7lfB9tUFGSUyYXg6rxIt46ko1dDpohmep6MK36oUABA%2B7aEAfSPt2XcI4O79Row%2Bm6%2FFtRJ1JFILjiQgxSaJMOJWfc2gDZLmBDrU6QSU5j%2Fk0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2f0ccca4388-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:30 UTC	550	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:30 UTC	90	IN	Data Raw: 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: iv> <span id="lbl"></span> </div> </form></body></html>
2024-05-28 05:14:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49814	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:29 UTC	1047	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:30 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:30 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49815	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:30 UTC	1084	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:30 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:14:30 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49816	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:30 UTC	482	OUT	GET /?ob=open-bridge/events HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://www.campobahia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:30 UTC	396	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 28 May 2024 05:14:30 GMT Server: Apache X-Redirect-By: WordPress Set-Cookie: pll_language=pt; expires=Wed, 28 May 2025 05:14:30 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.campobahia.com/?ob=open-bridge%2Fevents Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49817	172.67.75.149	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:30 UTC	507	OUT	GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1 Host: www.termsfeed.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=195528-206908 If-Range: "5eefb438a570c1ac15e2deee89dc27ef"
2024-05-28 05:14:30 UTC	1020	IN	HTTP/1.1 206 Partial Content Date: Tue, 28 May 2024 05:14:30 GMT Content-Type: application/javascript Content-Length: 11381 Connection: close Age: 23775 Cache-Control: public, immutable, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=206910 etag: "5eefb438a570c1ac15e2deee89dc27ef" expires: Mon, 27 May 2024 23:38:15 GMT last-modified: Mon, 27 May 2024 21:38:15 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-priority: 5/n x-xss-protection: 1; mode=block x-z: 3246 CF-Cache-Status: HIT Content-Range: bytes 195528-206908/206909 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H65Iv5WPlDcvN45X42IN6G2l4tyzMGwjNJQjgbPc1NUMs4TkwurXcUebdaYl3qCAKpstqqDNBEyBZesMMVFhqx%2FD1q4kyAdSjGZEQWBFF6OHYup2JcvoO26bESYXo8mW5vWL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc2f3ddf38cc3-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:30 UTC	349	IN	Data Raw: 65 64 2d 63 6f 6d 2d 2d 2d 72 65 73 65 74 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 65 72 6d 73 66 65 65 64 2d 63 6f 6d 2d 2d 2d 6e 62 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 74 65 72 6d 73 66 65 65 64 2d 63 6f 6d 2d 2d 2d 6e 62 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 64 69 61 6c 6f 67 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6d 6f 64 61 6c 22 2c 22 74 72 75 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 22 63 63 2d 6e 62 2d 74 69 74 6c 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 22 63 63 2d 6e 62 2d 74 Data Ascii: ed-com---reset"),i.classList.add("termsfeed-com---nb"),i.setAttribute("id","termsfeed-com---nb"),i.setAttribute("role","dialog"),i.setAttribute("aria-modal","true"),i.setAttribute("aria-labelledby","cc-nb-title"),i.setAttribute("aria-describedby","cc-nb-t
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 6f 2e 64 6f 6e 65 3b 6f 3d 6e 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 72 3d 6f 2e 76 61 6c 75 65 3b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 29 7d 7d 63 61 74 63 68 28 74 29 7b 65 3d 7b 65 72 72 6f 72 3a 74 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6f 26 26 21 6f 2e 64 6f 6e 65 26 26 28 74 3d 6e 2e 72 65 74 75 72 6e 29 26 26 74 2e 63 61 6c 6c 28 6e 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 65 2e 65 72 72 6f 72 7d 7d 69 66 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 65 72 6d 73 66 65 65 64 2d 63 6f 6d 2d 2d 2d 6c 61 6e 67 2d 22 2b 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 69 31 38 6e 2e 75 73 65 72 4c 61 6e 67 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 2c 74 68 69 73 2e 63 72 65 61 74 65 4e Data Ascii: o.done;o=n.next()){var r=o.value;i.classList.add(r)}}catch(t){e={error:t}}finally{try{o&&!o.done&&(t=n.return)&&t.call(n)}finally{if(e)throw e.error}}if(i.classList.add("termsfeed-com---lang-"+this.cookieConsent.i18n.userLang),a.appendChild(i,this.createN
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6c 69 6e 6b 22 29 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 70 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 63 2d 6e 62 2d 74 65 78 74 2d 75 72 6c 73 2d 73 65 70 61 72 61 74 6f 72 22 29 2c 70 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 20 7c 20 22 2c 65 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6e 6f 74 69 63 65 42 61 6e 6e 65 72 49 6e 73 65 72 74 4c 65 67 61 6c 55 72 6c 73 26 26 28 65 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6f 77 6e 65 72 57 65 62 73 69 74 65 50 72 69 76 61 63 79 50 6f 6c 69 63 79 55 72 6c 26 26 65 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6f 77 6e 65 72 57 65 62 73 69 74 65 49 6d 70 72 65 73 73 75 6d 55 72 6c 3f 61 Data Ascii: ibute("role","link");var p=document.createElement("span");p.classList.add("cc-nb-text-urls-separator"),p.innerHTML=" \| ",e.cookieConsent.noticeBannerInsertLegalUrls&&(e.cookieConsent.ownerWebsitePrivacyPolicyUrl&&e.cookieConsent.ownerWebsiteImpressumUrl?a
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 73 65 6e 74 2e 69 31 38 6e 2e 24 74 28 22 69 31 38 6e 22 2c 22 6e 62 5f 61 67 72 65 65 22 29 3a 75 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 69 31 38 6e 2e 24 74 28 22 69 31 38 6e 22 2c 22 6e 62 5f 6f 6b 22 29 2c 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 65 76 65 6e 74 73 2e 63 63 5f 6e 6f 74 69 63 65 42 61 6e 6e 65 72 4f 6b 4f 72 41 67 72 65 65 50 72 65 73 73 65 64 29 7d 29 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 2c 75 29 3b 76 61 72 20 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 Data Ascii: sent.i18n.$t("i18n","nb_agree"):u.innerHTML=e.cookieConsent.i18n.$t("i18n","nb_ok"),u.addEventListener("click",(function(){document.dispatchEvent(e.cookieConsent.events.cc_noticeBannerOkOrAgreePressed)})),a.appendChild(d,u);var m=document.createElement("b
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 73 73 2e 70 75 73 68 28 22 74 65 72 6d 73 66 65 65 64 2d 63 6f 6d 2d 2d 2d 6e 62 2d 69 6e 74 65 72 73 74 69 74 69 61 6c 22 29 2c 69 7d 72 65 74 75 72 6e 20 4a 28 74 2c 65 29 2c 74 7d 28 59 29 2c 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 69 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 69 2e 6e 6f 74 69 63 65 42 61 6e 6e 65 72 45 78 74 72 61 43 73 73 2e 70 75 73 68 28 22 74 65 72 6d 73 66 65 65 64 2d 63 6f 6d 2d 2d 2d 6e 62 2d 73 74 61 6e 64 61 6c 6f 6e 65 22 29 2c 69 7d 72 65 74 75 72 6e 20 4a 28 74 2c 65 29 2c 74 7d 28 59 29 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 65 2e 6c 6f 67 28 22 43 6f 6e 73 65 6e 74 54 79 Data Ascii: ss.push("termsfeed-com---nb-interstitial"),i}return J(t,e),t}(Y),te=function(e){function t(t){var i=e.call(this,t)\|\|this;return i.noticeBannerExtraCss.push("termsfeed-com---nb-standalone"),i}return J(t,e),t}(Y),ie=function(){function e(e){e.log("ConsentTy
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 70 74 4c 65 76 65 6c 28 22 74 61 72 67 65 74 69 6e 67 22 29 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6a 61 76 61 73 63 72 69 70 74 49 74 65 6d 73 2e 65 6e 61 62 6c 65 53 63 72 69 70 74 73 42 79 4c 65 76 65 6c 28 22 74 61 72 67 65 74 69 6e 67 22 29 29 3a 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 75 73 65 72 43 6f 6e 73 65 6e 74 2e 72 65 6a 65 63 74 4c 65 76 65 6c 28 22 74 61 72 67 65 74 69 6e 67 22 29 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6c 6f 67 28 22 63 6f 6e 73 65 6e 74 49 6d 70 6c 69 65 64 20 6c 6f 61 64 49 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 73 46 6f 72 4e 65 77 55 73 65 72 3a 20 73 74 72 69 63 74 6c 79 2d 6e 65 63 65 73 73 61 72 79 20 28 74 72 75 65 29 2c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 Data Ascii: ptLevel("targeting"),this.cookieConsent.javascriptItems.enableScriptsByLevel("targeting")):this.cookieConsent.userConsent.rejectLevel("targeting"),this.cookieConsent.log("consentImplied loadInitialCookiesForNewUser: strictly-necessary (true), functionalit
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 6e 74 2e 6a 61 76 61 73 63 72 69 70 74 49 74 65 6d 73 2e 65 6e 61 62 6c 65 53 63 72 69 70 74 73 42 79 4c 65 76 65 6c 28 22 74 61 72 67 65 74 69 6e 67 22 29 29 3a 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 75 73 65 72 43 6f 6e 73 65 6e 74 2e 72 65 6a 65 63 74 4c 65 76 65 6c 28 22 74 61 72 67 65 74 69 6e 67 22 29 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 6c 6f 67 28 22 63 6f 6e 73 65 6e 74 45 78 70 72 65 73 73 20 6c 6f 61 64 49 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 73 46 6f 72 4e 65 77 55 73 65 72 3a 20 73 74 72 69 63 74 6c 79 2d 6e 65 63 65 73 73 61 72 79 20 28 74 72 75 65 29 2c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 28 22 2b 65 2b 22 29 2c 20 74 72 61 63 6b 69 6e 67 20 28 22 2b 74 2b 22 29 2c 20 74 61 72 67 65 74 69 6e Data Ascii: nt.javascriptItems.enableScriptsByLevel("targeting")):this.cookieConsent.userConsent.rejectLevel("targeting"),this.cookieConsent.log("consentExpress loadInitialCookiesForNewUser: strictly-necessary (true), functionality ("+e+"), tracking ("+t+"), targetin
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 6f 6e 73 65 6e 74 2e 6f 77 6e 65 72 44 6f 6d 61 69 6e 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 2e 63 6f 6f 6b 69 65 53 65 63 75 72 65 2c 33 36 35 30 29 7d 2c 65 7d 28 29 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 63 6f 6e 66 69 67 55 73 65 72 43 6f 6e 73 65 6e 74 54 6f 6b 65 6e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 75 73 65 72 43 6f 6e 73 65 6e 74 54 6f 6b 65 6e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 64 65 62 75 67 3d 21 31 2c 74 68 69 73 2e 6f 77 6e 65 72 43 6f 6e 73 65 6e 74 54 79 70 65 3d 65 2e 63 6f 6e 73 65 6e 74 5f 74 79 70 65 7c 7c 22 65 78 70 72 65 73 73 22 2c 74 68 69 73 2e 6f 77 6e 65 72 57 65 62 73 69 74 65 4e 61 6d 65 3d 65 2e 77 65 62 73 69 74 65 Data Ascii: onsent.ownerDomain,this.cookieConsent.cookieSecure,3650)},e}(),le=function(){function e(e){switch(this.configUserConsentToken=void 0,this.userConsentToken=void 0,this.debug=!1,this.ownerConsentType=e.consent_type\|\|"express",this.ownerWebsiteName=e.website
2024-05-28 05:14:30 UTC	1369	IN	Data Raw: 6c 69 65 64 22 3a 74 68 69 73 2e 63 6f 6e 73 65 6e 74 54 79 70 65 3d 6e 65 77 20 6e 65 28 74 68 69 73 29 2c 74 68 69 73 2e 75 73 65 72 43 6f 6e 73 65 6e 74 54 6f 6b 65 6e 43 6c 61 73 73 3d 6e 65 77 20 63 65 28 74 68 69 73 29 7d 73 77 69 74 63 68 28 74 68 69 73 2e 6f 77 6e 65 72 43 6f 6c 6f 72 50 61 6c 65 74 74 65 29 7b 64 65 66 61 75 6c 74 3a 63 61 73 65 22 64 61 72 6b 22 3a 74 68 69 73 2e 63 6f 6c 6f 72 50 61 6c 65 74 74 65 3d 6e 65 77 20 72 65 28 74 68 69 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6c 69 67 68 74 22 3a 74 68 69 73 2e 63 6f 6c 6f 72 50 61 6c 65 74 74 65 3d 6e 65 77 20 73 65 28 74 68 69 73 29 7d 73 77 69 74 63 68 28 74 68 69 73 2e 6f 77 6e 65 72 4e 6f 74 69 63 65 42 61 6e 6e 65 72 54 79 70 65 29 7b 64 65 66 61 75 6c 74 3a 63 61 73 65 22 73 Data Ascii: lied":this.consentType=new ne(this),this.userConsentTokenClass=new ce(this)}switch(this.ownerColorPalette){default:case"dark":this.colorPalette=new re(this);break;case"light":this.colorPalette=new se(this)}switch(this.ownerNoticeBannerType){default:case"s
2024-05-28 05:14:30 UTC	80	IN	Data Raw: 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 2e 6f 70 65 6e 50 72 65 66 65 72 65 6e 63 65 73 43 65 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 6f 70 65 6e 50 72 65 66 65 72 65 6e 63 65 73 43 65 6e 74 65 72 28 29 7d 2c 6f 7d 7d 5d 29 3b Data Ascii: cookieconsent.openPreferencesCenter=function(){o.openPreferencesCenter()},o}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49818	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:30 UTC	810	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:31 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49819	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:31 UTC	847	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg%23content&rl=&if=false&ts=1716873267968&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8d6a1f920c1e8c9706d7b3f18a8fcf3e82cbe9a3fd737808819bc31eae48c9a4&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873267798&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:31 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:14:31 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49821	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:35 UTC	921	OUT	GET / HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:14:35 UTC	393	IN	HTTP/1.1 302 Found Date: Tue, 28 May 2024 05:14:35 GMT Server: Apache Vary: Accept-Language X-Redirect-By: Polylang Set-Cookie: pll_language=en; expires=Wed, 28 May 2025 05:14:35 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.campobahia.com/en/home-en/ Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49822	142.250.185.142	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:36 UTC	1101	OUT	POST /g/collect?v=2&tid=G-J2E85P7SPT&gtm=45je45m0v872729742za200&_p=1716873267602&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZTNiMT&cid=648733769.1716873252&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_s=1&sid=1716873252&sct=1&seg=1&dl=http%3A%2F%2Fwww.campobahia.com%2Fwp-content%2Fuploads%2F2023%2F09%2FPop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Campo%20Bahia&en=page_view&_ee=1&tfd=8210 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://www.campobahia.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:36 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://www.campobahia.com Date: Tue, 28 May 2024 05:14:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49820	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:36 UTC	949	OUT	GET /en/home-en/ HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	422	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:36 GMT Server: Apache Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/", <https://www.campobahia.com/wp-json/wp/v2/pages/5031>; rel="alternate"; type="application/json", <https://www.campobahia.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-28 05:14:37 UTC	7770	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3a 61 64 64 74 68 69 73 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 68 65 6c 70 2f 61 70 69 2d 73 70 65 63 22 20 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 61 68 42 79 7a 64 71 6f 4f 4f 47 43 5a 6a 48 6d 47 76 73 4f 6a 4c 69 7a 56 4d 36 70 65 32 72 56 51 72 51 61 48 41 6c 66 30 77 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="en-US" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" ><head><meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" /><meta c
2024-05-28 05:14:37 UTC	8620	IN	Data Raw: 69 6f 6e 20 73 65 74 53 65 73 73 69 6f 6e 53 75 70 70 6f 72 74 54 65 73 74 73 28 20 73 75 70 70 6f 72 74 54 65 73 74 73 20 29 20 7b 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2a 2a 20 40 74 79 70 65 20 7b 53 65 73 73 69 6f 6e 53 75 70 70 6f 72 74 54 65 73 74 73 7d 20 2a 2f 0a 09 09 09 76 61 72 20 69 74 65 6d 20 3d 20 7b 0a 09 09 09 09 73 75 70 70 6f 72 74 54 65 73 74 73 3a 20 73 75 70 70 6f 72 74 54 65 73 74 73 2c 0a 09 09 09 09 74 69 6d 65 73 74 61 6d 70 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 0a 09 09 09 7d 3b 0a 0a 09 09 09 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 0a 09 09 09 09 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 4b 65 79 2c 0a 09 09 09 09 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 20 69 74 65 Data Ascii: ion setSessionSupportTests( supportTests ) {try {/** @type {SessionSupportTests} */var item = {supportTests: supportTests,timestamp: new Date().valueOf()};sessionStorage.setItem(sessionStorageKey,JSON.stringify( ite
2024-05-28 05:14:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:37 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 62 74 61 69 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 73 65 73 73 69 6f 6e 2c 20 66 69 6e 61 6c 69 7a 65 20 74 68 65 20 73 65 74 74 69 6e 67 73 2e 0a 09 09 2e 74 68 65 6e 28 20 66 75 6e 63 74 69 6f 6e 20 28 20 73 75 70 70 6f 72 74 54 65 73 74 73 20 29 20 7b 0a 09 09 09 2f 2a 0a 09 09 09 20 2a 20 54 65 73 74 73 20 74 68 65 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 66 6c 61 67 20 65 6d 6f 6a 69 73 20 61 6e 64 20 6f 74 68 65 72 20 65 6d 6f 6a 69 73 2c 20 61 6e 64 20 61 64 6a 75 73 74 73 20 74 68 65 0a 09 09 09 20 2a 20 73 75 70 70 6f 72 74 20 73 65 74 74 69 6e 67 73 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 09 09 09 20 2a 2f 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 74 65 73 74 20 69 6e 20 73 75 70 70 6f 72 74 54 65 73 74 Data Ascii: 4000btained from the session, finalize the settings..then( function ( supportTests ) {/* * Tests the browser support for flag emojis and other emojis, and adjusts the * support settings accordingly. */for ( var test in supportTest
2024-05-28 05:14:37 UTC	8198	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 Data Ascii: nd-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color
2024-05-28 05:14:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:37 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 20 61 2c 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 70 72 69 6d 61 72 79 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2c 20 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2c 20 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 20 66 6f 72 6d 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 39 38 39 37 63 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 62 6f 72 64 65 Data Ascii: 4000 a, .wp-block-button.is-style-primary .wp-block-button__link, .wc-block-grid .wp-block-button .wp-block-button__link, form input[type="submit"], form button[type="submit"]{ background-color: #99897c;color: #ffffff;border-radius:0px 0px 0px 0px;borde
2024-05-28 05:14:37 UTC	8198	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 20 32 35 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 6c 69 20 3e 20 61 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 61 6c 65 77 61 79 2c 20 76 61 72 28 2d 2d 6e 76 2d 66 61 6c 6c 62 61 63 6b 2d 66 66 29 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 6c 69 20 Data Ascii: in-height: 25px; } .builder-item--secondary-menu .nav-ul li > a{ font-family: Raleway, var(--nv-fallback-ff); font-size: 1em; line-height: 1.6em; letter-spacing: 0px; font-weight: 400; text-transform: uppercase; } .builder-item--secondary-menu .nav-ul li
2024-05-28 05:14:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:37 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 2d 6c 6f 67 6f 20 2e 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 7b 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 33 35 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6c 6f 67 6f 20 2e 73 69 74 65 2d 6c 6f 67 6f 7b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 70 78 20 31 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6c 6f 67 6f 7b 20 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6e 61 76 2d 69 63 6f 6e 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 7b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6e 61 76 2d 69 63 6f 6e 7b 20 6d 61 72 Data Ascii: 4000-logo .site-logo img{ max-width: 235px; } .builder-item--logo .site-logo{ padding:10px 0px 10px 0px; } .builder-item--logo{ margin:0px 0px 0px 0px; } .builder-item--nav-icon .navbar-toggle{ padding:10px 15px 10px 15px; } .builder-item--nav-icon{ mar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49823	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:37 UTC	921	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=1.6.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 6924 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:37 UTC	6924	IN	Data Raw: 23 6f 75 69 62 6f 75 6e 63 65 2d 6d 6f 64 61 6c 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 0a 7d 0a 23 63 6c 6f 73 65 5f 62 75 74 74 6f 6e 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 63 6c 6f 73 65 5f 6d 6f 64 61 6c 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 Data Ascii: #ouibounce-modal { font-family: 'Open Sans', sans-serif; display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; z-index: 999999;}#close_button{ background: url(../images/close_modal.png) no-repeat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49828	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:37 UTC	933	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:15 GMT Accept-Ranges: bytes Content-Length: 67192 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:37 UTC	7937	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 54 65 73 74 69 6d 6f 6e 69 61 6c 20 53 6c 69 64 65 72 20 61 6e 64 20 53 68 6f 77 63 61 73 65 20 50 72 6f 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 73 75 70 70 6f 72 74 40 72 61 64 69 75 73 74 68 65 6d 65 2e 63 6f 6d 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 40 20 52 Data Ascii: /*************************************************************//*************** Testimonial Slider and Showcase Pro ******************//*************** support@radiustheme.com ***************//************* copyright (c) 2017 @ R
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 69 6c 69 74 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 75 74 69 6c 69 74 79 20 2e 72 74 2d 62 75 74 74 6f 6e 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 69 73 6f 2d 62 75 74 74 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 36 66 36 66 36 66 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: ility {margin: 15px 0;text-align: center;}.tss-wrapper .tss-utility .rt-button,.tss-wrapper .tss-isotope-button-wrapper .rt-iso-button {background: #6f6f6f;border: 0;border-radius: 2px;color: #fff;font-size: 16px;line-heigh
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 3a 68 6f 76 65 72 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 2e 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 35 35 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 3a 68 6f 76 65 72 20 73 70 61 6e 3a 68 6f 76 65 72 20 7e 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 20 2e 72 74 2d 72 61 74 69 6e 67 20 73 70 61 6e 2e 61 63 74 69 76 65 20 7e 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 73 75 Data Ascii: wrapper .rt-rating:hover span:before,.tss-submit-wrapper .rt-rating.selected:hover span:before {content: "\f155";}.tss-submit-wrapper .rt-rating:hover span:hover ~ span:before,.tss-submit-wrapper .rt-rating span.active ~ span:before,.tss-su
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 6f 75 74 33 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 31 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 76 69 64 65 6f 31 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 33 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 46 31 30 44 22 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 65 61 65 61 65 61 3b 0d 0a 09 70 6f 73 69 74 69 Data Ascii: out3 .item-content-wrapper:before,.tss-wrapper .tss-isotope1 .item-content-wrapper:before,.tss-wrapper .tss-video1 .item-content-wrapper:before,.tss-wrapper .tss-carousel3 .item-content-wrapper:before {content: "\F10D";color: #eaeaea;positi
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 61 75 74 68 6f 72 2d 73 6f 63 69 61 6c 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 61 75 74 68 6f 72 2d 73 6f 63 69 61 6c 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 73 6f 63 69 61 6c 2d 73 68 61 72 65 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 36 20 2e 73 69 6e 67 6c 65 2d 69 74 65 6d 2d Data Ascii: relative;}.tss-wrapper .tss-layout6 .single-item-wrapper .author-social,.tss-wrapper .tss-carousel6 .single-item-wrapper .author-social,.tss-wrapper .tss-layout6 .single-item-wrapper .tss-social-share,.tss-wrapper .tss-carousel6 .single-item-
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 6c 61 79 6f 75 74 39 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 69 73 6f 74 6f 70 65 34 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 39 20 2e 70 72 6f 66 69 6c 65 2d 69 6d 67 Data Ascii: ansition: all 0.5s ease-out;-o-transition: all 0.5s ease-out;transition: all 0.5s ease-out;}.tss-wrapper .tss-layout9 .profile-img-wrapper:after,.tss-wrapper .tss-isotope4 .profile-img-wrapper:after,.tss-wrapper .tss-carousel9 .profile-img
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 37 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 73 73 2d 77 72 61 70 70 65 72 20 2e 74 73 73 2d 63 61 72 6f 75 73 65 6c 31 31 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 20 69 6d 67 2c 0d 0a 2e 74 73 73 2d 77 72 61 70 70 Data Ascii: -webkit-transition: all 0.7s ease-out;-moz-transition: all 0.7s ease-out;-ms-transition: all 0.7s ease-out;-o-transition: all 0.7s ease-out;transition: all 0.7s ease-out;}.tss-wrapper .tss-carousel11 .swiper-slide-active img,.tss-wrapp
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 0d 0a 09 2e 72 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 32 34 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 31 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 32 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 33 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 34 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 35 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 36 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 37 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 38 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 39 2c 0d 0a 09 2e 72 74 2d 63 6f 6c 2d 73 6d 2d 31 30 2c 0d Data Ascii: .rt-container {width: 1170px;}}@media (min-width: 768px) {.rt-col-sm-24,.rt-col-sm-1,.rt-col-sm-2,.rt-col-sm-3,.rt-col-sm-4,.rt-col-sm-5,.rt-col-sm-6,.rt-col-sm-7,.rt-col-sm-8,.rt-col-sm-9,.rt-col-sm-10,
2024-05-28 05:14:38 UTC	3255	IN	Data Raw: 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 09 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 20 7b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 Data Ascii: m: rotate(180deg);-o-transform: rotate(180deg);transform: rotate(180deg);}100% {-webkit-transform: rotate(360deg);-moz-transform: rotate(360deg);-o-transform: rotate(360deg);transform: rotate(360deg);}}@-webkit-key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49826	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:37 UTC	925	OUT	GET /wp-content/plugins/weather-atlas/public/css/weather-atlas-public.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 May 2024 20:33:47 GMT Accept-Ranges: bytes Content-Length: 4024 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:37 UTC	4024	IN	Data Raw: 2e 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 77 72 61 70 70 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 77 72 61 70 70 65 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 Data Ascii: .weather-atlas-wrapper{font-family:'Open Sans', sans-serif;font-size:1em;line-height:1.5;text-shadow:1px 1px 0 rgba(0, 0, 0, 1);text-align:center}.weather-atlas-wrapper a{text-decoration:none !important;box-shadow:none !important;border:none !important;ou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49824	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:37 UTC	933	OUT	GET /wp-content/plugins/weather-atlas/public/font/weather-icons/weather-icons.min.css?ver=3.0.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 May 2024 20:33:47 GMT Accept-Ranges: bytes Content-Length: 3459 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:37 UTC	3459	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 77 65 61 74 68 65 72 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 77 65 61 74 68 65 72 2d 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 69 63 6f 6e 73 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f Data Ascii: @font-face{font-display:block;font-family:weathericons;src:url(../weather-icons/weathericons-regular-webfont.eot);src:url(../weather-icons/weathericons-regular-webfont.eot?#iefix) format('embedded-opentype'),url(../weather-icons/weathericons-regular-webfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49825	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:37 UTC	933	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:37 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 280643 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:37 UTC	7936	IN	Data Raw: 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 74 73 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 74 73 2d 65 61 65 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 7b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 77 74 73 2d 65 61 65 2d 74 65 78 74 73 65 70 61 72 61 74 6f 72 20 7b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 2d 72 65 Data Ascii: .elementor-widget-wts-textseparator .elementor-widget-container { overflow: hidden;}.wts-eae-textseparator { align-items: center; display: flex; flex-flow: row nowrap; margin: auto;}body.rtl .wts-eae-textseparator { flex-direction: row-re
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 74 6d 61 6e 20 31 73 20 32 20 61 6c 74 65 72 6e 61 74 65 20 6c 69 6e 65 61 72 3b 0a 7d 0a 0a 2f 2a 20 43 75 62 65 20 41 6e 69 6d 61 74 69 6f 6e 20 2a 2f 0a 0a 2e 65 61 65 2d 66 62 2d 61 6e 69 6d 61 74 65 2d 66 6c 69 70 63 61 72 64 20 2e 65 61 65 2d 66 6c 69 70 2d 62 6f 78 2d 66 72 6f 6e 74 2c 0a 2e 65 61 65 2d 66 62 2d 61 6e 69 6d 61 74 65 2d 66 6c 69 70 63 61 72 64 20 2e 65 61 65 2d 66 6c 69 70 2d 62 6f 78 2d 62 61 63 6b 20 7b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 34 73 20 65 61 73 65 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 2d 31 35 30 70 78 3b 0a Data Ascii: { z-index: 10; animation: batman 1s 2 alternate linear;}/* Cube Animation */.eae-fb-animate-flipcard .eae-flip-box-front,.eae-fb-animate-flipcard .eae-flip-box-back { transition: transform 0.4s ease; transform-origin: center center -150px;
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2e 39 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c Data Ascii: le(0.9); -moz-transform: translateY(-50%) scale(0.9); -ms-transform: translateY(-50%) scale(0.9); -o-transform: translateY(-50%) scale(0.9); transform: translateY(-50%) scale(0.9); opacity: 0; } 100% { -webkit-transform: transl
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6d 65 64 69 75 6d 20 69 6e 73 65 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6d 66 70 2d 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 20 20 74 6f 70 3a 20 38 70 78 3b 0a 7d 0a 2e 6d 66 70 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 32 31 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 32 31 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0a 7d 0a 0a 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 7b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e Data Ascii: x; border: medium inset transparent;}.mfp-arrow:after { border-top-width: 13px; border-bottom-width: 13px; top: 8px;}.mfp-arrow:before { border-top-width: 21px; border-bottom-width: 21px; opacity: 0.7;}.mfp-arrow-left { left: 0;}.
2024-05-28 05:14:37 UTC	8000	IN	Data Raw: 3b 0a 7d 0a 2e 73 6b 69 6e 2d 31 20 2e 72 61 74 69 6e 67 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 65 63 63 31 66 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 73 6b 69 6e 2d 34 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2e 73 6b 69 6e 2d 34 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 66 62 66 62 36 62 64 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 20 20 62 6f 78 2d Data Ascii: ;}.skin-1 .rating-wrapper { color: #fecc1f;}/------------------------skin-4------------------/.skin-4.testimonial-wrapper { flex-direction: column; display: flex; background-color: #bfbfb6bd; min-height: 300px; padding: 10px 0; box-
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 65 6d 5f 5f 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 7b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 68 65 69 67 68 74 3a 20 39 31 25 3b 0a 20 20 77 69 64 74 68 3a 20 39 31 25 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 Data Ascii: em__content-wrap { visibility: visible; display: none; height: 91%; width: 91%; opacity: 0; top: 50%; transform: translateY(-50%) translateX(-50%); position: absolute; left: 50%; border-radius: 50%; overflow: hidden; -webkit-box-si
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 63 75 73 74 6f 6d 2d 69 6d 61 67 65 2d 73 74 79 6c 65 2d 6e 6f 2e 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 2c 0a 2e 63 75 73 74 6f 6d 2d 69 6d 61 67 65 2d 73 74 79 6c 65 2d 2e 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 65 61 65 2d 70 62 2d 69 6e 6e 65 72 2d 6c 69 6e 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 64 35 61 63 33 3b 0a 7d 0a 0a 2e 65 61 Data Ascii: tl-item-image { margin: auto;}.custom-image-style-no.image-position-column .eae-tl-item-image,.custom-image-style-.image-position-column .eae-tl-item-image { margin: 0 auto;}.eae-pb-inner-line { width: 100%; background-color: #3d5ac3;}.ea
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 61 79 6f 75 74 2d 6c 65 66 74 0a 20 20 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 0a 20 20 20 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2e 65 61 65 2d 6c 61 79 6f 75 74 2d 63 65 6e 74 65 72 2e 65 61 65 2d 74 6c 2d 63 65 6e 74 65 72 2e 65 61 65 2d 74 6c 2d 72 65 73 2d 73 74 79 6c 65 2d 6d 6f 62 69 6c 65 2e 65 61 65 2d 74 6c 2d 72 65 73 2d 6c 61 79 6f 75 74 2d 6c 65 66 74 0a 20 20 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 0a 20 20 20 20 2e 65 61 65 2d 74 6c 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 65 61 65 2d 74 69 6d 65 6c 69 6e 65 2e 65 61 65 2d Data Ascii: ayout-left .eae-timeline-item .eae-tl-item-content::before, .eae-timeline.eae-layout-center.eae-tl-center.eae-tl-res-style-mobile.eae-tl-res-layout-left .eae-timeline-item:nth-child(odd) .eae-tl-item-content::before, .eae-timeline.eae-
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 20 75 6c 0a 20 20 6c 69 0a 20 20 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 2d 6d 6f 7a 2d 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 70 65 72 73 70 65 63 74 69 76 65 3a 20 32 30 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 65 61 65 2d 65 76 65 72 67 72 65 65 6e 2d 74 69 6d 65 Data Ascii: ul li a { display: block; height: 100%; -webkit-perspective: 200px; -moz-perspective: 200px; perspective: 200px; margin: 0 !important; overflow: visible !important; cursor: default !important;}[data-element_type="eae-evergreen-time
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 76 65 72 67 72 65 65 6e 2d 74 69 6d 65 72 2e 73 6b 69 6e 32 22 5d 0a 20 20 2e 65 61 65 2d 66 6c 69 70 2d 63 6c 6f 63 6b 2d 77 72 61 70 70 65 72 0a 20 20 75 6c 2e 70 6c 61 79 0a 20 20 6c 69 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 0a 20 20 2e 64 6f 77 6e 0a 20 20 2e 73 68 61 64 6f 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 62 6c 61 63 6b 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 0a 20 20 20 20 6c 69 6e 65 61 72 2c 0a 20 20 20 20 6c 65 66 74 20 74 6f 70 2c 0a 20 20 20 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 0a 20 20 Data Ascii: vergreen-timer.skin2"] .eae-flip-clock-wrapper ul.play li.flip-clock-active .down .shadow { background: -moz-linear-gradient(top, black 0%, rgba(0, 0, 0, 0.1) 100%); background: -webkit-gradient( linear, left top, left bottom,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49833	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	939	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 985 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	985	IN	Data Raw: 0a 2e 70 65 65 6c 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 72 65 61 64 79 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 73 76 67 2d 63 6c 69 70 2d 65 6c 65 6d 65 6e 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 2d 31 30 30 30 30 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 2d 31 30 30 30 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 0a 20 20 2e 70 65 65 6c 2d 6c 61 79 65 72 Data Ascii: .peel { position: relative; opacity: 0; } .peel-ready { opacity: 1; } .peel-svg-clip-element { position: absolute; top: -10000px; left: -10000px; width: 1px; height: 1px; opacity: 0; } .peel-layer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49834	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	924	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 26702 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 Data Ascii: /! Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font A
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 31 39 22 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6d 65 68 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 61 22 7d 2e 66 61 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 63 22 7d 2e 66 61 2e 66 61 2d 66 6c 61 67 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 Data Ascii: 19"}.fa.fa-meh-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-meh-o:before{content:"\f11a"}.fa.fa-keyboard-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-keyboard-o:before{content:"\f11c"}.fa.fa-flag-o{font-family:"Font Awesome 5 F
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 75 70 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 64 22 7d 2e 66 61 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 2d 6e 6f 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 65 22 7d 2e 66 61 2e 66 61 2d 72 61 2c 2e 66 61 2e 66 61 2d 72 65 62 65 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 30 22 7d 2e 66 61 2e 66 61 2d 72 65 73 69 73 74 61 6e 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 Data Ascii: 5 Free";font-weight:400}.fa.fa-support:before{content:"\f1cd"}.fa.fa-circle-o-notch:before{content:"\f1ce"}.fa.fa-ra,.fa.fa-rebel{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-ra:before{content:"\f1d0"}.fa.fa-resistance{font-family:"Font Awes
2024-05-28 05:14:38 UTC	2765	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 6f 66 66 69 63 69 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 33 22 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 63 69 72 63 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 33 22 7d 2e 66 61 2e 66 61 2d 66 61 2c 2e 66 61 2e 66 61 2d 66 6f 6e 74 2d 61 77 Data Ascii: {font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-google-plus-official:before{content:"\f2b3"}.fa.fa-google-plus-circle{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-google-plus-circle:before{content:"\f2b3"}.fa.fa-fa,.fa.fa-font-aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49835	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	919	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 59344 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 Data Ascii: /! Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webki
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 33 22 7d 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 2d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: .fa-bluetooth:before{content:"\f293"}.fa-bluetooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bong:before{content:"\f55c"}.fa-book:before{con
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 74 3a 22 5c 66 31 62 32 22 7d 2e 66 61 2d 63 75 62 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 33 22 7d 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2d 63 75 74 74 6c 65 66 69 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 63 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 64 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 2d 62 65 79 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 61 22 7d 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: t:"\f1b2"}.fa-cubes:before{content:"\f1b3"}.fa-cut:before{content:"\f0c4"}.fa-cuttlefish:before{content:"\f38c"}.fa-d-and-d:before{content:"\f38d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\e052"}.fa-dashcube:before{content
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 2d 67 69 74 6b 72 61 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 36 22 7d 2e 66 61 2d 67 69 74 6c 61 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 36 22 7d 2e 66 61 2d 67 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 36 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 63 68 65 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 66 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 62 22 7d 2e 66 61 2d 67 6c 61 73 73 2d 77 68 69 73 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: -gitkraken:before{content:"\f3a6"}.fa-gitlab:before{content:"\f296"}.fa-gitter:before{content:"\f426"}.fa-glass-cheers:before{content:"\f79f"}.fa-glass-martini:before{content:"\f000"}.fa-glass-martini-alt:before{content:"\f57b"}.fa-glass-whiskey:before{co
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 71 75 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 37 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 65 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 66 22 7d 2e 66 61 2d 6c 69 66 65 2d 72 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 64 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 30 22 7d 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 31 22 7d 2e 66 61 2d 6c 69 6e Data Ascii: qual:before{content:"\f537"}.fa-level-down-alt:before{content:"\f3be"}.fa-level-up-alt:before{content:"\f3bf"}.fa-life-ring:before{content:"\f1cd"}.fa-lightbulb:before{content:"\f0eb"}.fa-line:before{content:"\f3c0"}.fa-link:before{content:"\f0c1"}.fa-lin
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 74 3a 22 5c 66 36 38 34 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 31 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 35 22 7d 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 36 22 7d 2e 66 61 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 66 22 7d 2e 66 61 2d 70 72 6f 63 65 64 75 72 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 37 22 7d 2e 66 61 2d 70 72 6f 64 75 63 74 2d 68 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 Data Ascii: t:"\f684"}.fa-prescription:before{content:"\f5b1"}.fa-prescription-bottle:before{content:"\f485"}.fa-prescription-bottle-alt:before{content:"\f486"}.fa-print:before{content:"\f02f"}.fa-procedures:before{content:"\f487"}.fa-product-hunt:before{content:"\f2
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 66 22 7d 2e 66 61 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 65 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 66 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 61 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 30 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 31 22 7d 2e 66 61 2d 73 74 72 61 76 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 38 22 7d 2e 66 61 2d 73 74 72 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 30 22 7d 2e 66 61 2d 73 74 72 65 65 74 2d 76 69 65 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: f"}.fa-store:before{content:"\f54e"}.fa-store-alt:before{content:"\f54f"}.fa-store-alt-slash:before{content:"\e070"}.fa-store-slash:before{content:"\e071"}.fa-strava:before{content:"\f428"}.fa-stream:before{content:"\f550"}.fa-street-view:before{content:"
2024-05-28 05:14:38 UTC	3407	IN	Data Raw: 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 39 36 22 7d 2e 66 61 2d 77 65 69 67 68 74 2d 68 61 6e 67 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 64 22 7d 2e 66 61 2d 77 65 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 37 22 7d 2e 66 61 2d 77 68 61 74 73 61 70 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 32 22 7d 2e 66 61 2d 77 68 61 74 73 61 70 70 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 63 22 7d 2e 66 61 2d 77 68 65 65 6c 63 68 61 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 33 22 7d 2e 66 61 2d 77 68 6d 63 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 64 22 7d 2e 66 61 2d Data Ascii: t:before{content:"\f496"}.fa-weight-hanging:before{content:"\f5cd"}.fa-weixin:before{content:"\f1d7"}.fa-whatsapp:before{content:"\f232"}.fa-whatsapp-square:before{content:"\f40c"}.fa-wheelchair:before{content:"\f193"}.fa-whmcs:before{content:"\f40d"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49836	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	940	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.css?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 15635 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	7937	IN	Data Raw: 2e 76 65 67 61 73 2d 77 72 61 70 70 65 72 2c 0a 2e 76 65 67 61 73 2d 6f 76 65 72 6c 61 79 2c 0a 2e 76 65 67 61 73 2d 74 69 6d 65 72 2c 0a 2e 76 65 67 61 73 2d 73 6c 69 64 65 2c 0a 2e 76 65 67 61 73 2d 73 6c 69 64 65 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 6f Data Ascii: .vegas-wrapper,.vegas-overlay,.vegas-timer,.vegas-slide,.vegas-slide-inner { position: absolute; top: 0; left: 0; bottom: 0; right: 0; overflow: hidden; border: none; padding: 0; margin: 0;}.vegas-overlay { o
2024-05-28 05:14:38 UTC	7698	IN	Data Raw: 6e 2d 7a 6f 6f 6d 4f 75 74 32 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 7a 6f 6f 6d 4f 75 74 2d 69 6e 2c 0a 2e 76 65 67 61 73 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 7a 6f 6f 6d 4f 75 74 32 2d 69 6e 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 76 65 67 61 73 2d 74 72 61 Data Ascii: n-zoomOut2 { -webkit-transform: scale(2); transform: scale(2); opacity: 0;}.vegas-transition-zoomOut-in,.vegas-transition-zoomOut2-in { -webkit-transform: scale(1); transform: scale(1); opacity: 1;}.vegas-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49837	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	907	OUT	GET /wp-content/themes/neve/assets/css/style-legacy.min.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 Dec 2021 11:56:20 GMT Accept-Ranges: bytes Content-Length: 48153 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	7937	IN	Data Raw: 2e 62 74 6e 2c 2e 62 75 74 74 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 61 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 Data Ascii: .btn,.button,.wp-block-button a,button,input[type=button],input[type=submit]{font-size:.8em;font-weight:600;padding:8px 12px;transition:all .15s ease-in-out;text-align:center;vertical-align:middle;border:1px solid transparent;border-radius:3px;text-transf
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 78 74 2d 64 61 72 6b 2d 62 67 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 31 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 31 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 32 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 6e 76 2d 63 2d 32 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 63 2d 32 29 21 69 6d 70 6f 72 74 61 Data Ascii: xt-dark-bg)!important}.has-nv-c-1-color{color:var(--nv-c-1)!important}.has-nv-c-1-background-color{background-color:var(--nv-c-1)!important}.has-nv-c-2-color{color:var(--nv-c-2)!important}.has-nv-c-2-background-color{background-color:var(--nv-c-2)!importa
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 7a 65 3a 31 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 73 69 74 65 2d 62 67 29 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 2c 73 65 6c 65 63 74 7b 64 69 73 70 6c 61 79 3a Data Ascii: ze:14px;transition:all .3s ease;padding:7px 12px;border:1px solid #ddd;border-radius:3px;-webkit-appearance:none;-moz-appearance:none;appearance:none;outline:0;color:var(--nv-text-color);background-color:var(--nv-site-bg)}input[type=color],select{display:
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 6e 76 2d 70 72 69 6d 61 72 79 2d 61 63 63 65 6e 74 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 76 2d 70 72 69 6d 61 72 79 2d 61 63 63 65 6e 74 29 7d 23 63 6f 6d 6d 65 6e 74 73 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 76 2d 6c 69 67 68 74 2d 62 67 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 23 63 6f 6d 6d 65 6e 74 73 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 23 63 6f 6d 6d 65 6e 74 73 20 6f 6c 3e 6f 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 6e 76 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 7d 23 Data Ascii: lor:var(--nv-primary-accent);border:1px solid var(--nv-primary-accent)}#comments{border-top:1px solid var(--nv-light-bg);margin-top:10px}#comments ol{list-style:none}#comments ol>ol{padding-left:10px}#comments .nv-content-wrap ol{list-style-type:decimal}#
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 66 67 2d 69 73 2d 67 72 6f 75 70 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 74 61 62 6c 65 74 2d 72 69 67 68 74 20 2e 62 75 69 6c Data Ascii: -10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-sm-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-sm-12{flex:0 0 100%;max-width:100%}.hfg-is-group.tablet-right{justify-content:flex-end}.tablet-right{text-align:right}.tablet-right .buil
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 65 72 28 2e 37 39 2c 2e 31 34 2c 2e 31 35 2c 2e 38 36 29 7d 2e 6d 65 6e 75 5f 73 69 64 65 62 61 72 5f 66 75 6c 6c 5f 63 61 6e 76 61 73 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2d 69 6e 6e 65 72 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 68 69 64 69 6e 67 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 39 2c 2e 31 34 2c 2e 31 35 2c 2e 38 36 29 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 68 69 64 69 6e 67 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2e 6d 65 6e 75 5f 73 69 64 65 62 61 72 5f 73 6c 69 64 65 5f 6c 65 66 74 20 2e 68 65 61 64 65 72 2d Data Ascii: er(.79,.14,.15,.86)}.menu_sidebar_full_canvas .header-menu-sidebar-inner{flex-grow:1}.hiding-header-menu-sidebar .header-menu-sidebar{transition:all .3s cubic-bezier(.79,.14,.15,.86);height:100%}.hiding-header-menu-sidebar.menu_sidebar_slide_left .header-
2024-05-28 05:14:38 UTC	216	IN	Data Raw: 2e 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 68 66 67 2d 67 72 69 64 20 2e 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 2c 2e 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 30 7d 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 66 6f 6f 74 65 72 5f 63 6f 70 79 72 69 67 68 74 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d Data Ascii: .hide-on-tablet{display:none}}@media (max-width:576px){.hfg-grid .hide-on-mobile,.hide-on-mobile{display:none}}.component-wrap{display:flex;margin:4px 0}.builder-item--footer_copyright .component-wrap{display:inline}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49838	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	755	OUT	GET /wp-content/uploads/2021/08/whatsapp-1.png HTTP/1.1 Host: campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
2024-05-28 05:14:38 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:41:34 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:38 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:39 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49839	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	924	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.29.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 23997 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:38 UTC	7937	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 65 69 63 6f 6e 73 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 32 39 2e 30 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 32 39 2e 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 35 2e 32 39 2e 30 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 66 3f 35 2e 32 39 2e 30 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 Data Ascii: @font-face { font-family: "eicons"; src: url("../fonts/eicons.eot?5.29.0"); src: url("../fonts/eicons.eot?5.29.0#iefix") format("embedded-opentype"), url("../fonts/eicons.woff2?5.29.0") format("woff2"), url("../fonts/eicons.woff?5.29.0") format("wof
2024-05-28 05:14:38 UTC	8000	IN	Data Raw: 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 38 63 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 68 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 38 64 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 68 2d 61 6c 69 67 6e 2d 73 74 72 65 74 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 38 65 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 76 2d 61 6c 69 67 6e 2d 74 6f 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 38 66 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 76 2d 61 6c 69 67 6e 2d 62 6f 74 74 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 39 30 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 76 2d 61 6c Data Ascii: fore { content: "\e88c";}.eicon-h-align-center:before { content: "\e88d";}.eicon-h-align-stretch:before { content: "\e88e";}.eicon-v-align-top:before { content: "\e88f";}.eicon-v-align-bottom:before { content: "\e890";}.eicon-v-al
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 63 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 64 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 65 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 66 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 73 69 67 6e 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 33 30 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 73 70 69 6e 6e 65 72 3a Data Ascii: :before { content: "\e92c";}.eicon-plus-circle:before { content: "\e92d";}.eicon-zoom-in-bold:before { content: "\e92e";}.eicon-sort-amount-desc:before { content: "\e92f";}.eicon-sign-out:before { content: "\e930";}.eicon-spinner:
2024-05-28 05:14:39 UTC	60	IN	Data Raw: 22 3b 0a 7d 0a 0a 2e 65 69 63 6f 6e 2d 65 6c 65 6d 65 6e 74 6f 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 38 31 33 22 3b 0a 7d Data Ascii: ";}.eicon-elementor-square:before { content: "\e813";}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49840	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:38 UTC	906	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 196554 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	7936	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 65 2d 61 2d 62 67 2d 64 65 66 61 75 6c 74 29 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 64 69 61 6c 6f 67 2d 6d 65 73 Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /@charset "UTF-8";.dialog-widget-content { background-color: var(--e-a-bg-default); position: absolute; border-radius: 3px; box-shadow: 2px 8px 23px 3px rgba(0, 0, 0, 0.2); overflow: hidden;}.dialog-mes
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 2c 20 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e Data Ascii: ton.e-btn-txt.dialog-take_over, .dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-primary.dialog-cancel, .dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel.dialog-take_over, .dialog-type-confirm .dialog-buttons-wrapper .
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0a 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 69 74 69 61 6c 3b 0a 7d 0a 2e 66 6c 61 74 70 69 63 Data Ascii: pper .dialog-button:visited,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:hover,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button:visited { color: initial;}.flatpic
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e Data Ascii: tor-tablet_extra-align-left { text-align: left; } .elementor-tablet_extra-align-left .elementor-button { width: auto; } .elementor-tablet_extra-align-justify .elementor-button { width: 100%; }}@media (max-width: 1024px) { .elemen
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 78 73 2d 39 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 78 73 2d 31 30 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6d 2d 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 25 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6d 2d 31 31 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 31 2e 31 31 31 25 3b 0a 20 20 7d Data Ascii: -column.elementor-xs-90 { width: 90%; } .elementor-column.elementor-xs-100 { width: 100%; }}@media (max-width: 767px) { .elementor-column.elementor-sm-10 { width: 10%; } .elementor-column.elementor-sm-11 { width: 11.111%; }
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 20 7b 0a 20 20 20 20 6f 72 64 65 72 3a 20 31 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 2d 31 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0a 20 20 20 20 6f 72 64 65 72 3a 20 31 30 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e Data Ascii: erse-tablet > .elementor-container > :nth-child(10) { order: 1; }}@media (min-width: -1) and (max-width: 1024px) { .elementor-reverse-tablet > .elementor-container > :nth-child(1) { order: 10; } .elementor-reverse-tablet > .elementor-con
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 37 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 6c 61 70 74 6f 70 2d 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 38 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 6c 61 70 74 6f 70 2d 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 39 2c 20 31 66 72 29 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f Data Ascii: entor-grid { grid-template-columns: repeat(7, 1fr); } .elementor-grid-laptop-8 .elementor-grid { grid-template-columns: repeat(8, 1fr); } .elementor-grid-laptop-9 .elementor-grid { grid-template-columns: repeat(9, 1fr); } .elemento
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 2c 20 31 30 70 78 29 3b 0a 20 20 2d 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 2d 2d 7a 2d 69 6e 64 65 78 3a 20 72 65 76 65 72 74 3b 0a 20 20 2d 2d 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 2d 2d 67 61 70 3a 20 76 61 72 28 2d 2d 77 69 64 67 65 74 73 2d 73 70 61 63 69 6e 67 2c 20 32 30 70 78 29 3b 0a 20 20 2d 2d 6f 76 65 72 6c Data Ascii: , 10px); --padding-bottom: var(--container-default-padding-bottom, 10px); --padding-left: var(--container-default-padding-left, 10px); --position: relative; --z-index: revert; --overflow: visible; --gap: var(--widgets-spacing, 20px); --overl
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 66 32 31 32 34 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 69 6e 73 65 74 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 74 65 78 74 75 61 6c 3a 3a 2d 6d 6f 7a 2d 70 Data Ascii: r: transparent; color: #1f2124; vertical-align: middle; flex-grow: 1;}.elementor-field-group .elementor-field-textual:focus { box-shadow: 0 0 0 1px rgba(0, 0, 0, 0.1) inset; outline: 0;}.elementor-field-group .elementor-field-textual::-moz-p
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 73 74 61 72 74 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 65 6e 64 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 7d 0a 20 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 2d 66 6f 72 6d 5f 5f 62 75 74 74 6f 6e 73 5f 5f 77 72 61 70 70 65 72 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 62 75 74 74 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 2d 66 6f 72 6d 5f Data Ascii: bile-button-align-start .e-form__buttons__wrapper, .elementor-mobile-button-align-end .e-form__buttons__wrapper { flex-grow: initial; } .elementor-mobile-button-align-center .e-form__buttons__wrapper, .elementor-mobile-button-align-center .e-form_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49841	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	940	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/swiper/swiper.min.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:16 GMT Accept-Ranges: bytes Content-Length: 16481 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	7937	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 77 69 70 65 72 20 38 2e 33 2e 31 0d 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 32 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4a 75 6c 79 20 31 33 2c 20 32 30 32 Data Ascii: /** * Swiper 8.3.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2022 Vladimir Kharlampidi * * Released under the MIT License * * Released on: July 13, 202
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 33 33 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d Data Ascii: tion-bullets-dynamic{overflow:hidden;font-size:0}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet{transform:scale(.33);position:relative}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active{transform:scale(1)}.swiper-pagination-
2024-05-28 05:14:39 UTC	544	IN	Data Raw: 69 70 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 2c 2e 73 77 69 70 65 72 2d 66 6c 69 70 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 2c 2e 73 77 69 70 65 72 2d 66 6c 69 70 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 2c 2e 73 77 69 70 65 72 2d 66 6c 69 70 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 7b 7a 2d 69 6e 64 65 78 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 77 69 70 65 72 2d 63 72 65 61 74 69 76 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 2d 77 65 62 Data Ascii: ip .swiper-slide-shadow-bottom,.swiper-flip .swiper-slide-shadow-left,.swiper-flip .swiper-slide-shadow-right,.swiper-flip .swiper-slide-shadow-top{z-index:0;-webkit-backface-visibility:hidden;backface-visibility:hidden}.swiper-creative .swiper-slide{-web

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49842	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	901	OUT	GET /wp-content/uploads/elementor/css/post-6.css?ver=1694545246 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 12 Sep 2023 19:00:46 GMT Accept-Ranges: bytes Content-Length: 1176 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	1176	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 36 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 36 45 43 31 45 34 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 35 34 35 39 35 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 37 41 37 41 37 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 36 31 43 45 37 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 32 62 64 34 33 35 32 3a 23 38 41 37 41 36 45 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 63 35 30 33 34 30 36 3a 23 38 39 37 44 37 32 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: .elementor-kit-6{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-2bd4352:#8A7A6E;--e-global-color-c503406:#897D72;--e-global-typography-primary-font-family:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49843	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	904	OUT	GET /wp-content/uploads/elementor/css/post-5031.css?ver=1694547618 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 12 Sep 2023 19:40:18 GMT Accept-Ranges: bytes Content-Length: 22326 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	7937	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 34 66 31 66 66 62 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 36 76 68 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 34 66 31 66 66 62 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c Data Ascii: .elementor-5031 .elementor-element.elementor-element-84f1ffb > .elementor-container{min-height:76vh;}.elementor-5031 .elementor-element.elementor-element-84f1ffb:not(.elementor-motion-effects-element-type-background), .elementor-5031 .elementor-element.el
2024-05-28 05:14:39 UTC	8000	IN	Data Raw: 37 35 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 65 39 38 64 34 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 32 62 64 34 33 35 32 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 61 6c 65 77 61 79 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 65 39 38 64 34 61 20 3e 20 2e 65 6c Data Ascii: 75px;}.elementor-5031 .elementor-element.elementor-element-3e98d4a{text-align:center;color:var( --e-global-color-2bd4352 );font-family:"Raleway", Sans-serif;font-size:20px;font-weight:300;}.elementor-5031 .elementor-element.elementor-element-3e98d4a > .el
2024-05-28 05:14:39 UTC	6389	IN	Data Raw: 61 30 30 37 34 36 20 69 6d 67 7b 77 69 64 74 68 3a 34 37 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 61 30 30 37 34 36 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 37 65 6d 20 30 65 6d 20 2d 39 65 6d 20 30 65 6d 3b 70 61 64 64 69 6e 67 3a 30 65 6d 20 30 65 6d 20 30 65 6d 20 30 65 6d 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 35 30 33 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 36 65 37 38 35 61 31 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 Data Ascii: a00746 img{width:47px;}.elementor-5031 .elementor-element.elementor-element-7a00746 > .elementor-widget-container{margin:7em 0em -9em 0em;padding:0em 0em 0em 0em;}.elementor-5031 .elementor-element.elementor-element-6e785a1 > .elementor-container{min-heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49844	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	927	OUT	GET /wp-content/plugins/addthis/frontend/build/addthis_wordpress_public.min.css?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 May 2022 08:50:10 GMT Accept-Ranges: bytes Content-Length: 587 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	587	IN	Data Raw: 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 61 64 64 74 68 69 73 5f 74 6f 6f 6c 62 6f 78 2c 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 2c 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 61 64 64 74 68 69 73 5f 74 6f 6f 6c 62 6f 78 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 31 30 70 78 20 30 7d 2e 61 64 64 74 68 69 73 5f 62 75 74 74 6f 6e 5f 74 77 65 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 38 33 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 61 74 77 69 64 67 65 74 20 69 66 72 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 61 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 2c 61 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 3a Data Ascii: .entry-content .addthis_button,.entry-content .addthis_toolbox,.entry-header .addthis_button,.entry-header .addthis_toolbox{margin:10px 0 10px 0}.addthis_button_tweet{min-width:83px;float:left}.atwidget iframe{max-width:none}a.at-share-btn,a.at-share-btn:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49845	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	898	OUT	GET /wp-content/themes/neve-child-master/style.css?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:36:43 GMT Accept-Ranges: bytes Content-Length: 3658 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	3658	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 20 20 4e 65 76 65 20 43 68 69 6c 64 0a 54 68 65 6d 65 20 55 52 49 3a 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 69 73 6c 65 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 6e 65 76 65 2f 0a 54 65 6d 70 6c 61 74 65 3a 20 6e 65 76 65 0a 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 54 68 65 6d 65 49 73 6c 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 69 73 6c 65 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 20 20 4e 65 76 65 20 69 73 20 61 20 73 75 70 65 72 20 66 61 73 74 2c 20 65 61 73 69 6c 79 20 63 75 73 74 6f 6d 69 7a 61 62 6c 65 2c 20 6d 75 6c 74 69 2d 70 75 72 70 6f 73 65 20 74 68 65 6d 65 2e 20 49 74 e2 80 99 73 20 70 65 72 66 65 63 74 20 Data Ascii: /*Theme Name: Neve ChildTheme URI: https://themeisle.com/themes/neve/Template: neveAuthor: ThemeIsleAuthor URI: https://themeisle.comDescription: Neve is a super fast, easily customizable, multi-purpose theme. Its perfect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49847	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	950	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 22 May 2024 20:34:10 GMT Accept-Ranges: bytes Content-Length: 3829 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:39 UTC	3829	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 3a 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f Data Ascii: .clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49846	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	870	OUT	GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:39 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 07 Nov 2023 20:33:57 GMT Accept-Ranges: bytes Content-Length: 285334 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:39 UTC	7922	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 38 2d 32 38 54 31 33 3a 33 37 5a 0a 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 0a 09 22 75 73 Data Ascii: /! jQuery JavaScript Library v3.7.1 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-08-28T13:37Z */( function( global, factory ) {"us
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 21 63 6f 70 79 49 73 41 72 72 61 79 20 26 26 20 21 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 20 73 72 63 20 29 20 29 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 7b 7d 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 63 6f 70 79 49 73 41 72 72 61 79 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 Data Ascii: !copyIsArray && !jQuery.isPlainObject( src ) ) {clone = {};} else {clone = src;}copyIsArray = false;// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't b
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 36 7d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 09 09 22 3f 7c 5c 5c 5c 5c 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 0a 0a 09 2f 2f 20 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 73 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 73 65 6c 65 63 74 6f 72 73 2f 23 61 74 74 72 69 62 75 74 65 2d 73 65 6c 65 63 74 6f 72 73 0a 09 61 74 74 72 69 62 75 74 65 73 20 3d 20 22 5c 5c 5b 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 0a 09 09 2f 2f 20 4f 70 65 72 61 74 6f 72 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2a 28 5b 2a 5e Data Ascii: 6}" + whitespace +"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",// Attribute selectors: https://www.w3.org/TR/selectors/#attribute-selectorsattributes = "\\[" + whitespace + "(" + identifier + ")(?:" + whitespace +// Operator (capture 2)"([*^
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 09 09 74 72 79 20 7b 0a 09 09 09 09 09 70 75 73 68 2e 61 70 70 6c 79 28 20 72 65 73 75 6c 74 73 2c 0a 09 09 09 09 09 09 6e 65 77 43 6f 6e 74 65 78 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 20 6e 65 77 53 65 6c 65 63 74 6f 72 20 29 0a 09 09 09 09 09 29 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 71 73 61 45 72 72 6f 72 20 29 20 7b 0a 09 09 09 09 09 6e 6f 6e 6e 61 74 69 76 65 53 65 6c 65 63 74 6f 72 43 61 63 68 65 28 20 73 65 6c 65 63 74 6f 72 2c 20 74 72 75 65 20 29 3b 0a 09 09 09 09 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 09 09 09 09 09 69 66 20 28 20 6e 69 64 20 3d 3d 3d 20 65 78 70 61 6e 64 6f 20 29 20 7b 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 76 65 41 74 74 Data Ascii: try {push.apply( results,newContext.querySelectorAll( newSelector ));return results;} catch ( qsaError ) {nonnativeSelectorCache( selector, true );} finally {if ( nid === expando ) {context.removeAtt
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 63 61 75 73 65 20 75 73 65 20 6f 66 20 60 3a 68 61 73 28 29 60 20 69 6e 20 73 75 63 68 0a 09 2f 2f 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 69 6c 6c 20 66 61 69 6c 20 69 6e 20 74 68 65 20 71 53 41 20 70 61 74 68 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 74 6f 20 6a 51 75 65 72 79 20 74 72 61 76 65 72 73 61 6c 0a 09 2f 2f 20 61 6e 79 77 61 79 2e 0a 09 73 75 70 70 6f 72 74 2e 63 73 73 48 61 73 20 3d 20 61 73 73 65 72 74 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 74 72 79 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 20 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 72 65 74 Data Ascii: cause use of `:has()` in such// environments will fail in the qSA path and fall back to jQuery traversal// anyway.support.cssHas = assert( function() {try {document.querySelector( ":has(*,:jqfake)" );return false;} catch ( e ) {ret
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 09 09 09 09 09 65 6c 65 6d 2e 64 6f 63 75 6d 65 6e 74 20 26 26 20 65 6c 65 6d 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 31 31 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 6e 6f 6e 6e 61 74 69 76 65 53 65 6c 65 63 74 6f 72 43 61 63 68 65 28 20 65 78 70 72 2c 20 74 72 75 65 20 29 3b 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 66 69 6e 64 28 20 65 78 70 72 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 6e 75 6c 6c 2c 20 5b 20 65 6c 65 6d 20 5d 20 29 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 7d 3b 0a 0a 66 69 6e 64 2e 63 6f 6e 74 61 69 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 6f 6e 74 65 78 74 2c 20 65 6c 65 6d 20 29 20 7b 0a 0a 09 2f 2f Data Ascii: elem.document && elem.document.nodeType !== 11 ) {return ret;}} catch ( e ) {nonnativeSelectorCache( expr, true );}}return find( expr, document, null, [ elem ] ).length > 0;};find.contains = function( context, elem ) {//
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 6e 74 5b 20 65 78 70 61 6e 64 6f 20 5d 20 7c 7c 20 28 20 70 61 72 65 6e 74 5b 20 65 78 70 61 6e 64 6f 20 5d 20 3d 20 7b 7d 20 29 3b 0a 09 09 09 09 09 09 09 63 61 63 68 65 20 3d 20 6f 75 74 65 72 43 61 63 68 65 5b 20 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 Data Ascii: nt[ expando ] \|\| ( parent[ expando ] = {} );cache = outerCache[ type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 68 2c 20 61 72 67 75 6d 65 6e 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 5b 20 61 72 67 75 6d 65 6e 74 20 3c 20 30 20 3f 20 61 72 67 75 6d 65 6e 74 20 2b 20 6c 65 6e 67 74 68 20 3a 20 61 72 67 75 6d 65 6e 74 20 5d 3b 0a 09 09 7d 20 29 2c 0a 0a 09 09 65 76 65 6e 3a 20 63 72 65 61 74 65 50 6f 73 69 74 69 6f 6e 61 6c 50 73 65 75 64 6f 28 20 66 75 6e 63 74 69 6f 6e 28 20 6d 61 74 63 68 49 6e 64 65 78 65 73 2c 20 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 76 61 72 20 69 20 3d 20 30 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 32 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 49 6e 64 65 78 65 73 2e 70 75 73 68 28 20 69 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 6d 61 74 63 68 49 6e 64 65 78 65 73 3b 0a Data Ascii: h, argument ) {return [ argument < 0 ? argument + length : argument ];} ),even: createPositionalPseudo( function( matchIndexes, length ) {var i = 0;for ( ; i < length; i += 2 ) {matchIndexes.push( i );}return matchIndexes;
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 65 72 20 3f 20 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 20 73 65 65 64 2c 20 65 6c 65 6d 20 29 20 3a 20 70 72 65 4d 61 70 5b 20 69 20 5d 20 29 20 3e 20 2d 31 20 29 20 7b 0a 0a 09 09 09 09 09 09 73 65 65 64 5b 20 74 65 6d 70 20 5d 20 3d 20 21 28 20 72 65 73 75 6c 74 73 5b 20 74 65 6d 70 20 5d 20 3d 20 65 6c 65 6d 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 Data Ascii: er ? indexOf.call( seed, elem ) : preMap[ i ] ) > -1 ) {seed[ temp ] = !( results[ temp ] = elem );}}}// Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 6c 74 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 2f 2f 20 54 72 79 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 6f 70 65 72 61 74 69 6f 6e 73 20 69 66 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 73 65 6c 65 63 74 6f 72 20 69 6e 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 6e 6f 20 73 65 65 64 0a 09 2f 2f 20 28 74 68 65 20 6c 61 74 74 65 72 20 6f 66 20 77 68 69 63 68 20 67 75 61 72 61 6e 74 65 65 73 20 75 73 20 63 6f 6e 74 65 78 74 29 0a 09 69 66 20 28 20 6d 61 74 63 68 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 29 20 7b 0a 0a 09 09 2f 2f 20 52 65 64 75 63 65 20 63 6f 6e 74 65 78 74 20 69 66 20 74 68 65 20 6c 65 61 64 69 6e 67 20 63 6f 6d 70 6f 75 6e 64 20 73 65 6c 65 63 74 6f 72 20 69 73 20 61 6e 20 49 44 0a 09 09 74 6f 6b 65 6e 73 20 3d 20 6d 61 74 63 68 5b 20 Data Ascii: lts \|\| [];// Try to minimize operations if there is only one selector in the list and no seed// (the latter of which guarantees us context)if ( match.length === 1 ) {// Reduce context if the leading compound selector is an IDtokens = match[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49848	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:39 UTC	878	OUT	GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 08 Aug 2023 20:34:14 GMT Accept-Ranges: bytes Content-Length: 31978 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:40 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 2d 20 76 33 2e 34 2e 31 20 2d 20 32 30 32 33 2d 30 32 2d 32 33 54 31 35 3a 33 31 5a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a 09 09 64 65 66 69 6e 65 28 Data Ascii: /! jQuery Migrate - v3.4.1 - 2023-02-23T15:31Z * Copyright OpenJS Foundation and other contributors */( function( factory ) {"use strict";if ( typeof define === "function" && define.amd ) {// AMD. Register as an anonymous module.define(
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 09 09 6d 69 67 72 61 74 65 57 61 72 6e 28 20 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 0a 09 09 09 09 09 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 20 2b 20 61 72 67 73 5b 20 30 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 6f 6c 64 46 69 6e 64 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 7d 2c 20 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 20 29 3b 0a 0a 2f 2f 20 43 6f 70 79 20 70 72 6f 70 65 72 74 69 65 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 6f 72 69 67 69 6e 61 6c 20 6a 51 75 65 72 79 2e 66 69 6e 64 20 6d 65 74 68 6f 64 20 28 65 2e 67 2e 20 2e 61 74 74 72 2c 20 2e 69 73 58 4d 4c 29 0a 66 6f 72 20 Data Ascii: migrateWarn( "selector-hash","Attribute selector with '#' was not fixed: " + args[ 0 ] );}}}return oldFind.apply( this, args );}, "selector-hash" );// Copy properties attached to original jQuery.find method (e.g. .attr, .isXML)for
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 7c 20 20 2f 20 4d 61 72 67 69 6e 20 20 5c 20 20 7c 20 20 20 7c 20 7c 20 52 69 67 68 74 20 20 7c 20 7c 20 20 20 20 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2b 2d 7c 20 20 20 20 20 20 20 20 20 20 20 7c 2d 2b 2d 2d 2d 2b 2d 7c 20 42 6f 74 74 6f 6d 20 7c 2d 2b 2d 2d 2d 2d 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 5c 20 50 61 64 64 69 6e 67 20 2f 20 20 20 20 20 20 20 20 20 5c 20 4c 65 66 74 20 2f 20 20 20 20 20 20 20 7c 0a 09 2f 2f 20 42 45 47 49 4e 20 2d 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 0a 09 2f 2f 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2d 2d 2d Data Ascii: \| / Margin \ \| \| \| Right \| \| \|// \|---------+-\| \|-+---+-\| Bottom \|-+----\|// \| \ Padding / \ Left / \|// BEGIN -\| \|// \| /---
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 69 66 20 28 20 28 20 70 72 6f 70 73 20 3d 20 66 69 78 48 6f 6f 6b 2e 70 72 6f 70 73 20 29 20 26 26 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 77 68 69 6c 65 20 28 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 20 70 72 6f 70 73 2e 70 6f 70 28 29 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 65 76 65 6e 74 20 3d 20 6f 72 69 67 69 6e 61 6c 46 69 78 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 20 29 3b 0a 0a 09 72 65 74 75 72 6e 20 66 69 78 48 6f 6f 6b 20 26 26 20 66 69 78 48 6f 6f 6b 2e 66 69 6c 74 65 72 20 3f 0a 09 09 66 69 78 48 6f 6f 6b 2e 66 69 6c 74 65 72 28 20 65 76 65 6e 74 2c 20 6f 72 69 67 69 6e 61 6c 45 76 Data Ascii: if ( ( props = fixHook.props ) && props.length ) {while ( props.length ) {jQuery.event.addProp( props.pop() );}}}event = originalFix.call( this, originalEvent );return fixHook && fixHook.filter ?fixHook.filter( event, originalEv
2024-05-28 05:14:40 UTC	55	IN	Data Raw: 6b 20 3d 20 6f 6c 64 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3b 0a 0a 7d 0a 0a 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3b 0a 7d 20 29 3b 0a Data Ascii: k = oldDeferred.exceptionHook;}return jQuery;} );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49849	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	905	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/ouibounce.js?ver=1.6.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 5445 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:40 UTC	5445	IN	Data Raw: 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 20 28 20 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 20 20 20 20 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 20 20 20 20 20 20 20 20 64 65 66 69 6e 65 28 20 66 61 63 74 6f 72 79 20 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 20 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 2c 20 6d 6f 64 75 6c 65 20 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 6f 6f 74 2e 6f 75 69 Data Ascii: ( function ( root, factory ) { if ( typeof define === 'function' && define.amd ) { define( factory ); } else if ( typeof exports === 'object' ) { module.exports = factory( require, exports, module ); } else { root.oui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49850	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	907	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/popupCustom.js?ver=1.6.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 12844 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:40 UTC	7923	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 73 61 66 65 78 28 20 65 2c 20 74 20 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 74 20 3a 20 65 3b 0a 7d 0a 0a 63 6d 70 6f 70 66 6c 79 5f 41 6a 61 78 52 65 71 75 65 73 74 53 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6d 70 6f 70 66 6c 79 5f 73 65 6e 64 41 6a 61 78 43 6c 69 63 6b 44 61 74 61 28 20 63 6d 70 6f 70 66 6c 79 5f 43 6c 69 63 6b 73 43 6f 75 6e 74 65 72 2c 20 41 6a 61 78 52 65 71 75 65 73 74 41 73 79 6e 63 20 29 0a 7b 0a 20 20 20 20 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 20 28 20 24 20 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 Data Ascii: function safex( e, t ) { return typeof e === "undefined" ? t : e;}cmpopfly_AjaxRequestSent = false;function cmpopfly_sendAjaxClickData( cmpopfly_ClicksCounter, AjaxRequestAsync ){ jQuery( document ).ready( function ( $ ) { if (
2024-05-28 05:14:40 UTC	4921	IN	Data Raw: 69 62 6f 75 6e 63 65 2d 6d 6f 64 61 6c 20 2e 70 6f 70 75 70 66 6c 79 69 6e 2d 63 6c 69 63 6b 73 2d 61 72 65 61 27 20 29 2e 6f 6e 28 20 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 74 79 70 65 6f 66 20 63 6d 70 6f 70 66 6c 79 5f 43 6c 69 63 6b 73 43 6f 75 6e 74 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6d 70 6f 70 66 6c 79 5f 43 6c 69 63 6b 73 43 6f 75 6e 74 65 72 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 21 63 6d 70 6f 70 66 6c 79 5f 41 6a Data Ascii: ibounce-modal .popupflyin-clicks-area' ).on( 'click', function () { if ( typeof cmpopfly_ClicksCounter === 'undefined' ) { cmpopfly_ClicksCounter = 0; } if ( !cmpopfly_Aj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49851	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	905	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/js/scrollspy.js?ver=1.6.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 6382 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:40 UTC	6382	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 78 74 65 6e 64 20 6a 71 75 65 72 79 20 77 69 74 68 20 61 20 73 63 72 6f 6c 6c 73 70 79 20 70 6c 75 67 69 6e 2e 0a 20 2a 20 54 68 69 73 20 77 61 74 63 68 65 73 20 74 68 65 20 77 69 6e 64 6f 77 20 73 63 72 6f 6c 6c 20 61 6e 64 20 66 69 72 65 73 20 65 76 65 6e 74 73 20 77 68 65 6e 20 65 6c 65 6d 65 6e 74 73 20 61 72 65 20 73 63 72 6f 6c 6c 65 64 20 69 6e 74 6f 20 76 69 65 77 70 6f 72 74 2e 0a 20 2a 0a 20 2a 20 74 68 72 6f 74 74 6c 65 28 29 20 61 6e 64 20 67 65 74 54 69 6d 65 28 29 20 74 61 6b 65 6e 20 66 72 6f 6d 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 73 68 6b 65 6e 61 73 2f 75 6e 64 65 72 73 63 6f 72 65 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 43 6f 70 Data Ascii: /** * Extend jquery with a scrollspy plugin. * This watches the window scroll and fires events when elements are scrolled into viewport. * * throttle() and getTime() taken from Underscore.js * https://github.com/jashkenas/underscore * * @author Cop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49852	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	921	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 4036 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:40 UTC	4036	IN	Data Raw: 77 69 6e 64 6f 77 2e 65 61 65 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 72 65 6e 64 65 72 49 63 6f 6e 48 74 6d 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 76 69 65 77 2c 65 6c 65 6d 65 6e 74 6f 72 2c 73 65 74 74 2c 63 6f 6e 74 72 6f 6c 5f 6e 61 6d 65 2c 20 77 43 6c 61 73 73 20 3d 20 27 27 2c 20 69 6e 64 65 78 3d 27 27 29 7b 0a 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 56 69 65 77 20 3d 3e 20 22 2c 20 76 69 65 77 29 3b 0a 20 20 20 20 2f 2f 20 64 61 74 61 2e 61 64 64 52 65 6e 64 65 72 41 74 74 72 69 62 75 74 65 28 27 6b 65 79 27 2c 20 27 63 6f 6e 74 65 78 74 27 2c 20 27 76 61 6c 75 65 27 29 3b 0a 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 61 74 61 2e 67 65 74 52 65 6e 64 65 72 41 74 74 72 69 62 75 74 65 53 74 72 69 6e 67 28 27 Data Ascii: window.eae = {};window.renderIconHtml = function(view,elementor,sett,control_name, wClass = '', index=''){ // console.log("View => ", view); // data.addRenderAttribute('key', 'context', 'value'); // console.log(data.getRenderAttributeString('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49853	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	927	OUT	GET /wp-content/uploads/2021/06/logo-v1.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:51:15 GMT Accept-Ranges: bytes Content-Length: 17562 Content-Type: image/png
2024-05-28 05:14:40 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 00 64 08 06 00 00 00 d9 9f c8 ac 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRTdtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:40 UTC	8000	IN	Data Raw: 00 75 2a 20 be 0c e6 ca ae 68 f4 ed d0 02 5f c3 98 6e 0f 99 2e 02 53 cd f8 6f 6e 41 66 9f f7 d1 52 b3 22 00 71 5d ea 55 8a 5c 0c 70 5f 90 d1 89 dd 09 a5 72 00 2c 6e 0a fe e0 7d bc f7 90 03 ea dc 97 39 79 13 e4 32 b7 00 75 69 0b 82 89 5f 00 7c 64 2a 8d b7 9a 29 c7 e4 0f d4 24 cc 56 96 9c c1 5d be 9b d3 00 53 69 7c c5 75 9d 8c 3f 73 72 0a 1f e9 aa f8 5c 2f b4 60 0b 0c cd a6 6f 0a b0 ae 8f 5b 42 e6 b4 26 cc ae 03 f0 7f 07 e4 9c 2f c4 39 ad 2f e5 b9 5a 02 ec ed 30 2f 0e c4 0f 33 1a 3a 9f c6 fc 5d 1d 56 bb 5f 09 03 73 3a e7 6a 5d ff c6 28 26 7f 02 a9 a3 c5 af e2 c8 25 97 5c ea 00 a0 ae 60 41 fc e9 cf 9e df e9 57 ab 39 19 21 93 7f 28 ec 30 6a 45 87 00 ee 06 58 e5 18 0b c2 46 dc d2 c8 cf f8 5e 66 72 52 b6 f5 5b 60 81 9a 75 bd 8d ef be a1 28 7c 63 2d cc fe 7d 3c Data Ascii: u* h_n.SonAfR"q]U\p_r,n}9y2ui_\|d*)$V]Si\|u?sr\/`o[B&/9/Z0/3:]V_s:j](&%\`AW9!(0jEXF^frR[`u(\|c-}<
2024-05-28 05:14:40 UTC	1603	IN	Data Raw: 78 65 04 18 ce f0 da 25 ec 5a ba 02 b3 5f 16 a0 9b 88 7c 18 0b a2 79 0e 85 b5 64 1e 7a 19 fb d3 48 63 fc 49 3d bc 0e b6 05 fe a5 33 bc e3 fa a2 f5 97 82 4d c8 1d f0 23 a6 f8 64 3a f7 48 4b 9e 10 72 c1 cf ef 7a a6 5a a9 b2 a3 05 d9 fe 3b 32 d0 4a 09 5d 72 83 74 15 ae a5 99 63 37 29 e2 b6 65 b9 c4 bb f6 cf b0 c4 71 f3 e9 fd ae c6 20 6a c2 a0 95 22 88 8a 15 ee 82 b2 f8 1d 9f e1 b2 58 20 9a b4 90 0f 5b 31 a6 9a f5 ff cb 33 af bb a0 14 fd e4 37 eb c3 88 3e 0e 7d bf 11 00 fd 99 d5 8c 81 75 6e 94 95 01 b2 b8 58 e6 e6 80 d0 57 80 c5 72 d4 69 ba e7 12 58 05 f0 f5 7d dc 3d b0 74 86 53 ff 75 31 b1 27 f2 5c 4d b8 6f 94 6f bb 19 c7 37 e2 59 bf 28 f3 7d 88 3d 2f ef 99 e8 2e 1b fe 18 8b 9e d8 dd 84 77 a1 fb be 87 a2 9b 09 63 5e de 7b 47 33 3d bf b5 de cd 07 d4 bd 1b 84 Data Ascii: xe%Z_\|ydzHcI=3M#d:HKrzZ;2J]rtc7)eq j"X [137>}unXWriX}=tSu1'\Moo7Y(}=/.wc^{G3=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49854	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:40 UTC	950	OUT	GET /wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:40 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:47:41 GMT Accept-Ranges: bytes Content-Length: 2718 Content-Type: image/png
2024-05-28 05:14:40 UTC	2718	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0a 50 49 44 41 54 78 9c ed 9d 51 88 1d d5 19 c7 cf 0d 21 48 90 10 44 24 48 08 a1 48 10 11 1f 82 88 d8 3e 04 b1 a5 48 11 91 3c 88 94 20 52 4a 1e a4 88 14 11 09 42 10 29 45 44 44 fa 10 4a 09 d2 a7 60 83 04 5b 44 82 88 94 20 22 21 04 91 20 25 84 b2 5a 91 d4 86 ad 6c 43 58 ee ff d7 87 73 76 9d cc 9e 33 33 77 f7 ee 9d 7b f7 fe 7f 70 d9 d9 7b e7 ce 3d e7 3b ff f9 e6 3b e7 9b 73 26 04 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 98 2d c8 a0 fa 0f 10 80 Data Ascii: PNGIHDR<qpHYs+PIDATxQ!HD$HH>H< RJB)EDDJ`[D "! %ZlCXsv33w{p{=;;s&c1c1c1c1c1c1c1c1c1c1c1c1c1-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49861	104.17.24.14	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	587	OUT	GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.campobahia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:41 UTC	951	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cf0-d17" Last-Modified: Mon, 04 May 2020 16:04:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 540831 Expires: Sun, 18 May 2025 05:14:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYRkYeMpsEPPQhKJh7uz9o%2BTDlbPMcMwF9cLauBvCMXrgh4z8r6%2B2s%2Bo%2BERulWAeYiJgq4Nd%2FcgpbFa5XrH89hUcDdJ%2BKa426e6s0%2BOcnKRkDOkiEzLY4rCKcJSTVBFnWGXJc1bY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 88abc3379d700c94-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:41 UTC	418	IN	Data Raw: 64 31 37 0d 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 Data Ascii: d17/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;posit
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 Data Ascii: ace-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-ite
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 6f 6e 3a 70 61 6e 2d 79 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d 67 72 61 62 7b 63 75 72 73 6f 72 3a 6d 6f 76 65 3b 63 75 72 73 6f 72 3a 67 72 61 62 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d 72 74 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e Data Ascii: on:pan-y;touch-action:pan-y;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.owl-carousel.owl-grab{cursor:move;cursor:grab}.owl-carousel.owl-rtl{direction:rtl}.owl-carousel.owl-rtl .owl-item{float:right}.owl-carousel .
2024-05-28 05:14:41 UTC	202	IN	Data Raw: 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 65 61 73 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 76 69 64 65 6f 2d 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 0d 0a Data Ascii: 00%;background-position:center center;background-repeat:no-repeat;background-size:contain;transition:opacity .4s ease}.owl-carousel .owl-video-frame{position:relative;z-index:1;height:100%;width:100%}
2024-05-28 05:14:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49862	104.17.24.14	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	588	OUT	GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.campobahia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:41 UTC	947	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cf0-564" Last-Modified: Mon, 04 May 2020 16:04:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 884457 Expires: Sun, 18 May 2025 05:14:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FAyu4Iai4kABZfurXqrLHro8EJ5vyaWYgK62DIYgI7r2AESkul2IJIiqxco%2BAs%2By0GqQ7meniOhx%2FDh7oEUjwxjylYjIxXUkWSvHFGXGJBzQ8%2BUp6KQvLqnPQ9wRVGUzh%2FK8eM9h"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 88abc337be0842e6-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:41 UTC	422	IN	Data Raw: 35 36 34 0d 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 0a 20 2a 20 09 44 65 66 61 75 6c 74 20 74 68 65 6d 65 20 2d 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 Data Ascii: 564/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE // * Default theme - Owl Carousel CSS File */.owl-theme .owl-nav { margin-top
2024-05-28 05:14:41 UTC	965	IN	Data Raw: 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 37 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 44 36 44 36 44 36 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 20 7d 0a 20 20 20 20 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 27 6f 77 6c 2d 27 5d 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 2e 6f 77 Data Ascii: px; padding: 4px 7px; background: #D6D6D6; display: inline-block; cursor: pointer; border-radius: 3px; } .owl-theme .owl-nav [class*='owl-']:hover { background: #869791; color: #FFF; text-decoration: none; } .ow
2024-05-28 05:14:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49860	104.17.24.14	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	565	OUT	GET /ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.campobahia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:41 UTC	960	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cf0-ad36" Last-Modified: Mon, 04 May 2020 16:04:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 298422 Expires: Sun, 18 May 2025 05:14:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XcNTsyi6IvXHBS8oWbAB3y55LXfbwyyH%2B8r831twXtoz%2BWi3sTGmN5Aabms5uglR8JszQ1nH8lRhD0il9kKmjyvIJhBQbOp47t%2BMsWGtCR8%2BLROMOlTM94Y6by5O4EPlSjseRpPG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 88abc337ce87c345-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:41 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2e 44 Data Ascii: 7bf1/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.D
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 77 69 64 74 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 5f 63 6c 6f 6e 65 73 3d 5b 5d 2c 74 68 69 73 2e 5f 6d 65 72 67 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 5f 77 69 64 74 68 73 3d 5b 5d 2c 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 5f 70 69 70 65 3d 5b 5d 2c 74 68 69 73 2e 5f 64 72 61 67 3d 7b 74 69 6d 65 3a 6e 75 6c 6c 2c 74 61 72 67 65 74 3a 6e 75 6c 6c 2c 70 6f 69 6e 74 65 72 3a 6e 75 6c 6c 2c 73 74 61 67 65 3a 7b 73 74 61 72 74 3a 6e 75 6c 6c 2c 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 64 69 72 65 63 74 69 6f 6e 3a 6e 75 6c 6c 7d 2c 74 68 69 73 2e 5f 73 74 61 74 65 73 3d 7b 63 75 72 72 65 6e 74 3a 7b 7d 2c 74 61 67 73 3a 7b 69 6e 69 74 69 61 Data Ascii: t=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initia
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 2c 49 6e 6e 65 72 3a 22 69 6e 6e 65 72 22 2c 4f 75 74 65 72 3a 22 6f 75 74 65 72 22 7d 2c 65 2e 54 79 70 65 3d 7b 45 76 65 6e 74 3a 22 65 76 65 6e 74 22 2c 53 74 61 74 65 3a 22 73 74 61 74 65 22 7d 2c 65 2e 50 6c 75 67 69 6e 73 3d 7b 7d 2c 65 2e 57 6f 72 6b 65 72 73 3d 5b 7b 66 69 6c 74 65 72 3a 5b 22 77 69 64 74 68 22 2c 22 73 65 74 74 69 6e 67 73 22 5d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 77 69 64 74 68 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 77 69 64 74 68 28 29 7d 7d 2c 7b 66 69 6c 74 65 72 3a 5b 22 77 69 64 74 68 22 2c 22 69 74 65 6d 73 22 2c 22 73 65 74 74 69 6e 67 73 22 5d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 5f 69 74 65 6d 73 26 26 74 68 69 73 2e 5f 69 74 Data Ascii: ,Inner:"inner",Outer:"outer"},e.Type={Event:"event",State:"state"},e.Plugins={},e.Workers=[{filter:["width","settings"],run:function(){this._width=this.$element.width()}},{filter:["width","items","settings"],run:function(a){a.current=this._items&&this._it
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 2e 5f 63 6c 6f 6e 65 73 3d 62 2c 61 28 68 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6c 6f 6e 65 64 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 24 73 74 61 67 65 29 2c 61 28 69 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6c 6f 6e 65 64 22 29 2e 70 72 65 70 65 6e 64 54 6f 28 74 68 69 73 2e 24 73 74 61 67 65 29 7d 7d 2c 7b 66 69 6c 74 65 72 3a 5b 22 77 69 64 74 68 22 2c 22 69 74 65 6d 73 22 2c 22 73 65 74 74 69 6e 67 73 22 5d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 74 6c 3f 31 3a 2d 31 2c 62 3d 74 68 69 73 2e 5f 63 6c 6f 6e 65 73 2e 6c 65 6e 67 74 68 2b 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2c 63 3d 2d 31 2c 64 3d 30 2c 65 3d 30 2c 66 3d 5b 5d 3b 2b 2b 63 3c 62 Data Ascii: ._clones=b,a(h).addClass("cloned").appendTo(this.$stage),a(i).addClass("cloned").prependTo(this.$stage)}},{filter:["width","items","settings"],run:function(){for(var a=this.settings.rtl?1:-1,b=this._clones.length+this._items.length,c=-1,d=0,e=0,f=[];++c<b
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 64 64 69 6e 67 2c 67 3d 74 68 69 73 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 29 2b 66 2c 68 3d 67 2b 74 68 69 73 2e 77 69 64 74 68 28 29 2a 65 2c 69 3d 5b 5d 3b 66 6f 72 28 63 3d 30 2c 64 3d 74 68 69 73 2e 5f 63 6f 6f 72 64 69 6e 61 74 65 73 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 61 3d 74 68 69 73 2e 5f 63 6f 6f 72 64 69 6e 61 74 65 73 5b 63 2d 31 5d 7c 7c 30 2c 62 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 5f 63 6f 6f 72 64 69 6e 61 74 65 73 5b 63 5d 29 2b 66 2a 65 2c 28 74 68 69 73 2e 6f 70 28 61 2c 22 3c 3d 22 2c 67 29 26 26 74 68 69 73 2e 6f 70 28 61 2c 22 3e 22 2c 68 29 7c 7c 74 68 69 73 2e 6f 70 28 62 2c 22 3c 22 2c 67 29 26 26 74 68 69 73 2e 6f 70 28 62 2c 22 3e 22 2c 68 29 29 26 26 69 2e 70 75 73 Data Ascii: dding,g=this.coordinates(this.current())+f,h=g+this.width()e,i=[];for(c=0,d=this._coordinates.length;c<d;c++)a=this._coordinates[c-1]\|\|0,b=Math.abs(this._coordinates[c])+fe,(this.op(a,"<=",g)&&this.op(a,">",h)\|\|this.op(b,"<",g)&&this.op(b,">",h))&&i.pus
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 22 29 2c 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 69 6e 69 74 69 61 6c 69 7a 65 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 74 6c 43 6c 61 73 73 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 74 6c 29 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 57 69 64 74 68 26 26 21 74 68 69 73 2e 69 73 28 22 70 72 65 2d 6c 6f 61 64 69 6e 67 22 29 29 7b 76 61 72 20 61 2c 62 2c 63 3b 61 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 69 6d 67 22 29 2c 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 3f 22 2e 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 Data Ascii: "),this.trigger("initialize"),this.$element.toggleClass(this.settings.rtlClass,this.settings.rtl),this.settings.autoWidth&&!this.is("pre-loading")){var a,b,c;a=this.$element.find("img"),b=this.settings.nestedItemSelector?"."+this.settings.nestedItemSelect
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 70 72 65 70 61 72 65 22 2c 7b 63 6f 6e 74 65 6e 74 3a 62 7d 29 3b 72 65 74 75 72 6e 20 63 2e 64 61 74 61 7c 7c 28 63 2e 64 61 74 61 3d 61 28 22 3c 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 69 74 65 6d 45 6c 65 6d 65 6e 74 2b 22 2f 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 43 6c 61 73 73 29 2e 61 70 70 65 6e 64 28 62 29 29 2c 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 70 72 65 70 61 72 65 64 22 2c 7b 63 6f 6e 74 65 6e 74 3a 63 2e 64 61 74 61 7d 29 2c 63 2e 64 61 74 61 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 74 68 69 73 2e 5f 70 69 70 65 2e 6c 65 6e 67 74 68 2c 64 Data Ascii: =this.trigger("prepare",{content:b});return c.data\|\|(c.data=a("<"+this.settings.itemElement+"/>").addClass(this.options.itemClass).append(b)),this.trigger("prepared",{content:c.data}),c.data},e.prototype.update=function(){for(var b=0,c=this._pipe.length,d
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 6c 65 61 76 65 28 22 72 65 73 69 7a 69 6e 67 22 29 2c 76 6f 69 64 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 64 22 29 29 29 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 67 69 73 74 65 72 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 73 74 61 67 65 2e 6f 6e 28 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 64 2b 22 2e 6f 77 6c 2e 63 6f 72 65 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 2c 74 68 69 73 29 29 2c 21 31 21 3d 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 65 73 70 6f 6e 73 69 76 65 26 26 74 68 69 73 2e 6f 6e 28 62 Data Ascii: (),this.leave("resizing"),void this.trigger("resized")))))},e.prototype.registerEventHandlers=function(){a.support.transition&&this.$stage.on(a.support.transition.end+".owl.core",a.proxy(this.onTransitionEnd,this)),!1!==this.settings.responsive&&this.on(b
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 28 22 6d 6f 75 73 65 75 70 2e 6f 77 6c 2e 63 6f 72 65 20 74 6f 75 63 68 65 6e 64 2e 6f 77 6c 2e 63 6f 72 65 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6f 6e 44 72 61 67 45 6e 64 2c 74 68 69 73 29 29 2c 61 28 63 29 2e 6f 6e 65 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 6f 77 6c 2e 63 6f 72 65 20 74 6f 75 63 68 6d 6f 76 65 2e 6f 77 6c 2e 63 6f 72 65 22 2c 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 64 69 66 66 65 72 65 6e 63 65 28 74 68 69 73 2e 5f 64 72 61 67 2e 70 6f 69 6e 74 65 72 2c 74 68 69 73 2e 70 6f 69 6e 74 65 72 28 62 29 29 3b 61 28 63 29 2e 6f 6e 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 6f 77 6c 2e 63 6f 72 65 20 74 6f 75 63 68 6d 6f 76 65 2e 6f 77 6c 2e 63 6f 72 65 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 Data Ascii: ("mouseup.owl.core touchend.owl.core",a.proxy(this.onDragEnd,this)),a(c).one("mousemove.owl.core touchmove.owl.core",a.proxy(function(b){var d=this.difference(this._drag.pointer,this.pointer(b));a(c).on("mousemove.owl.core touchmove.owl.core",a.proxy(this
2024-05-28 05:14:41 UTC	1369	IN	Data Raw: 69 73 2e 63 6c 6f 73 65 73 74 28 65 2e 78 2c 30 21 3d 3d 64 2e 78 3f 66 3a 74 68 69 73 2e 5f 64 72 61 67 2e 64 69 72 65 63 74 69 6f 6e 29 29 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 61 74 65 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 74 68 69 73 2e 75 70 64 61 74 65 28 29 2c 74 68 69 73 2e 5f 64 72 61 67 2e 64 69 72 65 63 74 69 6f 6e 3d 66 2c 28 4d 61 74 68 2e 61 62 73 28 64 2e 78 29 3e 33 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 74 68 69 73 2e 5f 64 72 61 67 2e 74 69 6d 65 3e 33 30 30 29 26 26 74 68 69 73 2e 5f 64 72 61 67 2e 74 61 72 67 65 74 2e 6f 6e 65 28 22 63 6c 69 63 6b 2e 6f 77 6c 2e 63 6f 72 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 29 29 2c 74 68 69 73 2e 69 73 28 22 64 72 61 67 67 69 6e 67 22 29 Data Ascii: is.closest(e.x,0!==d.x?f:this._drag.direction)),this.invalidate("position"),this.update(),this._drag.direction=f,(Math.abs(d.x)>3\|\|(new Date).getTime()-this._drag.time>300)&&this._drag.target.one("click.owl.core",function(){return!1})),this.is("dragging")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49855	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	958	OUT	GET /wp-content/themes/neve-child-master/BiloxiScript.woff2 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.campobahia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.campobahia.com/wp-content/themes/neve-child-master/style.css?ver=3.1.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:36:36 GMT Accept-Ranges: bytes Content-Length: 18236 Content-Type: font/woff2
2024-05-28 05:14:41 UTC	7958	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 47 3c 00 11 00 00 00 00 8d 90 00 00 46 d9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 24 1b 20 1c 5e 06 60 00 84 00 08 06 09 88 59 0a 81 f0 10 81 bc 29 0b 83 20 00 01 36 02 24 03 86 3c 04 20 05 8a 70 07 84 0b 0c 0c 1b e2 70 07 18 b7 1e 17 b7 83 ed de 49 6c a1 b3 11 36 6c 1c 34 1c 40 96 ec ff ff 6b 82 1c 63 c4 c0 6e 68 99 fd e7 04 99 1d 58 2d 28 da f6 44 9d 20 04 04 64 cb ab 47 35 17 30 37 41 3c ba 13 86 ae 57 8e 32 e6 7b 65 df b2 9d 52 37 dd 6a 35 45 a7 af 7c 10 f3 d7 c9 0e 5b 8f d8 b2 ce 1d 13 84 74 67 ab da 27 a5 d2 19 95 39 dc a9 0b 33 6d 0a 0c ef 32 41 d6 15 0f ff 5f 7e 84 24 b3 03 e4 b6 ee 80 3b d8 32 45 c1 01 08 2a 4e 5c 1b b6 e0 02 04 71 2c 40 51 4b 37 da 32 73 36 6c bc Data Ascii: wOF2G<F?FFTM$ ^`Y) 6$< ppIl6l4@kcnhX-(D dG507A<W2{eR7j5E\|[tg'93m2A_~$;2E*N\q,@QK72s6l
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 6a 7f b3 11 eb 8c 9f c3 6e ef 02 11 b1 18 7e 01 00 7e 82 69 99 6f 5d 96 12 fe b1 3c 60 7d b7 1e 2b 86 1a 82 70 41 d5 da 78 7c db 0f 34 07 76 72 5c 67 f6 e5 d7 e0 6b e4 13 10 46 90 01 13 a1 ae 01 e9 d0 6e 29 16 0a 0d 36 d7 e1 8d 44 09 01 cd 2f 74 06 24 1a d9 cf 1d 6f ff 0c 11 6b ec 31 88 68 0c 1f bf da 40 c7 ff 92 28 bd c5 a4 45 79 61 76 45 da 63 54 e1 1a bf d4 55 62 c4 bb 4d 3a 55 fc 14 87 c0 8e 39 cb 18 1a 7b 8b e7 81 f8 8a 08 e9 c3 2d 27 f5 0b e6 75 18 ae 1c df 12 a5 f9 c3 ed 31 70 ce 7e 37 a2 71 c7 ad ba 91 a4 d8 d6 8d 36 66 d4 69 65 cb b5 01 5d ae 78 00 7a 09 a5 7d bd 9c b1 53 de b8 04 ce 60 8c 58 f9 b8 a0 ee d6 b6 dd cf dd 37 77 ce 77 9e 76 c3 76 cc ce bf c1 c9 48 9e bf c7 65 66 de 9e e8 5b 4a 84 0a 73 03 22 42 9b ff 11 83 0f eb 98 6c f9 ca ae 88 fc Data Ascii: jn~~io]<`}+pAx\|4vr\gkFn)6D/t$ok1h@(EyavEcTUbM:U9{-'u1p~7q6fie]xz}S`X7wwvvHef[Js"Bl
2024-05-28 05:14:41 UTC	2278	IN	Data Raw: 16 d5 c3 11 8f dc 24 73 23 5f d2 da ee 48 76 aa 07 f4 e0 50 be 71 b6 f1 40 5b 1b a9 44 ae 2e 42 91 d9 b0 42 a1 50 68 ad b5 42 a1 50 78 b4 4b c1 dc ca c7 cd 85 c5 3f 9e f7 92 62 5f 61 57 48 e3 44 7d 7e 9c ba 65 77 4b 90 db 3f be 3d 20 b2 0a 91 7d 5a 24 51 e1 3a e1 61 46 e3 90 8b 89 ab a3 63 78 e7 6c 79 70 9c 1f a7 06 ac 8e 19 62 6f d3 8c df 6c 30 f5 ce a5 a9 1d e2 ba 58 5f be 7c 5c b8 5f 66 b1 de 2e cf f2 53 35 70 80 8f f4 95 9e 36 87 dd 82 87 2d e0 ef cc ab f4 b5 b9 e3 bc 8d 01 c0 38 ab a1 18 86 61 aa aa 18 86 61 1a 27 f6 c9 3a 11 74 2a b8 54 28 a5 94 52 4a 29 a5 94 52 25 1f 3c 02 6c b5 ca 4c 44 44 44 44 44 14 44 07 8a 58 0f 66 fb b4 0b 69 37 2c fc 62 de 96 79 e7 eb d5 fa a4 b2 ab bf 10 66 7f 33 fd e8 41 fa 20 42 08 21 84 10 42 08 21 42 08 91 b8 84 81 88 Data Ascii: $s#_HvPq@[D.BBPhBPxK?b_aWHD}~ewK?= }Z$Q:aFcxlypbol0X_\|\_f.S5p6-8aa':t*T(RJ)R%<lLDDDDDDXfi7,byf3A B!B!B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49856	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	1002	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.29.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.campobahia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.campobahia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.29.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 96924 Content-Type: font/woff2
2024-05-28 05:14:41 UTC	7958	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 7a 9c 00 0f 00 00 00 03 55 3c 00 01 7a 3f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 b4 7c 08 0e 09 9c 0c 11 08 0a 8c 81 14 8a a9 24 0b 8e 24 00 01 36 02 24 03 8e 20 04 20 05 85 35 07 b0 41 0c 81 1c 5b 21 e1 72 27 0c 91 bb a8 d9 c2 d7 b0 6d 04 c2 d0 53 f5 fa aa 6c 6c 60 81 dc 3c 4b 7a b3 18 54 94 e0 d7 d6 30 6e 7f 0a a0 3b b8 02 51 6f e7 52 f6 ff ff ff bf 24 59 c8 d8 ee 9f 79 ff 1b 6c 0c 80 44 21 8c 2c 2d 50 35 86 a0 46 d5 c3 45 78 6a 63 97 5b 11 51 88 8c be 28 16 eb 30 56 24 c9 4c 61 3d 92 4b 9f 94 01 46 44 69 79 5e e0 e2 a3 e8 d6 fc 4a 75 d6 c7 06 bd e6 58 d5 e1 76 97 43 8a 97 37 37 29 b7 8f 22 53 30 32 d8 86 9d b3 28 17 fc b9 d3 92 74 61 94 2e 29 29 49 e1 24 4c 18 e5 d1 b0 a8 8f Data Ascii: wOF2zU<z?T`\|$$6$ 5A[!r'mSll`<KzT0n;QoR$YylD!,-P5FExjc[Q(0V$La=KFDiy^JuXvC77)"S02(ta.))I$L
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 4f 2f 16 df 29 3f f4 b1 74 c5 3f 44 57 17 8f 34 58 23 41 6a 64 f7 1e 53 e5 4e 81 be f7 6a c8 c9 be be 6f df 0d dc 34 83 c5 8b 4d 87 3e cf 76 bb 1f ae 3e 5e d5 5a cf 92 9f fd 20 68 33 d2 94 cb a1 8d 95 59 ea f8 6b 8d 66 f3 25 c5 37 58 63 8a 61 d2 60 cf 55 7d 5a e3 f7 90 b1 58 9f c9 25 51 6d 84 31 53 0b a2 ab db e6 cd 4e dc cf bf 60 22 fc da 86 2d 43 b3 be 84 cd 91 b8 3e 25 7e bf d4 83 6b 06 5d 6f 9e ae 5e 94 4a fa 4e d6 88 51 2a ea 94 13 45 f2 f7 16 de db 41 3d 51 52 b4 f7 00 93 77 21 7b dc 9f 37 dc 26 a1 6a b0 eb 45 26 cf fa b8 46 c0 79 ed 04 53 58 52 3a 5a db 4a 11 a7 b6 96 5b 3f f2 0f 56 bd 95 fe 80 de 78 cc 58 76 86 8d 5a bf 66 04 da d1 ea f5 a4 36 a9 f3 ce a8 f4 f1 a4 29 d2 04 03 e7 9d e8 46 9d fc 6a dd 37 f6 da 2b e7 df f3 0f 83 a1 cf bd 92 82 41 25 Data Ascii: O/)?t?DW4X#AjdSNjo4M>v>^Z h3Ykf%7Xca`U}ZX%Qm1SN`"-C>%~k]o^JNQ*EA=QRw!{7&jE&FySXR:ZJ[?VxXvZf6)Fj7+A%
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 53 0f 1d d5 88 3b cf cd 6e ad 80 6a 51 87 7f 84 df 5f fa 5d 2c 9c 46 35 31 bc df 27 92 4c fa 0b 1e 61 6f 59 dc 76 a6 d2 fb ad 9c 88 d4 4c b1 e2 ef 2d 58 41 24 be 62 b5 28 71 51 f9 16 ba be 64 58 d2 45 e7 dc 2d 8c 56 01 79 d5 3f ca 75 bf 05 6f 7c 84 5e 9a f6 99 cb 78 32 5c d4 f2 7d af a3 6b f5 c7 51 0f 4b 39 e7 1b 3e d1 52 81 91 19 0b 3c 8f 8d 6d cb bd eb 60 e0 d8 82 f3 83 c1 1d 96 02 20 60 4b ed ca 06 61 5f e0 08 b7 8a 6c 11 2b d3 1c 1f 0a d4 19 14 c5 a3 64 b4 dc e1 3e 35 9b a7 3e f2 09 bf 4b 9f d4 53 17 99 0a 10 1d e4 4b b7 28 96 fb bb cc 25 95 a1 d0 45 d7 b3 d2 40 4d 7b 03 c1 c0 74 a8 e7 85 31 e9 50 1f be cf f6 e3 ba f2 d2 b1 5b 0d 3f 74 06 a7 fe 89 d7 a8 77 ad 5f ec 29 1c cc 27 eb 7a b5 b3 79 38 e9 28 8a 56 94 62 ae e1 04 b7 63 df 21 a0 b2 6f d1 df 6e Data Ascii: S;njQ_],F51'LaoYvL-XA$b(qQdXE-Vy?uo\|^x2\}kQK9>R<m` `Ka_l+d>5>KSK(%E@M{t1P[?tw_)'zy8(Vbc!on
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 93 9d c5 aa 5d 97 1c 70 c7 94 95 10 16 f6 a9 e9 8b 80 28 57 b5 d2 e4 91 2c a5 df b8 e1 18 ca 59 d5 d1 2c 5f 5d 79 c9 6f f2 d4 fa b5 92 e8 13 19 40 b8 6e 2d e1 c7 fe 5e d2 c4 c4 67 a1 b5 50 e2 3c 67 32 00 04 24 c4 16 41 e1 1a f4 c5 e2 c4 88 4b e8 f8 b1 51 37 37 42 4e 71 0e 84 f6 b2 e6 15 d8 8a d3 92 12 72 42 c1 a4 b1 1c 5a e9 0a e3 a4 ae e9 d9 bc 5d 30 97 f5 76 1e e0 52 41 bc 02 28 b8 f7 a3 59 c7 2e 0c 28 7f 48 c2 7b 69 92 78 99 d1 29 eb 54 eb 1d 40 a7 c8 50 d1 92 ab b1 ef ad d6 1c 2d 05 32 d8 a8 43 3d f8 93 c0 30 d4 51 91 9c 22 c9 c0 79 04 a9 14 5f 6b ef 44 cc 29 d4 c7 cd 79 e1 17 66 1b 6e c8 d0 8c 7c 54 8a 31 5a 6a 33 83 9a 2d fe b6 59 d1 53 e7 7a b2 45 04 af d1 cb 76 c0 5d 76 5a 2e 3d c6 5c f0 7b a0 a6 a4 e5 3b 95 30 53 54 92 61 00 a6 52 4d e2 28 80 02 Data Ascii: ]p(W,Y,_]yo@n-^gP<g2$AKQ77BNqrBZ]0vRA(Y.(H{ix)T@P-2C=0Q"y_kD)yfn\|T1Zj3-YSzEv]vZ.=\{;0STaRM(
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 04 9c d6 79 41 a5 1a 0d ec c6 a6 0c fa af bf 56 05 0d ad 89 e8 1b 8b 58 33 f4 70 34 b6 12 57 b0 64 96 6c d9 60 f8 22 46 2e 39 26 8e ee 1c 86 df 07 10 44 0c 83 92 b7 3f 44 de 92 db c8 da 3b 9a 53 a7 6d 0e 2b 5e 30 d2 67 65 56 3c 14 97 a9 55 f9 e2 8f 1b 42 a1 44 38 a8 7a e8 6c d6 a1 b5 88 bd 75 e9 65 52 2d a1 81 fd 87 6a d1 3e ea 20 6b 91 3f bf 1b f5 49 6a d4 2a b5 85 6e 8f f7 d1 00 10 47 73 2d 32 95 77 bb b0 5a 29 49 71 d5 15 9c ca bb d5 7b 74 28 ff c0 50 1b 17 ae f2 b2 2b 79 1c 9b 6a 45 43 fb b8 79 00 f5 a2 94 62 5a 07 01 4a d1 18 6d b0 af 5a 3e d2 0a 61 64 1e c3 31 06 19 04 1f 24 8c d0 ac 04 31 ba 10 ec 80 8f 19 6a 14 1c 88 4a 1d f7 4c 16 86 1c 60 80 50 13 cc 03 be 0e e0 2f 54 b6 15 1b 0e 5f 87 0c 1e f7 ba a5 98 f5 58 c6 60 f3 20 32 82 7d 41 58 86 e8 43 Data Ascii: yAVX3p4Wdl`"F.9&D?D;Sm+^0geV<UBD8zlueR-j> k?Ij*nGs-2wZ)Iq{t(P+yjECybZJmZ>ad1$1jJL`P/T_X` 2}AXC
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 93 8b fb e8 1d 3b 0e 07 2e f0 b5 1b 76 88 ac f0 e3 b7 b6 76 e0 2d a0 f5 14 14 a7 7d fc c6 ec 9a 58 c2 f5 0b 76 15 96 f1 f2 44 f0 b2 94 8f 66 15 3e 59 6d ea 08 1d 70 3a 7c 8a a6 ab 6f 93 71 64 61 2f 0d c3 1a 0d f3 b7 f5 85 21 85 75 34 11 d9 80 52 78 1b e6 b9 bc 29 88 1d 04 75 3c 51 7b 91 90 ed b1 59 e6 8b f1 7a 7a 7c 31 eb 36 2b b3 75 b9 9a ad 06 57 26 eb 1e 9c f3 5e 43 a5 15 a6 c3 2e b3 34 6d cb 65 1c 19 3c 19 0d a3 9b e2 2f 03 ab 16 e4 05 e8 fc fd 74 01 f9 f3 01 79 7e d9 3a bf 3c ff 1f 3b ec b7 f0 bc 1f fe f9 7e 39 d9 fe 79 42 d8 8d 93 85 d9 ec 38 56 73 23 2b 8e 9d 78 65 ea 63 c5 37 af 76 47 db 5f a1 20 e6 d3 d7 12 ab 4e b2 3f 22 bb f3 87 96 35 c6 d3 5e be 1c 12 ab 41 4d b2 b4 f1 71 ee 99 48 6f b6 32 14 69 66 e5 a0 62 d0 3a 54 6c d6 a1 33 48 11 91 11 90 Data Ascii: ;.vv-}XvDf>Ymp:\|oqda/!u4Rx)u<Q{Yzz\|16+uW&^C.4me</ty~:<;~9yB8Vs#+xec7vG_ N?"5^AMqHo2ifb:Tl3H
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 06 91 ba db 8e 96 ec 42 5e 43 dc 52 99 47 0b 0b 8f 32 63 dc e0 d7 9b 2d 0a 95 32 eb 0a 3c 48 28 74 4e 11 b4 5d bd ec 5c 8e 59 cb 59 a6 66 bc df bc cb f3 c8 51 d1 79 94 4a 58 66 24 3c f7 2c 37 da 3f eb f8 93 b8 61 93 a3 cd 64 63 e1 06 83 79 d8 b3 1e 0f 33 e2 79 de 86 f3 5f e8 1e d9 cb 37 af ec cc cb 5e e6 5c 79 ec 4a 7c 2a 76 63 75 76 13 fc 87 71 73 e1 f2 cd 51 3b 83 d9 db f3 60 f6 82 69 9e b1 3b 0d 1b 37 c4 75 bc 75 d4 ae 24 ee 3d 18 f5 3b 97 a5 53 b6 17 91 8b ad 8b 69 6f 7c 51 69 c0 c3 56 64 22 82 00 05 df 92 7b 40 51 b9 81 bf 93 ac b0 86 3b b2 2e 86 cd f5 f1 61 d0 41 a1 9d 93 9d 1b 17 39 3c 1d 8f 7d 96 e6 f3 72 5c fd 95 42 4d 96 7f 57 d5 d0 81 94 67 1e 5f aa 5c d4 29 66 b1 31 64 4c 4c 08 31 b9 b6 85 74 69 31 01 9a 2b 01 6a 3a 47 9d 4b be 5b cd 4a 59 2c Data Ascii: B^CRG2c-2<H(tN]\YYfQyJXf$<,7?adcy3y_7^\yJ\|*vcuvqsQ;`i;7uu$=;Sio\|QiVd"{@Q;.aA9<}r\BMWg_\)f1dLL1ti1+j:GK[JY,
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 30 32 d0 f9 b8 a4 e4 12 3f 49 60 70 64 e0 c9 cf 33 59 13 22 d0 9c 94 88 92 af d3 e6 68 c8 12 ce b3 c5 d7 2b 4c 00 0c d7 58 46 19 ff ee cc c1 13 36 f6 1c 46 16 ba d1 c3 9b a0 02 97 73 b2 ab 9a c4 65 ee a2 e8 73 4f 81 19 ae 8e b4 eb 65 44 22 5d d0 de 4e 47 99 2d 18 3a dd 58 64 ef 5a cf b6 47 5b 26 1b ff fc 67 ef c0 2c db 73 5c ed 16 67 87 7d 51 62 45 ef f9 b9 71 d2 a1 a5 84 dc 5d 62 99 dc 33 d8 4b 11 1e 07 0e de d6 4c 31 5e 1d 71 15 3b f4 2d 7c ba f2 a5 26 22 50 e1 2f 65 49 72 8f b6 7a e7 da 49 39 2d f1 3c 1d 7f 6b 6a d0 99 ec d0 3d 49 93 af 86 fe 8a 39 1c 18 7d ed dd b5 e8 c0 c3 d3 6c cc ca d6 40 f7 c0 d6 2a 4d 6d b5 25 9b 1d 9c 96 35 be 34 a2 e6 ea 1d 7d cf 4d 72 3b f4 37 ee 86 63 50 4c e5 39 5a 88 52 83 41 41 c9 ca 04 94 83 26 c2 aa 19 97 df 47 7b 64 10 Data Ascii: 02?I`pd3Y"h+LXF6FsesOeD"]NG-:XdZG[&g,s\g}QbEq]b3KL1^q;-\|&"P/eIrzI9-<kj=I9}l@*Mm%54}Mr;7cPL9ZRAA&G{d
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 81 65 28 1c 4d bc 6c 86 be 65 62 c3 39 6b f1 85 de 59 01 a7 9b eb a0 74 7f 42 84 3f 10 36 1e 7f ef d7 c4 c5 a3 e3 b7 75 b0 f1 28 60 1a 4f 11 5a f7 b2 20 06 bb 82 76 81 7a dc 41 93 e3 fe a7 27 c2 af 02 b4 d4 d7 a6 f2 fd 84 65 57 3b 0c 2d 13 dd 4e a4 6e 17 8e 14 35 2d 0f 2a 06 08 c1 ec b7 bf ed 7c 14 fe f8 1f c3 02 e3 06 7f 06 f9 9e eb 58 a6 c0 73 6c 6f 50 d2 1b 8f 3c 7d ba b1 2d 34 c7 80 1e ff 96 8c fd 9f fd 15 70 30 7f db e1 05 99 ee 87 ca 82 c8 d2 82 4e d7 76 4d e9 5d 13 ca c2 1b ee 2b 87 6e 95 e2 25 c1 d0 0b 5a 6a 1e 5a 57 17 7e 05 fd 03 8b 65 e0 e3 9b 75 55 44 a1 28 d4 46 49 d2 65 2b 10 c5 9f fd 01 68 25 f2 f7 ea 30 1d fa c7 be 01 9a 22 23 5b 3d 6b 19 eb 01 43 c5 99 89 05 fb 32 27 0c 75 e5 61 e5 94 05 de 7e db c2 1d 8b 57 4a 79 df 03 7e 06 26 eb f3 52 Data Ascii: e(Mleb9kYtB?6u(`OZ vzA'eW;-Nn5-*\|XsloP<}-4p0NvM]+n%ZjZW~euUD(FIe+h%0"#[=kC2'ua~WJy~&R
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 46 4d 19 4f 30 0f 2a 53 eb 49 01 f6 6c 05 3b 77 e6 85 d9 b4 67 db 2d 78 88 24 48 93 49 e2 35 12 0b 2e a6 8c 78 8e 23 29 c9 98 2e 60 57 91 ad 24 9b aa e4 1d 08 26 87 0b dc 2f 40 85 b1 5e 74 19 d9 22 79 de 64 7d 38 1d fa 3c f3 3d 49 44 90 d7 2b 78 6e 34 7c cc 84 f8 4d ca 73 b0 7d 65 ef ef fa f3 70 ae ab ac cb bb 38 f2 52 3f 35 74 d1 95 5c 44 e0 05 a1 a9 59 38 6f f2 24 00 da 1b 54 4d 49 31 a7 f2 2a 81 0f d9 11 fb 68 c2 9c f0 1d 71 6a 76 8d d7 81 c1 17 a4 ed 34 b7 a5 e6 20 e4 34 02 6a 0a 36 c3 80 81 b1 11 a0 10 e6 13 cd e8 64 3e 59 48 84 d6 86 20 e7 14 21 39 76 c7 99 1d 8d ea 2a cf 92 d8 b3 95 6c 72 a6 8b bb 97 cb 37 73 91 f1 00 9b c5 43 0f d2 de a7 a2 40 af 48 cd 17 32 0f 3f 8e 8e fd f5 dd 80 8a 9f 04 02 1b 72 f3 58 39 24 25 e6 53 0c 87 45 c3 17 47 88 2b 28 Data Ascii: FMO0SIl;wg-x$HI5.x#).`W$&/@^t"yd}8<=ID+xn4\|Ms}ep8R?5t\DY8o$TMI1hqjv4 4j6d>YH !9v*lr7sC@H2?rX9$%SEG+(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49857	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	1000	OUT	GET /wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/wp-content/uploads/elementor/css/post-5031.css?ver=1694547618 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:54:27 GMT Accept-Ranges: bytes Content-Length: 312231 Content-Type: image/jpeg
2024-05-28 05:14:41 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 03 00 05 56 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCV"}!1AQa"q2
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: dc a8 ad 39 84 d3 b6 c5 70 09 38 14 e0 9e f5 2c aa 02 9c a0 dd ec 29 88 ad ce 17 bd 35 2b 89 79 8d 64 dc 73 9a 64 b1 f1 82 dd ea ca 84 1d 47 e9 4d 95 11 b1 85 cf e1 4b 98 ae 52 a8 83 3c ef fd 29 8c bb 4e 33 56 c4 6b d3 cb a4 d8 be 95 4a 44 f2 b2 a5 38 37 cb 8c d4 cf 1a 9e ab 48 b0 a3 1c 05 aa e6 24 a9 f6 6c b6 f0 b4 13 f3 7e 15 7b ec cb ea b5 0c f1 85 6c 7a 51 cf cc 3b 32 b9 45 7f bc 29 52 d6 39 17 ae de 7a d3 c7 1d 28 6f 98 60 d5 5e 5d 04 33 ec 0b ff 00 3d ff 00 f1 da 63 d9 4a 1b 11 7c df a5 4d 2a 2a a8 20 7f 9c 53 55 5d b8 5a a5 29 77 1f 33 23 16 97 49 f3 08 ff 00 f1 e1 51 92 14 e0 13 56 02 48 79 c5 34 a4 6c 72 63 a3 9a fb 86 fb 85 aa b1 8b 21 4f 5f 4a 73 06 0f 9d bd a8 58 3c c5 f9 65 65 c7 f9 f5 a4 6b 49 0f ca b3 93 9f ef 52 f7 5b dc 42 ee 93 1f ea bf Data Ascii: 9p8,)5+ydsdGMKR<)N3VkJD87H$l~{lzQ;2E)R9z(o`^]3=cJ\|M** SU]Z)w3#IQVHy4lrc!O_JsX<eekIR[B
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 0f 5a a7 2c 6e 5e 23 2c ad 46 8f 3c 8e 25 a0 75 7d 86 9b b1 bd 2b 4e 58 14 93 f2 71 f4 aa e2 c1 b7 7d ee 2b d3 55 23 d4 f2 39 59 55 53 3d 69 02 07 3b 49 ab a6 cc aa 61 3f 5a 6d b5 91 13 ab 4e 3e 5c fc c1 57 92 3b d3 e7 8e e0 a3 a9 57 c8 8f 38 db 41 5d 9c 29 e2 ba 29 2c 7c 25 34 7b 60 9a ea 26 db ff 00 2d 54 11 9a c9 9f 4c da db 61 b8 59 17 fb d8 ac e1 88 8c fb fc cd a5 0d 34 33 da 23 27 76 26 8f b2 b7 72 df f7 cd 5e 5b 07 07 9c 50 6c c8 ed 5b 2a 86 6a 9f 73 39 ad 81 39 1f ad 31 ed f6 2e 5a af 4b 6b 22 b7 cb 9f fb e6 9a b6 b2 b7 3f cd 6a bd a7 5b 9c ce 9b 72 28 15 39 da 29 ff 00 63 19 c8 35 70 db 48 0e 18 50 b6 93 37 00 fe 86 9f b4 ec c1 51 97 6b 99 f2 5a 29 6e 57 f5 a6 b5 ba aa e4 2f eb 57 e7 b1 91 7e 61 d6 a2 36 f2 01 9c 55 c6 a7 99 7e ce 51 e8 67 f9 2b Data Ascii: Z,n^#,F<%u}+NXq}+U#9YUS=i;Ia?ZmN>\W;W8A])),\|%4{`&-TLaY43#'v&r^[Pl[*js991.ZKk"?j[r(9)c5pHP7QkZ)nW/W~a6U~Qg+
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 2d 7a e6 15 d8 5f 3f 5a 6d d6 b5 77 73 85 fb 4b 6d fe ea 9a aa 60 70 d8 29 4e fb 1b 96 51 e5 91 bb 8e 94 f9 69 fc 46 2e a5 6e 6b 32 68 45 fc ee 16 de 26 6f a5 6a db 4b ae e9 b1 af 97 64 43 63 90 2b a7 f0 ee 85 6f 63 67 1b 2f 25 97 27 8a d5 58 62 63 83 1a fe 55 e4 62 31 d1 94 9c 54 74 3d cc 3e 5b 2e 5e 66 ec d9 91 e1 3b ed 53 50 85 a4 bc 8b 6a af 1d 30 73 5b 41 40 e8 cd 44 51 47 1a e1 13 14 ea f2 e7 2e 79 5d 23 da a5 17 4e 9a 8b 77 1a c8 18 73 59 7a a5 9d cc 32 19 ec c6 e6 3f c2 6b 5a 91 86 e1 8c 51 19 72 95 28 a9 1c e5 f7 89 f5 2d 0a 00 d7 b6 6b d3 f8 6b 26 6f 8b 53 ee 6f 26 d1 78 ec 6b 7f c5 d6 1f 69 d3 fc a2 37 12 6b 8c 6f 05 dd c8 fb 6d 60 2f f3 62 bd 4c 34 30 73 a7 cd 53 73 c2 c7 56 c7 d2 ad c9 45 e8 75 1e 0f f1 ad ef 88 ee cc 52 5a aa a2 a9 25 97 b5 Data Ascii: -z_?ZmwsKm`p)NQiF.nk2hE&ojKdCc+ocg/%'XbcUb1Tt=>[.^f;SPj0s[A@DQG.y]#NwsYz2?kZQr(-kk&oSo&xki7kom`/bL40sSsVEuRZ%
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 6d 57 8f ee 8c 1a a6 34 4d 0e df e7 31 6d 62 dd 4b 73 42 74 5b e6 48 35 30 b5 2d 3a 7d 62 ed 18 67 cb 1e bf 5a eb 34 0b 0b 6b 6b 51 18 4d ad 8f ee d2 5a e9 51 4c db 94 e1 40 e9 5a 09 6f 04 01 48 7f c6 a7 11 88 e7 8a 8a e8 09 03 59 89 07 06 a1 f9 e2 93 18 e2 ac b4 91 b2 7f ad 5f fb ea a0 7b fb 54 ca b4 eb 91 fe d0 ae 58 f3 31 8a d7 08 14 97 38 15 42 f3 54 b7 51 b2 29 32 d8 e8 0d 17 92 59 ba e6 59 be 50 3f bd 4c d3 74 ed 1e e0 b1 86 e9 77 37 f0 ee c9 ad 94 79 75 68 0c 6b fd 42 7d ec bb bf 1a a3 a5 6a ed 0d d3 bd dc ac a1 7e ed 75 57 1e 1c b0 63 fb e9 18 d6 6e a1 e1 3d 18 ce a1 8b 9f f8 15 75 d2 af 4d ab 58 92 a6 b9 e2 dd 1e d7 4d f3 67 73 b4 7d ed aa 4d 70 fa a7 c4 ff 00 0b 46 4b 5b cd 36 ef ef 2c 24 57 a2 ff 00 c2 13 a1 4f 0e c9 6d f7 a1 1f 75 9b 23 e9 51 Data Ascii: mW4M1mbKsBt[H50-:}bgZ4kkQMZQL@ZoHY_{TX18BTQ)2YYP?Ltw7yuhkB}j~uWcn=uMXMgs}MpFK[6,$WOmu#Q
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 6b 46 2d 52 02 77 13 f5 f9 b9 a7 4f a8 c6 57 6c 6f fa d7 3d 38 d4 a7 a1 5c f1 20 89 1a c6 01 6f 04 bd 3b 16 a6 3e b9 aa db 2f 97 1c 69 37 a6 d7 aa 97 b6 37 97 12 f9 90 4f b5 48 e5 59 89 a6 69 96 17 56 b7 6a f2 4d b8 29 e4 73 5b fb 38 cb 57 a9 97 31 5e 7d 6b c7 37 37 8b f6 5d 21 a3 55 6f 95 7c ad d9 f7 ad eb 38 fc 5d 3c 61 af f5 18 ed d7 fb a4 f3 53 47 a9 5c a0 d8 af f2 e3 1c 55 7b 96 d4 e5 60 d0 6a be 5e 39 55 db 9a c6 57 96 96 4b f1 2a 32 4b a9 a9 65 2d 8c 12 ec 96 fb cc 90 30 2d d6 b7 f4 fd 63 40 48 f7 4d 3a 2b 0e 7e 62 2b 86 fb 3e a5 3b e6 f3 59 52 3f d9 8c 2d 48 da 3e 9d 3a fe fe 5d df f0 2a e3 ab 84 8d 4d d9 a2 a8 74 7a df 8f 2c 98 b5 ad b8 0c bf df 5e 86 a8 45 e2 5d 3e 68 70 f6 c2 4f f7 85 61 c1 6a a8 70 aa bb 46 40 35 72 28 60 54 05 86 df 6d b5 b4 Data Ascii: kF-RwOWlo=8\ o;>/i77OHYiVjM)s[8W1^}k77]!Uo\|8]<aSG\U{`j^9UWK2Ke-0-c@HM:+~b+>;YR?-H>:]Mtz,^E]>hpOajpF@5r(`Tm
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 2e e7 56 8c b1 3f c2 a5 bf 51 58 91 5a 6a d1 47 b0 42 ff 00 f7 c9 ab 91 69 fa a4 b1 fe f6 02 7f e0 35 b4 69 d4 a7 bd 5b fd c6 7e c6 95 5f 86 9d 8f cc df f8 3b 1e ce ca df fe 09 d5 e0 b7 b6 b8 dc df f0 ba b4 e1 8d bd bf b2 35 7a 2a 3f f8 3b 06 d6 f2 0f f8 27 4f 82 da 78 99 57 fe 17 56 9c 06 7f ec 11 ab d1 5f 9e f1 27 fc 8c de b7 d1 1f 49 96 d3 f6 58 55 1b 5b 56 78 e1 f8 45 63 b9 bc a9 6e 59 36 f0 a5 b0 3f 0f 7a 9b 48 f8 72 f6 32 66 09 5a 15 da 47 31 0f 31 81 ea 0b 57 4e 97 3a 96 31 25 bd bb 7a 64 b0 fe 46 9c 6f a6 8c 83 24 11 a8 35 f9 7c 78 93 19 d1 1e c7 25 38 ec 73 31 7c 25 22 46 0d 3b 47 1e 72 b2 6e 04 9f d6 a3 bb f8 3f 3e d4 6b 62 db 95 3f d6 ac 8a 0e 73 df 35 d7 36 b4 a3 e4 36 d1 c8 bd c6 48 aa 9f db ad 14 cc 53 45 f9 30 36 79 52 73 9e fc b1 a2 3c 41 Data Ascii: .V?QXZjGBi5i[~_;5z*?;'OxWV_'IXU[VxEcnY6?zHr2fZG11WN:1%zdFo$5\|x%8s1\|%"F;Grn?>kb?s566HSE06yRs<A
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 8e 78 dd 83 f3 01 ef 8a be ba 46 97 6a b2 3e 90 df 67 8d c6 d6 1e 61 70 71 fc aa a9 e7 15 a8 54 e6 8b d5 0e c7 65 73 fb 4f 7c 5d 99 7c 98 6e a3 b7 8e 3e 3e d9 6b a4 c6 0a f3 d3 27 3f ca a1 d6 be 3f fc 57 d4 74 a9 2c b5 2f 1a dc 35 bc d0 98 ae 1b 68 89 a6 43 fc 2d b0 03 ce 7e b5 c8 dd 7d 9b 4f 81 67 b4 d6 ad d2 46 6f f5 6b 1c 8b f2 fb 63 82 d9 e9 da a0 bc 4b fb b3 b2 6d 63 cc 5d 98 8e 46 85 43 29 f4 e0 75 fa d7 76 23 8b b3 7a b1 b7 b7 95 bd 58 a9 d3 a7 19 5e c4 ba 76 ab 65 e4 7d 8e 5b 71 17 f0 ac ce 71 8f a7 14 b6 25 6d 89 b7 b7 58 58 ff 00 0b 5c 3e 33 f9 d5 28 74 ab 6b 38 e3 9f 50 d5 61 fb 44 92 32 59 c3 31 25 b7 1f 7e 9d 2a f4 d6 f7 2b 69 70 f1 08 9d f6 8f 2a 19 a6 31 93 81 f7 41 0b d7 3d 49 e9 de bc 3f ae 39 cb 9a 4e ec df 96 3d 89 26 91 77 2a 43 7f 0e Data Ascii: xFj>gapqTesO\|]\|n>>k'??Wt,/5hC-~}OgFokcKmc]FC)uv#zX^ve}[qq%mXX\>3(tk8PaD2Y1%~+ip1A=I?9N=&w*C
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 8d e2 cd 6b a5 c9 1f 96 f8 c4 73 2b 2c 8c 4f f1 67 a9 fe 5e f5 5a ef c1 96 7a b5 c4 92 c4 67 86 48 66 57 9a 35 f9 81 39 e5 48 c7 42 38 24 76 ab b0 c2 63 96 59 5d e1 b8 49 b1 f2 15 38 27 18 27 04 63 8e 3d eb 43 49 d4 ec ac e1 67 0f 67 12 5c 4d b1 a4 8c 36 64 6c 00 a8 08 e0 1c fb 56 7f 58 a9 dc 2c 61 a6 85 04 4f e4 ce 63 8e 4c 13 0b 45 ce df 51 e9 8f 6a 98 69 f9 41 6d 24 5b 15 97 3e 6b 37 3f 5e c5 8f a0 ef 57 0e 97 0d 88 f3 ee 9a 15 66 5c e6 16 27 04 9e a5 38 3f 8d 1a 66 9d a2 9b 86 54 b9 ed 96 61 0c 84 9c 77 f9 89 03 f3 aa f6 d2 e5 d4 7d 4a a7 4a 8e 66 8e d6 de 51 14 31 ae 15 c6 dd c4 f5 cf a9 fe 95 1c 3a 5d ff 00 db 64 61 a8 99 21 50 36 a8 3b 76 60 74 3d 77 92 7a 93 da b6 2f b4 c7 74 0d 0d e4 6a 07 46 21 54 8f a7 6a 85 74 e9 2e 4a de c2 d0 dc 49 1f c8 26 Data Ascii: ks+,Og^ZzgHfW59HB8$vcY]I8''c=CIgg\M6dlVX,aOcLEQjiAm$[>k7?^Wf\'8?fTaw}JJfQ1:]da!P6;v`t=wz/tjF!Tjt.JI&
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 55 27 fd 7c 8e e8 f1 ce 3f ac 63 f8 ff 00 99 f6 90 f8 af e0 5c e0 78 9e db fe fb 15 24 3f 14 7c 15 24 9b 17 c4 96 b9 ff 00 ae 82 be 2b 1f 13 35 67 5e 76 9f f7 8f ff 00 5a a4 b7 f8 8b 73 b8 19 e3 53 cf 4a cf fd 5d c3 bf b4 ff 00 03 68 f1 e5 6b db d9 a3 ed a8 fe 20 f8 4a 43 81 e2 0b 5e 9c 7e f8 7f 8d 3b fe 13 5f 0d 6f de 35 db 5f a1 98 57 c5 eb f1 2e 68 f9 08 9f f0 1a 99 3e 28 4a dd 02 8f f8 08 c5 4b e1 9a 7d 26 75 2e 38 b4 6c e1 f8 9e 47 ff 00 07 4a 78 8f 48 d5 ff 00 e0 9f de 0f b6 d3 f5 18 26 75 f8 c5 a7 b1 58 e4 04 81 fd 95 ab 0c fe b4 57 80 ff 00 c1 7a bc 61 27 88 3f 64 0f 0d d9 33 27 cb f1 26 cd fe 55 1f f4 0f d4 07 6f ad 15 f8 67 1e 60 d6 07 88 25 49 3b fb b1 7f 81 fb 1f 05 66 5f da d9 1a c4 5a de f4 97 dc 7b 9d b7 88 bc 35 f6 65 17 9f 68 1b e4 29 12 Data Ascii: U'\|?c\x$?\|$+5g^vZsSJ]hk JC^~;_o5_W.h>(JK}&u.8lGJxH&uXWza'?d3'&Uog`%I;f_Z{5eh)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49858	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	923	OUT	GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 18468 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:41 UTC	7937	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 32 30 25 2c 35 33 25 2c 38 30 25 2c 66 72 6f 6d 2c 74 6f 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 34 30 25 2c 34 33 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 30 2c 2e 38 35 35 2c 2e 30 36 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 7d 37 30 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 Data Ascii: @keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-function:c
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 7d 2e 73 6c 69 64 65 49 6e 44 6f 77 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 44 6f 77 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 49 6e 4c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 7d 2e 73 6c 69 64 65 49 6e 4c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 4c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 49 6e 52 69 67 68 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c Data Ascii: nslate3d(0,0,0)}}.slideInDown{animation-name:slideInDown}@keyframes slideInLeft{from{transform:translate3d(-100%,0,0);visibility:visible}to{transform:translate3d(0,0,0)}}.slideInLeft{animation-name:slideInLeft}@keyframes slideInRight{from{transform:transl
2024-05-28 05:14:41 UTC	2531	IN	Data Raw: 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 2d 31 32 64 65 67 29 7d 33 33 2e 33 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 31 30 64 65 67 29 7d 34 39 2e 39 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 2d 36 64 65 67 29 7d 36 36 2e 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 34 64 65 67 29 7d 38 33 2e 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 2d 32 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 30 29 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 74 6f 70 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 31 30 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 74 6f 70 3a 61 63 74 69 Data Ascii: 5%{transform:skew(-12deg)}33.3%{transform:skew(10deg)}49.95%{transform:skew(-6deg)}66.6%{transform:skew(4deg)}83.25%{transform:skew(-2deg)}100%{transform:skew(0)}}.elementor-animation-wobble-top{transform-origin:0 100%}.elementor-animation-wobble-top:acti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49863	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	555	OUT	GET /releases/4.0.0/cookie-consent.js HTTP/1.1 Host: www.cookieconsent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:41 UTC	642	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 28 May 2024 05:14:41 GMT Content-Length: 0 Connection: close location: https://www.termsfeed.com/public/cookie-consent/4.0.0/cookie-consent.js CF-Cache-Status: HIT Age: 1146 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ehGTz%2BxLLfoZm3UAiepc9IxEZuAbKfWnOx1igg%2Bk3BuoIvbNv0rRx0tteH8SDs0Sb4eHqM5YBNR7ObgSOdIesvPPeKhWAY2v7yGiU43%2B4a7iaHuNL%2Fwd1u6mnRlQ2cvPlxJFB%2BsVRE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc3380f1fc33c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49865	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	755	OUT	GET /wp-content/uploads/2021/07/whatsapp-2.png HTTP/1.1 Host: campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0
2024-05-28 05:14:41 UTC	233	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:57:31 GMT Accept-Ranges: bytes Content-Length: 38007 Content-Type: image/png
2024-05-28 05:14:41 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 10 06 00 00 00 a4 e8 08 b9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 00 60 00 00 00 60 00 f0 6b 42 cf 00 00 80 00 49 44 41 54 78 da ec dd 77 40 d5 d5 ff 3f f0 e7 b9 97 a5 b2 55 c0 85 28 0e c4 bd c5 6d ce cc 91 03 cd 91 69 a6 a9 a5 89 3b 53 09 47 ee 95 69 66 99 a6 a6 29 9a e6 ca bd 07 96 7b e0 5e b8 10 05 99 32 ef 3d bf 3f 6e 37 fa f6 ab 4f 8e 0b e7 8e e7 e3 1f 3e 20 70 9f f7 7e d0 78 3f df af 73 8e 00 11 11 11 e5 b8 99 2b 46 f4 1c d1 33 5f 3e d9 c5 29 53 ac f3 f1 d1 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDCpHYs``kBIDATxw@?U(mi;SGif){^2=?n7O> p~x?s+F3_>)S
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: bd 7b ff fe 9f 7c 02 78 7a 16 28 e0 e5 a5 3a 15 11 11 11 d9 84 53 c8 87 fa 76 76 fa 18 5c c0 dd b5 6b e7 d4 f9 ac 49 c8 b1 22 45 54 c7 a2 7f c6 02 c0 4a cd 5c 11 2a 47 f4 f4 f2 12 c1 98 a8 a9 ba 7e 3d 02 31 17 0f 1d 1d 55 e7 22 02 78 e1 9f 53 dc dc 3c 3c f2 e7 07 ba 75 eb d7 6f c8 10 a0 48 91 e2 c5 4b 94 50 9d 8a 88 88 88 6c c2 20 6c c1 6f de de 7a 68 cf 62 c8 fa f5 86 bd c7 1c 1c 54 c7 a2 ff 8b 4b 00 ac 8c e1 2f 9a 9d 9d e3 13 bd 2e ad d1 e6 cd d8 82 c7 98 56 a9 92 ea 5c 44 40 f6 1a ff 0e 1d 7a f4 f8 e0 03 8e fa e7 14 e3 eb 1c 10 50 b1 62 b5 6a d9 a7 06 18 4f 13 20 22 22 22 ca 31 81 a8 85 e2 45 8b 3a 76 c1 17 19 21 9e 9e bb 92 0e de 3a fe 74 fb 76 d5 b1 c8 80 05 80 95 69 e3 df 68 5e d5 ac 89 13 c5 2d a4 89 7d bd 7a a9 ce 43 04 70 8d bf 2a c6 4d 03 8d c7 Data Ascii: {\|xz(:Svv\kI"ETJ\G~=1U"xS<<uoHKPl lozhbTK/.V\D@zPbjO """1E:v!:tvih^-}zCpM
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 5e 97 1c 8f 22 98 9d 37 af 3b 80 78 f8 fa fe fd cf 73 ae 00 78 24 07 c9 92 a5 4b ab 7e 01 88 ac c1 c3 87 51 51 77 ee 00 37 6f 5e b9 72 e9 92 ea 34 64 6d 5c 5d dd dd 3d 3d 55 a7 20 22 22 22 22 53 c9 7a 4b 57 5f 24 94 2a f5 f7 8f e7 58 01 20 3f c5 3a 91 d7 df 5f f5 13 27 b2 26 47 8e 18 26 01 a4 d4 eb f5 7a d5 69 c8 5a b8 b9 79 78 e4 cf af 3a 05 11 11 11 11 99 8a a6 37 f2 6a 3e f8 ff af c7 73 ac 00 10 ad 31 1e 79 fe ff c6 81 88 5e dd d3 a7 31 31 d1 d1 c0 e5 cb e7 cf 9f 3e ad 3a 0d 59 8b fc f9 bd bc 7c 7c 54 a7 20 22 22 22 22 53 91 1d 34 b7 e5 c5 5c 2c 00 a4 0b 2a c3 91 05 00 51 4e 38 7a 74 df be 5f 7f 05 b2 b2 32 33 33 33 55 a7 21 4b e7 ec ec e2 e2 ea 0a b8 bb 7b 7a 72 12 80 88 88 88 c8 f2 89 37 64 0c 4a e4 c2 12 00 c3 6e 83 0e 0e f0 c7 65 f8 15 2b a6 fa 89 Data Ascii: ^"7;xsx$K~QQw7o^r4dm\]==U """"SzKW_$X ?:_'&G&ziZyx:7j>s1y^11>:Y\|\|T """"S4\,QN8zt_2333U!K{zr7dJne+
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 92 fe d4 b6 6d aa 63 10 11 91 5a 2c 02 88 88 e8 9f 18 8f fb 6c d3 a6 4b 97 5e bd 0c c7 08 72 0b 71 b2 5a 27 e4 04 ed 22 d3 5d 1f 9b 5d 01 e0 b0 ee d9 14 7d c2 81 03 c6 b5 0e aa f3 10 11 91 5a c6 22 60 f3 e6 35 6b 96 2d 33 bf dd d9 89 88 48 0d ad d6 50 04 b4 6d db a5 cb 7b ef 01 25 4a 18 4e f5 20 b2 0a 55 e4 58 f9 c1 c5 8b 23 7b 4d 8e 9a b5 ea f6 6d 53 7d 5b b3 2b 00 86 ec 58 d0 7a 41 eb f4 74 31 0b 15 51 68 cf 1e d5 79 88 88 c8 3c dc be 7d fd fa e5 cb c0 a6 4d 9c 08 20 22 a2 6c c6 cd 33 db b5 eb da b5 77 6f a0 70 61 5f 5f 3f 3f d5 a9 88 5e d3 22 51 45 24 98 7e 69 bc d9 15 00 46 fa 7e 62 35 c6 73 29 00 11 11 fd 5f 5c 1a 40 44 44 ff c4 ce ce de de de 1e 78 fb ed ee dd fb f6 05 3c 3c f2 e7 2f 58 50 75 2a a2 57 34 56 ff 95 e6 63 d3 5f 0f 9b 6d 01 00 88 b7 b4 Data Ascii: mcZ,lK^rqZ'"]]}Z"`5k-3HPm{%JN UX#{MmS}[+XzAt1Qhy<}M "l3wopa__??^"QE$~iF~b5s)_\@DDx<</XPu*W4Vc_m
2024-05-28 05:14:41 UTC	6048	IN	Data Raw: 68 f7 6e 87 1b 9a 71 59 3f 34 6e 3c 64 c7 d4 42 0b 5a f3 c2 9f cc 83 c5 17 00 1c fd 27 22 22 22 22 22 d5 c4 57 b2 2e 4e 2c 5d ea 52 eb 71 d9 e7 33 de 7a 6b c8 8e 30 b1 a0 75 62 a2 ea 5c 44 7f 65 b1 a7 00 70 d7 7f 22 22 22 22 22 52 66 26 26 60 98 94 32 1a 76 28 3a 71 e2 48 31 49 cc 15 9f 7f ae 3a 16 d1 ff 62 b1 13 00 dc f5 9f 88 88 88 88 88 72 5d 24 42 50 38 3d 5d be 89 0a b8 d7 b3 27 2f fc c9 92 58 6c 01 c0 d1 7f 22 22 22 22 22 ca 35 b7 71 06 e9 71 71 fa 22 48 c3 91 e6 cd 47 2e 9f 74 75 6e dd d5 ab 55 c7 22 7a 19 16 b7 04 80 a3 ff 44 44 44 44 44 94 6b 1a a3 92 1c 7c f3 a6 ce 59 3a cb 1d 6f bd 35 3a 60 f2 9b f3 07 5d bd aa 3a 16 d1 ab b0 b8 09 00 8e fe 13 11 11 11 11 51 8e eb 83 a7 08 3e 7e dc 61 5c 56 7d dd 95 a0 20 5e f8 93 35 b0 b8 02 40 e4 c7 22 4c ec Data Ascii: hnqY?4n<dBZ'"""""W.N,]Rq3zk0ub\Dep"""""Rf&&`2v(:qH1I:br]$BP8=]'/Xl"""""5qqq"HG.tunU"zDDDDDk\|Y:o5:`]:Q>~a\V} ^5@"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49869	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	700	OUT	GET /wp-content/uploads/2021/06/angulo-da-seta-direita-150x150.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:47:41 GMT Accept-Ranges: bytes Content-Length: 2718 Content-Type: image/png
2024-05-28 05:14:41 UTC	2718	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0a 50 49 44 41 54 78 9c ed 9d 51 88 1d d5 19 c7 cf 0d 21 48 90 10 44 24 48 08 a1 48 10 11 1f 82 88 d8 3e 04 b1 a5 48 11 91 3c 88 94 20 52 4a 1e a4 88 14 11 09 42 10 29 45 44 44 fa 10 4a 09 d2 a7 60 83 04 5b 44 82 88 94 20 22 21 04 91 20 25 84 b2 5a 91 d4 86 ad 6c 43 58 ee ff d7 87 73 76 9d cc 9e 33 33 77 f7 ee 9d 7b f7 fe 7f 70 d9 d9 7b e7 ce 3d e7 3b ff f9 e6 3b e7 9b 73 26 04 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 98 2d c8 a0 fa 0f 10 80 Data Ascii: PNGIHDR<qpHYs+PIDATxQ!HD$HH>H< RJB)EDDJ`[D "! %ZlCXsv33w{p{=;;s&c1c1c1c1c1c1c1c1c1c1c1c1c1-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49868	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	948	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/fontello/css/tss-font.min.css?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:16 GMT Accept-Ranges: bytes Content-Length: 879 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:41 UTC	879	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 74 73 73 2d 66 6f 6e 74 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 74 73 73 2d 66 6f 6e 74 2e 65 6f 74 3f 34 30 36 37 33 36 39 31 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 74 73 73 2d 66 6f 6e 74 2e 65 6f 74 3f 34 30 36 37 33 36 39 31 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 74 73 73 2d 66 6f 6e 74 2e 77 6f 66 66 32 3f 34 30 36 37 33 36 39 31 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 74 73 73 2d 66 6f 6e 74 2e 77 6f 66 66 3f 34 30 36 37 33 36 39 31 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 Data Ascii: @font-face{font-family:tss-font;src:url('../font/tss-font.eot?40673691');src:url('../font/tss-font.eot?40673691#iefix') format('embedded-opentype'),url('../font/tss-font.woff2?40673691') format('woff2'),url('../font/tss-font.woff?40673691') format('woff')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49870	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	882	OUT	GET /wp-includes/css/dashicons.css?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:41 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:15:03 GMT Accept-Ranges: bytes Content-Length: 62361 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:14:41 UTC	7937	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 20 44 49 52 45 43 54 4c 59 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 75 69 6c 74 20 75 73 69 6e 67 20 61 20 62 75 69 6c 64 20 70 72 6f 63 65 73 73 0a 20 2a 20 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 69 78 20 65 72 72 6f 72 73 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 57 6f 72 64 50 72 65 73 73 2f 64 61 73 68 69 63 6f 6e 73 0a 20 2a 2f 0a 0a 2f 2a 20 73 74 79 6c 65 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 66 75 6e 63 74 69 6f 6e 2d 75 72 6c 2d 71 75 6f 74 65 73 2c 20 64 65 63 6c 61 72 61 74 69 6f 6e 2d 63 6f 6c 6f 6e 2d 6e 65 77 6c 69 6e 65 2d 61 66 74 65 72 20 2a 2f 0a 40 66 6f 6e Data Ascii: /** * DO NOT EDIT THIS FILE DIRECTLY * This file is automatically built using a build process * If you need to fix errors, see https://github.com/WordPress/dashicons // stylelint-disable function-url-quotes, declaration-colon-newline-after */@fon
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 59 64 2f 52 39 31 63 30 71 6f 44 57 71 38 6f 61 64 6f 6a 2f 52 44 6a 70 46 39 44 50 38 65 59 77 46 76 64 78 7a 77 4b 4a 52 5a 71 4d 4f 58 4a 4b 68 37 42 45 67 2f 54 72 4e 75 4d 75 58 2f 41 63 51 6e 50 47 77 4a 4d 41 6f 71 36 65 51 59 52 38 74 74 75 77 56 69 76 45 61 4c 68 52 49 43 61 59 4b 44 44 4e 65 78 57 41 51 48 34 72 75 4e 31 58 55 39 6e 41 52 47 32 57 2b 6a 44 64 39 37 2f 6c 73 73 70 6a 6c 31 36 2b 76 6a 71 67 77 30 65 4c 36 64 44 49 34 56 59 77 30 68 6a 57 51 43 38 59 68 68 66 63 52 64 30 51 34 5a 4a 56 65 55 34 6e 57 50 35 58 43 33 64 79 4a 52 34 76 41 4a 50 75 59 45 6d 70 70 61 57 2f 52 79 37 63 49 6e 6c 4a 45 76 57 6a 47 38 74 64 52 43 58 61 6f 52 42 46 67 6b 70 58 2b 52 55 4a 4d 43 36 58 35 4d 35 78 47 71 4e 46 72 4c 53 72 73 79 79 4a 55 37 53 Data Ascii: Yd/R91c0qoDWq8oadoj/RDjpF9DP8eYwFvdxzwKJRZqMOXJKh7BEg/TrNuMuX/AcQnPGwJMAoq6eQYR8ttuwVivEaLhRICaYKDDNexWAQH4ruN1XU9nARG2W+jDd97/lsspjl16+vjqgw0eL6dDI4VYw0hjWQC8YhhfcRd0Q4ZJVeU4nWP5XC3dyJR4vAJPuYEmppaW/Ry7cInlJEvWjG8tdRCXaoRBFgkpX+RUJMC6X5M5xGqNFrLSrsyyJU7S
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 48 53 50 6a 73 4f 76 33 56 63 33 39 65 31 6b 48 50 36 54 2f 64 61 74 71 7a 65 70 30 38 61 73 6e 6e 4e 6a 4d 4c 68 31 35 65 5a 36 61 58 43 30 6e 72 66 73 70 7a 76 2f 2f 2b 6d 6e 6b 46 72 49 2f 59 4f 37 79 56 79 2b 4b 33 33 35 39 44 2b 32 6e 39 36 36 41 6b 39 76 7a 2b 74 47 56 56 71 76 4d 36 53 50 35 73 44 2f 54 53 30 66 2f 70 30 4a 6c 4e 75 61 46 50 72 76 69 71 4b 2b 6e 73 6d 52 59 6b 4a 77 65 4c 54 4d 2f 56 6c 39 34 4b 44 76 6b 61 76 77 54 51 35 7a 6d 47 35 45 4c 53 66 72 73 78 56 70 41 6d 67 72 37 51 51 71 30 2f 57 4a 4a 39 4b 76 43 50 64 51 6e 30 67 45 42 68 48 5a 46 51 54 73 2f 67 44 4f 30 4d 50 6a 71 38 48 68 49 64 6b 7a 64 4a 32 52 67 65 7a 4b 51 55 41 50 52 48 31 37 37 63 71 56 59 58 2b 65 62 79 46 74 6c 62 6d 52 59 77 72 6e 39 58 34 7a 4c 75 6d 6e Data Ascii: HSPjsOv3Vc39e1kHP6T/datqzep08asnnNjMLh15eZ6aXC0nrfspzv//+mnkFrI/YO7yVy+K3359D+2n966Ak9vz+tGVVqvM6SP5sD/TS0f/p0JlNuaFPrviqK+nsmRYkJweLTM/Vl94KDvkavwTQ5zmG5ELSfrsxVpAmgr7QQq0/WJJ9KvCPdQn0gEBhHZFQTs/gDO0MPjq8HhIdkzdJ2RgezKQUAPRH177cqVYX+ebyFtlbmRYwrn9X4zLumn
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 48 48 31 61 74 54 2f 4b 4f 54 44 54 4d 70 48 66 52 49 70 56 4c 35 57 49 4e 67 49 38 47 33 55 42 76 61 31 35 6a 65 67 72 47 54 72 72 55 38 31 70 79 47 38 2b 6d 41 7a 62 59 65 6e 7a 71 2f 64 68 6a 34 4d 58 58 6b 34 67 6a 77 47 64 4f 50 7a 6f 47 59 37 6e 64 74 50 50 50 52 70 77 49 36 49 4f 59 79 67 33 59 65 33 66 44 38 4d 70 47 34 4e 71 49 38 4c 51 4b 56 52 41 52 49 50 68 62 64 4a 61 37 53 4a 6b 68 5a 39 61 50 50 69 62 61 73 58 74 6b 4c 62 47 72 38 4c 33 67 4e 76 69 33 71 37 57 5a 4c 42 51 77 2b 64 75 4c 33 6a 32 4c 63 64 45 68 77 59 58 57 64 36 42 34 64 7a 74 6c 43 45 52 79 31 54 6c 46 34 6b 75 2f 61 6f 55 72 34 62 49 77 6f 79 65 4b 76 45 2b 57 33 62 33 77 5a 4f 66 36 65 39 65 65 4c 45 5a 6e 76 6e 31 4e 50 6c 63 39 37 5a 78 75 4c 74 53 30 75 33 4c 7a 62 4f Data Ascii: HH1atT/KOTDTMpHfRIpVL5WINgI8G3UBva15jegrGTrrU81pyG8+mAzbYenzq/dhj4MXXk4gjwGdOPzoGY7ndtPPPRpwI6IOYyg3Ye3fD8MpG4NqI8LQKVRARIPhbdJa7SJkhZ9aPPibasXtkLbGr8L3gNvi3q7WZLBQw+duL3j2LcdEhwYXWd6B4dztlCERy1TlF4ku/aoUr4bIwoyeKvE+W3b3wZOf6e9eeLEZnvn1NPlc97ZxuLtS0u3LzbO
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 75 54 2b 52 52 66 54 35 41 58 79 78 2b 66 64 76 6b 47 31 4b 55 64 44 54 6a 67 53 2f 49 55 58 75 43 36 53 78 32 77 6e 38 35 4b 73 36 4f 70 71 76 72 38 76 47 51 6e 72 50 58 4d 68 70 69 68 42 70 6b 62 6c 6b 5a 42 6e 65 32 62 65 39 74 4e 39 68 31 62 4b 35 61 57 6c 5a 50 57 4f 36 67 4c 5a 57 46 6b 72 74 39 59 67 6e 4c 32 38 56 6b 61 30 58 33 54 30 75 4b 58 74 66 41 30 31 77 45 54 43 79 45 48 47 43 70 67 57 33 4c 5a 36 31 45 52 4d 61 39 55 6a 52 35 4e 52 59 6f 57 38 31 74 62 69 4b 2f 53 31 31 43 61 79 36 66 68 59 31 74 74 34 47 44 4b 2f 64 4f 49 75 66 54 53 4d 53 58 4f 58 34 35 55 31 30 4b 35 67 38 66 79 4b 30 32 6a 73 43 48 65 6b 31 4c 30 62 7a 57 36 2f 2f 54 5a 36 6e 4e 6f 73 69 6d 43 39 41 33 32 59 32 69 66 47 2f 48 77 43 32 2f 63 35 50 79 74 56 62 73 44 46 Data Ascii: uT+RRfT5AXyx+fdvkG1KUdDTjgS/IUXuC6Sx2wn85Ks6Opqvr8vGQnrPXMhpihBpkblkZBne2be9tN9h1bK5aWlZPWO6gLZWFkrt9YgnL28Vka0X3T0uKXtfA01wETCyEHGCpgW3LZ61ERMa9UjR5NRYoW81tbiK/S11Cay6fhY1tt4GDK/dOIufTSMSXOX45U10K5g8fyK02jsCHek1L0bzW6//TZ6nNosimC9A32Y2ifG/HwC2/c5PytVbsDF
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 42 66 68 78 58 67 4a 58 6f 71 58 34 65 56 34 42 56 36 4a 56 2b 48 56 65 41 31 65 69 39 66 68 39 58 67 44 33 6f 67 33 34 63 31 34 43 39 36 4b 74 2b 48 74 65 41 66 65 69 58 66 68 33 58 67 50 33 6f 76 33 34 66 33 34 41 44 36 49 44 2b 48 44 2b 41 67 2b 69 6f 2f 68 34 2f 67 45 50 6f 6c 50 34 64 50 34 44 44 36 4c 7a 2b 48 7a 2b 41 4b 2b 69 43 2f 68 79 2f 67 4b 76 6f 71 76 34 65 76 34 42 72 36 4a 62 2b 48 62 2b 41 36 2b 69 2b 2f 68 2b 2f 67 42 66 6f 67 66 34 63 66 34 43 58 36 4b 6e 2b 48 6e 2b 41 56 2b 69 56 2f 68 31 2f 67 4e 66 6f 76 66 34 66 66 34 41 2f 36 49 50 2b 48 50 2b 41 76 2b 69 72 2f 68 37 2f 67 48 2f 6f 6c 2f 34 64 2f 34 44 2f 37 4c 35 68 67 59 59 2f 4f 73 77 71 71 73 78 75 71 73 77 5a 71 73 78 64 71 73 77 37 70 73 67 53 32 79 4a 62 62 4d 56 74 67 32 Data Ascii: BfhxXgJXoqX4eV4BV6JV+HVeA1ei9fh9XgD3og34c14C96Kt+HteAfeiXfh3XgP3ov34f34AD6ID+HD+Ag+io/h4/gEPolP4dP4DD6Lz+Hz+AK+iC/hy/gKvoqv4ev4Br6Jb+Hb+A6+i+/h+/gBfogf4cf4CX6Kn+Hn+AV+iV/h1/gNfovf4ff4A/6IP+HP+Av+ir/h7/gH/ol/4d/4D/7L5hgYY/OswqqsxuqswZqsxdqsw7psgS2yJbbMVtg2
2024-05-28 05:14:41 UTC	8000	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 33 38 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 63 68 61 72 74 2d 70 69 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 38 34 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 38 31 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 63 6c 6f 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 39 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 63 6c 6f 75 64 2d 73 61 76 65 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 33 37 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 63 6c 6f 75 64 2d Data Ascii: :before {content: "\f238";}.dashicons-chart-pie:before {content: "\f184";}.dashicons-clipboard:before {content: "\f481";}.dashicons-clock:before {content: "\f469";}.dashicons-cloud-saved:before {content: "\f137";}.dashicons-cloud-
2024-05-28 05:14:41 UTC	6424	IN	Data Raw: 3a 20 22 5c 66 34 38 38 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 6d 65 6e 75 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 32 38 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 6d 65 6e 75 2d 61 6c 74 32 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 32 39 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 6d 65 6e 75 2d 61 6c 74 33 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 34 39 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 33 33 22 3b 0a 7d 0a 0a 2e 64 61 73 68 69 63 6f 6e 73 2d 6d 69 63 72 6f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 Data Ascii: : "\f488";}.dashicons-menu-alt:before {content: "\f228";}.dashicons-menu-alt2:before {content: "\f329";}.dashicons-menu-alt3:before {content: "\f349";}.dashicons-menu:before {content: "\f333";}.dashicons-microphone:before {content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49871	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	620	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:42 UTC	1004	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: ASP.NET_SessionId=privyxkqe0p4zrz4tbzc4gpq; path=/; HttpOnly; SameSite=Lax Set-Cookie: llbrMachine_593579=19998811=19998811; expires=Sun, 28-May-2524 05:14:42 GMT; path=/ X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tEJ76GAUZKsDWQjctXUXdd%2FVwUqCg8oDqn79n6X%2Ffb8BzunUk5EqK4YUG%2FOhnP9tv6QczmRMgub90gf66CeVZrgAgzYk0KupQZYoGt5rXCleg0Cnn8RE%2F6Z5EAliBC8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc33bbf334239-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:42 UTC	365	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:42 UTC	275	IN	Data Raw: 6a 2f 4e 45 68 62 31 31 36 4e 69 35 62 4e 31 68 4c 54 34 36 69 43 67 58 49 2f 77 3d 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 76 61 6c 75 65 3d 22 31 38 44 36 43 36 44 30 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a Data Ascii: j/NEhb116Ni5bN1hLT46iCgXI/w=" /></div><div class="aspNetHidden"><input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" /></div> <div> <span id="lbl"></span> </div> </form>
2024-05-28 05:14:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49872	104.26.7.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	564	OUT	GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1 Host: www.termsfeed.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:42 UTC	997	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:41 GMT Content-Type: application/javascript Content-Length: 206909 Connection: close Age: 23786 Cache-Control: public, immutable, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=206910 etag: "5eefb438a570c1ac15e2deee89dc27ef" expires: Mon, 27 May 2024 23:38:15 GMT last-modified: Mon, 27 May 2024 21:38:15 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-priority: 5/n x-xss-protection: 1; mode=block x-z: 3246 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKXhUE3szoFRerre8FKrSit1NhzFT9%2BD4%2BewFKZp%2BQnBU6oEHfYokPupgsZIfEXa%2BspHvH7ty0SYHt1WbC5Dc6n4dZIc%2B4oAMyesvn2%2Fl0fjCpUwFUCExnKuk6QTwVRmZ1Ls"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc33c49864249-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:42 UTC	372	IN	Data Raw: 76 61 72 20 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 Data Ascii: var cookieconsent=function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumer
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 69 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 69 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: ingTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerab
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 6f 2c 61 3d 7b 7d 2c 72 3d 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 26 26 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 26 26 21 77 69 6e 64 6f 77 2e 61 74 6f 62 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 2c 6f 7d 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 Data Ascii: nction(e,t,i){var n,o,a={},r=(n=function(){return window&&document&&document.all&&!window.atob},function(){return void 0===o&&(o=n.apply(this,arguments)),o}),s=function(e,t){return t?t.querySelector(e):document.querySelector(e)},c=function(e){var t={};ret
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 6e 73 65 72 74 41 74 7c 7c 21 65 2e 69 6e 73 65 72 74 41 74 2e 62 65 66 6f 72 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5b 53 74 79 6c 65 20 4c 6f 61 64 65 72 5d 5c 6e 5c 6e 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 66 6f 72 20 70 61 72 61 6d 65 74 65 72 20 27 69 6e 73 65 72 74 41 74 27 20 28 27 6f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 41 74 27 29 20 66 6f 75 6e 64 2e 5c 6e 20 4d 75 73 74 20 62 65 20 27 74 6f 70 27 2c 20 27 62 6f 74 74 6f 6d 27 2c 20 6f 72 20 4f 62 6a 65 63 74 2e 5c 6e 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2d 63 6f 6e 74 72 69 62 2f 73 74 79 6c 65 2d 6c 6f 61 64 65 72 23 69 6e 73 65 72 74 61 74 29 5c 6e 22 29 3b 76 Data Ascii: "object"!=typeof e.insertAt\|\|!e.insertAt.before)throw new Error("[Style Loader]\n\n Invalid value for parameter 'insertAt' ('options.insertAt') found.\n Must be 'top', 'bottom', or Object.\n (https://github.com/webpack-contrib/style-loader#insertat)\n");v
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 3d 77 2e 62 69 6e 64 28 6e 75 6c 6c 2c 69 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 28 69 29 7d 29 3b 72 65 74 75 72 6e 20 6e 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 7b 69 66 28 74 2e 63 73 73 3d 3d 3d 65 2e 63 73 73 26 26 74 2e 6d 65 64 69 61 3d 3d 3d 65 2e 6d 65 64 69 61 26 26 74 2e 73 6f 75 72 63 65 4d 61 70 3d 3d 3d 65 2e 73 6f 75 72 63 65 4d 61 70 29 72 65 74 75 72 6e 3b 6e 28 65 3d 74 29 7d 65 6c 73 65 20 6f 28 29 7d 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 44 45 42 55 47 26 26 44 45 42 55 47 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 Data Ascii: =w.bind(null,i),o=function(){v(i)});return n(e),function(t){if(t){if(t.css===e.css&&t.media===e.media&&t.sourceMap===e.sourceMap)return;n(e=t)}else o()}}e.exports=function(e,t){if("undefined"!=typeof DEBUG&&DEBUG&&"object"!=typeof document)throw new Error
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 73 65 36 34 2c 22 2b 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 29 29 29 2b 22 20 2a 2f 22 29 3b 76 61 72 20 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 6e 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 63 73 73 22 7d 29 2c 73 3d 65 2e 68 72 65 66 3b 65 2e 68 72 65 66 3d 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 72 29 2c 73 26 26 55 52 4c 2e 72 65 76 6f 6b 65 4f 62 6a 65 63 74 55 52 4c 28 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 69 31 38 6e 22 3a 7b Data Ascii: urceMappingURL=data:application/json;base64,"+btoa(unescape(encodeURIComponent(JSON.stringify(o))))+" */");var r=new Blob([n],{type:"text/css"}),s=e.href;e.href=URL.createObjectURL(r),s&&URL.revokeObjectURL(s)}},function(e){e.exports=JSON.parse('{"i18n":{
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 61 76 65 20 6d 79 20 70 72 65 66 65 72 65 6e 63 65 73 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 31 22 3a 22 53 74 72 69 63 74 6c 79 20 6e 65 63 65 73 73 61 72 79 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 73 65 72 76 69 63 65 73 20 61 76 61 69 6c 61 62 6c 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 77 65 62 73 69 74 65 20 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 79 6f 75 20 74 6f 20 75 73 65 20 63 65 72 74 61 69 6e 20 66 65 61 74 75 72 65 73 20 6f 66 20 6f 75 72 20 77 65 62 73 69 74 65 2e 22 2c 22 70 63 5f 73 6e 63 73 73 72 5f 74 65 78 74 5f 33 22 3a 22 57 Data Ascii: ave my preferences","pc_sncssr_text_1":"Strictly necessary cookies","pc_sncssr_text_2":"These cookies are essential to provide you with services available through our website and to enable you to use certain features of our website.","pc_sncssr_text_3":"W
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 75 20 63 68 6f 6f 73 65 20 74 6f 20 72 65 6d 6f 76 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 73 65 20 74 61 72 67 65 74 69 6e 67 20 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 6f 6f 6b 69 65 73 2c 20 79 6f 75 20 77 69 6c 6c 20 73 74 69 6c 6c 20 73 65 65 20 61 64 76 65 72 74 73 20 62 75 74 20 74 68 65 79 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 2e 22 2c 22 70 63 5f 79 70 72 69 76 61 63 79 5f 74 65 78 74 5f 31 22 3a 22 59 6f 75 72 20 70 72 69 76 61 63 79 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 75 73 22 2c 22 70 63 5f 79 70 72 69 76 61 63 79 5f 74 65 78 74 5f 32 22 3a 22 43 6f 6f 6b 69 65 73 20 61 72 65 20 76 65 72 79 20 73 6d 61 6c 6c 20 74 65 78 74 20 66 69 6c 65 73 20 74 68 61 74 20 61 72 65 20 Data Ascii: u choose to remove or disable these targeting or advertising cookies, you will still see adverts but they may not be relevant to you.","pc_yprivacy_text_1":"Your privacy is important to us","pc_yprivacy_text_2":"Cookies are very small text files that are
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 20 61 72 65 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 2e 22 2c 22 6e 62 5f 74 69 74 6c 65 22 3a 22 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 66 6e 63 74 5f 74 65 78 74 5f 31 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 66 6e 63 74 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 73 65 64 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 20 61 6e 64 20 74 6f 20 72 65 6d 65 6d 62 65 72 20 63 68 6f 69 63 65 73 20 79 6f 75 20 6d 61 6b 65 20 77 68 65 6e 20 79 6f 75 20 75 73 65 20 6f 75 72 20 77 65 62 73 69 74 65 2e 22 2c Data Ascii: are coming from.","nb_title":"We use cookies","pc_fnct_text_1":"Functionality cookies","pc_fnct_text_2":"These cookies are used to provide you with a more personalised experience on our website and to remember choices you make when you use our website.",
2024-05-28 05:14:42 UTC	1369	IN	Data Raw: 77 65 20 63 61 6e 20 69 6d 70 72 6f 76 65 20 6f 75 72 20 77 65 62 73 69 74 65 20 66 6f 72 20 79 6f 75 2e 22 2c 22 70 63 5f 74 72 63 6b 5f 74 65 78 74 5f 34 22 3a 22 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6c 6c 65 63 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 73 65 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 6f 6f 6b 69 65 73 20 64 6f 20 6e 6f 74 20 69 64 65 6e 74 69 66 79 20 61 6e 79 20 69 6e 64 69 76 69 64 75 61 6c 20 76 69 73 69 74 6f 72 2e 22 2c 22 70 63 5f 74 72 67 74 5f 74 65 78 74 5f 31 22 3a 22 54 61 72 67 65 74 69 6e 67 20 61 6e 64 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 6f 6f 6b 69 65 73 22 2c 22 70 63 5f 74 72 67 74 5f 74 65 78 74 5f 32 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 Data Ascii: we can improve our website for you.","pc_trck_text_4":"The information collected through these tracking and performance cookies do not identify any individual visitor.","pc_trgt_text_1":"Targeting and advertising cookies","pc_trgt_text_2":"These cookies a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49873	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:41 UTC	917	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 158087 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	7922	IN	Data Raw: 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 0a 20 20 20 20 22 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 77 74 73 2d 67 6d 61 70 2e 64 65 66 61 75 6c 74 22 2c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 24 77 72 61 70 70 65 72 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 6d 61 72 6b 65 72 73 22 29 3b 0a 20 20 20 20 20 20 69 66 28 24 77 72 61 70 70 65 72 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 7b 0a 20 20 20 20 20 20 Data Ascii: jQuery(window).on("elementor/frontend/init", function () { elementorFrontend.hooks.addAction( "frontend/element_ready/wts-gmap.default", function ($scope) { var $wrapper = $scope.find(".eae-markers"); if($wrapper.length == 0){
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6f 20 35 30 25 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 73 74 61 72 74 5f 70 6f 73 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 2f 2a 63 72 65 61 74 65 20 73 6c 69 64 65 72 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 69 6d 67 2d 63 6f 6d 70 2d 73 6c 69 64 65 72 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 20 3d 20 73 6c 69 64 65 72 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 2f 2a 70 6f 73 69 74 69 6f 6e 20 74 68 65 20 73 6c 69 64 65 72 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 74 6f 70 20 3d 20 68 20 2f 20 32 20 2d Data Ascii: o 50%:/ img.style.width = start_pos + "px"; /create slider:/ slider = $scope.find(".eae-img-comp-slider"); slider = slider[0]; /position the slider in the middle:*/ slider.style.top = h / 2 -
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6c 69 64 65 28 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 72 65 73 69 7a 65 20 74 68 65 20 69 6d 61 67 65 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 78 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 70 6f 73 69 74 69 6f 6e 20 74 68 65 20 73 6c 69 64 65 72 3a 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 74 6f 70 20 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 20 2d 0a 20 20 20 20 20 20 Data Ascii: } function slide(x) { /resize the image:/ img.style.height = x + "px"; /position the slider:/ slider.style.top = img.offsetHeight - slider.offsetHeight / 2 -
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 72 61 70 70 65 72 2e 64 61 74 61 28 22 63 6c 69 63 6b 61 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 62 6f 61 72 64 20 3d 20 6f 75 74 65 72 5f 77 72 61 70 70 65 72 2e 64 61 74 61 28 22 6b 65 79 62 6f 61 72 64 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 6f 6c 6c 62 61 72 20 3d 20 6f 75 74 65 72 5f 77 72 61 70 70 65 72 2e 64 61 74 61 28 22 73 63 72 6f 6c 6c 62 61 72 22 29 3b 0a 20 20 20 20 20 20 20 20 61 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 64 69 72 65 63 74 69 6f 6e 2c 0a 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 3a 20 65 66 66 65 63 74 2c 0a 20 20 20 20 20 20 20 20 20 20 73 70 61 63 65 42 65 74 77 65 65 6e 3a 20 73 70 61 63 65 2e 64 65 73 6b 74 6f 70 2c 0a 20 20 Data Ascii: rapper.data("clickable"); var keyboard = outer_wrapper.data("keyboard"); var scrollbar = outer_wrapper.data("scrollbar"); adata = { direction: direction, effect: effect, spaceBetween: space.desktop,
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 61 79 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 64 2e 73 65 74 54 69 6d 65 28 64 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 65 78 64 61 79 73 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 31 30 30 30 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 65 78 70 20 74 69 6d 65 27 2c 63 6f 6f 6b 69 65 5f 65 78 70 69 72 65 29 3b 0a 20 20 20 20 20 20 2f 2f 64 2e 73 65 74 54 69 6d 65 28 64 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 28 20 65 78 64 61 79 73 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 31 30 30 30 29 29 3b 0a 20 20 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 20 2b 20 64 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 64 Data Ascii: ays) { var d = new Date(); d.setTime(d.getTime() + exdays * 60 * 60 * 1000); //console.log('exp time',cookie_expire); //d.setTime(d.getTime() + ( exdays * 60 * 60 * 1000)); var expires = "expires=" + d.toUTCString(); d
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 6e 6f 6e 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 6d 65 73 73 61 67 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 2e 65 61 65 2d 65 67 74 2d 6d 65 73 73 61 67 65 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 68 69 64 65 5f 70 61 72 65 6e 74 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 73 63 Data Ascii: e").css("display", "none"); } if (value === "message") { $scope.find(".eae-egt-message").css("display", "block"); } if (value === "hide_parent") { if (!$sc
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 65 66 20 3d 20 24 75 72 6c 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 22 68 69 64 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 73 63 6f 70 65 2e 68 61 73 43 6c 61 73 73 28 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 64 69 74 2d 6d 6f 64 65 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ef = $url1; } } } if (value === "hide") { if (!$scope.hasClass("elementor-element-edit-mode")) { $scope .find("." + unqId)
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 65 78 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 62 65 66 6f 72 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e Data Ascii: .find(b) .addClass("flip-clock-active"); $scope .find("." + unqId) .find(b) .next() .addClass("flip-clock-before"); } else { $scope .fin
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6c 69 70 2d 63 6c 6f 63 6b 2d 61 63 74 69 76 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 62 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 65 78 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 62 65 66 6f 72 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 2e 22 20 2b 20 75 6e 71 49 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6e 64 28 22 Data Ascii: lip-clock-active"); $scope .find("." + unqId) .find(b) .next() .addClass("flip-clock-before"); } else { $scope .find("." + unqId) .find("
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 75 6e 74 44 6f 77 6e 44 61 74 65 20 3d 20 64 61 74 65 31 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2a 20 69 66 20 28 65 6c 65 6d 65 6e 74 5f 74 79 70 65 20 3d 3d 3d 20 27 63 6f 75 6e 74 64 6f 77 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 65 31 20 3d 20 6e 65 77 20 44 61 74 65 28 63 6f 75 6e 74 44 6f 77 6e 44 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 44 6f 77 6e 44 61 74 65 20 3d 20 64 61 74 65 31 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 69 72 73 Data Ascii: untDownDate = date1.getTime(); } } /* if (element_type === 'countdown') { date1 = new Date(countDownDate); countDownDate = date1.getTime(); } else { var firs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49876	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	915	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js?ver=1.13.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 158217 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	7922	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 20 3d 20 28 7b 0a 0a 2f 2a 2a 2a 2f 20 34 38 30 3a 0a 2f 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 63 6f 6e 73 74 20 45 41 45 41 64 64 54 6f 43 61 6c 65 6e 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 29 20 7b 0a 09 09 63 6f 6e 73 74 20 65 49 64 20 3d 20 24 73 63 6f 70 65 2e 61 74 74 72 28 27 64 61 74 61 2d 69 64 27 29 3b 0a 09 09 63 6f 6e 73 74 20 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 6c 65 6d 65 6e 74 Data Ascii: /****/ (() => { // webpackBootstrap/**/ var __webpack_modules__ = ({// 480:/**/ (() => {(function ($) {const EAEAddToCalender = function ($scope) {const eId = $scope.attr('data-id');const element = document.querySelector('.element
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 64 65 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 63 6c 61 73 73 20 53 77 69 70 65 72 42 61 73 65 7b 0a 0a 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 64 61 74 61 2c 20 77 69 64 2c 20 73 63 6f 70 65 20 3d 20 6e 75 6c 6c 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 77 69 70 65 72 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 20 3d 20 27 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 27 20 2b 20 77 69 64 20 2b 20 27 20 2e 65 61 65 2d 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 27 3b 0a 09 09 6c 65 74 20 61 63 74 69 76 65 5f 62 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f Data Ascii: de = () => { return false;}class SwiperBase{ constructor(data, wid, scope = null) { let swiper = []; let swiperContainer = '.elementor-element-' + wid + ' .eae-swiper-container';let active_breakpoints = elementorFrontend.co
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 73 20 3d 20 74 65 73 74 69 6d 6f 6e 69 61 6c 53 6c 69 64 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6d 61 67 65 2e 65 61 65 2d 70 72 65 73 65 74 2d 32 27 29 3b 0a 0a 09 09 09 09 09 09 69 66 28 74 65 73 74 69 6d 6f 6e 69 61 6c 53 6c 69 64 65 72 20 21 3d 3d 20 6e 75 6c 6c 29 7b 0a 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 09 09 09 09 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 3d 20 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3b 0a 09 09 09 09 09 09 09 09 69 66 28 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 Data Ascii: s = testimonialSlider.querySelectorAll('.eae-additional-image.eae-preset-2');if(testimonialSlider !== null){window.addEventListener("resize", function(){const currentWindowWidth = this.window.innerWidth;if(currentWindowWi
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 20 20 20 2f 2f 20 69 6e 63 69 63 61 74 6f 72 4c 65 66 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 70 65 6e 57 72 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 57 72 6e 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 73 65 74 74 69 6e 67 73 2e 6f 70 65 6e 57 72 6e 4d 73 67 54 78 74 20 2b 20 22 20 22 20 2b 20 6f 70 65 6e 6d 69 6e 74 73 20 2b 20 22 20 4d 69 6e 75 74 65 73 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: // incicatorLeft.appendChild(openWrn); openWrn.innerHTML = settings.openWrnMsgTxt + " " + openmints + " Minutes"; } }
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 7d 65 6c 73 65 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 64 69 65 6e 74 43 6f 6c 6f 72 41 67 20 3d 20 28 4d 61 74 68 2e 50 49 2f 31 38 30 29 20 20 2a 20 28 28 28 33 36 30 20 2d 20 28 39 30 20 2d 20 73 74 61 72 74 41 6e 67 6c 65 29 29 20 2d 20 28 64 61 74 61 2e 70 72 6f 67 72 65 73 73 5f 77 69 64 74 68 2f 32 29 29 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 52 65 73 75 6c 74 20 3d 20 20 28 76 Data Ascii: }else{ gradientColorAg = (Math.PI/180) * (((360 - (90 - startAngle)) - (data.progress_width/2)) ); } } }else{ pointResult = (v
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 20 70 65 72 63 65 6e 74 20 3e 3d 20 72 65 73 75 6c 74 20 7c 7c 20 72 65 73 75 6c 74 20 3d 3d 20 31 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 63 72 49 6e 74 65 72 76 61 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 76 61 6c 75 65 43 6f 6e 74 61 69 6e 65 72 20 21 3d 3d 20 6e 75 6c 6c 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 43 6f 6e 74 61 69 6e 65 72 2e 69 6e 6e 65 72 48 54 4d 4c Data Ascii: } if( percent >= result \|\| result == 1){ clearInterval(acrInterval); if(valueContainer !== null){ valueContainer.innerHTML
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6d 65 28 77 72 61 70 70 65 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 20 3a 20 27 62 6f 74 74 6f 6d 2d 69 6e 2d 76 69 65 77 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 61 62 6e 6f 6c 49 66 72 61 6d 65 28 65 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 69 64 65 6f 54 79 70 65 20 3d 20 65 6c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 76 69 64 65 6f 2d Data Ascii: me(wrapper); }, offset : 'bottom-in-view' }); } } } function labnolIframe(ele) { let videoType = ele.getAttribute('data-video-
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 66 72 6f 6d 7d 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 3a 20 20 7b 20 27 74 72 61 6e 73 66 6f 72 6d 27 3a 20 74 6f 20 7d 20 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 69 74 65 6d 73 29 2e 70 6c 61 79 4b 65 79 66 72 61 6d 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 20 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 3a 20 44 61 74 61 2e 44 75 72 61 74 69 6f 6e 2b 27 6d 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 3a 20 27 6c 69 6e 65 61 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 61 79 3a 20 Data Ascii: from}, to: { 'transform': to } , }); $(items).playKeyframe({ name:animationName , duration: Data.Duration+'ms', timingFunction: 'linear', delay:
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6b 65 72 73 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 69 68 2d 6d 61 72 6b 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 6f 6c 74 69 70 73 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 61 65 2d 69 68 2d 74 6f 6f 6c 74 69 70 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 61 6e 69 6d 61 74 69 6f 6e 20 3d 20 73 65 74 74 69 6e 67 73 2e 74 6f 6f 6c 74 69 70 5f 61 6e 69 6d 61 74 69 6f 6e 5f 74 79 70 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 72 65 76 69 65 77 20 3d 20 77 72 61 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e Data Ascii: kers = wrapper.querySelectorAll('.eae-ih-marker'); const tooltips = wrapper.querySelectorAll('.eae-ih-tooltip'); const animation = settings.tooltip_animation_type; const preview = wrapper.querySelectorAll(".
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 74 20 74 69 70 70 79 5f 69 6e 64 65 78 20 3d 20 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6d 61 72 6b 65 72 27 29 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 69 66 28 6d 61 72 6b 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 65 61 65 2d 69 68 2d 72 65 70 2d 74 6f 6f 6c 74 69 70 2d 73 68 6f 77 27 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 69 66 20 28 74 69 70 70 79 49 6e 73 74 61 6e 63 65 5b 74 69 70 70 79 5f 69 6e 64 65 78 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: // const tippy_index = this.getAttribute('data-marker') - 1; // if(marker.classList.contains('eae-ih-rep-tooltip-show')){ // if (tippyInstance[tippy_index]) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49877	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	908	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 15073 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6c 2c 61 3b 6c 3d 74 68 69 73 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6c 3d 7b 7d 2c 61 3d 7b 7d 3b 74 72 Data Ascii: /! Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */(function(){var l,a;l=this,a=function(){"use strict";var l={},a={};tr
2024-05-28 05:14:42 UTC	7150	IN	Data Raw: 64 66 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 70 64 66 22 5d 2c 5b 22 66 69 6c 65 2d 77 6f 72 64 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 77 6f 72 64 22 5d 2c 5b 22 66 69 6c 65 2d 65 78 63 65 6c 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 65 78 63 65 6c 22 5d 2c 5b 22 66 69 6c 65 2d 70 6f 77 65 72 70 6f 69 6e 74 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 70 6f 77 65 72 70 6f 69 6e 74 22 5d 2c 5b 22 66 69 6c 65 2d 69 6d 61 67 65 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c 65 2d 70 68 6f 74 6f 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c 65 2d 70 69 63 74 75 72 65 2d 6f 22 2c 22 66 61 72 22 2c 22 66 69 6c 65 2d 69 6d 61 67 65 22 5d 2c 5b 22 66 69 6c Data Ascii: df-o","far","file-pdf"],["file-word-o","far","file-word"],["file-excel-o","far","file-excel"],["file-powerpoint-o","far","file-powerpoint"],["file-image-o","far","file-image"],["file-photo-o","far","file-image"],["file-picture-o","far","file-image"],["fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49878	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	924	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js?ver=1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 4572 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	4572	IN	Data Raw: 2f 2f 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 65 6c 65 6d 65 6e 74 6f 72 2f 72 65 6e 64 65 72 2f 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 27 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 6a 51 75 65 72 79 28 22 2e 65 61 65 2d 61 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 2d 77 72 61 70 70 65 72 20 2e 65 61 65 2d 61 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 22 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 76 69 73 69 62 6c 65 22 29 3b 0a 0a 09 2f 2f 73 65 74 20 61 6e 69 6d 61 74 69 6f 6e 20 74 69 6d 69 6e 67 0a 09 76 61 72 20 61 6e 69 6d 61 74 69 6f 6e 44 65 6c 61 79 20 3d 20 32 35 30 30 2c 0a 09 2f 2f 6c 6f 61 64 69 6e 67 Data Ascii: //jQuery.noConflict();jQuery(document).on('elementor/render/animation-text',function(e){jQuery(".eae-at-animation-text-wrapper .eae-at-animation-text:first-child").addClass("is-visible");//set animation timingvar animationDelay = 2500,//loading

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49875	157.240.251.9	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	546	OUT	GET /en_US/fbevents.js?v=next HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:42 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:42 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f Data Ascii: "error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterato
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 Data Ascii: ypeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 Data Ascii: undefined":i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})()
2024-05-28 05:14:42 UTC	726	IN	Data Raw: 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e Data Ascii: n(a){return{error:null,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 3a 22 6e 75 6c 6c 22 2c 70 61 72 61 6d 3a 69 2c 74 79 70 65 3a 22 4e 45 47 41 54 49 56 45 5f 45 56 45 4e 54 5f 50 41 52 41 4d 22 7d 29 3b 6f 3d 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 3a 6f 3d 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 21 21 67 5b 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3b 62 72 65 61 6b 7d 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6d 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 61 2c 70 61 72 61 6d 3a 69 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 50 41 52 41 4d 22 7d 29 7d 7d 7d 72 65 74 75 72 6e 20 6e 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 61 3d 70 28 61 2c 63 29 3b 61 2e 65 72 72 6f 72 26 26 62 28 61 2e 65 72 72 6f 72 29 3b 69 66 28 61 2e 77 61 72 6e 69 6e 67 73 29 66 6f 72 28 63 3d 30 3b 63 3c Data Ascii: :"null",param:i,type:"NEGATIVE_EVENT_PARAM"});o=k;break;case e:o=typeof l==="string"&&!!g[l.toUpperCase()];break}if(!o)return m({eventName:a,param:i,type:"INVALID_PARAM"})}}}return n(h)}function r(a,c){a=p(a,c);a.error&&b(a.error);if(a.warnings)for(c=0;c<
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 74 63 68 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 31 65 33 2c 63 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 28 6e 75 6c 6c 2c 22 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 62 2e Data Ascii: leRegistered("SignalsFBEventsBatcher",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=1e3,c=10;function d(){var b=a.get(null,"batching");return b!=null?b.
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 75 66 66 65 72 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 Data Ascii: b["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBufferConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEve
2024-05-28 05:14:42 UTC	1500	IN	Data Raw: 6d 62 65 72 28 29 29 2c 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6c 69 65 6e 74 53 69 64 65 50 69 78 65 6c 46 6f 72 6b 69 6e 67 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f Data Ascii: mber()),disableBackupTimeout:b.allowNull(b["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsClientSidePixelForkingConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49880	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	700	OUT	GET /wp-content/uploads/2021/07/Capa-Video-Campo-Bahia-Desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:54:27 GMT Accept-Ranges: bytes Content-Length: 312231 Content-Type: image/jpeg
2024-05-28 05:14:42 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 03 00 05 56 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCV"}!1AQa"q2
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: dc a8 ad 39 84 d3 b6 c5 70 09 38 14 e0 9e f5 2c aa 02 9c a0 dd ec 29 88 ad ce 17 bd 35 2b 89 79 8d 64 dc 73 9a 64 b1 f1 82 dd ea ca 84 1d 47 e9 4d 95 11 b1 85 cf e1 4b 98 ae 52 a8 83 3c ef fd 29 8c bb 4e 33 56 c4 6b d3 cb a4 d8 be 95 4a 44 f2 b2 a5 38 37 cb 8c d4 cf 1a 9e ab 48 b0 a3 1c 05 aa e6 24 a9 f6 6c b6 f0 b4 13 f3 7e 15 7b ec cb ea b5 0c f1 85 6c 7a 51 cf cc 3b 32 b9 45 7f bc 29 52 d6 39 17 ae de 7a d3 c7 1d 28 6f 98 60 d5 5e 5d 04 33 ec 0b ff 00 3d ff 00 f1 da 63 d9 4a 1b 11 7c df a5 4d 2a 2a a8 20 7f 9c 53 55 5d b8 5a a5 29 77 1f 33 23 16 97 49 f3 08 ff 00 f1 e1 51 92 14 e0 13 56 02 48 79 c5 34 a4 6c 72 63 a3 9a fb 86 fb 85 aa b1 8b 21 4f 5f 4a 73 06 0f 9d bd a8 58 3c c5 f9 65 65 c7 f9 f5 a4 6b 49 0f ca b3 93 9f ef 52 f7 5b dc 42 ee 93 1f ea bf Data Ascii: 9p8,)5+ydsdGMKR<)N3VkJD87H$l~{lzQ;2E)R9z(o`^]3=cJ\|M** SU]Z)w3#IQVHy4lrc!O_JsX<eekIR[B
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 0f 5a a7 2c 6e 5e 23 2c ad 46 8f 3c 8e 25 a0 75 7d 86 9b b1 bd 2b 4e 58 14 93 f2 71 f4 aa e2 c1 b7 7d ee 2b d3 55 23 d4 f2 39 59 55 53 3d 69 02 07 3b 49 ab a6 cc aa 61 3f 5a 6d b5 91 13 ab 4e 3e 5c fc c1 57 92 3b d3 e7 8e e0 a3 a9 57 c8 8f 38 db 41 5d 9c 29 e2 ba 29 2c 7c 25 34 7b 60 9a ea 26 db ff 00 2d 54 11 9a c9 9f 4c da db 61 b8 59 17 fb d8 ac e1 88 8c fb fc cd a5 0d 34 33 da 23 27 76 26 8f b2 b7 72 df f7 cd 5e 5b 07 07 9c 50 6c c8 ed 5b 2a 86 6a 9f 73 39 ad 81 39 1f ad 31 ed f6 2e 5a af 4b 6b 22 b7 cb 9f fb e6 9a b6 b2 b7 3f cd 6a bd a7 5b 9c ce 9b 72 28 15 39 da 29 ff 00 63 19 c8 35 70 db 48 0e 18 50 b6 93 37 00 fe 86 9f b4 ec c1 51 97 6b 99 f2 5a 29 6e 57 f5 a6 b5 ba aa e4 2f eb 57 e7 b1 91 7e 61 d6 a2 36 f2 01 9c 55 c6 a7 99 7e ce 51 e8 67 f9 2b Data Ascii: Z,n^#,F<%u}+NXq}+U#9YUS=i;Ia?ZmN>\W;W8A])),\|%4{`&-TLaY43#'v&r^[Pl[*js991.ZKk"?j[r(9)c5pHP7QkZ)nW/W~a6U~Qg+
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 2d 7a e6 15 d8 5f 3f 5a 6d d6 b5 77 73 85 fb 4b 6d fe ea 9a aa 60 70 d8 29 4e fb 1b 96 51 e5 91 bb 8e 94 f9 69 fc 46 2e a5 6e 6b 32 68 45 fc ee 16 de 26 6f a5 6a db 4b ae e9 b1 af 97 64 43 63 90 2b a7 f0 ee 85 6f 63 67 1b 2f 25 97 27 8a d5 58 62 63 83 1a fe 55 e4 62 31 d1 94 9c 54 74 3d cc 3e 5b 2e 5e 66 ec d9 91 e1 3b ed 53 50 85 a4 bc 8b 6a af 1d 30 73 5b 41 40 e8 cd 44 51 47 1a e1 13 14 ea f2 e7 2e 79 5d 23 da a5 17 4e 9a 8b 77 1a c8 18 73 59 7a a5 9d cc 32 19 ec c6 e6 3f c2 6b 5a 91 86 e1 8c 51 19 72 95 28 a9 1c e5 f7 89 f5 2d 0a 00 d7 b6 6b d3 f8 6b 26 6f 8b 53 ee 6f 26 d1 78 ec 6b 7f c5 d6 1f 69 d3 fc a2 37 12 6b 8c 6f 05 dd c8 fb 6d 60 2f f3 62 bd 4c 34 30 73 a7 cd 53 73 c2 c7 56 c7 d2 ad c9 45 e8 75 1e 0f f1 ad ef 88 ee cc 52 5a aa a2 a9 25 97 b5 Data Ascii: -z_?ZmwsKm`p)NQiF.nk2hE&ojKdCc+ocg/%'XbcUb1Tt=>[.^f;SPj0s[A@DQG.y]#NwsYz2?kZQr(-kk&oSo&xki7kom`/bL40sSsVEuRZ%
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6d 57 8f ee 8c 1a a6 34 4d 0e df e7 31 6d 62 dd 4b 73 42 74 5b e6 48 35 30 b5 2d 3a 7d 62 ed 18 67 cb 1e bf 5a eb 34 0b 0b 6b 6b 51 18 4d ad 8f ee d2 5a e9 51 4c db 94 e1 40 e9 5a 09 6f 04 01 48 7f c6 a7 11 88 e7 8a 8a e8 09 03 59 89 07 06 a1 f9 e2 93 18 e2 ac b4 91 b2 7f ad 5f fb ea a0 7b fb 54 ca b4 eb 91 fe d0 ae 58 f3 31 8a d7 08 14 97 38 15 42 f3 54 b7 51 b2 29 32 d8 e8 0d 17 92 59 ba e6 59 be 50 3f bd 4c d3 74 ed 1e e0 b1 86 e9 77 37 f0 ee c9 ad 94 79 75 68 0c 6b fd 42 7d ec bb bf 1a a3 a5 6a ed 0d d3 bd dc ac a1 7e ed 75 57 1e 1c b0 63 fb e9 18 d6 6e a1 e1 3d 18 ce a1 8b 9f f8 15 75 d2 af 4d ab 58 92 a6 b9 e2 dd 1e d7 4d f3 67 73 b4 7d ed aa 4d 70 fa a7 c4 ff 00 0b 46 4b 5b cd 36 ef ef 2c 24 57 a2 ff 00 c2 13 a1 4f 0e c9 6d f7 a1 1f 75 9b 23 e9 51 Data Ascii: mW4M1mbKsBt[H50-:}bgZ4kkQMZQL@ZoHY_{TX18BTQ)2YYP?Ltw7yuhkB}j~uWcn=uMXMgs}MpFK[6,$WOmu#Q
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 6b 46 2d 52 02 77 13 f5 f9 b9 a7 4f a8 c6 57 6c 6f fa d7 3d 38 d4 a7 a1 5c f1 20 89 1a c6 01 6f 04 bd 3b 16 a6 3e b9 aa db 2f 97 1c 69 37 a6 d7 aa 97 b6 37 97 12 f9 90 4f b5 48 e5 59 89 a6 69 96 17 56 b7 6a f2 4d b8 29 e4 73 5b fb 38 cb 57 a9 97 31 5e 7d 6b c7 37 37 8b f6 5d 21 a3 55 6f 95 7c ad d9 f7 ad eb 38 fc 5d 3c 61 af f5 18 ed d7 fb a4 f3 53 47 a9 5c a0 d8 af f2 e3 1c 55 7b 96 d4 e5 60 d0 6a be 5e 39 55 db 9a c6 57 96 96 4b f1 2a 32 4b a9 a9 65 2d 8c 12 ec 96 fb cc 90 30 2d d6 b7 f4 fd 63 40 48 f7 4d 3a 2b 0e 7e 62 2b 86 fb 3e a5 3b e6 f3 59 52 3f d9 8c 2d 48 da 3e 9d 3a fe fe 5d df f0 2a e3 ab 84 8d 4d d9 a2 a8 74 7a df 8f 2c 98 b5 ad b8 0c bf df 5e 86 a8 45 e2 5d 3e 68 70 f6 c2 4f f7 85 61 c1 6a a8 70 aa bb 46 40 35 72 28 60 54 05 86 df 6d b5 b4 Data Ascii: kF-RwOWlo=8\ o;>/i77OHYiVjM)s[8W1^}k77]!Uo\|8]<aSG\U{`j^9UWK2Ke-0-c@HM:+~b+>;YR?-H>:]Mtz,^E]>hpOajpF@5r(`Tm
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 2e e7 56 8c b1 3f c2 a5 bf 51 58 91 5a 6a d1 47 b0 42 ff 00 f7 c9 ab 91 69 fa a4 b1 fe f6 02 7f e0 35 b4 69 d4 a7 bd 5b fd c6 7e c6 95 5f 86 9d 8f cc df f8 3b 1e ce ca df fe 09 d5 e0 b7 b6 b8 dc df f0 ba b4 e1 8d bd bf b2 35 7a 2a 3f f8 3b 06 d6 f2 0f f8 27 4f 82 da 78 99 57 fe 17 56 9c 06 7f ec 11 ab d1 5f 9e f1 27 fc 8c de b7 d1 1f 49 96 d3 f6 58 55 1b 5b 56 78 e1 f8 45 63 b9 bc a9 6e 59 36 f0 a5 b0 3f 0f 7a 9b 48 f8 72 f6 32 66 09 5a 15 da 47 31 0f 31 81 ea 0b 57 4e 97 3a 96 31 25 bd bb 7a 64 b0 fe 46 9c 6f a6 8c 83 24 11 a8 35 f9 7c 78 93 19 d1 1e c7 25 38 ec 73 31 7c 25 22 46 0d 3b 47 1e 72 b2 6e 04 9f d6 a3 bb f8 3f 3e d4 6b 62 db 95 3f d6 ac 8a 0e 73 df 35 d7 36 b4 a3 e4 36 d1 c8 bd c6 48 aa 9f db ad 14 cc 53 45 f9 30 36 79 52 73 9e fc b1 a2 3c 41 Data Ascii: .V?QXZjGBi5i[~_;5z*?;'OxWV_'IXU[VxEcnY6?zHr2fZG11WN:1%zdFo$5\|x%8s1\|%"F;Grn?>kb?s566HSE06yRs<A
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 8e 78 dd 83 f3 01 ef 8a be ba 46 97 6a b2 3e 90 df 67 8d c6 d6 1e 61 70 71 fc aa a9 e7 15 a8 54 e6 8b d5 0e c7 65 73 fb 4f 7c 5d 99 7c 98 6e a3 b7 8e 3e 3e d9 6b a4 c6 0a f3 d3 27 3f ca a1 d6 be 3f fc 57 d4 74 a9 2c b5 2f 1a dc 35 bc d0 98 ae 1b 68 89 a6 43 fc 2d b0 03 ce 7e b5 c8 dd 7d 9b 4f 81 67 b4 d6 ad d2 46 6f f5 6b 1c 8b f2 fb 63 82 d9 e9 da a0 bc 4b fb b3 b2 6d 63 cc 5d 98 8e 46 85 43 29 f4 e0 75 fa d7 76 23 8b b3 7a b1 b7 b7 95 bd 58 a9 d3 a7 19 5e c4 ba 76 ab 65 e4 7d 8e 5b 71 17 f0 ac ce 71 8f a7 14 b6 25 6d 89 b7 b7 58 58 ff 00 0b 5c 3e 33 f9 d5 28 74 ab 6b 38 e3 9f 50 d5 61 fb 44 92 32 59 c3 31 25 b7 1f 7e 9d 2a f4 d6 f7 2b 69 70 f1 08 9d f6 8f 2a 19 a6 31 93 81 f7 41 0b d7 3d 49 e9 de bc 3f ae 39 cb 9a 4e ec df 96 3d 89 26 91 77 2a 43 7f 0e Data Ascii: xFj>gapqTesO\|]\|n>>k'??Wt,/5hC-~}OgFokcKmc]FC)uv#zX^ve}[qq%mXX\>3(tk8PaD2Y1%~+ip1A=I?9N=&w*C
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 8d e2 cd 6b a5 c9 1f 96 f8 c4 73 2b 2c 8c 4f f1 67 a9 fe 5e f5 5a ef c1 96 7a b5 c4 92 c4 67 86 48 66 57 9a 35 f9 81 39 e5 48 c7 42 38 24 76 ab b0 c2 63 96 59 5d e1 b8 49 b1 f2 15 38 27 18 27 04 63 8e 3d eb 43 49 d4 ec ac e1 67 0f 67 12 5c 4d b1 a4 8c 36 64 6c 00 a8 08 e0 1c fb 56 7f 58 a9 dc 2c 61 a6 85 04 4f e4 ce 63 8e 4c 13 0b 45 ce df 51 e9 8f 6a 98 69 f9 41 6d 24 5b 15 97 3e 6b 37 3f 5e c5 8f a0 ef 57 0e 97 0d 88 f3 ee 9a 15 66 5c e6 16 27 04 9e a5 38 3f 8d 1a 66 9d a2 9b 86 54 b9 ed 96 61 0c 84 9c 77 f9 89 03 f3 aa f6 d2 e5 d4 7d 4a a7 4a 8e 66 8e d6 de 51 14 31 ae 15 c6 dd c4 f5 cf a9 fe 95 1c 3a 5d ff 00 db 64 61 a8 99 21 50 36 a8 3b 76 60 74 3d 77 92 7a 93 da b6 2f b4 c7 74 0d 0d e4 6a 07 46 21 54 8f a7 6a 85 74 e9 2e 4a de c2 d0 dc 49 1f c8 26 Data Ascii: ks+,Og^ZzgHfW59HB8$vcY]I8''c=CIgg\M6dlVX,aOcLEQjiAm$[>k7?^Wf\'8?fTaw}JJfQ1:]da!P6;v`t=wz/tjF!Tjt.JI&
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 55 27 fd 7c 8e e8 f1 ce 3f ac 63 f8 ff 00 99 f6 90 f8 af e0 5c e0 78 9e db fe fb 15 24 3f 14 7c 15 24 9b 17 c4 96 b9 ff 00 ae 82 be 2b 1f 13 35 67 5e 76 9f f7 8f ff 00 5a a4 b7 f8 8b 73 b8 19 e3 53 cf 4a cf fd 5d c3 bf b4 ff 00 03 68 f1 e5 6b db d9 a3 ed a8 fe 20 f8 4a 43 81 e2 0b 5e 9c 7e f8 7f 8d 3b fe 13 5f 0d 6f de 35 db 5f a1 98 57 c5 eb f1 2e 68 f9 08 9f f0 1a 99 3e 28 4a dd 02 8f f8 08 c5 4b e1 9a 7d 26 75 2e 38 b4 6c e1 f8 9e 47 ff 00 07 4a 78 8f 48 d5 ff 00 e0 9f de 0f b6 d3 f5 18 26 75 f8 c5 a7 b1 58 e4 04 81 fd 95 ab 0c fe b4 57 80 ff 00 c1 7a bc 61 27 88 3f 64 0f 0d d9 33 27 cb f1 26 cd fe 55 1f f4 0f d4 07 6f ad 15 f8 67 1e 60 d6 07 88 25 49 3b fb b1 7f 81 fb 1f 05 66 5f da d9 1a c4 5a de f4 97 dc 7b 9d b7 88 bc 35 f6 65 17 9f 68 1b e4 29 12 Data Ascii: U'\|?c\x$?\|$+5g^vZsSJ]hk JC^~;_o5_W.h>(JK}&u.8lGJxH&uXWza'?d3'&Uog`%I;f_Z{5eh)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49879	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	922	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js?ver=2.0.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 42983 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	7923	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2a 20 41 75 74 68 6f 72 20 3a 20 56 69 6e 63 65 6e 74 20 47 61 72 72 65 61 75 20 20 2d 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 0a 2f 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 2f 2a 20 44 65 6d 6f 20 2f 20 47 65 6e 65 72 61 74 6f 72 20 3a 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 2f 70 61 72 74 69 63 6c 65 73 2e 6a 73 0a 2f 2a 20 47 69 74 48 75 62 20 3a 20 67 69 74 68 75 62 2e 63 6f 6d 2f 56 69 6e 63 65 6e 74 47 61 72 72 65 61 75 2f 70 61 72 74 69 63 6c 65 73 2e 6a Data Ascii: /* -----------------------------------------------/* Author : Vincent Garreau - vincentgarreau.com/* MIT license: http://opensource.org/licenses/MIT/* Demo / Generator : vincentgarreau.com/particles.js/* GitHub : github.com/VincentGarreau/particles.j
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 35 20 2d 20 30 20 2b 20 31 29 29 20 2b 20 30 29 2c 0a 20 20 20 20 20 20 20 20 62 3a 20 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 28 32 35 35 20 2d 20 30 20 2b 20 31 29 29 20 2b 20 30 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 28 63 6f 6c 6f 72 2e 76 61 6c 75 65 29 20 3d 3d 20 27 73 74 72 69 6e 67 27 29 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6c 6f 72 20 3d 20 63 6f 6c 6f 72 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6c 6f 72 2e 72 67 62 20 3d 20 68 65 78 54 6f 52 67 62 28 74 68 69 73 2e 63 6f 6c 6f 72 2e 76 61 6c 75 65 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 6f 70 61 63 69 74 79 20 2a 2f 0a 20 20 20 20 74 68 69 73 2e 6f 70 61 63 69 74 79 Data Ascii: 5 - 0 + 1)) + 0), b: (Math.floor(Math.random() * (255 - 0 + 1)) + 0) } } else if(typeof(color.value) == 'string'){ this.color = color; this.color.rgb = hexToRgb(this.color.value); } /* opacity */ this.opacity
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 3d 20 2d 70 2e 76 78 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 2e 79 20 2b 20 70 2e 72 61 64 69 75 73 20 3e 20 70 4a 53 2e 63 61 6e 76 61 73 2e 68 29 20 70 2e 76 79 20 3d 20 2d 70 2e 76 79 3b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 2e 79 20 2d 20 70 2e 72 61 64 69 75 73 20 3c 20 30 29 20 70 2e 76 79 20 3d 20 2d 70 2e 76 79 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2a 20 65 76 65 6e 74 73 20 2a 2f 0a 20 20 20 20 20 20 69 66 28 69 73 49 6e 41 72 72 61 79 28 27 67 72 61 62 27 2c 20 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 65 76 65 6e 74 73 2e 6f 6e 68 6f 76 65 72 2e 6d 6f 64 65 29 29 7b 0a 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 6d 6f 64 65 73 2e 67 Data Ascii: = -p.vx; if (p.y + p.radius > pJS.canvas.h) p.vy = -p.vy; else if (p.y - p.radius < 0) p.vy = -p.vy; break; } /* events */ if(isInArray('grab', pJS.interactivity.events.onhover.mode)){ pJS.fn.modes.g
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 20 69 66 28 62 75 62 62 6c 65 5f 70 61 72 61 6d 20 21 3d 20 70 61 72 74 69 63 6c 65 73 5f 70 61 72 61 6d 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 28 21 70 4a 53 2e 74 6d 70 2e 62 75 62 62 6c 65 5f 64 75 72 61 74 69 6f 6e 5f 65 6e 64 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 69 73 74 5f 6d 6f 75 73 65 20 3c 3d 20 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 6f 64 65 73 2e 62 75 62 62 6c 65 2e 64 69 73 74 61 6e 63 65 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 70 5f 6f 62 6a 5f 62 75 62 62 6c 65 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 76 61 72 20 6f 62 6a 20 3d 20 70 5f 6f 62 6a 5f 62 75 62 62 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 76 61 72 20 6f 62 6a 20 3d 20 70 5f Data Ascii: if(bubble_param != particles_param){ if(!pJS.tmp.bubble_duration_end){ if(dist_mouse <= pJS.interactivity.modes.bubble.distance){ if(p_obj_bubble != undefined) var obj = p_obj_bubble; else var obj = p_
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 5f 6e 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 72 65 6d 6f 76 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 6d 6f 64 65 73 2e 72 65 6d 6f 76 65 50 61 72 74 69 63 6c 65 73 28 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 6f 64 65 73 2e 72 65 6d 6f 76 65 2e 70 61 72 74 69 63 6c 65 73 5f 6e 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 62 75 62 62 6c 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 4a 53 2e 74 6d 70 2e 62 75 62 62 6c 65 5f 63 6c 69 Data Ascii: _nb); } } break; case 'remove': pJS.fn.modes.removeParticles(pJS.interactivity.modes.remove.particles_nb); break; case 'bubble': pJS.tmp.bubble_cli
2024-05-28 05:14:42 UTC	3060	IN	Data Raw: 6d 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 72 65 74 75 72 6e 20 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 77 65 62 6b 69 74 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6d 6f 7a 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 20 20 7c 7c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 20 20 20 20 20 7c 7c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 7b 0a 20 20 20 Data Ascii: me = (function(){ return window.requestAnimationFrame \|\| window.webkitRequestAnimationFrame \|\| window.mozRequestAnimationFrame \|\| window.oRequestAnimationFrame \|\| window.msRequestAnimationFrame \|\| function(callback){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49881	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	922	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js?ver=1.1.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:42 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 60404 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:42 UTC	7923	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 31 2e 31 2e 30 20 2d 20 32 30 31 36 2d 30 32 2d 32 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a Data Ascii: /! Magnific Popup - v1.1.0 - 2016-02-20 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2016 Dmitry Semenov; */;(function (factory) { if (typeof define === 'function' && define.amd) { // AMD. Register as an anonymous module.
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 28 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 5b 27 69 6e 69 74 27 2b 6e 5d 2e 63 61 6c 6c 28 6d 66 70 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 6d 66 70 54 72 69 67 67 65 72 28 27 42 65 66 6f 72 65 4f 70 65 6e 27 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 66 70 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 6f 73 65 20 62 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 6d 66 70 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 77 72 61 70 2e 61 70 70 65 6e 64 28 20 5f 67 Data Ascii: (1); mfp['init'+n].call(mfp); } _mfpTrigger('BeforeOpen'); if(mfp.st.showCloseBtn) { // Close button if(!mfp.st.closeBtnInside) { mfp.wrap.append( _g
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 2f 2f 20 61 6c 6c 6f 77 73 20 74 6f 20 6d 6f 64 69 66 79 20 6d 61 72 6b 75 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 6d 66 70 54 72 69 67 67 65 72 28 27 46 69 72 73 74 4d 61 72 6b 75 70 50 61 72 73 65 27 2c 20 6d 61 72 6b 75 70 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 61 72 6b 75 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 74 79 70 65 5d 20 3d 20 24 28 6d 61 72 6b 75 70 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 72 6b 75 70 20 66 6f 75 6e 64 20 77 65 20 6a 75 73 74 20 Data Ascii: // allows to modify markup _mfpTrigger('FirstMarkupParse', markup); if(markup) { mfp.currTemplate[type] = $(markup); } else { // if there is no markup found we just
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 28 29 29 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 5f 73 65 74 46 6f 63 75 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 6d 66 70 2e 73 74 2e 66 6f 63 75 73 20 3f 20 6d 66 70 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 6d 66 70 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 20 3a 20 6d 66 70 2e 77 72 61 70 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 5f 6f 6e 46 6f 63 75 73 49 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 65 2e 74 61 72 67 65 74 20 21 3d 3d 20 6d 66 70 2e 77 72 61 70 5b 30 5d 20 26 26 20 21 24 2e 63 6f 6e 74 61 69 6e 73 28 6d 66 70 2e 77 72 61 70 5b 30 5d 2c 20 65 2e 74 61 72 Data Ascii: ()) ); }, _setFocus: function() { (mfp.st.focus ? mfp.content.find(mfp.st.focus).eq(0) : mfp.wrap).focus(); }, _onFocusIn: function(e) { if( e.target !== mfp.wrap[0] && !$.contains(mfp.wrap[0], e.tar
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 27 72 65 61 64 79 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 66 70 2e 5f 70 61 72 73 65 4d 61 72 6b 75 70 28 74 65 6d 70 6c 61 74 65 2c 20 7b 7d 2c 20 69 74 65 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 65 6d 70 6c 61 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 2f 2a 3e 3e 69 6e 6c 69 6e 65 2a 2f 0a 0a 20 20 20 20 2f 2a 3e 3e 61 6a 61 78 2a 2f 0a 20 20 20 20 76 61 72 20 41 4a 41 58 5f 4e 53 20 3d 20 27 61 6a 61 78 27 2c 0a 20 20 20 20 20 20 20 20 5f 61 6a 61 78 43 75 72 2c 0a 20 20 20 20 20 20 20 20 5f 72 65 6d 6f 76 65 41 6a 61 78 43 75 Data Ascii: mfp.updateStatus('ready'); mfp._parseMarkup(template, {}, item); return template; } } }); />>inline/ />>ajax/ var AJAX_NS = 'ajax', _ajaxCur, _removeAjaxCu
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 20 69 66 28 67 75 61 72 64 20 3c 20 32 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 6f 6e 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 2c 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 4c 6f 61 64 45 72 72 6f 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if(guard < 200) { setTimeout(onLoadComplete,100); } else { onLoadError(); } }
2024-05-28 05:14:42 UTC	8000	IN	Data Raw: 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 66 70 2e 63 75 72 72 49 74 65 6d 2e 68 61 73 53 69 7a 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6d 66 70 2e 63 75 72 72 49 74 65 6d 2e 69 6d 67 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 65 6c 65 6d 65 6e 74 20 70 6f 73 74 69 6f 6e 20 72 65 6c 61 74 69 76 65 20 74 6f 20 76 69 65 77 70 6f 72 74 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ion() { if(mfp.currItem.hasSize) { return mfp.currItem.img; } else { return false; } }, // Get element postion relative to viewport
2024-05-28 05:14:42 UTC	4481	IN	Data Raw: 69 74 6c 65 25 2f 67 69 2c 20 67 53 74 2e 74 50 72 65 76 29 2e 72 65 70 6c 61 63 65 28 2f 25 64 69 72 25 2f 67 69 2c 20 27 6c 65 66 74 27 29 20 29 2e 61 64 64 43 6c 61 73 73 28 50 52 45 56 45 4e 54 5f 43 4c 4f 53 45 5f 43 4c 41 53 53 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 6f 77 52 69 67 68 74 20 3d 20 6d 66 70 2e 61 72 72 6f 77 52 69 67 68 74 20 3d 20 24 28 20 6d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 2f 25 74 69 74 6c 65 25 2f 67 69 2c 20 67 53 74 2e 74 4e 65 78 74 29 2e 72 65 70 6c 61 63 65 28 2f 25 64 69 72 25 2f 67 69 2c 20 27 72 69 67 68 74 27 29 20 29 2e 61 64 64 43 6c 61 73 73 28 50 52 45 56 45 4e 54 5f 43 4c 4f 53 45 5f 43 4c 41 53 53 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: itle%/gi, gSt.tPrev).replace(/%dir%/gi, 'left') ).addClass(PREVENT_CLOSE_CLASS), arrowRight = mfp.arrowRight = $( markup.replace(/%title%/gi, gSt.tNext).replace(/%dir%/gi, 'right') ).addClass(PREVENT_CLOSE_CLASS);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49882	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	925	OUT	GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js?ver=2.4.0 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Apr 2024 08:36:19 GMT Accept-Ranges: bytes Content-Length: 23844 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 2f 2a 21 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 56 65 67 61 73 20 2d 20 46 75 6c 6c 73 63 72 65 65 6e 20 42 61 63 6b 67 72 6f 75 6e 64 73 20 61 6e 64 20 53 6c 69 64 65 73 68 6f 77 73 2e 0a 20 2a 20 76 32 2e 34 2e 30 20 2d 20 62 75 69 6c 74 20 32 30 31 37 2d 30 31 2d 30 34 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 76 65 67 61 73 2e 6a 61 79 73 61 6c 76 61 74 2e 63 6f 6d 2f 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /!----------------------------------------------------------------------------- Vegas - Fullscreen Backgrounds and Slideshows. * v2.4.0 - built 2017-01-04 * Licensed under the MIT License. * http://vegas.jaysalvat.com/ * --------------------------
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 73 68 6f 77 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 6e 65 78 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 28 27 64 65 6c 61 79 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 5f 74 69 6d 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: show) { this.timeout = setTimeout(function () { self.next(); }, this._options('delay')); } }, _timer: function (state) { var self = this; clearTimeou
2024-05-28 05:14:43 UTC	7921	IN	Data Raw: 74 61 6c 20 2d 20 31 29 2e 61 66 74 65 72 28 24 73 6c 69 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 65 6c 6d 74 2e 70 72 65 70 65 6e 64 28 24 73 6c 69 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 6c 69 64 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 73 73 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 2c 20 27 61 6c 6c 20 30 6d 73 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 20 20 3d 20 27 76 65 67 61 73 2d 73 6c 69 64 Data Ascii: tal - 1).after($slide); } else { this.$elmt.prepend($slide); } $slides .css('transition', 'all 0ms') .each(function () { this.className = 'vegas-slid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49883	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:42 UTC	934	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.22 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873267.45.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 22 May 2024 20:34:10 GMT Accept-Ranges: bytes Content-Length: 10364 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun
2024-05-28 05:14:43 UTC	2441	IN	Data Raw: 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 75 63 63 65 73 73 26 26 28 6c 6f 63 61 6c 69 7a 65 2e 6e 6f 6e 63 65 3d 65 2e 64 61 74 61 2e 6e 6f 6e 63 65 2c 65 61 2e 6e 6f 6e 63 65 67 65 6e 65 72 61 74 65 64 3d 21 30 29 7d 7d 29 7d 2c 65 61 2e 73 61 6e 69 74 69 7a 65 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 22 29 7c 7c 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 23 22 29 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 65 29 3b 69 66 28 21 5b 22 68 74 74 70 3a 22 2c 22 68 74 74 70 73 3a 22 2c 22 66 74 70 3a 22 2c 22 66 74 70 73 3a 22 2c 22 6d 61 69 6c 74 6f 3a 22 2c 22 6e 65 77 73 3a 22 2c 22 69 72 63 3a 22 2c 22 69 72 63 36 3a 22 2c 22 69 72 63 73 Data Ascii: cess:function(e){e.success&&(localize.nonce=e.data.nonce,ea.noncegenerated=!0)}})},ea.sanitizeURL=function(e){if(e.startsWith("/")\|\|e.startsWith("#"))return e;try{var t=new URL(e);if(!["http:","https:","ftp:","ftps:","mailto:","news:","irc:","irc6:","ircs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49886	188.114.96.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	472	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
2024-05-28 05:14:43 UTC	819	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H6QhJNrtLt5JhVeZ%2Ff7GpgSHguCCwXV0Zvmg215WKt9pjD4Wxc5%2FDNzWuHcLrEyIWtXDMl070cUQua0SAR4aIg78Ig%2FJaKLrwswPb%2F0uMnLVRjeGCnzQfyORIh7jMS4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc34339397c6c-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:14:43 UTC	550	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:14:43 UTC	90	IN	Data Raw: 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: iv> <span id="lbl"></span> </div> </form></body></html>
2024-05-28 05:14:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49884	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	897	OUT	GET /wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 15505 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 20 3d 20 28 7b 7d 29 3b 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a Data Ascii: /! elementor - v3.21.0 - 26-05-2024 //****/ (() => { // webpackBootstrap/**/ "use strict";/**/ var __webpack_modules__ = ({});/********************************************************************//**/ // The module cache/***
2024-05-28 05:14:43 UTC	7582	IN	Data Raw: 2a 2a 2a 2a 2a 2f 20 09 09 09 09 09 76 61 72 20 73 20 3d 20 73 63 72 69 70 74 73 5b 69 5d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 09 09 69 66 28 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 20 3d 3d 20 75 72 6c 20 7c 7c 20 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 20 3d 3d 20 64 61 74 61 57 65 62 70 61 63 6b 50 72 65 66 69 78 20 2b 20 6b 65 79 29 20 7b 20 73 63 72 69 70 74 20 3d 20 73 3b 20 62 72 65 61 6b 3b 20 7d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 09 7d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 7d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 69 66 28 21 73 63 72 69 70 74 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 09 6e 65 65 64 41 74 74 61 63 68 20 3d 20 74 72 75 65 3b 0a 2f 2a 2a 2a 2a Data Ascii: ***/ var s = scripts[i];/**/ if(s.getAttribute("src") == url \|\| s.getAttribute("data-webpack") == dataWebpackPrefix + key) { script = s; break; }/**/ }/**/ }/**/ if(!script) {/**/ needAttach = true;/**

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49887	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	898	OUT	GET /wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 185230 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7922	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 72 6f 6e 74 65 6e 64 2d 6d 6f 64 75 6c 65 73 22 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 65 64 69 74 6f 72 2f 75 74 69 6c 73 2f 69 73 2d 69 6e 73 74 61 6e 63 65 6f 66 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["frontend-modules"],{/**/ "../assets/dev/js/editor/utils/is-instanceof.js":/!*****************************************************!
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 72 67 65 74 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 28 27 65 6c 65 6d 65 6e 74 6f 72 2f 6e 65 73 74 65 64 2d 65 6c 65 6d 65 6e 74 73 2f 61 63 74 69 76 61 74 65 2d 62 79 2d 6b 65 79 62 6f 61 72 64 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 67 65 74 49 64 3a 20 74 68 69 73 2e 67 65 74 49 44 28 29 2c 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 49 6e 64 65 78 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 27 45 73 63 61 70 65 27 20 3d 3d 3d 20 65 76 65 6e 74 2e 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 54 69 74 6c 65 45 73 63 61 70 65 4b 65 79 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b Data Ascii: rget); elementorFrontend.elements.$window.trigger('elementor/nested-elements/activate-by-keyboard', { widgetId: this.getID(), titleIndex }); } else if ('Escape' === event.key) { this.handleTitleEscapeKeyEvents(event);
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 61 6e 64 6c 65 72 73 28 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 69 6e 69 74 3a 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 31 31 79 53 65 74 57 69 64 67 65 74 41 72 69 61 44 65 74 61 69 6c 73 28 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 31 31 79 53 65 74 50 61 67 69 6e 61 74 69 6f 6e 54 61 62 69 6e 64 65 78 28 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 31 31 79 53 65 74 53 6c 69 64 65 41 72 69 61 48 69 64 64 65 6e 28 27 69 6e 69 74 69 61 6c 69 73 61 74 69 6f 6e 27 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 20 20 20 20 74 68 69 73 2e 61 70 70 6c 79 4f 66 66 73 65 74 53 65 74 74 69 6e 67 73 28 65 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 2c 20 73 77 69 70 65 72 4f 70 74 69 6f 6e 73 2c 20 73 Data Ascii: andlers(); }, init: () => { this.a11ySetWidgetAriaDetails(); this.a11ySetPaginationTabindex(); this.a11ySetSlideAriaHidden('initialisation'); } }; this.applyOffsetSettings(elementSettings, swiperOptions, s
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 6f 72 6d 58 56 61 6c 75 65 20 26 26 20 73 77 69 70 65 72 57 72 61 70 70 65 72 57 69 64 74 68 20 3e 20 73 6c 69 64 65 2e 6f 66 66 73 65 74 4c 65 66 74 20 2b 20 73 77 69 70 65 72 57 72 61 70 70 65 72 54 72 61 6e 73 66 6f 72 6d 58 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 69 66 20 28 21 69 73 53 6c 69 64 65 49 6e 73 69 64 65 57 72 61 70 70 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 69 6e 65 72 74 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 27 61 Data Ascii: ormXValue && swiperWrapperWidth > slide.offsetLeft + swiperWrapperTransformXValue; if (!isSlideInsideWrapper) { slide.setAttribute('aria-hidden', true); slide.setAttribute('inert', ''); } else { slide.removeAttribute('a
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 63 6f 6e 74 72 6f 6c 4b 65 79 5d 20 3d 20 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 73 65 74 74 69 6e 67 73 27 29 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 74 65 6d 73 28 65 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 2c 20 73 65 74 74 69 6e 67 29 3b 0a 20 20 7d 2c 0a 20 20 67 65 74 45 64 69 74 53 65 74 74 69 6e 67 73 28 73 65 74 74 69 6e 67 29 20 7b 0a 20 20 20 20 76 61 72 20 61 74 74 72 69 62 75 74 65 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 69 73 45 64 69 74 29 20 7b Data Ascii: controlKey] = value; } }); } else { elementSettings = this.$element.data('settings') \|\| {}; } return this.getItems(elementSettings, setting); }, getEditSettings(setting) { var attributes = {}; if (this.isEdit) {
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 24 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 2e 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 2e 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 69 73 2e 72 65 73 65 74 28 29 3b 0a 20 20 20 20 76 61 72 20 24 65 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 20 3d 20 24 63 6f 6e 74 61 69 6e 65 72 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 4f 66 66 73 65 74 20 3d 20 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 0a 20 20 20 20 20 20 69 73 46 69 Data Ascii: length) { $container = jQuery(this.getDefaultSettings().selectors.container); } this.reset(); var $element = this.elements.$element, containerWidth = $container.innerWidth(), elementOffset = $element.offset().left, isFi
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 69 6e 73 74 61 6e 63 65 29 20 7b 0a 20 20 20 20 6c 65 74 20 61 72 67 73 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 3a 20 74 68 69 73 2e 61 72 67 73 3b 0a 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 41 72 67 75 6d 65 6e 74 28 70 72 6f 70 65 72 74 79 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 69 66 20 28 21 28 61 72 67 73 5b 70 72 6f 70 65 72 74 79 5d 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 6e 73 74 61 6e 63 65 29 20 26 26 20 21 28 30 2c 20 5f 69 73 49 6e 73 74 61 6e 63 65 6f 66 2e 64 65 66 61 75 6c 74 29 28 61 72 67 73 5b 70 72 6f 70 65 72 74 79 5d 2c 20 69 6e 73 74 61 6e 63 65 29 29 20 7b 0a 20 Data Ascii: instance) { let args = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : this.args; this.requireArgument(property, args); if (!(args[property] instanceof instance) && !(0, _isInstanceof.default)(args[property], instance)) {
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 20 3d 20 27 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 73 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 65 73 73 61 67 65 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 54 4f 44 4f 3a 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 65 6c 65 74 65 64 20 3f 2e 0a 20 20 74 68 69 73 2e 66 6f 72 63 65 4d 65 74 68 6f 64 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 29 20 7b 0a 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 68 69 73 2e 67 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 28 27 66 6f 72 63 65 4d 65 74 68 6f 64 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 27 2c Data Ascii: default: message = 'An error occurs'; } return message; }; // TODO: This function should be deleted ?. this.forceMethodImplementation = function (functionName) { throw new Error(this.getErrorMessage('forceMethodImplementation',
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 63 65 6e 74 61 67 65 73 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 6c 69 6d 69 74 50 61 67 65 48 65 69 67 68 74 20 2d 20 57 69 6c 6c 20 6c 69 6d 69 74 20 74 68 65 20 70 61 67 65 20 68 65 69 67 68 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 0a 20 20 20 2a 2f 0a 20 20 73 74 61 74 69 63 20 67 65 74 50 61 67 65 53 63 72 6f 6c 6c 50 65 72 63 65 6e 74 61 67 65 28 29 20 7b 0a 20 20 20 20 6c 65 74 20 6f 66 66 73 65 74 4f 62 6a 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 3a 20 7b 7d 3b 0a 20 20 20 20 6c 65 74 20 6c 69 6d 69 74 50 61 67 65 48 65 69 67 68 74 20 3d 20 61 72 67 75 6d 65 6e Data Ascii: centages * @param {number} limitPageHeight - Will limit the page height calculation */ static getPageScrollPercentage() { let offsetObj = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {}; let limitPageHeight = argumen
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 6f 6e 49 74 65 6d 73 3a 20 74 68 69 73 2e 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 73 2e 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 73 29 2c 0a 20 20 20 20 20 20 24 61 63 63 6f 72 64 69 6f 6e 54 69 74 6c 65 73 3a 20 74 68 69 73 2e 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 73 2e 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 54 69 74 6c 65 73 29 2c 0a 20 20 20 20 20 20 24 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 65 6e 74 3a 20 74 68 69 73 2e 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 73 2e 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 65 6e 74 29 0a 20 20 20 20 7d 3b 0a 20 20 7d 0a 20 20 6f 6e 49 6e 69 74 28 29 20 7b 0a 20 20 20 20 73 75 70 65 72 2e 6f 6e 49 6e 69 74 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 Data Ascii: onItems: this.findElement(selectors.accordionItems), $accordionTitles: this.findElement(selectors.accordionItemTitles), $accordionContent: this.findElement(selectors.accordionContent) }; } onInit() { super.onInit(...arguments);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49885	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	901	OUT	GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.js?ver=4.0.2 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 17964 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 2f 2a 21 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 31 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 31 2d 32 30 31 36 20 43 61 6c 65 62 20 54 72 6f 75 67 68 74 6f 6e 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 0a 20 20 76 61 72 20 6b 65 79 43 6f 75 6e 74 65 72 20 3d 20 30 0a 20 20 76 61 72 20 61 6c 6c 57 61 79 70 6f 69 6e 74 73 20 3d 20 7b 7d 0a 0a 20 20 2f 2a 20 68 74 74 70 3a 2f 2f 69 6d Data Ascii: /!Waypoints - 4.0.1Copyright 2011-2016 Caleb TroughtonLicensed under the MIT license.https://github.com/imakewebthings/waypoints/blob/master/licenses.txt/(function() { 'use strict' var keyCounter = 0 var allWaypoints = {} /* http://im
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 74 20 3d 20 61 78 69 73 2e 6e 65 77 53 63 72 6f 6c 6c 20 3e 3d 20 77 61 79 70 6f 69 6e 74 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 72 6f 73 73 65 64 46 6f 72 77 61 72 64 20 3d 20 77 61 73 42 65 66 6f 72 65 54 72 69 67 67 65 72 50 6f 69 6e 74 20 26 26 20 6e 6f 77 41 66 74 65 72 54 72 69 67 67 65 72 50 6f 69 6e 74 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 72 6f 73 73 65 64 42 61 63 6b 77 61 72 64 20 3d 20 21 77 61 73 42 65 66 6f 72 65 54 72 69 67 67 65 72 50 6f 69 6e 74 20 26 26 20 21 6e 6f 77 41 66 74 65 72 54 72 69 67 67 65 72 50 6f 69 6e 74 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 72 6f 73 73 65 64 46 6f 72 77 61 72 64 20 7c 7c 20 63 72 6f 73 73 65 64 42 61 63 6b 77 61 72 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: t = axis.newScroll >= waypoint.triggerPoint var crossedForward = wasBeforeTriggerPoint && nowAfterTriggerPoint var crossedBackward = !wasBeforeTriggerPoint && !nowAfterTriggerPoint if (crossedForward \|\| crossedBackward) {
2024-05-28 05:14:43 UTC	2041	IN	Data Raw: 2e 66 69 72 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 30 5d 0a 20 20 7d 0a 0a 20 20 2f 2a 20 50 75 62 6c 69 63 20 2a 2f 0a 20 20 2f 2a 20 68 74 74 70 3a 2f 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2e 63 6f 6d 2f 77 61 79 70 6f 69 6e 74 73 2f 61 70 69 2f 6c 61 73 74 20 2a 2f 0a 20 20 47 72 6f 75 70 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 0a 20 20 7d 0a 0a 20 20 2f 2a 20 50 72 69 76 61 74 65 20 2a 2f 0a 20 20 47 72 6f 75 70 2e 66 69 6e 64 4f 72 43 72 65 61 74 Data Ascii: .first = function() { return this.waypoints[0] } /* Public / / http://imakewebthings.com/waypoints/api/last / Group.prototype.last = function() { return this.waypoints[this.waypoints.length - 1] } / Private */ Group.findOrCreat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49888	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	872	OUT	GET /wp-includes/js/jquery/ui/core.js?ver=1.13.2 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 02 Nov 2022 08:39:00 GMT Accept-Ranges: bytes Content-Length: 49849 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 0a 0a 09 76 61 72 20 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 43 6f 6e 74 72 6f 6c 20 63 68 61 72 61 63 74 65 72 73 20 61 6e 64 20 28 64 65 70 65 6e 64 65 6e 74 20 75 70 6f 6e 20 70 6f 73 69 74 69 6f 6e 29 20 6e 75 6d 62 65 72 73 20 Data Ascii: uFFFF\w-]/g;var fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}// Control characters and (dependent upon position) numbers
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 48 65 69 67 68 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 68 65 69 67 68 74 3b 0a 09 74 61 72 67 65 74 4f 66 66 73 65 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 66 66 73 65 74 3b 0a 0a 09 2f 2f 20 43 6c 6f 6e 65 20 74 6f 20 72 65 75 73 65 20 6f 72 69 67 69 6e 61 6c 20 74 61 72 67 65 74 4f 66 66 73 65 74 20 6c 61 74 65 72 0a 09 62 61 73 65 50 6f 73 69 74 69 6f 6e 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 61 72 67 65 74 4f 66 66 73 65 74 20 29 3b 0a 0a 09 2f 2f 20 46 6f 72 63 65 20 6d 79 20 61 6e 64 20 61 74 20 74 6f 20 68 61 76 65 20 76 61 6c 69 64 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 61 6e 64 20 76 65 72 74 69 63 61 6c 20 70 6f 73 69 74 69 6f 6e 73 0a 09 2f 2f 20 69 66 20 61 20 76 61 6c 75 65 20 69 73 20 6d 69 73 73 69 6e 67 20 6f 72 20 Data Ascii: Height = dimensions.height;targetOffset = dimensions.offset;// Clone to reuse original targetOffset laterbasePosition = $.extend( {}, targetOffset );// Force my and at to have valid horizontal and vertical positions// if a value is missing or
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 76 65 72 52 69 67 68 74 20 3d 20 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 2b 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 20 2d 20 6f 75 74 65 72 57 69 64 74 68 20 2d 20 6f 66 66 73 65 74 4c 65 66 74 2c 0a 09 09 09 09 6d 79 4f 66 66 73 65 74 20 3d 20 64 61 74 61 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 6c 65 66 74 22 20 3f 0a 09 09 09 09 09 2d 64 61 74 61 2e 65 6c 65 6d 57 69 64 74 68 20 3a 0a 09 09 09 09 09 64 61 74 61 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 72 69 67 68 74 22 20 3f 0a 09 09 09 09 09 09 64 61 74 61 2e 65 6c 65 6d 57 69 64 74 68 20 3a 0a 09 09 09 09 09 09 30 2c 0a 09 09 09 09 61 74 4f 66 66 73 65 74 20 3d 20 64 61 74 61 2e 61 74 5b 20 30 20 5d 20 3d 3d 3d 20 22 6c 65 66 74 22 20 3f 0a 09 09 09 09 09 64 61 74 61 Data Ascii: verRight = collisionPosLeft + data.collisionWidth - outerWidth - offsetLeft,myOffset = data.my[ 0 ] === "left" ?-data.elemWidth :data.my[ 0 ] === "right" ?data.elemWidth :0,atOffset = data.at[ 0 ] === "left" ?data
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 09 09 7d 0a 09 7d 3b 0a 0a 09 2f 2f 20 45 78 74 65 6e 64 20 77 69 74 68 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 74 6f 20 63 61 72 72 79 20 6f 76 65 72 20 61 6e 79 20 73 74 61 74 69 63 20 70 72 6f 70 65 72 74 69 65 73 0a 09 24 2e 65 78 74 65 6e 64 28 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 7b 0a 09 09 76 65 72 73 69 6f 6e 3a 20 70 72 6f 74 6f 74 79 70 65 2e 76 65 72 73 69 6f 6e 2c 0a 0a 09 09 2f 2f 20 43 6f 70 79 20 74 68 65 20 6f 62 6a 65 63 74 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 70 72 6f 74 6f 74 79 70 65 20 69 6e 20 63 61 73 65 20 77 65 20 6e 65 65 64 20 74 6f 0a 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 77 69 64 67 Data Ascii: }};// Extend with the existing constructor to carry over any static properties$.extend( constructor, existingConstructor, {version: prototype.version,// Copy the object used to create the prototype in case we need to// redefine the widg
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 3d 20 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 29 3b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 5b 20 70 61 72 74 73 5b 20 69 20 5d 20 5d 20 3d 20 63 75 72 4f 70 74 69 6f 6e 5b 20 70 61 72 74 73 5b 20 69 20 5d 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 20 3d 20 63 75 72 4f 70 74 69 6f 6e 5b 20 70 61 72 74 73 5b 20 69 20 5d 20 5d 3b 0a 09 09 09 09 7d 0a 09 09 09 09 6b 65 79 20 3d Data Ascii: .length ) {curOption = options[ key ] = $.widget.extend( {}, this.options[ key ] );for ( i = 0; i < parts.length - 1; i++ ) {curOption[ parts[ i ] ] = curOption[ parts[ i ] ] \|\| {};curOption = curOption[ parts[ i ] ];}key =
2024-05-28 05:14:43 UTC	1926	IN	Data Raw: 74 79 70 65 2c 20 65 76 65 6e 74 2c 20 64 61 74 61 20 29 20 7b 0a 09 09 76 61 72 20 70 72 6f 70 2c 20 6f 72 69 67 3b 0a 09 09 76 61 72 20 63 61 6c 6c 62 61 63 6b 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 20 74 79 70 65 20 5d 3b 0a 0a 09 09 64 61 74 61 20 3d 20 64 61 74 61 20 7c 7c 20 7b 7d 3b 0a 09 09 65 76 65 6e 74 20 3d 20 24 2e 45 76 65 6e 74 28 20 65 76 65 6e 74 20 29 3b 0a 09 09 65 76 65 6e 74 2e 74 79 70 65 20 3d 20 28 20 74 79 70 65 20 3d 3d 3d 20 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 20 3f 0a 09 09 09 74 79 70 65 20 3a 0a 09 09 09 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 20 2b 20 74 79 70 65 20 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 0a 09 09 2f 2f 20 54 68 65 20 6f 72 69 67 69 Data Ascii: type, event, data ) {var prop, orig;var callback = this.options[ type ];data = data \|\| {};event = $.Event( event );event.type = ( type === this.widgetEventPrefix ?type :this.widgetEventPrefix + type ).toLowerCase();// The origi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49894	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	890	OUT	GET /wp-content/plugins/elementor/assets/js/frontend.js?ver=3.21.8 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 103230 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7922	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 72 6f 6e 74 65 6e 64 22 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 64 6f 63 75 6d 65 6e 74 73 2d 6d 61 6e 61 67 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /"use strict";(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["frontend"],{/**/ "../assets/dev/js/frontend/documents-manager.js":/!**************************************************
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 3a 20 27 64 65 66 61 75 6c 74 27 3b 0a 20 20 20 20 73 6b 69 6e 20 3d 20 73 6b 69 6e 20 3f 20 27 2e 27 20 2b 20 73 6b 69 6e 20 3a 20 27 27 3b 0a 20 20 20 20 63 6f 6e 73 74 20 65 6c 65 6d 65 6e 74 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 42 61 73 65 4e 61 6d 65 20 2b 20 73 6b 69 6e 3b 0a 20 20 20 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 60 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 24 7b 65 6c 65 6d 65 6e 74 4e 61 6d 65 7d 60 2c 20 24 65 6c 65 6d 65 6e 74 20 3d 3e 20 7b 0a Data Ascii: arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'default'; skin = skin ? '.' + skin : ''; const elementName = elementBaseName + skin; elementorFrontend.hooks.addAction(`frontend/element_ready/${elementName}`, $element => {
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 73 63 72 65 65 6e 2d 6f 6e 6c 79 27 0a 20 20 20 20 20 20 7d 29 0a 20 20 20 20 7d 3b 0a 20 20 20 20 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 2e 24 62 6f 64 79 2e 61 70 70 65 6e 64 28 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 2e 24 64 65 76 69 63 65 4d 6f 64 65 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 3b 0a 20 20 7d 0a 20 20 62 69 6e 64 45 76 65 6e 74 73 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 28 29 20 3d 3e 20 74 68 69 73 2e 73 65 74 44 65 76 69 63 65 4d 6f 64 65 44 61 74 61 28 29 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 73 74 72 69 6e 67 7d 20 65 6c Data Ascii: ementor-screen-only' }) }; defaultElements.$body.append(defaultElements.$deviceMode); return defaultElements; } bindEvents() { this.elements.$window.on('resize', () => this.setDeviceModeData()); } /** * @param {string} el
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 6e 61 67 65 72 2e 64 65 66 61 75 6c 74 28 29 3b 0a 20 20 7d 0a 7d 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 46 72 6f 6e 74 65 6e 64 3b 0a 77 69 6e 64 6f 77 2e 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 20 3d 20 6e 65 77 20 46 72 6f 6e 74 65 6e 64 28 29 3b 0a 69 66 20 28 21 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 29 20 7b 0a 20 20 6a 51 75 65 72 79 28 28 29 20 3d 3e 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 69 6e 69 74 28 29 29 3b 0a 7d 0a 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 68 61 6e 64 6c 65 72 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2d 73 6c 69 64 65 73 68 6f 77 2e Data Ascii: nager.default(); }}exports["default"] = Frontend;window.elementorFrontend = new Frontend();if (!elementorFrontend.isEditMode()) { jQuery(() => elementorFrontend.init());}/*/ }),/*/ "../assets/dev/js/frontend/handlers/background-slideshow.
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 79 70 65 29 20 26 26 20 21 74 68 69 73 2e 70 6c 61 79 65 72 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 20 20 20 20 6c 65 74 20 24 76 69 64 65 6f 3b 0a 20 20 20 20 69 66 20 28 27 79 6f 75 74 75 62 65 27 20 3d 3d 3d 20 74 68 69 73 2e 76 69 64 65 6f 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 24 76 69 64 65 6f 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 2e 70 6c 61 79 65 72 2e 67 65 74 49 66 72 61 6d 65 28 29 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 27 76 69 6d 65 6f 27 20 3d 3d 3d 20 74 68 69 73 2e 76 69 64 65 6f 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 24 76 69 64 65 6f 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 2e 70 6c 61 79 65 72 2e 65 6c 65 6d 65 6e 74 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 27 68 6f Data Ascii: ype) && !this.player) { return; } let $video; if ('youtube' === this.videoType) { $video = jQuery(this.player.getIframe()); } else if ('vimeo' === this.videoType) { $video = jQuery(this.player.element); } else if ('ho
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 68 65 6c 70 65 72 73 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 20 2a 2f 20 22 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 62 61 62 65 6c 2f 72 75 6e 74 69 6d 65 2f 68 65 6c 70 65 72 73 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 2e 6a 73 22 29 3b 0a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 0a 20 20 76 61 6c 75 65 3a 20 74 72 75 65 0a 7d 29 29 3b 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 76 6f 69 64 20 30 3b 0a 76 61 72 20 5f 62 61 63 6b 67 72 6f 75 6e 64 53 6c 69 64 65 73 68 6f 77 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 5f 5f 77 65 62 70 61 63 Data Ascii: helpers/interopRequireDefault */ "../node_modules/@babel/runtime/helpers/interopRequireDefault.js");Object.defineProperty(exports, "__esModule", ({ value: true}));exports["default"] = void 0;var _backgroundSlideshow = _interopRequireDefault(__webpac
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 6d 65 2e 69 6e 64 65 78 4f 66 28 27 2d 6e 65 67 61 74 69 76 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 73 76 67 55 52 4c 20 3d 20 73 76 67 55 52 4c 2e 72 65 70 6c 61 63 65 28 27 2e 73 76 67 27 2c 20 27 2d 6e 65 67 61 74 69 76 65 2e 73 76 67 27 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 73 76 67 55 52 4c 3b 0a 20 20 7d 0a 20 20 62 75 69 6c 64 53 56 47 28 73 69 64 65 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 62 61 73 65 53 65 74 74 69 6e 67 4b 65 79 20 3d 20 27 73 68 61 70 65 5f 64 69 76 69 64 65 72 5f 27 20 2b 20 73 69 64 65 2c 0a 20 20 20 20 20 20 73 68 61 70 65 54 79 70 65 20 3d 20 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 62 61 73 65 53 65 74 74 69 6e 67 4b 65 79 29 2c 0a 20 20 20 Data Ascii: me.indexOf('-negative')) { svgURL = svgURL.replace('.svg', '-negative.svg'); } } return svgURL; } buildSVG(side) { const baseSettingKey = 'shape_divider_' + side, shapeType = this.getElementSettings(baseSettingKey),
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 20 20 41 20 73 70 65 63 69 66 69 63 20 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 6f 62 6a 65 63 74 2e 0a 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 2a 7d 20 43 6f 6e 74 72 6f 6c 20 56 61 6c 75 65 0a 20 20 20 2a 2f 0a 20 20 67 65 74 43 6f 6e 74 72 6f 6c 56 61 6c 75 65 28 63 6f 6e 74 72 6f 6c 53 65 74 74 69 6e 67 73 2c 20 63 6f 6e 74 72 6f 6c 4b 65 79 2c 20 63 6f 6e 74 72 6f 6c 53 75 62 4b 65 79 29 20 7b 0a 20 20 20 20 6c 65 74 20 76 61 6c 75 65 3b 0a 20 20 20 20 69 66 20 28 27 6f 62 6a 65 63 74 27 20 3d 3d 3d 20 74 79 70 65 6f 66 20 63 6f 6e 74 72 6f 6c 53 65 74 74 69 6e 67 73 5b 63 6f 6e 74 72 6f 6c 4b 65 79 5d 20 26 26 20 63 6f 6e 74 72 6f 6c 53 75 62 4b 65 79 29 20 7b 0a 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 63 6f 6e 74 Data Ascii: A specific property of the control object. * @return {} Control Value / getControlValue(controlSettings, controlKey, controlSubKey) { let value; if ('object' === typeof controlSettings[controlKey] && controlSubKey) { value = cont
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 20 6d 61 78 2d 77 69 64 74 68 20 74 6f 20 61 63 74 69 6e 67 20 61 73 20 6d 69 6e 2d 77 69 64 74 68 0a 20 20 61 64 6a 75 73 74 43 6f 6e 66 69 67 28 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 2f 2f 20 4f 6e 6c 79 20 72 65 76 65 72 73 65 20 74 68 65 20 62 72 65 61 6b 70 6f 69 6e 74 73 20 69 66 20 74 68 65 20 68 61 6e 64 6c 65 20 70 61 72 61 6d 20 68 61 73 20 62 65 65 6e 20 64 65 66 69 6e 65 64 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 66 69 67 2e 68 61 6e 64 6c 65 45 6c 65 6d 65 6e 74 6f 72 42 72 65 61 6b 70 6f 69 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 66 69 67 3b 0a 20 20 20 20 7d 0a 20 20 20 20 63 6f 6e 73 74 20 65 6c 65 6d 65 6e 74 6f 72 42 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 Data Ascii: max-width to acting as min-width adjustConfig(config) { // Only reverse the breakpoints if the handle param has been defined if (!config.handleElementorBreakpoints) { return config; } const elementorBreakpoints = elementorFrontend
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 74 6f 70 6c 61 79 55 52 4c 28 76 69 64 65 6f 55 52 4c 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 76 69 64 65 6f 55 52 4c 2e 72 65 70 6c 61 63 65 28 27 26 61 75 74 6f 70 6c 61 79 3d 30 27 2c 20 27 27 29 20 2b 20 27 26 61 75 74 6f 70 6c 61 79 3d 31 27 3b 0a 20 20 7d 0a 7d 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 42 61 73 65 4c 6f 61 64 65 72 3b 0a 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 75 74 69 6c 73 2f 76 69 64 65 6f 2d 61 70 69 2f 76 69 6d 65 6f 2d 6c 6f 61 64 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: toplayURL(videoURL) { return videoURL.replace('&autoplay=0', '') + '&autoplay=1'; }}exports["default"] = BaseLoader;/*/ }),// "../assets/dev/js/frontend/utils/video-api/vimeo-loader.js":/!************************************************

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49893	157.240.251.9	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	559	OUT	GET /signals/plugins/openbridge3.js?v=next HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:44 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:44 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 66 28 64 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 6c 66 6f 72 6d 65 64 20 74 69 65 72 3a 20 22 2b 63 29 3b 72 65 74 75 72 6e 20 64 5b 31 5d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: f(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var
2024-05-28 05:14:44 UTC	1019	IN	Data Raw: 74 75 72 6e 20 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 2e 73 68 6f 77 43 6f 6e 66 69 72 6d 4d 6f 64 61 6c 28 62 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 2c 62 2c 63 29 7b 6e 2e 73 65 74 49 74 65 6d 28 6d 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 67 72 61 70 68 54 6f 6b 65 6e 3a 61 2c 70 69 78 65 6c 49 44 3a 62 2c 73 65 73 73 69 6f 6e 53 74 61 72 74 54 69 6d 65 3a 63 7d 29 29 2c 71 28 29 7d 63 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 67 72 61 70 68 54 6f 6b 65 6e 3b 62 3d 62 2e 70 69 78 65 6c 49 44 3b 73 28 63 2c 62 29 3b 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 53 65 73 73 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6d 29 7d 7d 29 Data Ascii: turn a.FacebookIWL.showConfirmModal(b)})}function s(a,b,c){n.setItem(m,JSON.stringify({graphToken:a,pixelID:b,sessionStartTime:c})),q()}c.listen(function(b){var c=b.graphToken;b=b.pixelID;s(c,b);a.FacebookIWLSessionEnd=function(){return n.removeItem(m)}})
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 Data Ascii: rPlugin("fbevents.plugins.iwlbootstrapper",e.exports);f.ensureModuleRegistered("fbevents.plugins.iwlbootstrapper",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fb
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 3d 62 28 31 35 36 35 29 7d 2c 31 37 32 30 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 35 32 36 31 29 7d 2c 32 33 33 32 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 33 39 37 29 7d 2c 36 39 32 32 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 38 37 36 35 29 7d 2c 35 33 37 36 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 32 33 38 32 29 7d 2c 35 38 34 35 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 33 33 38 30 29 7d 2c 36 36 30 34 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 38 38 33 29 7d 2c 34 33 39 32 3a 66 75 Data Ascii: =b(1565)},1720:function(a,c,b){a.exports=b(5261)},2332:function(a,c,b){a.exports=b(397)},6922:function(a,c,b){a.exports=b(8765)},5376:function(a,c,b){a.exports=b(2382)},5845:function(a,c,b){a.exports=b(3380)},6604:function(a,c,b){a.exports=b(883)},4392:fu
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 32 36 33 29 7d 2c 33 36 31 31 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 39 30 38 32 29 7d 2c 33 37 37 36 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 33 31 35 32 29 7d 2c 37 35 31 36 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 35 39 35 33 29 7d 2c 33 33 35 33 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 36 33 33 34 29 7d 2c 37 38 30 31 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 28 34 36 32 31 29 7d 2c 34 38 36 31 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d Data Ascii: ,c,b){a.exports=b(263)},3611:function(a,c,b){a.exports=b(9082)},3776:function(a,c,b){a.exports=b(3152)},7516:function(a,c,b){a.exports=b(5953)},3353:function(a,c,b){a.exports=b(6334)},7801:function(a,c,b){a.exports=b(4621)},4861:function(a,c,b){a.exports=
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 62 28 29 3b 63 26 26 67 28 61 2c 63 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 61 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 31 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 62 28 37 35 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 61 5d 3b 65 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 65 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 65 26 26 28 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 64 28 62 2c 65 2e 6b 65 79 2c Data Ascii: b();c&&g(a,c.prototype);return a};return c.apply(null,arguments)}a.exports=c},1173:function(a,c,b){var d=b(7516);function f(b,c){for(var a=0;a<c.length;a++){var e=c[a];e.enumerable=e.enumerable\|\|!1;e.configurable=!0;"value"in e&&(e.writable=!0);d(b,e.key,
2024-05-28 05:14:44 UTC	1500	IN	Data Raw: 28 4f 62 6a 65 63 74 28 62 29 29 29 72 65 74 75 72 6e 3b 76 61 72 20 63 3d 5b 5d 2c 65 3d 21 30 2c 68 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6a 3d 64 28 62 29 2c 62 3b 21 28 65 3d 28 62 3d 6a 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 65 3d 21 30 29 7b 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 69 66 28 61 26 26 63 2e 6c 65 6e 67 74 68 3d 3d 3d 61 29 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 61 29 7b 68 3d 21 30 2c 69 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 6a 5b 22 72 65 74 75 72 6e 22 5d 21 3d 6e 75 6c 6c 26 26 6a 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 68 29 74 68 72 6f 77 20 69 7d 7d 72 65 74 75 72 6e 20 63 7d 61 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 39 37 31 39 3a Data Ascii: (Object(b)))return;var c=[],e=!0,h=!1,i=void 0;try{for(var j=d(b),b;!(e=(b=j.next()).done);e=!0){c.push(b.value);if(a&&c.length===a)break}}catch(a){h=!0,i=a}finally{try{!e&&j["return"]!=null&&j["return"]()}finally{if(h)throw i}}return c}a.exports=c},9719:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49895	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	872	OUT	GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 02 Nov 2022 08:39:00 GMT Accept-Ranges: bytes Content-Length: 18833 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	7923	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 74 2c 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 72 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 72 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 2c 74 3d 6e 2e 5f 2c 28 65 3d 6e 2e Data Ascii: /! This file is auto-generated /!function(n,r){var t,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=r():"function"==typeof define&&define.amd?define("underscore",r):(n="undefined"!=typeof globalThis?globalThis:n\|\|self,t=n._,(e=n.
2024-05-28 05:14:43 UTC	8000	IN	Data Raw: 3d 72 29 7b 69 66 28 72 3c 3d 30 29 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 29 7d 65 6c 73 65 20 72 3d 31 2f 30 3b 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 2c 69 3d 67 28 6e 29 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 5d 3b 69 66 28 45 28 61 29 26 26 28 76 28 61 29 7c 7c 61 6e 28 61 29 29 29 69 66 28 31 3c 72 29 42 28 61 2c 72 2d 31 2c 74 2c 65 29 2c 75 3d 65 2e 6c 65 6e 67 74 68 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 66 3d 30 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 66 3c 63 3b 29 65 5b 75 2b 2b 5d 3d 61 5b 66 2b 2b 5d 3b 65 6c 73 65 20 74 7c 7c 28 65 5b 75 2b 2b 5d 3d 61 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 48 6e 3d 6c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 74 3d 28 72 3d 42 28 Data Ascii: =r){if(r<=0)return e.concat(n)}else r=1/0;for(var u=e.length,o=0,i=g(n);o<i;o++){var a=n[o];if(E(a)&&(v(a)\|\|an(a)))if(1<r)B(a,r-1,t,e),u=e.length;else for(var f=0,c=a.length;f<c;)e[u++]=a[f++];else t\|\|(e[u++]=a)}return e}var Hn=l(function(n,r){var t=(r=B(
2024-05-28 05:14:44 UTC	2910	IN	Data Raw: 63 3d 74 2e 61 70 70 6c 79 28 61 2c 66 29 2c 69 7c 7c 28 61 3d 66 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 4f 28 29 2c 72 3d 28 6c 7c 7c 21 31 21 3d 3d 75 2e 6c 65 61 64 69 6e 67 7c 7c 28 6c 3d 6e 29 2c 65 2d 28 6e 2d 6c 29 29 3b 72 65 74 75 72 6e 20 61 3d 74 68 69 73 2c 66 3d 61 72 67 75 6d 65 6e 74 73 2c 72 3c 3d 30 7c 7c 65 3c 72 3f 28 69 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 2c 69 3d 6e 75 6c 6c 29 2c 6c 3d 6e 2c 63 3d 74 2e 61 70 70 6c 79 28 61 2c 66 29 2c 69 7c 7c 28 61 3d 66 3d 6e 75 6c 6c 29 29 3a 69 7c 7c 21 31 3d 3d 3d 75 2e 74 72 61 69 6c 69 6e 67 7c 7c 28 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 6f 2c 72 29 29 2c 63 7d 76 61 72 20 69 2c 61 2c 66 2c 63 2c 6c 3d 30 3b 72 65 74 75 72 6e 20 75 3d Data Ascii: c=t.apply(a,f),i\|\|(a=f=null)}function n(){var n=O(),r=(l\|\|!1!==u.leading\|\|(l=n),e-(n-l));return a=this,f=arguments,r<=0\|\|e<r?(i&&(clearTimeout(i),i=null),l=n,c=t.apply(a,f),i\|\|(a=f=null)):i\|\|!1===u.trailing\|\|(i=setTimeout(o,r)),c}var i,a,f,c,l=0;return u=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49896	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	864	OUT	GET /wp-includes/js/wp-util.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 02 Nov 2022 08:39:00 GMT Accept-Ranges: bytes Content-Length: 4679 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	4679	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6f 75 74 70 75 74 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 20 67 6c 6f 62 61 6c 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 2a 2f 0a 0a 2f 2a 2a 20 40 6e 61 6d 65 73 70 61 63 65 20 77 70 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 20 3d 20 77 69 6e 64 6f 77 2e 77 70 20 7c 7c 20 7b 7d 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 74 68 65 20 75 74 69 6c 69 74 79 20 73 65 74 74 69 6e 67 73 2e 0a 09 76 61 72 20 73 65 74 74 69 6e 67 73 20 3d 20 74 79 70 65 6f 66 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 7b 7d 20 3a 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 Data Ascii: /** * @output wp-includes/js/wp-util.js // global _wpUtilSettings //* @namespace wp */window.wp = window.wp \|\| {};(function ($) {// Check for the utility settings.var settings = typeof _wpUtilSettings === 'undefined' ? {} : _wpUtilSetting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49897	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:43 UTC	921	OUT	GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.8.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:43 UTC	267	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 26 Apr 2024 20:33:47 GMT Accept-Ranges: bytes Content-Length: 771 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:43 UTC	771	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 46 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 3d 77 69 6e 64 6f 77 2e 57 50 46 6f 72 6d 73 45 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 65 76 65 6e 74 73 28 29 7d 2c 65 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 70 6f 70 75 70 2f 73 68 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 6e 28 22 23 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 2d 22 2b 65 2e 64 65 74 61 69 6c 2e 69 64 29 2e 66 69 6e 64 28 22 2e 77 70 66 6f 72 6d 73 Data Ascii: "use strict";var WPFormsElementorFrontend=window.WPFormsElementorFrontend\|\|function(o,e,n){var r={init:function(){r.events()},events:function(){e.addEventListener("elementor/popup/show",function(e){e=n("#elementor-popup-modal-"+e.detail.id).find(".wpforms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49898	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	937	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/vendor/isotope/imagesloaded.pkgd.min.js?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:16 GMT Accept-Ranges: bytes Content-Length: 5498 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:44 UTC	5498	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 35 2e 30 2e 30 0d 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0d 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 74 2e 45 76 45 6d 69 74 74 65 72 3d 65 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 28 66 75 6e Data Ascii: /! imagesLoaded PACKAGED v5.0.0 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49902	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	900	OUT	GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 139153 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:44 UTC	7922	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 33 2e 36 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 30 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 46 65 62 72 75 61 72 79 20 32 39 2c 20 32 30 32 30 0a 20 2a 2f 0a Data Ascii: /** * Swiper 5.3.6 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2020 Vladimir Kharlampidi * * Released under the MIT License * * Released on: February 29, 2020 */
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 72 65 74 75 72 6e 20 6f 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 61 29 3b 66 6f 72 28 72 3d 73 28 61 29 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 72 5b 6e 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 69 66 28 61 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6f 3d 3d 3d 65 3b 69 66 28 61 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 29 7b 66 6f 72 28 72 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 5b 61 5d 3a 61 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 72 5b 6e 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 72 Data Ascii: atchesSelector)return o.msMatchesSelector(a);for(r=s(a),n=0;n<r.length;n+=1)if(r[n]===o)return!0;return!1}if(a===e)return o===e;if(a===t)return o===t;if(a.nodeType\|\|a instanceof i){for(r=a.nodeType?[a]:a,n=0;n<r.length;n+=1)if(r[n]===o)return!0;return!1}r
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 72 6f 74 6f 74 79 70 65 5b 74 5d 3d 65 2e 70 72 6f 74 6f 5b 74 5d 7d 29 29 2c 65 2e 73 74 61 74 69 63 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 73 74 61 74 69 63 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 74 5d 3d 65 2e 73 74 61 74 69 63 5b 74 5d 7d 29 29 2c 65 2e 69 6e 73 74 61 6c 6c 26 26 65 2e 69 6e 73 74 61 6c 6c 2e 61 70 70 6c 79 28 73 2c 74 29 2c 73 7d 2c 6c 2e 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2d 2d 20 3e 30 3b 29 74 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2b 31 5d 3b 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 65 2e 66 6f 72 Data Ascii: rototype[t]=e.proto[t]})),e.static&&Object.keys(e.static).forEach((function(t){s[t]=e.static[t]})),e.install&&e.install.apply(s,t),s},l.use=function(e){for(var t=[],i=arguments.length-1;i-- >0;)t[i]=arguments[i+1];var s=this;return Array.isArray(e)?(e.for
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 53 6c 69 64 65 73 50 72 6f 67 72 65 73 73 7c 7c 69 2e 77 61 74 63 68 53 6c 69 64 65 73 56 69 73 69 62 69 6c 69 74 79 7c 7c 69 2e 63 65 6e 74 65 72 65 64 53 6c 69 64 65 73 26 26 69 2e 61 75 74 6f 48 65 69 67 68 74 29 26 26 74 68 69 73 2e 75 70 64 61 74 65 53 6c 69 64 65 73 50 72 6f 67 72 65 73 73 28 65 29 2c 72 26 26 21 6c 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 61 63 68 42 65 67 69 6e 6e 69 6e 67 20 74 6f 45 64 67 65 22 29 2c 6f 26 26 21 64 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 61 63 68 45 6e 64 20 74 6f 45 64 67 65 22 29 2c 28 6c 26 26 21 72 7c 7c 64 26 26 21 6f 29 26 26 74 68 69 73 2e 65 6d 69 74 28 22 66 72 6f 6d 45 64 67 65 22 29 2c 74 68 69 73 2e 65 6d 69 74 28 22 70 72 6f 67 72 65 73 73 22 2c 61 29 7d 2c 75 70 64 61 74 65 53 6c 69 64 65 Data Ascii: SlidesProgress\|\|i.watchSlidesVisibility\|\|i.centeredSlides&&i.autoHeight)&&this.updateSlidesProgress(e),r&&!l&&this.emit("reachBeginning toEdge"),o&&!d&&this.emit("reachEnd toEdge"),(l&&!r\|\|d&&!o)&&this.emit("fromEdge"),this.emit("progress",a)},updateSlide
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 2c 72 2e 73 65 74 54 72 61 6e 73 6c 61 74 65 28 67 29 2c 72 2e 75 70 64 61 74 65 41 63 74 69 76 65 49 6e 64 65 78 28 6e 29 2c 72 2e 75 70 64 61 74 65 53 6c 69 64 65 73 43 6c 61 73 73 65 73 28 29 2c 72 2e 65 6d 69 74 28 22 62 65 66 6f 72 65 54 72 61 6e 73 69 74 69 6f 6e 53 74 61 72 74 22 2c 74 2c 73 29 2c 72 2e 74 72 61 6e 73 69 74 69 6f 6e 53 74 61 72 74 28 69 2c 6d 29 2c 72 2e 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 69 2c 6d 29 29 3a 28 72 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 28 74 29 2c 72 2e 73 65 74 54 72 61 6e 73 6c 61 74 65 28 67 29 2c 72 2e 75 70 64 61 74 65 41 63 74 69 76 65 49 6e 64 65 78 28 6e 29 2c 72 2e 75 70 64 61 74 65 53 6c 69 64 65 73 43 6c 61 73 73 65 73 28 29 2c 72 2e 65 6d 69 74 28 22 62 65 66 6f 72 65 54 72 61 6e 73 69 74 69 6f Data Ascii: ,r.setTranslate(g),r.updateActiveIndex(n),r.updateSlidesClasses(),r.emit("beforeTransitionStart",t,s),r.transitionStart(i,m),r.transitionEnd(i,m)):(r.setTransition(t),r.setTranslate(g),r.updateActiveIndex(n),r.updateSlidesClasses(),r.emit("beforeTransitio
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 3e 3d 30 2c 4d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 2f 22 29 3e 3d 30 2c 50 3d 67 2e 69 6e 64 65 78 4f 66 28 22 47 65 63 6b 6f 2f 22 29 3e 3d 30 26 26 67 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 2f 22 29 3e 3d 30 2c 7a 3d 22 57 69 6e 33 32 22 3d 3d 3d 6d 2c 6b 3d 67 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 65 6c 65 63 74 72 6f 6e 22 29 3e 3d 30 2c 24 3d 22 4d 61 63 49 6e 74 65 6c 22 3d 3d 3d 6d 2c 21 54 26 26 24 26 26 6f 2e 74 6f 75 63 68 26 26 28 31 30 32 34 3d 3d 3d 77 26 26 31 33 36 36 3d 3d 3d 79 7c 7c 38 33 34 3d 3d 3d 77 26 26 31 31 39 34 3d 3d 3d 79 7c 7c 38 33 34 3d 3d 3d 77 26 26 31 31 31 32 3d 3d 3d 79 7c 7c 37 36 38 3d 3d 3d 77 26 26 31 30 Data Ascii: ndexOf("Trident/")>=0,M=g.indexOf("Edge/")>=0,P=g.indexOf("Gecko/")>=0&&g.indexOf("Firefox/")>=0,z="Win32"===m,k=g.toLowerCase().indexOf("electron")>=0,$="MacIntel"===m,!T&&$&&o.touch&&(1024===w&&1366===y\|\|834===w&&1194===y\|\|834===w&&1112===y\|\|768===w&&10
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 6f 2c 77 3d 74 2e 76 65 6c 6f 63 69 74 79 2a 62 2c 79 3d 74 2e 74 72 61 6e 73 6c 61 74 65 2b 77 3b 72 26 26 28 79 3d 2d 79 29 3b 76 61 72 20 78 2c 54 2c 45 3d 21 31 2c 53 3d 32 30 2a 4d 61 74 68 2e 61 62 73 28 74 2e 76 65 6c 6f 63 69 74 79 29 2a 73 2e 66 72 65 65 4d 6f 64 65 4d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 52 61 74 69 6f 3b 69 66 28 79 3c 74 2e 6d 61 78 54 72 61 6e 73 6c 61 74 65 28 29 29 73 2e 66 72 65 65 4d 6f 64 65 4d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 3f 28 79 2b 74 2e 6d 61 78 54 72 61 6e 73 6c 61 74 65 28 29 3c 2d 53 26 26 28 79 3d 74 2e 6d 61 78 54 72 61 6e 73 6c 61 74 65 28 29 2d 53 29 2c 78 3d 74 2e 6d 61 78 54 72 61 6e 73 6c 61 74 65 28 29 2c 45 3d 21 30 2c 69 2e 61 6c 6c 6f 77 4d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 3d 21 30 29 Data Ascii: o,w=t.velocityb,y=t.translate+w;r&&(y=-y);var x,T,E=!1,S=20Math.abs(t.velocity)*s.freeModeMomentumBounceRatio;if(y<t.maxTranslate())s.freeModeMomentumBounce?(y+t.maxTranslate()<-S&&(y=t.maxTranslate()-S),x=t.maxTranslate(),E=!0,i.allowMomentumBounce=!0)
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 75 63 68 26 26 49 2e 69 6f 73 29 26 26 28 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 6f 6e 54 6f 75 63 68 53 74 61 72 74 2c 21 31 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 68 69 73 2e 6f 6e 54 6f 75 63 68 4d 6f 76 65 2c 72 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 75 70 22 2c 74 68 69 73 2e 6f 6e 54 6f 75 63 68 45 6e 64 2c 21 31 29 29 7d 28 74 2e 70 72 65 76 65 6e 74 43 6c 69 63 6b 73 7c 7c 74 2e 70 72 65 76 65 6e 74 43 6c 69 63 6b 73 50 72 6f 70 61 67 61 74 69 6f 6e 29 26 26 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 Data Ascii: uch&&I.ios)&&(s.removeEventListener("mousedown",this.onTouchStart,!1),e.removeEventListener("mousemove",this.onTouchMove,r),e.removeEventListener("mouseup",this.onTouchEnd,!1))}(t.preventClicks\|\|t.preventClicksPropagation)&&s.removeEventListener("click",t
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 69 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 64 69 72 65 63 74 69 6f 6e 3b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 3d 69 3f 22 76 65 72 74 69 63 61 6c 22 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 2c 65 3d 3d 3d 69 7c 7c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 21 3d 3d 65 26 26 22 76 65 72 74 69 63 61 6c 22 21 3d 3d 65 3f 74 68 69 73 3a 28 74 68 69 73 2e 24 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 22 2b 74 68 69 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 2b 69 29 2e 61 64 64 43 6c 61 73 73 28 22 22 2b 74 68 69 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 2b 65 29 2c 74 68 69 73 2e 70 61 72 61 6d 73 2e 64 69 72 65 63 74 Data Ascii: i=this.params.direction;return e\|\|(e="horizontal"===i?"vertical":"horizontal"),e===i\|\|"horizontal"!==e&&"vertical"!==e?this:(this.$el.removeClass(""+this.params.containerModifierClass+i).addClass(""+this.params.containerModifierClass+e),this.params.direct
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 72 74 6c 54 72 61 6e 73 6c 61 74 65 2c 61 3d 69 3b 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 26 26 28 61 3d 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 29 3b 76 61 72 20 72 3d 61 2e 6b 65 79 43 6f 64 65 7c 7c 61 2e 63 68 61 72 43 6f 64 65 3b 69 66 28 21 74 68 69 73 2e 61 6c 6c 6f 77 53 6c 69 64 65 4e 65 78 74 26 26 28 74 68 69 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 28 29 26 26 33 39 3d 3d 3d 72 7c 7c 74 68 69 73 2e 69 73 56 65 72 74 69 63 61 6c 28 29 26 26 34 30 3d 3d 3d 72 7c 7c 33 34 3d 3d 3d 72 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 74 68 69 73 2e 61 6c 6c 6f 77 53 6c 69 64 65 50 72 65 76 26 26 28 74 68 69 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 28 29 26 26 33 37 3d 3d 3d 72 Data Ascii: nction(i){var s=this.rtlTranslate,a=i;a.originalEvent&&(a=a.originalEvent);var r=a.keyCode\|\|a.charCode;if(!this.allowSlideNext&&(this.isHorizontal()&&39===r\|\|this.isVertical()&&40===r\|\|34===r))return!1;if(!this.allowSlidePrev&&(this.isHorizontal()&&37===r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49899	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	917	OUT	GET /wp-content/plugins/testimonial-slider-and-showcase/assets/js/wptestimonial.js?ver=2.3.10 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 17 Apr 2024 20:34:15 GMT Accept-Ranges: bytes Content-Length: 26133 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:44 UTC	7923	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 09 24 28 27 2a 27 29 0d 0a 09 09 2e 6f 6e 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 09 24 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 28 27 68 6f 76 65 72 27 29 3b 0d 0a 09 09 7d 29 0d 0a 09 09 2e 6f 6e 28 27 74 6f 75 63 68 65 6e 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 09 24 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 28 27 68 6f 76 65 72 27 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 0d 0a 09 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 70 72 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0d 0a 09 09 24 28 64 6f 63 75 6d 65 6e 74 29 0d 0a 09 09 09 2e 6f 6e 28 27 6d 6f 75 73 65 6f 76 65 72 27 2c Data Ascii: (function ($) {'use strict';$('*').on('touchstart', function () {$(this).trigger('hover');}).on('touchend', function () {$(this).trigger('hover');});$(function () {preFunction();$(document).on('mouseover',
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 24 74 68 69 73 20 3d 20 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 2e 74 73 73 2d 75 74 69 6c 69 74 79 20 2e 74 73 73 2d 73 63 72 6f 6c 6c 2d 6c 6f 61 64 2d 6d 6f 72 65 27 29 3b 0d 0a 09 09 09 09 09 09 09 69 66 20 28 24 74 68 69 73 2e 61 74 74 72 28 27 64 61 74 61 2d 74 72 69 67 67 65 72 27 29 20 3e 20 30 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 73 63 72 6f 6c 6c 4c 6f 61 64 4d 6f 72 65 28 24 74 68 69 73 2c 20 69 73 6f 74 6f 70 65 4d 2c 20 63 6f 6e 74 61 69 6e 65 72 2c 20 27 6d 4c 61 79 6f 75 74 27 29 3b 0d 0a 09 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 7d 29 3b 0d 0a 09 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 09 69 66 20 28 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 2e 74 73 73 2d 75 74 69 6c 69 74 79 20 2e 74 73 73 2d 70 61 67 69 6e 61 74 69 Data Ascii: $this = container.find('.tss-utility .tss-scroll-load-more');if ($this.attr('data-trigger') > 0) {scrollLoadMore($this, isotopeM, container, 'mLayout');}});}if (container.find('.tss-utility .tss-paginati
2024-05-28 05:14:44 UTC	8000	IN	Data Raw: 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 09 09 09 61 6c 65 72 74 28 74 65 78 74 53 74 61 74 75 73 20 2b 20 27 20 28 27 20 2b 20 65 72 72 6f 72 54 68 72 6f 77 6e 20 2b 20 27 29 27 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 7d 0d 0a 0d 0a 09 66 75 6e 63 74 69 6f 6e 20 72 65 6e 64 65 72 49 73 6f 74 6f 70 65 28 63 6f 6e 74 61 69 6e 65 72 2c 20 24 69 73 6f 74 6f 70 65 2c 20 64 61 74 61 2c 20 49 73 6f 42 75 74 74 6f 6e 29 20 7b 0d 0a 09 09 76 61 72 20 71 73 52 65 67 65 78 47 2c 20 62 75 74 74 6f 6e 46 69 6c 74 65 72 3b 0d 0a 09 09 69 66 20 28 21 62 75 74 74 6f 6e 46 69 6c 74 65 72 29 20 7b 0d 0a 09 09 09 62 75 74 74 6f 6e 46 69 6c 74 65 72 20 3d 20 49 73 6f 42 75 74 74 6f 6e 2e 66 69 6e 64 28 27 2e 72 Data Ascii: .remove();alert(textStatus + ' (' + errorThrown + ')');}});return false;}function renderIsotope(container, $isotope, data, IsoButton) {var qsRegexG, buttonFilter;if (!buttonFilter) {buttonFilter = IsoButton.find('.r
2024-05-28 05:14:44 UTC	2210	IN	Data Raw: 0a 09 09 09 09 09 09 09 09 76 61 72 20 62 75 74 74 6f 6e 54 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 47 65 74 20 50 72 6f 22 29 3b 0d 0a 0d 0a 09 09 09 09 09 09 09 09 62 75 74 74 6f 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 61 64 69 75 73 74 68 65 6d 65 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 77 70 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2d 73 68 6f 77 63 61 73 65 2d 70 72 6f 2d 77 6f 72 64 70 72 65 73 73 2f 22 29 3b 0d 0a 09 09 09 09 09 09 09 09 62 75 74 74 6f 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 74 22 2c 20 22 5f 62 6c 61 6e 6b 22 29 3b 0d 0a 09 09 09 09 09 09 09 09 62 75 74 74 6f 6e 2e Data Ascii: var buttonText = document.createTextNode("Get Pro");button.setAttribute("href", "https://www.radiustheme.com/downloads/wp-testimonial-slider-showcase-pro-wordpress/");button.setAttribute("target", "_blank");button.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49903	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	929	OUT	GET /wp-content/uploads/2021/08/instagram.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:22:33 GMT Accept-Ranges: bytes Content-Length: 4090 Content-Type: image/png
2024-05-28 05:14:44 UTC	4090	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49900	157.240.251.9	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	1312	OUT	GET /signals/config/215059717349806?v=next&r=stable&domain=www.campobahia.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:45 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-28 05:14:45 UTC	1733	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-28 05:14:45 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49905	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	927	OUT	GET /wp-content/uploads/2021/08/spotify.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:38:45 GMT Accept-Ranges: bytes Content-Length: 4066 Content-Type: image/png
2024-05-28 05:14:44 UTC	4066	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49904	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	927	OUT	GET /wp-content/uploads/2021/08/youtube.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:42:40 GMT Accept-Ranges: bytes Content-Length: 3303 Content-Type: image/png
2024-05-28 05:14:44 UTC	3303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49909	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:44 UTC	928	OUT	GET /wp-content/uploads/2021/08/facebook.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:44 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:46 GMT Accept-Ranges: bytes Content-Length: 3146 Content-Type: image/png
2024-05-28 05:14:44 UTC	3146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 10 04 00 00 00 50 f0 65 16 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 b2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@PepHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49911	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:45 UTC	1077	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/images/close_modal.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/wp-content/plugins/cm-pop-up-banners/shared/assets/css/ouibounce.css?ver=1.6.5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:45 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 1581 Content-Type: image/png
2024-05-28 05:14:45 UTC	1581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 05 b3 49 44 41 54 78 da b4 56 6b 4c 14 57 18 3d f7 ce ce 2c b3 4b 01 5d a3 2e ab c2 16 db e8 62 62 ad 2d 46 8b 82 49 93 26 14 13 4d d0 04 c5 26 6a aa b1 d1 34 be c0 5a b1 6a 6d e3 23 ad d5 f8 88 fd 83 8f 46 45 6d 7d c5 d6 95 90 2c b5 5a 5b a2 55 6b 09 d8 a8 2b 82 3c 56 81 65 64 99 9d 9d 3b b7 7f 94 82 ce f2 f0 71 7e ce 3d f7 9e f9 66 be 73 be 4b 32 33 33 01 00 9c 73 08 42 0c e2 e3 63 61 b7 db a0 28 0a 4e 9c 38 4e 00 e0 f0 e1 23 c2 c9 93 a7 d2 54 b5 7d 2a e7 48 Data Ascii: PNGIHDR;0pHYs cHRMz%u0`:o_FIDATxVkLW=,K].bb-FI&M&j4Zjm#FEm},Z[Uk+<Ved;q~=fsK233sBca(N8N#T}*H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49913	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:45 UTC	1015	OUT	GET /wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:46 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 28 May 2024 05:14:45 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-28 05:14:46 UTC	7813	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3a 61 64 64 74 68 69 73 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 68 65 6c 70 2f 61 70 69 2d 73 70 65 63 22 20 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 61 68 42 79 7a 64 71 6f 4f 4f 47 43 5a 6a 48 6d 47 76 73 4f 6a 4c 69 7a 56 4d 36 70 65 32 72 56 51 72 51 61 48 41 6c 66 30 77 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" ><head><meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" /><meta c
2024-05-28 05:14:46 UTC	8577	IN	Data Raw: 0a 0a 09 09 09 09 69 66 20 28 20 69 73 49 64 65 6e 74 69 63 61 6c 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2a 0a 09 09 09 09 20 2a 20 54 65 73 74 20 66 6f 72 20 55 4e 20 66 6c 61 67 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 6c 65 61 73 74 20 73 75 70 70 6f 72 74 65 64 20 6f 66 20 74 68 65 20 6c 65 74 74 65 72 20 6c 6f 63 61 6c 65 20 66 6c 61 67 73 2c 0a 09 09 09 09 20 2a 20 73 6f 20 67 69 76 65 73 20 75 73 20 61 6e 20 65 61 73 79 20 74 65 73 74 20 66 6f 72 20 66 75 6c 6c 20 73 75 70 70 6f 72 74 2e 0a 09 09 09 09 20 2a 0a 09 09 09 09 20 2a 20 54 6f 20 74 65 73 74 20 66 6f 72 20 73 75 70 70 6f 72 74 2c 20 77 65 20 74 72 79 20 74 6f 20 72 65 6e 64 65 Data Ascii: if ( isIdentical ) {return false;}/* * Test for UN flag compatibility. This is the least supported of the letter locale flags, * so gives us an easy test for full support. * * To test for support, we try to rende
2024-05-28 05:14:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:46 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: 40007;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--pres
2024-05-28 05:14:46 UTC	8198	IN	Data Raw: 73 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 6f 63 65 61 6e 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 Data Ascii: s-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background:
2024-05-28 05:14:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:46 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 75 2d 73 69 64 65 62 61 72 2d 62 67 2c 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2d 62 67 20 61 3a 6e 6f 74 28 2e 62 75 74 74 6f 6e 29 2c 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2d 62 67 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6e 76 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 20 7d 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 2d 62 67 20 2e 6e 76 2d 69 63 6f 6e 20 73 76 67 2c 2e 68 65 61 64 65 72 2d 6d 65 6e 75 2d 73 69 64 65 62 61 72 20 2e 68 65 61 64 Data Ascii: 4000u-sidebar-bg,.header-menu-sidebar .header-menu-sidebar-bg a:not(.button),.header-menu-sidebar .header-menu-sidebar-bg .navbar-toggle{ color: var(--nv-text-color); } .header-menu-sidebar .header-menu-sidebar-bg .nv-icon svg,.header-menu-sidebar .head
2024-05-28 05:14:46 UTC	8198	IN	Data Raw: 65 6d 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 63 75 73 74 6f 6d 5f 68 74 6d 6c 20 2e 6e 76 2d 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 63 75 73 74 6f 6d 5f 68 74 6d 6c 20 2e 6e 76 2d 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 20 73 76 67 7b 20 77 69 64 74 68 3a 20 31 65 6d 3b 68 65 69 67 68 74 3a 20 31 65 6d 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 63 75 73 74 6f 6d 5f 68 74 6d 6c 7b 20 70 61 64 64 69 6e 67 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 Data Ascii: em; } .builder-item--custom_html .nv-html-content{ font-size: 1em; line-height: 1.6em; letter-spacing: 0px; } .builder-item--custom_html .nv-html-content svg{ width: 1em;height: 1em; } .builder-item--custom_html{ padding:0px 0px 0px 0px;margin:0px 0px 0px
2024-05-28 05:14:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49910	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:45 UTC	1002	OUT	GET /wp-content/uploads/2023/09/Pop-up-Julho-atualizado-2-copiar-2.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:45 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 24 May 2024 17:15:49 GMT Accept-Ranges: bytes Content-Length: 399229 Content-Type: image/jpeg
2024-05-28 05:14:45 UTC	7957	IN	Data Raw: ff d8 ff e1 0a 26 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 01 24 f8 00 00 00 27 10 01 24 f8 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 35 3a 32 34 20 31 34 3a 31 35 3a 33 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 06 0c a0 03 00 04 00 00 00 01 00 00 06 e6 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1!r2i$'$'Adobe Photoshop 25.0 (Macintosh)2024:05:24 14:15:32"
2024-05-28 05:14:45 UTC	8000	IN	Data Raw: 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 30 2d 30 38 2d 32 36 54 31 35 3a 30 32 3a 35 30 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 32 34 54 31 34 3a 31 35 3a 33 32 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 32 34 54 31 34 3a 31 35 3a 33 32 2d 30 Data Ascii: /1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2020-08-26T15:02:50-03:00" xmp:MetadataDate="2024-05-24T14:15:32-03:00" xmp:ModifyDate="2024-05-24T14:15:32-0
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 46 36 32 38 45 34 36 32 36 42 32 41 36 44 43 34 35 41 39 45 33 35 43 46 33 46 37 44 30 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 34 35 31 41 34 45 43 31 46 41 38 39 41 30 45 33 36 43 31 39 37 43 43 39 31 46 34 46 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 38 46 31 34 31 45 36 34 32 45 46 42 31 45 31 31 35 36 36 39 37 46 41 35 37 37 35 45 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 43 33 34 38 42 46 45 38 36 31 37 30 30 43 46 35 35 36 30 30 32 35 39 32 45 42 33 33 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 32 33 37 37 34 35 35 42 39 36 38 45 34 45 43 30 35 32 45 31 46 44 46 41 34 38 39 35 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>4F628E4626B2A6DC45A9E35CF3F7D0C6</rdf:li> <rdf:li>50451A4EC1FA89A0E36C197CC91F4F58</rdf:li> <rdf:li>518F141E642EFB1E1156697FA5775E72</rdf:li> <rdf:li>51C348BFE861700CF556002592EB3398</rdf:li> <rdf:li>522377455B968E4EC052E1FDFA489519</rdf:li>
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 63 37 37 35 61 30 35 36 64 66 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 33 39 35 30 61 62 66 2d 61 30 64 66 2d 39 66 34 35 2d 38 66 61 66 2d 36 33 34 32 38 36 37 61 32 34 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 33 61 62 63 65 34 64 2d 63 33 62 31 2d 31 31 37 38 2d 39 65 37 65 2d 66 37 39 35 34 32 64 35 36 64 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 35 32 37 33 39 66 32 2d 39 36 34 34 2d 65 39 34 31 2d 62 61 37 34 2d 38 36 32 66 61 63 31 32 37 37 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: c775a056dfa</rdf:li> <rdf:li>adobe:docid:photoshop:33950abf-a0df-9f45-8faf-6342867a2422</rdf:li> <rdf:li>adobe:docid:photoshop:33abce4d-c3b1-1178-9e7e-f79542d56dff</rdf:li> <rdf:li>adobe:docid:photoshop:352739f2-9644-e941-ba74-862fac127795</rdf:li> <rdf:l
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 30 31 62 39 62 36 63 2d 38 38 37 64 2d 62 32 34 36 2d 61 34 38 36 2d 34 64 62 61 30 64 31 39 62 35 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 36 64 35 62 33 30 2d 37 63 62 64 2d 31 31 37 62 2d 38 36 32 37 2d 38 36 65 36 33 32 34 64 62 63 65 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 39 34 37 36 35 65 37 2d 36 61 64 64 2d 31 31 65 35 2d 61 34 39 62 2d 61 32 62 31 63 65 33 32 65 32 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 Data Ascii: <rdf:li>adobe:docid:photoshop:c01b9b6c-887d-b246-a486-4dba0d19b577</rdf:li> <rdf:li>adobe:docid:photoshop:c36d5b30-7cbd-117b-8627-86e6324dbcea</rdf:li> <rdf:li>adobe:docid:photoshop:c94765e7-6add-11e5-a49b-a2b1ce32e280</rdf:li> <rdf:li>adobe:docid:photos
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 62 34 61 33 37 64 63 38 64 66 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 65 62 32 64 64 35 2d 64 63 32 63 2d 34 33 39 64 2d 62 63 36 34 2d 37 62 66 64 66 65 64 39 38 66 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 61 38 38 31 38 64 63 2d 62 66 64 65 2d 65 63 34 34 2d 62 36 39 32 2d 33 64 65 63 62 65 30 33 31 34 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 63 35 66 38 61 64 2d 37 62 33 65 2d 34 61 62 36 2d 39 62 62 38 2d 33 39 63 62 61 31 64 33 61 35 63 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 63 31 63 30 66 36 34 2d 33 64 64 65 2d 66 66 34 61 2d 38 31 33 61 2d 38 38 61 30 35 30 64 66 Data Ascii: b4a37dc8dfa</rdf:li> <rdf:li>xmp.did:79eb2dd5-dc2c-439d-bc64-7bfdfed98fa3</rdf:li> <rdf:li>xmp.did:7a8818dc-bfde-ec44-b692-3decbe031456</rdf:li> <rdf:li>xmp.did:7bc5f8ad-7b3e-4ab6-9bb8-39cba1d3a5c4</rdf:li> <rdf:li>xmp.did:7c1c0f64-3dde-ff4a-813a-88a050df
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 09 0a 18 19 26 36 45 1a 27 64 74 55 37 f2 a3 b3 c3 28 29 d3 e3 f3 84 94 a4 b4 c4 d4 e4 f4 65 75 85 95 a5 b5 c5 d5 e5 f5 46 56 66 76 86 96 a6 b6 c6 d6 e6 f6 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e7 c6 b9 96 e0 ba b4 18 ab b1 43 81 db 14 b4 30 a1 d8 ab 88 38 ad 38 f8 e2 ae df a6 28 76 29 6f 02 ba 98 55 d8 12 dd 69 8a bb 15 71 c2 ad 62 86 f7 c5 5a 02 b8 ad 35 4c 58 d3 bd f1 56 f1 4b 43 14 37 8b 27 62 8b 77 7d b1 56 f7 c5 59 56 89 bd 9a 7f b2 ff 00 89 36 73 fa bf ae 5f e6 ff 00 b8 7a 0d 27 f7 71 ff 00 3b fd da 62 06 62 39 8b c6 28 5c 30 25 d8 ab a9 8a ba 98 a5 be 38 15 d8 12 d8 c5 2b b1 57 62 ab 48 c5 Data Ascii: &6E'dtU7()euFVfvGWgw8HXhx9IYiy*:JZjz?C088(v)oUiqbZ5LXVKC7'bw}VYV6s_z'q;bb9(\0%8+WbH
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 78 ab b0 ab b1 43 b1 57 64 82 b8 64 90 bb 14 37 8a ad 23 15 5b 8a 56 93 8a ad 27 0a b5 5c 55 a2 71 56 b1 56 b1 55 b8 a5 a3 8a b5 8a ad 38 aa dc 55 69 c5 5a 38 55 69 c5 5d 8a ac 6c 2a b4 e2 ad 1c 2a b7 15 6b 15 6b 0a ad c5 5c 71 42 d3 85 5a 38 aa dc 55 a3 85 56 9c 55 ac 55 69 c2 ad 1c 55 ac 28 6b 15 7f ff d7 84 d3 33 1c 06 a9 4d f1 56 e9 8a b8 d2 9b e0 4b 74 c5 5c 31 57 50 e2 ab a8 31 4b a9 4c 50 d5 31 56 e8 71 56 b0 a1 bc 09 75 31 57 0d b7 c5 5c 06 2a de 29 77 7d f1 56 8e 16 2d d0 f5 c0 96 c0 f1 c0 95 fe 9d 70 a5 52 3b 56 22 a7 a7 be 44 94 80 98 41 a6 33 ff 00 66 46 db 38 51 31 e9 8a 8d 47 c8 da 69 1c b0 2a ad 14 53 df 05 b2 a5 16 4e 2b b6 2a e8 81 0b be 69 75 3f 59 fc 7f 0b b7 d3 fd 03 f1 fc 4b f3 19 c8 6f 0a b6 30 2b 78 ab 78 ab b1 4b 78 ab b0 2b 8e 2a Data Ascii: xCWdd7#[V'\UqVVU8UiZ8Ui]l*kk\qBZ8UVUUiU(k3MVKt\1WP1KLP1VqVu1W\)w}V-pR;V"DA3fF8Q1GiSN+iu?YKo0+xxKx+*
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 37 92 92 45 bc 55 0a 09 1c 8f c5 f6 ff 00 9b ec 65 72 0d b1 28 09 fc c5 7e f2 fa c6 77 e5 5e 8a c4 28 ff 00 27 82 fc 18 d2 da 73 ad 5d cb ab 68 d0 5f 39 3c d6 42 8c 01 f8 5b ed fe f7 87 f3 7f cd 78 13 76 c4 f8 32 b5 5a b4 c9 31 46 47 33 c8 bc 50 ef 91 64 0b 51 d9 b1 63 cf 76 eb 8d ad 2a 9b 31 27 6a 63 69 a4 65 9e 9f f1 54 6e 32 24 a4 04 e6 0b 1e 22 a4 d7 21 6c e9 18 88 ab d3 02 57 34 a0 6d 8a ad 77 14 a0 eb ef 8a b1 1d 65 4a dd b8 3f e4 ff 00 c4 57 35 59 fe a2 ec b0 fd 21 05 98 ed ed e2 ad e2 ae c0 97 62 97 60 56 c6 29 6f 15 6f 02 bb 15 6a b8 a5 b0 70 2b 78 a5 70 c5 55 53 22 aa 83 02 ae a6 2a 9a 69 fe 5e ba bf 8c 4b 1f 10 86 b4 2c 7a d3 e1 fd 9e 59 93 8f 4d 29 8b 0e 3c f3 c6 06 8a 3e 3f 26 dc 1f ef 24 41 f2 a9 ff 00 9a 32 f1 a1 3d 4c 5a 4e ac 77 23 23 f2 Data Ascii: 7EUer(~w^('s]h_9<B[xv2Z1FG3PdQcv1'jcieTn2$"!lW4mweJ?W5Y!b`V)oojp+xpUS"i^K,zYM)<>?&$A2=LZNw##
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 15 5a 71 55 a7 15 5b 8a b5 8a b9 54 b1 0a 3a 93 4c 20 5e ca 55 af ac 9e c9 c4 72 10 49 15 db 2d cb 88 e3 34 5a f1 cc 4c 58 42 d7 29 6c 6b 14 ad c5 5a c5 56 9c 55 ac 2a b4 e2 ad 1c 55 a3 85 56 9c 55 ac 52 d1 c2 85 b8 ab 58 ab 58 55 6e 2a d1 c2 86 8e 2a d1 c5 56 e2 ad 1c 2a b4 e2 ad 1c 55 69 c2 ad 1c 55 ac 28 6b 15 7f ff d3 8d 53 33 1c 1a 6c 01 81 57 53 e9 c0 97 53 14 ae 11 93 8a d2 aa 45 be 2a 02 fe 14 db 02 5a 2d 4d bb e2 ae e6 4e 2a b8 35 37 c5 2d 99 47 6c 56 d4 9a 56 38 58 d9 55 88 d7 ae 02 90 8e 1f 10 14 34 03 22 cd 5e 05 a7 7c 8b 24 df 4b b7 b8 bc 2c b6 c9 cc 81 53 b8 ff 00 8d b2 25 98 29 a0 d0 b5 0e 82 13 bf ba ff 00 cd 59 14 a3 b5 16 5d 3a ca 3b 27 60 66 e5 cd 80 fd 9c 52 93 8b fd e8 a7 1a 5b 44 c6 64 23 90 6f a3 03 25 43 7a 63 dd c8 a0 c1 4b 6a 6d Data Ascii: ZqU[T:L ^UrI-4ZLXB)lkZVUUVURXXUnVUiU(kS3lWSSEZ-MN57-GlVV8XU4"^\|$K,S%)Y]:;'`fR[Dd#o%CzcKjm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49912	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:45 UTC	993	OUT	POST /?ob=open-bridge/events HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Content-Length: 375 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.campobahia.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:45 UTC	375	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 38 65 36 33 39 36 32 38 66 62 66 64 66 33 62 32 66 63 36 33 33 36 62 38 63 39 34 37 35 36 63 32 36 34 61 31 66 62 66 62 32 39 36 62 63 66 39 35 66 62 38 33 64 37 64 64 36 61 66 64 61 65 31 66 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 32 31 35 30 35 39 37 31 37 33 34 39 38 30 36 22 2c 22 66 62 2e 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 22 3a 7b 7d 2c 22 77 65 62 73 69 74 65 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 Data Ascii: {"event_name":"PageView","fb.dynamic_product_ads":{},"custom_data":{},"event_id":"ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f","fb.pixel_id":"215059717349806","fb.advanced_matching":{},"website_context":{"location":"htt
2024-05-28 05:14:46 UTC	176	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49914	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:45 UTC	952	OUT	GET /wp-content/uploads/2024/03/CAMPO-BAHIA-SANTO-ANDRE-1536x878.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:45 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 04 Mar 2024 14:06:04 GMT Accept-Ranges: bytes Content-Length: 219015 Content-Type: image/jpeg
2024-05-28 05:14:45 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 64 00 64 00 00 ff e1 10 53 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 00 00 64 00 00 00 01 00 00 00 64 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 30 34 20 31 31 3a 30 33 3a 33 35 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1b 58 a0 03 00 04 00 00 00 01 00 00 0f a0 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 Data Ascii: JFIFddSExifMM*bj(1!r2iddAdobe Photoshop 25.0 (Macintosh)2024:03:04 11:03:35X
2024-05-28 05:14:45 UTC	8000	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 18 e4 07 f4 ff 00 8d 5b ae b7 2d e0 e0 54 66 41 25 4d 21 5f 28 e0 73 de b8 f4 cc 6e 41 76 6b 8e bb a4 ea 6e 21 f9 4a 69 f7 50 b5 84 96 db af 96 80 1f 4e 3b d5 5e 4d 8d 34 eb d2 5d d4 b6 4e d3 c9 5f 92 a4 39 f2 97 5b 41 3f 30 03 91 b8 91 d7 f9 46 05 94 68 6b 81 0c 44 89 11 b2 82 d2 96 bd ee 1e 56 7b 74 3c 13 79 5a ce 9e fc dd 55 0d 3f 05 71 61 c0 61 49 6d c4 b9 ff 00 11 6b 48 dd 5d e8 59 e7 d7 2d a7 ea cd 69 b2 a0 46 7a ee 6b a5 94 aa c0 09 21 25 5c fe 95 f7 ce 63 c4 1e 37 f8 8d 4f fd 9c f0 f2 fc e9 ea 3b 5f 94 00 2d c5 4f 7e 7b aa bb 76 fe 98 46 da 22 35 2e 3b 2e e9 0c 23 ca 7c fc 3b a5 c5 90 a4 b0 0d 1d 95 cf 51 fa fd 73 71 2f 88 b2 5a d3 cc 49 4c 36 c8 22 3b 89 4a 8b 68 4a 41 f9 96 6e ab 8e fc f3 f7 ca 9f 0c c5 6f c3 6b 78 c6 63 cd 83 e4 79 cf 4e 76 c2 Data Ascii: [-TfA%M!_(snAvkn!JiPN;^M4]N_9[A?0FhkDV{t<yZU?qaaImkH]Y-iFzk!%\c7O;_-O~{vF"5.;.#\|;Qsq/ZIL6";JhJAnokxcyNv
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 91 7e b8 46 42 78 c3 71 e8 06 41 b6 8e d0 0a 8d 8e b9 34 5a 78 e3 20 60 10 39 a1 88 0e 70 29 37 c1 c4 14 01 da 7a e1 52 16 49 07 15 02 2e eb 22 e5 10 00 34 72 49 47 15 60 e5 46 3e e7 26 9b 3c 64 d2 90 3a e0 a3 fc b8 54 76 d7 7c 8e ea 57 1c e3 22 c7 5c 40 51 bc 07 77 d6 fe d8 58 f7 c3 e6 3d 00 c5 5d ce 10 c2 b9 20 9c 9d f1 f5 cc 24 d2 ae b9 c9 83 fa 61 49 4b e7 e5 15 58 d2 6f ae 2d b6 6f be 48 36 13 c9 c0 43 8e d8 12 38 ea 32 44 f1 c6 63 36 a3 cf 4c 09 93 e9 ce 2f 5e 0e 14 07 7c 44 ff 00 29 c0 90 a3 c7 38 c0 fe 99 8c 92 08 e4 7b e4 c1 e2 8e 00 09 24 e4 c7 4c 69 db 5e f8 f8 ac 04 6a ff 00 36 2a e3 9e 70 f5 ba c7 b4 1e 6f 02 03 d7 11 e0 f4 c9 2b 8e 30 bf a6 04 7b 1f 5c 90 55 8a c8 a5 5d 41 c2 ba d6 04 b8 ac 45 49 1f 2e 46 af a9 c8 ba ca 96 92 10 a0 0f ae 11 Data Ascii: ~FBxqA4Zx `9p)7zRI."4rIG`F>&<d:Tv\|W"\@QwX=] $aIKXo-oH6C82Dc6L/^\|D)8{$Li^j6*po+0{\U]AEI.F
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 14 36 59 5a d5 d0 b8 13 df db 34 d4 c4 04 99 34 dc c7 67 3d b6 4a e3 a5 7f 39 21 56 00 27 8a 1b 80 eb d2 b3 34 2f 0f 23 4d 9a cb 71 3c c8 fa 7b 48 2e ac 6f 24 bc e1 b0 77 1b b3 40 0e bc 61 5a 31 76 a5 7a 73 b1 9c 54 9d 49 6c b4 87 5d 50 b4 a5 02 d2 56 47 07 ba ab d7 af 6c b3 4c e6 1f d4 9f 69 a2 eb ae 46 28 8c e2 36 90 d9 52 ad 44 fd 40 cd 57 11 03 52 11 24 69 c1 e5 30 eb d4 e1 61 25 3b 83 76 90 09 35 40 1e dd eb 20 ef 88 59 9e ea 62 3a 64 69 ef 79 a0 16 d1 c9 72 f8 16 45 1e 2f 90 3a 11 84 6d 86 9c 70 cc 9f 2e 3b 61 9f 29 6d 2e 2a 1b 05 4f 24 13 5b bb 9e 3a 0f ed 1c d1 76 24 04 29 d8 f3 9f 79 b5 bc e0 d4 50 94 24 82 d2 5b a2 01 3f 6a c9 49 6e 3c 09 ae 8f f7 ef 87 63 74 c7 9d 42 b8 79 c5 ab 68 45 f7 a1 db a0 e3 33 7c 44 1d 27 4c 4a e7 36 b5 30 d3 29 4a 03 Data Ascii: 6YZ44g=J9!V'4/#Mq<{H.o$w@aZ1vzsTIl]PVGlLiF(6RD@WR$i0a%;v5@ Yb:diyrE/:mp.;a)m.*O$[:v$)yP$[?jIn<ctByhE3\|D'LJ60)J
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 87 66 30 80 4d 12 00 5e eb 00 f0 4f cb d0 e5 dc 3f 12 68 da 8a 02 a2 6a 71 1e be 7e 47 01 3f a6 68 78 c3 4b 99 ab 69 f1 dc d2 d4 d3 ef c5 90 97 c3 2b 73 6a 1d 00 10 41 34 6b ad 8f 71 95 1c 46 9f a9 c1 80 a7 0c 88 9a 9b 52 1c 36 ec 89 4c 29 6a 70 fa 95 0b 1f 6e 83 2c 9b d7 b4 a7 54 12 9d 46 2e e3 fc 25 c0 0f e8 71 36 fe be c9 52 27 78 66 6a 54 0f 0a 8a b4 bc 82 3f 50 6f ed 94 1a d3 91 f5 fd 73 46 d3 de 86 f3 7b 5f 75 c7 d9 96 c1 41 21 08 e9 44 72 2d 43 a7 19 1a d7 47 35 b7 ad a9 fa 7b bb 66 45 25 6d 10 78 70 77 42 bf b2 af fa 1e d9 5c 9d 64 32 f0 d5 23 30 e9 42 9c f8 e8 c8 4a 4a 8a 41 bf 35 a5 57 e5 37 bc 73 c7 23 d3 33 9f 0b e9 a8 4f fb a2 1c 80 bf e7 88 b2 d9 fe 9c 1f b8 cb 0f 01 c2 1a 44 9f 10 38 66 c8 7d 28 f2 cf ef 8a 7e 5f 94 a8 9e 00 eb 78 88 e9 fc Data Ascii: f0M^O?hjq~G?hxKi+sjA4kqFR6L)jpn,TF.%q6R'xfjT?PosF{_uA!Dr-CG5{fE%mxpwB\d2#0BJJA5W7s#3OD8f}(~_x
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 02 09 be 72 47 18 ae a7 24 2b a5 61 10 a2 48 3b b3 25 58 e3 ae 2c 12 48 ed 85 22 92 4e 23 b4 63 37 7c 60 13 7d 70 1d 27 8a c2 c6 3b 08 15 df 22 55 64 00 39 38 05 64 53 d4 64 a9 5d 0e 22 76 e0 4c 00 45 e2 ac 48 55 0e bc 64 8a 8f 15 84 20 47 22 b1 6d dd df 1f 4e 70 07 9c 29 14 11 df 28 3c 6b e1 28 be 2f d0 9e d3 df 48 f3 47 ce c3 9d d0 b1 d3 fe 99 d1 f6 e3 20 a5 84 a4 95 50 ae f8 47 8f fe 08 c7 4c 4d 67 5e 61 4f ba 1d 60 86 95 1d e1 f3 a6 96 a3 67 d7 af a7 7c f4 cd 56 2c 8a f8 c8 2d 25 c9 a9 41 69 01 7f 97 6a 88 2a b1 63 d3 3c eb f0 9d a4 ca f1 7f 88 35 74 95 94 cd 5b aa 49 50 eb 4e 0e 9f 6a cf 4b 9c 87 4f 94 f2 25 79 09 65 61 6b bf ca a4 f7 07 ed 82 2b 7e 29 b8 da d4 66 16 d3 ec 7c cb 61 96 5b 1f bb 50 34 a2 e1 f6 be 3e ff 00 5c cf ab 34 d6 95 19 13 16 a7 Data Ascii: rG$+aH;%X,H"N#c7\|`}p';"Ud98dSd]"vLEHUd G"mNp)(<k(/HG PGLMg^aO`g\|V,-%Aij*c<5t[IPNjKO%yeak+~)f\|a[P4>\4
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 88 37 99 0d 72 6f 01 26 bb e2 ba fe 1c 45 5c 64 16 fa 50 92 54 40 09 16 49 3c 0c 09 9a 49 a2 79 ca f4 e9 ce c8 94 e9 98 b4 ba ca 5c 0e 47 db f2 96 cf 22 b8 eb 90 12 de 7d d7 92 96 cc 77 12 e0 4a 14 f8 f9 1d 4f 5b 49 07 9b 17 95 12 a4 89 2c 39 a8 fc 4c a5 47 6e 52 10 db 68 f9 49 56 ea 04 73 d3 91 c7 7a f7 c0 ce cf c6 c5 7a 3a 96 53 a7 c6 43 8f 36 e4 67 14 14 1e dc 6d 2b 4a 87 7e bc 7d 46 6b c7 d4 e0 98 d0 21 b2 fb de 42 12 14 d3 e2 c2 96 b4 92 0a 28 f4 be 46 6e 31 f1 a9 f2 62 4b 8e ec c4 99 4b 4f 9c e5 82 10 07 e6 ff 00 3f b6 42 2c 29 1a 62 5a 8f 21 c4 b6 17 31 6e 20 b2 91 b7 6f 2a 21 5d 3a f2 7f eb 81 1d 29 d7 5f 31 1e 69 a5 b8 c6 a2 a7 1e 74 b8 2f c9 e3 80 08 f5 be be 83 2c 3c 3c b8 a2 3a e3 40 0a f8 78 ab 53 36 ae ea 1d 7f ae 53 a7 58 d4 22 ba da 9b 97 Data Ascii: 7ro&E\dPT@I<Iy\G"}wJO[I,9LGnRhIVszz:SC6gm+J~}Fk!B(Fn1bKKO?B,)bZ!1n o*!]:)_1it/,<<:@xS6SX"
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 18 4d 71 90 32 e0 42 77 2d 41 23 d4 9c a3 5e ae 89 8e aa 52 3f 76 d4 02 a5 3b b9 22 ca 68 8e 0f bd 74 f7 07 37 35 b2 d9 d2 25 a1 e6 56 fa 16 8d 85 b4 1a 52 af 8e 0f df 2b 15 0d b8 8c 27 45 32 50 cc 57 83 4c c6 6d 09 25 c0 00 b3 b8 fd 12 47 b7 19 60 d5 d3 34 96 04 76 13 10 21 61 6e b8 77 be 12 1d 42 8a 88 5e da e9 5b 47 4c c0 c3 70 a1 b0 a6 dd 6a 74 83 01 4a 61 2a 26 92 bf 95 45 4a e4 f0 38 27 af a7 b6 5c cb f0 dc 79 2e 37 e4 4c 72 3a da 56 f4 84 2f a9 dd b9 5f a9 3c 9e d7 98 e4 99 71 26 7f bd be 1f d3 9b 8a 03 8d f0 a2 b5 74 e6 c5 92 49 15 db 83 84 60 5e 93 2e 73 50 db 9b 12 1b 8c 2c 2d a9 4d a5 02 cb 47 f2 00 7b 57 04 d6 6b bc e4 d6 21 34 ea e4 25 fd 8a 28 63 e1 4d a7 68 aa 5f 5e c4 51 be c7 f5 da d3 f5 b7 13 a8 32 b5 38 fc a4 ea 60 2d 96 02 3e 58 c8 49 Data Ascii: Mq2Bw-A#^R?v;"ht75%VR+'E2PWLm%G`4v!anwB^[GLpjtJa*&EJ8'\y.7Lr:V/_<q&tI`^.sP,-MG{Wk!4%(cMh_^Q28`->XI
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 65 a3 52 21 78 de 0a a3 3a 15 03 58 89 c9 48 55 ad 85 91 c2 92 7f 89 07 f4 23 ae 07 47 a6 6a 31 b5 58 4d cb 8a e0 5b 4e 0e bd 08 3d c1 1d 88 e8 46 69 b2 9f 37 c5 32 5c e3 f7 10 db 6f de d4 b5 13 ff 00 84 67 9e 45 f1 14 df 0d ce 95 29 11 5f 0b 43 a5 a9 b1 10 da 96 d3 eb 48 16 b4 28 7e 55 57 af 5e fe b9 d9 f8 2b 59 63 c4 83 52 d6 a2 a1 d4 c7 90 f8 6d af 35 3b 54 43 68 00 f1 fd ed d9 51 d3 1e 46 20 28 56 25 12 47 1d 70 1b b3 2a 54 49 ad dc 0e d9 2d 80 0b 27 22 01 bb ef 8c 27 8b 27 01 70 45 0e b9 10 e5 2b 68 19 2a be 98 26 b9 bc a2 5b 88 3c 8c 60 58 b3 90 3b af 8e 87 1a 77 0c 06 00 49 e9 92 20 90 73 1e fe 72 42 d5 d0 e0 3d a0 27 ae 34 9b 07 9c 5b 4f 22 b2 3b 4a 4d 8c 09 04 d1 e7 03 c6 16 76 f4 c0 f1 d7 02 02 ec 9c 95 58 e4 62 3f 30 e3 12 54 48 38 0c 04 64 82 Data Ascii: eR!x:XHU#Gj1XM[N=Fi72\ogE)_CH(~UW^+YcRm5;TChQF (V%GpTI-'"''pE+h&[<`X;wI srB='4[O";JMvXb?0TH8d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49916	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	942	OUT	GET /wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:46 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:56:05 GMT Accept-Ranges: bytes Content-Length: 150320 Content-Type: image/jpeg
2024-05-28 05:14:46 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: ec c5 61 0b 2f e6 5d d1 8f 51 ee 3d 46 a5 f0 be 2b a9 20 48 88 2c ae bd dd 7e e0 47 fd 3a 95 4d 28 12 37 4d f6 df 40 e7 c4 a3 72 de de 9a 2d 0f 91 36 ed 1b f4 d4 41 2c 09 f9 b7 fc da 1a 59 3b 74 1e da a8 0a a4 ea 85 10 53 ae ab 36 10 63 32 1e e2 4e c7 51 61 b1 01 57 25 7a ef f5 d4 c5 48 d8 85 ed 71 d3 54 d1 18 86 dd 3d 07 5d 03 65 fe 35 dc 75 3f 5d 04 0c 95 27 cb 54 8e ab 64 2d e3 84 56 22 b1 fa 8a 6c aa e4 44 dd c6 37 0e ac ad 1c 83 ed 75 23 62 34 94 b1 4f af 4d e9 5b c3 4f 96 e3 d8 2c 06 1b 0f 72 c6 2b 01 8e 86 b8 9c aa c8 e1 31 d6 2a 4a 8a 89 59 5d 09 47 8c a7 42 76 ee fa e9 31 c2 9b 8a 52 1c 8f 23 85 c1 1b 98 3b 55 f8 ac 71 71 ec 85 54 2a 71 a8 f6 b7 7a f5 6c 3b 01 b4 a6 35 fb 18 10 9b 7a 80 42 e9 a6 39 d5 eb d5 92 cf 06 82 c4 16 e9 cb ca 24 ce 8e 51 Data Ascii: a/]Q=F+ H,~G:M(7M@r-6A,Y;tS6c2NQaW%zHqT=]e5u?]'Td-V"lD7u#b4OM[O,r+1JY]GBv1R#;UqqTqzl;5zB9$Q
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 91 9e 4c e6 26 bd ef d5 e4 73 35 27 d9 ee 7c e2 67 fd 4c b6 d5 94 4b 1b 48 37 ee 06 3f b5 5f 61 ce 5b 2f f5 3a de 25 9f d2 d7 fc 93 7e 9f 26 c6 70 7c 56 26 e2 d8 c5 73 7b 06 38 2f c6 cc 81 e1 b8 b1 d6 3b 0d bb bb be 1b 12 74 3b 11 b1 df a8 d7 4e 79 c7 9e f9 f6 b8 e6 bc 7d 83 cc 24 d4 ed 63 b1 39 4c 75 85 f8 65 a5 92 a1 05 84 30 85 ec 08 43 46 c1 80 50 00 df db 5a f9 cf cc 63 fc 76 7a ab 8e 37 19 47 19 8f a1 88 c6 d5 8a 9d 0c 65 78 ea 50 a9 0a 84 8e 38 62 50 a8 88 a3 d0 00 3a 0d 73 b2 d7 48 f1 df 96 71 d9 1c 6e 43 c8 fc 8a e7 8b 29 73 ec 14 8f 36 42 be 66 29 b1 f2 5b af db 4e 28 15 65 a9 6d 52 62 b0 cd 18 24 c7 21 fb 4e ea 37 e9 ad f5 f5 db 76 53 8f bb 9e 66 58 f5 6f 0d c2 3f 16 e2 9c 5f 03 34 c6 6b 98 6c 45 2a 77 2d b1 ef 79 65 86 04 59 1d a4 23 76 25 81 Data Ascii: L&s5'\|gLKH7?_a[/:%~&p\|V&s{8/;t;Ny}$c9Lue0CFPZcvz7GexP8bP:sHqnC)s6Bf)[N(emRb$!N7vSfXo?_4klE*w-yeY#v%
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: c3 be 38 5c 0b 5f be 57 12 fe af f5 bf 1c a1 c1 56 8c 24 2c 3b 86 de c0 92 dd 28 b7 60 06 6c e1 a9 b7 24 8d 20 cd a9 99 2f 24 6e ae 8c 16 67 11 48 ac bd 36 78 c2 b6 de db ec 7a ea 56 a3 b4 a1 58 6d bf 5d 64 67 7e 50 f2 06 07 c5 5c 46 ef 32 e5 30 e6 66 e3 f8 d7 1f d5 67 c1 e3 2c e5 66 ab 07 6b 3c 96 a6 82 aa bb a4 11 2a 13 24 9b 6c a3 d7 d7 5a 93 4b 71 52 e3 fe 78 f1 96 53 21 47 09 36 73 23 81 e4 39 2e 19 73 c8 29 c6 b3 b8 db 58 dc 84 5c 76 95 9f d2 4d 72 68 27 40 63 3d fd 55 1b ef 64 fb c0 ed d5 f8 b3 f2 67 b4 bc f3 e2 9b 9e 3d e5 fe 4f 97 90 de c1 f1 4e 05 42 b6 5b 97 c5 9d c4 5e c5 e5 69 e3 ef a7 c9 46 df f4 eb 11 89 e5 8a e2 75 81 d0 11 21 0c a3 ee 56 51 db e4 f3 df ae b6 a7 4b 8f 46 2b 0e 45 9c 4c 90 ad a8 6d 33 a4 b5 7e 12 9f 22 cc 1d 89 40 a1 4f 77 Data Ascii: 8\_WV$,;(`l$ /$ngH6xzVXm]dg~P\F20fg,fk<*$lZKqRxS!G6s#9.s)X\vMrh'@c=Udg=ONB[^iFu!VQKF+ELm3~"@Ow
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 01 79 1c 80 37 24 01 f5 3d 07 5d 5c d3 d3 cd bc eb 9e dc ce d1 c7 cb 76 4c df 09 f1 e6 6e c3 57 c2 60 b1 f0 49 17 38 e7 72 a2 ee 29 62 e9 ee 93 d0 a8 ff 00 9a 49 5b b2 63 1f dc cd 5a 2d e4 3b 9c e3 37 a7 73 8c 78 72 c6 77 1f 8b 83 c9 38 8c 5e 07 85 e0 fe 36 e2 5e 00 c0 f6 ff 00 a7 f1 e1 1c 4a 92 66 1d 15 06 52 c8 7e a5 48 fd 32 b6 e4 24 af fc d2 bd 12 3d 10 77 54 54 40 11 11 42 a2 28 01 55 40 d8 00 07 40 00 f6 1a e7 5b 84 a8 27 db 73 a9 aa 75 55 bd 36 3b 7b 8d 58 cd 36 64 0a 59 76 fc 06 95 67 85 02 ca ae 7f 9f d0 ad f2 fc 94 7c 7d 4b fa 95 ba c0 ee ad 96 ca ab 45 4c b0 f4 ee af 59 65 70 3d 8c aa 7e 9a d4 b9 13 dd 17 33 45 cd e5 b8 4f 09 6e e7 ab 96 bd 26 67 90 c2 3a ab 63 30 e1 64 ec 90 7f 96 4b 52 40 a4 7b 8d f4 e7 d1 d5 f2 c4 f2 dc 57 16 72 f6 ed 88 a5 Data Ascii: y7$=]\vLnW`I8r)bI[cZ-;7sxrw8^6^JfR~H2$=wTT@B(U@@['suU6;{X6dYvg\|}KELYep=~3EOn&g:c0dKR@{Wr
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: c6 f8 0e 7d 4e 5e 4f 85 ab 20 06 1f ea 11 15 ad 9d ad d8 c0 8d a7 0f 0d 9e d1 d0 97 90 ed eb a7 1d 6c fe 47 db cf 9d fd bb 1e 2d e3 38 cc 6f 21 cf e2 f2 eb 2e 4f 94 78 91 9f 01 c4 32 16 e7 96 c3 43 c6 72 a0 5c a1 2c 6a ff 00 60 95 e3 1f a5 92 50 3b d8 57 0a 5b 6d c6 b7 dd fc b9 72 dd 23 73 23 6c dd 06 b9 eb a6 1c 73 df b0 1e dd 34 d6 4d 32 32 fa ea 5a a4 05 25 94 fb 6a 29 f1 1b 7d dd 75 a6 40 39 4d c7 69 23 df 54 c2 8a 06 03 d8 1f 5d 45 8f 37 79 2b 03 07 90 79 87 8e 78 a5 b8 ac a5 ba f9 a6 e4 59 3f 8a 57 85 6b f1 ec 6e cb 6e 0b 00 7d b2 c7 7e 73 05 73 1b 02 1c 77 91 b7 6e fa ef 32 72 e1 2f 57 a5 bb c8 b5 67 e6 9c af 84 70 9c 76 67 23 c7 6e d0 69 f9 66 77 90 62 24 58 2e 56 c7 42 ad 46 3a b1 4c e8 e1 0d e9 66 28 48 1b fc 71 b9 5e d6 0a c3 1c dc 9a e9 d4 f3 Data Ascii: }N^O lG-8o!.Ox2Cr\,j`P;W[mr#s#ls4M22Z%j)}u@9Mi#T]E7y+yxY?Wknn}~sswn2r/Wgpvg#nifwb$X.VBF:Lf(Hq^
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: 23 54 8a 64 72 5e 22 04 8a 02 b1 24 a6 e3 bb 6f 4f 7d 5c 65 32 54 40 0e fb ee ba 2c 33 13 12 76 27 a6 a2 e0 48 14 36 fb fb fb 69 a6 22 a2 02 37 8f 7d 9b eb ac e3 43 64 60 59 47 e6 d0 d3 4b 16 dd c5 89 ee 03 a6 a4 8b 7a 34 03 13 f7 93 ad 63 29 69 e9 dc 9b 9f 63 be 90 b7 c1 4b 21 1d 0f 51 be aa 61 f3 22 b1 0c 7d 47 b0 d0 c1 ab 82 db 6d eb a1 83 69 23 07 b4 f5 fc 74 0e 19 02 2f 70 1e da a9 61 b5 47 91 1b bd 48 56 ea 0f a6 e3 f0 d2 b3 0c aa 30 3d a0 74 fa ea 6b 78 54 ac 14 01 f4 d0 82 0c 3b 07 af 71 d5 0b 8d ff 00 cc 07 e1 a5 14 2c a7 cb 5b 33 34 ee 09 2d 2a cf 03 7a 77 28 20 8d 8f e1 b6 da ed c5 d8 f2 fd 92 ce 9e 68 e5 5c 7f 9a e2 78 c7 31 c2 d3 e2 13 f3 aa 59 a8 33 26 9d fc 25 b8 3f a8 16 c9 bc f2 ed 6e 95 d6 87 b9 fb a5 db ba 19 18 1f 5d 81 d6 3a fa b6 ec Data Ascii: #Tdr^"$oO}\e2T@,3v'H6i"7}Cd`YGKz4c)icK!Qa"}Gmi#t/paGHV0=tkxT;q,[34-*zw( h\x1Y3&%?n]:
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: da bf 60 95 01 a4 79 4d c0 9f 76 e0 2a 8d 86 ad f1 12 79 3f 85 9e ba 3d 49 97 27 82 e5 f8 4e 0f 66 cb 73 3c f5 2a 0d 2e 42 df 26 3b 43 14 35 12 00 2b 89 21 46 54 76 0c ec 85 44 7f 6e c4 87 a0 f6 5d a8 0a d4 64 f1 bf 1e c4 d4 e4 58 c7 8f 1f c7 db 2b ff 00 2b 8d a7 06 4d 1a cd b9 62 aa 84 96 9c a6 fd e8 17 e4 6d f6 e8 1b aa 2d 76 fc 59 4b 03 66 95 be 53 87 c4 e7 31 2f 69 23 c5 0a f9 a8 e5 ac 8f 15 47 69 7f 51 4a ac a4 98 e2 9d e5 2c 49 fb 8e c1 48 1d bb 6a 5f 03 4f 12 06 55 04 91 b1 eb ac da a6 b6 5f 94 9f 95 bf 0f c7 53 4a 9e ac aa 84 9f a7 43 ad b3 22 2a d8 54 84 45 18 11 c6 a3 65 8d 40 55 00 7b 05 1b 01 a9 6b 52 04 72 f7 a9 53 d7 f6 ea 55 12 29 53 dc c4 91 f4 d0 4a 55 88 8d ff 00 c4 6a c4 10 65 20 90 a3 a7 e1 a1 15 ee 41 09 b1 40 4c 00 ef a9 27 7f 4f f2 Data Ascii: `yMvy?=I'Nfs<.B&;C5+!FTvDn]dX++Mbm-vYKfS1/i#GiQJ,IHj_OU_SJC"*TEe@U{kRrSU)SJUje A@L'O
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: d1 cd 19 f5 d9 e3 60 55 88 3b 63 d2 d7 c2 39 1d cc cd 1b 74 b3 b4 eb e3 f9 87 1c 99 69 72 bc 7d 73 bc 3f 31 5e e8 ae 55 04 96 fd 35 b4 fe 6c 24 f5 1d 51 be f4 6d 63 a8 dc a8 99 78 ac 57 c8 4d 3b b3 6d 34 9f 25 7b 03 71 fb 00 3e c4 6b af 17 63 87 d9 2c ac 83 9b 78 9f 88 f3 8b cf c8 26 fe a3 c4 b9 d7 c4 b1 56 f2 57 15 b3 fd 2f 39 1a a7 54 59 a6 45 68 ae 46 a7 af c5 6a 39 14 fe 1a d5 9b ec e7 bb cf a6 6b c9 e4 e7 3c 0f 0d 7a a7 91 38 ea 79 a3 c6 96 e1 15 b3 dc 97 8f 62 56 5c 94 35 88 ed 69 33 bc 60 fc 91 db 8b de 49 68 ee 57 d4 c0 06 b8 75 f5 67 98 f5 f1 f7 ce bc 55 37 0d 83 14 70 0f 9e fe d6 f9 87 1d cb 71 ea b2 ff 00 cc f8 cb 23 7a 5b dc 52 46 6d 8b 43 4a cc 65 ed e0 a7 d8 7d a8 03 43 bf 46 85 7d 46 2d f3 fd 73 fd ff 00 3f fe 5d 24 fc f3 fe bf f8 b4 61 7c Data Ascii: `U;c9tir}s?1^U5l$QmcxWM;m4%{q>kc,x&VW/9TYEhFj9k<z8ybV\5i3`IhWugU7pq#z[RFmCJe}CF}F-s?]$a\|
2024-05-28 05:14:46 UTC	8000	IN	Data Raw: f8 22 8c ff 00 bd a6 c8 65 ab 3f 1b e2 7c 7b 8b 25 84 e3 78 78 71 d2 dc 3d d7 6e 2f 74 d7 2c 1d f7 ee 9e d4 a5 e6 94 ef ee ce 75 9f 95 ab f1 c5 53 93 79 6b 85 f1 5c 9b e0 a6 b9 6f 91 f2 84 1d d3 71 6e 3d 59 f2 57 a2 1b ed bc e2 2f e5 c1 ff 00 d5 5d 75 33 3d 92 5b e9 44 87 c9 f9 4f f5 45 6e 45 c9 b8 16 4f 15 c5 28 d0 9a 1c 64 94 a6 8b 2d 91 a5 2c ee 0c f6 72 58 ea 41 a4 8d 4c 31 80 ad 03 4d db f7 06 0a 4e b5 3a e6 f8 94 bc 75 3c d8 bd 45 1d 6e 7f 35 0e 77 e3 4e 7d 4e ae 3f 29 4c 63 b3 19 dc 6c 51 64 92 d5 5a f2 34 b1 a4 45 9b e3 86 c4 12 3b a1 32 a3 15 0c ca 53 b8 0d ae e7 b6 6f 9f 49 9e 3d cb 5e b1 4e 6c 26 6e d4 d7 f2 74 a0 83 27 42 f5 b6 56 b3 67 17 90 69 0d 69 27 2a a8 0c 91 b4 6f 13 6c a3 f2 a9 f7 d6 7a fd af 2b fb 38 53 d3 ed d6 5a 79 cf c9 fc cb 05 Data Ascii: "e?\|{%xxq=n/t,uSyk\oqn=YW/]u3=[DOEnEO(d-,rXAL1MN:u<En5wN}N?)LclQdZ4E;2SoI=^Nl&nt'BVgii'*olz+8SZy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49921	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	896	OUT	GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.1.1 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:46 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 Dec 2021 11:56:20 GMT Accept-Ranges: bytes Content-Length: 6800 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:46 UTC	6800	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 4c 69 73 74 3f 65 3a 5b 65 5d 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 74 3d 3e 6e 28 74 2c 65 29 29 29 7d 2c 74 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 74 6f 67 67 6c 65 22 29 7d 2c 6e 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 61 64 64 22 29 7d 2c 6f 3d 28 65 2c 74 29 3d 3e 7b 72 28 65 2c 74 2c 22 72 65 6d 6f 76 65 22 29 7d 2c 72 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 74 2e 73 70 6c 69 74 28 22 20 22 29 3b 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 4c 69 73 74 3f 65 3a 5b Data Ascii: !function(){"use strict";const e=(e,t,n)=>{(e instanceof NodeList?e:[e]).forEach(e=>e.addEventListener(t,t=>n(t,e)))},t=(e,t)=>{r(e,t,"toggle")},n=(e,t)=>{r(e,t,"add")},o=(e,t)=>{r(e,t,"remove")},r=(e,t,n)=>{const o=t.split(" ");(e instanceof NodeList?e:[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49920	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	968	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49919	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	1078	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:47 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x11c62085c565f56d","source_keys":["1","2"]},{"key_piece":"0xcd7b0d1119d7ef2e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-28 05:14:47 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-28 05:14:47 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-28 05:14:47 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49922	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	870	OUT	GET /wp-includes/js/comment-reply.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:46 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 29 Mar 2023 18:58:10 GMT Accept-Ranges: bytes Content-Length: 12457 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:46 UTC	7923	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 48 61 6e 64 6c 65 73 20 74 68 65 20 61 64 64 69 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 6f 6d 6d 65 6e 74 20 66 6f 72 6d 2e 0a 20 2a 0a 20 2a 20 40 73 69 6e 63 65 20 32 2e 37 2e 30 0a 20 2a 20 40 6f 75 74 70 75 74 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2e 6a 73 0a 20 2a 0a 20 2a 20 40 6e 61 6d 65 73 70 61 63 65 20 61 64 64 43 6f 6d 6d 65 6e 74 0a 20 2a 0a 20 2a 20 40 74 79 70 65 20 7b 4f 62 6a 65 63 74 7d 0a 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 20 29 20 7b 0a 09 2f 2f 20 41 76 6f 69 64 20 73 63 6f 70 65 20 6c 6f 6f 6b 75 70 73 20 6f 6e 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 76 61 72 69 61 62 6c Data Ascii: /** * Handles the addition of the comment form. * * @since 2.7.0 * @output wp-includes/js/comment-reply.js * * @namespace addComment * * @type {Object} */window.addComment = ( function( window ) {// Avoid scope lookups on commonly used variabl
2024-05-28 05:14:46 UTC	4534	IN	Data Raw: 74 69 6f 6e 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 65 6c 65 6d 65 6e 74 49 64 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 65 6c 65 6d 65 6e 74 49 64 20 29 3b 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 4d 6f 76 65 73 20 74 68 65 20 72 65 70 6c 79 20 66 6f 72 6d 20 66 72 6f 6d 20 69 74 73 20 63 75 72 72 65 6e 74 20 70 6f 73 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 72 65 70 6c 79 20 6c 6f 63 61 74 69 6f 6e 2e 0a 09 20 2a 0a 09 20 2a 20 40 73 69 6e 63 65 20 32 2e 37 2e 30 0a 09 20 2a 0a 09 20 2a 20 40 6d 65 6d 62 65 72 4f 66 20 61 64 64 43 6f 6d 6d 65 6e 74 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 73 74 72 69 6e 67 7d 20 61 64 64 42 65 6c 6f 77 49 64 20 48 54 4d 4c 20 Data Ascii: tion getElementById( elementId ) {return document.getElementById( elementId );}/** * Moves the reply form from its current position to the reply location. * * @since 2.7.0 * * @memberOf addComment * * @param {string} addBelowId HTML

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49923	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:46 UTC	933	OUT	GET /wp-content/uploads/2021/08/blta-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0
2024-05-28 05:14:47 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:00:11 GMT Accept-Ranges: bytes Content-Length: 7301 Content-Type: image/png
2024-05-28 05:14:47 UTC	7301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 37 49 44 41 54 78 9c ed 9d 7f b0 55 d5 95 e7 bf df 53 af 28 8a 7a 43 31 14 45 bd a2 18 eb 15 43 31 34 45 31 84 38 c8 30 c4 71 0c a1 69 63 a2 31 09 da 6a 8c 2d da 89 49 67 1c 8d 3f 62 8c 63 39 94 ed 18 da 71 6c 86 58 86 61 12 db a8 69 7f 84 ee 16 a2 d1 44 8d 1a 34 a8 48 33 36 cd 18 82 84 20 22 22 22 22 22 c1 f5 9d 3f d6 3a 8f 7d cf 3d f7 be fb 00 95 97 ec 4f d5 ad 7b ef 39 fb ec b3 f6 3e 7b ef b3 f6 da 7b af 0d 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c 26 93 c9 64 32 99 4c Data Ascii: PNGIHDR,QhpHYs+7IDATxUS(zC1EC14E180qic1j-Ig?bc9qlXaiD4H36 """""?:}=O{9>{{d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L&d2L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49924	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	1001	OUT	GET /wp-content/uploads/2021/08/flor_de_caju_restaurante-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:47 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:15:49 GMT Accept-Ranges: bytes Content-Length: 6566 Content-Type: image/png
2024-05-28 05:14:47 UTC	6566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 19 58 49 44 41 54 78 9c ed dd 7b 90 1d c5 7d 2f f0 6f 77 cf cc 39 3a 7b b4 5a ad 16 59 ec c5 62 bd 16 32 21 2a ae 82 29 22 0b ae 90 81 a8 28 19 53 32 e8 02 b6 49 11 0c d8 c6 2f c0 84 dc e4 9a 24 45 5c 94 cb e5 a2 08 21 18 ab 88 4c 9c 80 b1 2e 65 f3 30 c6 04 30 8a c1 c2 88 57 0c 36 0a 08 09 4b 2b 24 ad d6 da 87 ce 9e e7 74 ff 7e bf fb c7 ce 92 65 75 9e bb 5a 0c 9b fe 54 9d 92 76 4e f7 74 cf e3 f4 f4 f4 74 f7 00 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e e7 79 9e Data Ascii: PNGIHDR,QhpHYs+XIDATx{}/ow9:{ZYb2!*)"(S2I/$E\!L.e00W6K+$t~euZTvNttyyyyyyyyyyyyyyyyyyyy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49925	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	995	OUT	GET /wp-content/uploads/2021/08/campo-bahia-branca-2-300x81.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:47 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 15:01:22 GMT Accept-Ranges: bytes Content-Length: 7334 Content-Type: image/png
2024-05-28 05:14:47 UTC	7334	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 51 08 06 00 00 00 68 b6 9b de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 1c 58 49 44 41 54 78 9c ed 5d 6b 8c 9e c5 75 7e ce 68 b5 dd ae b6 5b 6b b5 b1 2c cb 5d ad b6 96 8b 2c 97 5a 94 5a 88 38 84 10 e2 10 02 ae a1 09 09 d7 12 20 21 80 53 02 a4 90 00 09 a2 28 b1 1c 44 91 e5 a6 04 08 a5 24 21 16 f7 7b 08 57 43 b8 84 fb 1d 63 8c 83 89 31 c6 18 63 9b f5 62 cc 7a f7 3c fd 71 ce ec ce be fb be df 7e 26 b5 cd ae e7 91 3e 7d b7 b9 9c 99 77 e6 cc 39 73 ce 9c 01 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: PNGIHDR,QhpHYs+XIDATx]ku~h[k,],ZZ8 !S(D$!{WCc1cbz<q~&>}w9s22222222222222222222222222222222222222222222222222222222222222222222222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49926	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	1039	OUT	GET /wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96xc55dwvl3hw0hl1s9289njj34.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:47 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 27 Jul 2023 18:59:53 GMT Accept-Ranges: bytes Content-Length: 271200 Content-Type: image/jpeg
2024-05-28 05:14:47 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 70 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$p"
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: 22 eb 4d d4 f4 4b 79 ec 02 97 37 53 00 b3 40 a3 93 87 1c 92 31 91 cd 75 17 1a b4 f0 f8 56 0d 2b c3 d7 ea 64 7b 61 24 77 93 b6 41 4c 81 b4 f5 c1 e7 1d 3b 57 09 e3 19 7e cb e1 6b 85 3a a6 a2 2d 6f 55 3c a1 21 3b 83 06 19 19 dd d0 81 f9 1a e0 f4 2d 4b 50 f0 cc c2 47 b8 77 b5 97 0b 24 2d 21 2a e9 c1 c6 0f 1d 85 79 54 f2 7f af 50 78 84 f5 8b d2 36 76 76 f5 eb d3 b7 73 bf eb 10 a6 d4 65 d4 f4 18 b5 9d 72 2d 2d b4 eb 9d 08 9b a5 72 64 68 c2 94 b9 8c 77 3c e3 b8 c1 f7 35 d6 e9 76 b6 96 1e 09 d3 a4 84 ad da 59 a9 92 38 e3 6c cb 33 00 08 4c 93 d4 e3 1c 9e f5 8f e2 3d 62 f2 1f 06 4c d6 57 50 da 45 3c 5e 65 b4 d0 b9 f3 22 46 19 f2 f0 31 c7 23 bf 6e 95 e6 50 f8 b2 3d 12 d6 41 a2 99 37 c8 bf b8 86 43 f2 46 e3 fe 5a 27 a3 72 39 1c f0 2b 2a 19 7c f1 d1 bc 17 2b 52 d9 5f Data Ascii: "MKy7S@1uV+d{a$wAL;W~k:-oU<!;-KPGw$-!yTPx6vvser--rdhw<5vY8l3L=bLWPE<^e"F1#nP=A7CFZ'r9+\|+R_
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: ac 80 8c f1 92 38 cf f0 d7 95 ea 96 97 1a 17 88 1b 43 d4 6e 25 b5 8d a4 c8 77 6c fc a7 9d c0 73 8c f4 ae 0c 36 6b 5b 1f 52 50 8d 48 f2 c5 37 a2 dd 77 df a7 96 e8 ea 95 35 04 ae ae 7b 27 84 fc 18 1a c1 75 6d 23 5c 92 59 d7 31 cd 08 23 62 73 cf 3e b9 18 cd 63 f8 e7 c4 3a 4e a9 e1 88 f4 9d 56 19 ed ef ed a5 6d a9 bb e6 90 71 89 0f 1c 8e 3f 1a a9 e1 0f 88 16 5f 0f b4 5b ad 3d ed af 2f 4b 3b 49 0b a0 de ac 9b 8f de 2a 38 ea 3a e2 a0 f8 93 7f e1 5f 13 68 b6 1a ce 9a d1 c1 73 1c 38 96 16 62 1c 0c 0c 00 0f 50 39 af 12 86 02 a4 b1 8a a5 6b b8 f3 7b b2 4a de 9b 6e b5 b5 ad a1 db 39 27 46 d1 b5 fa 9e 73 77 a7 98 ac 63 36 97 2f 70 cd 26 e2 84 e3 69 e3 90 2b a1 b7 f0 f4 c3 40 fe d2 96 68 d0 9e 52 16 23 12 10 70 47 b1 ea 7f 0a e6 2d 27 7b 42 82 f6 09 53 cc 1b 91 48 20 Data Ascii: 8Cn%wls6k[RPH7w5{'um#\Y1#bs>c:NVmq?_[=/K;I*8:_hs8bP9k{Jn9'Fswc6/p&i+@hR#pG-'{BSH
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: fa d4 d4 d6 fc 45 a5 8f 11 de cd 0d bb 2e 9a c8 8a 16 5f de bb 38 0b c8 66 24 e3 23 d6 b3 6f fc 4f 7f aa c2 a9 1c b2 4a 82 6c 9f 34 f0 a8 32 02 81 d3 18 c7 e5 58 7a 8b b1 43 04 ac 08 84 00 ac 0f 1f 4a a2 97 b2 c8 a9 14 6e ca 15 41 61 9e 2b e9 28 60 29 a8 45 da f6 b6 fa ec 70 ce 72 96 ac da 9e de 59 e2 fb 10 e5 f7 84 50 0f 20 1e 39 3d 71 5d 15 8f c3 db 1b 5d 1a f6 f3 56 82 f9 ee 78 8e d1 60 03 6b c8 70 17 9c 8f e2 20 1a e3 c5 c4 b2 bc 8d 2c 98 f3 17 6e e0 79 1e f9 ae fd be 21 cd e2 ef ec 3b 18 af a6 d2 e5 b0 65 52 12 42 22 76 cf 0e c0 63 db f2 ae 7c ce 58 a8 46 2a 8e 91 fb 4f b5 b5 fc 76 65 50 84 25 ac 8e 2a e5 35 bf 0f 34 ba 5d e4 57 36 6f b9 5d e0 dd c6 48 04 1c 83 e8 45 4f e1 57 8a 6f 12 c6 da 94 e0 07 93 73 16 19 05 fb 67 db ae 6b d5 bc 4f a6 6a 3f 10 Data Ascii: E._8f$#oOJl42XzCJnAa+(`)EprYP 9=q]]Vx`kp ,ny!;eRB"vc\|XFOveP%54]W6o]HEOWosgkOj?
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: 80 c1 1c d3 b0 de 50 e4 70 30 71 8d c7 bd 73 36 fe 3d 6d 16 c1 d2 03 2d cb cb b9 c8 9d f2 a8 49 e9 ce 73 5e bd 2a d8 ea f2 e7 e4 4a 5b 6d af 7e fd 3f 13 82 a4 68 43 45 26 6c c9 e1 7d 2a e6 09 24 b1 d5 1e 1f 2a 35 6b 8b 79 c7 ce ce 07 2a 08 cf 7c f1 9c 54 1e 22 f8 7d 65 77 af 15 d3 6e ed e1 82 f0 f0 71 b0 06 cf 24 00 30 01 c8 fc ba 57 23 61 e2 d9 05 c4 b7 6e 91 85 63 96 4e 85 8d 75 1e 13 9e 5f 15 45 26 8f 78 a5 2e 34 d4 fb 45 b5 c1 5c 96 18 3f 23 0f f8 07 5c f7 ae 1c 5b c6 60 d3 9f 3d a3 d7 ca fe 5e 4e c6 b4 94 27 65 62 4d 53 e0 de a1 6d 73 6f 71 a3 ea 56 b3 db f9 67 7c cc cd 84 61 9c 8e 9e 98 fc eb 9a bb d0 ad 6c 8a c1 ab dd 43 26 f6 38 92 dc 93 83 93 d7 81 5e 91 67 a9 cd a5 e8 f3 b5 c5 e6 99 15 fc 4f be 2b 58 08 11 81 c0 21 87 72 57 3d bb 8a e3 ae ac b4 Data Ascii: Pp0qs6=m-Is^J[m~?hCE&l}$5ky\|T"}ewnq$0W#ancNu_E&x.4E\?#\[`=^N'ebMSmsoqVg\|alC&8^gO+X!rW=
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: e9 f3 2f ee ef e2 0a c2 53 cf ca e1 47 07 a7 61 d4 57 d6 70 a6 32 10 ff 00 66 52 5c bd b5 4e fd 75 7a 3f 35 d3 a1 8e 3e 8b b7 b4 49 fe 87 30 74 88 12 25 68 e4 53 81 92 a3 ef 0c fa 8a ea 3e 1b 5d 69 31 6a 97 7a 66 b5 aa 0d 3f 4e b9 87 12 33 10 a2 56 04 60 6e 3c 0e a6 b1 ae ae e1 ba 89 1d 22 45 62 09 0c a7 04 8c d6 77 90 93 22 48 d9 55 dd b8 92 38 23 d6 be bf 31 c1 c3 13 46 54 66 ec 9f 5e be a7 05 2a be cd a9 1e c0 bf 18 fc 37 3c 37 0b 7b 6b 3c d8 5f 2e 3b 50 09 42 17 38 39 03 93 cd 71 de 2d f8 93 1e a5 a5 cb a3 69 6c 2e b4 cb f4 56 91 25 e2 5b 77 56 ce df a7 ca a7 a7 7a e2 b5 97 48 2e d2 4b 53 19 8d b9 ca f3 cd 62 9b a0 27 21 79 62 c3 ee f7 f7 af 9b c3 70 e6 0a 84 94 e9 26 ed dd dd 1b 56 cc a7 52 36 d2 c5 cb d4 86 df 0c f9 cb 01 9d c7 05 b8 e3 fc 2b 22 52 Data Ascii: /SGaWp2fR\Nuz?5>I0t%hS>]i1jzf?N3V`n<"Ebw"HU8#1FTf^*7<7{k<_.;PB89q-il.V%[wVzH.KSb'!ybp&VR6+"R
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: 3e 52 48 76 13 8c f1 f8 f3 5a b2 78 a2 68 2e 67 db f6 70 ec 76 23 cb ce 14 1c 01 8c 1e 80 60 57 18 97 3f 6a bc 82 de 37 db 0a 9c 93 9c 28 03 ae 6b a4 f0 fe 8f 61 af 5f de b6 8f 1c 77 12 db a0 79 04 87 fd 69 18 05 50 73 dc f5 f6 ae 4c 5d 0a 54 db a9 5b 55 f9 6b d5 95 4e 72 9c 6c 91 ea 56 fa 86 e8 74 6b a7 b6 69 3c c5 68 de 66 3b b7 44 76 ee 2c 7a fa 57 05 a7 f8 5f 4f b9 bb d5 0d a7 9b 63 2d be 12 39 89 c8 dc 73 9c 8c e0 8e 9c f5 aa da 2f c4 2b ad 02 e6 6b 76 8e 46 2e 5a 36 b4 95 f6 ac 5c f4 ef fc bb 56 17 88 fc 43 6c 63 16 9a 7c ef 1a 40 e1 8a 77 60 0e 4f cd ff 00 d6 af 9d c3 65 78 aa 75 25 4e 1a 29 75 f9 df 55 f3 b7 6d 4e 87 5a 3b fd e7 70 35 8d 7b 42 d4 f4 e1 aa dd 30 68 8b 08 a6 c0 3f 29 43 81 fa f7 f5 ae ef 53 d5 e0 bd d0 d4 b4 a1 6e 9c 2e 6e 00 04 16 Data Ascii: >RHvZxh.gpv#`W?j7(ka_wyiPsL]T[UkNrlVtki<hf;Dv,zW_Oc-9s/+kvF.Z6\VClc\|@w`Oexu%N)uUmNZ;p5{B0h?)CSn.n
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: c0 3e 58 fc a1 7f c8 35 a1 6f 69 74 82 e2 3b b9 a5 82 e1 71 fb a1 1e 77 03 9c e4 64 7a 7e b5 da 68 ff 00 0e fc 49 71 79 e4 5a bc 52 cb 10 05 61 70 55 a5 8c ff 00 16 79 c0 eb d8 f4 ae da d8 ca 18 64 dd 59 25 eb f2 30 8a a9 51 b5 08 dc f3 3d 42 ff 00 ec f1 ba 4d 6a c6 e5 5f 05 d8 71 4d 4b 94 bf 99 21 5b 26 8e 3d 9c ba f0 73 c7 3f ce bb 89 3c 0b e2 5d 67 c4 ad a2 5b 5a bd b4 8e 8c cd 0d d9 24 0c 02 72 bc 73 9c 7a 0e b5 47 59 f0 e6 b3 e0 fb 43 0e b7 61 2d bc 25 cc 71 48 d9 c4 84 67 ee e4 74 e0 d6 94 f3 0c 2d 49 aa 70 9a 72 6a f6 bf 7e c6 b1 c3 ca 30 e6 51 16 d2 cd f4 eb 58 6c ae 21 c4 17 2c 18 ec 3f 79 3e bd 7b d5 3d 77 47 33 47 35 f4 31 14 cb 85 58 f3 c6 38 ff 00 1a af a6 6a 0f 29 24 4b 2f 95 07 25 73 ce 3d bf 2a b5 2d dd cc 90 35 cb 41 1b c7 9e 62 2d f9 36 Data Ascii: >X5oit;qwdz~hIqyZRapUydY%0Q=BMj_qMK![&=s?<]g[Z$rszGYCa-%qHgt-Iprj~0QXl!,?y>{=wG3G51X8j)$K/%s=*-5Ab-6
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: 4f 74 cc 41 b6 94 3f c3 ee 6b a9 b4 29 56 4f 44 ca 4b 37 93 20 69 14 73 ce 0f 6a d2 b1 69 18 4a 54 11 9e fe d5 94 d6 f3 dd 4a 40 52 aa 08 c9 6e f5 ad 25 cf 97 12 81 1e d5 03 1b 87 63 51 53 6b 05 46 9a 51 4c 64 33 a5 b4 ec 5c 7c b2 70 0b 75 53 fe 7f 9d 68 32 1f b3 f9 a1 63 07 19 00 56 3c e5 98 09 02 97 20 fa 56 a5 9d e4 53 c0 e1 c1 8a 54 c6 14 f3 bc 56 73 5d 4a 85 92 1d 6b 33 b6 52 44 fb ff 00 c5 9a 75 e6 a8 b1 5d c7 6d 6e b1 cd b2 3c b3 0e 71 9c f0 71 de 92 fe e6 3f ec d1 e5 2b 1b 96 c2 ae 07 0a 2b 1e e9 cd 9c 51 ba 05 56 2d b9 9c f5 cf 1c 54 46 2a 5b a3 45 3d 6c 5c 59 8a 06 51 16 4b 72 41 ab 53 43 71 3c 48 62 6f 92 15 c9 2d f7 b1 e9 58 92 5d cf 74 4c df 30 61 8f 99 47 18 ab 50 ea 17 0b 22 96 7f 91 40 20 91 c6 7d eb 49 41 ee 4b 7d 49 d2 54 8d a4 f3 14 a1 Data Ascii: OtA?k)VODK7 isjiJTJ@Rn%cQSkFQLd3\\|puSh2cV< VSTVs]Jk3RDu]mn<qq?++QV-TF*[E=l\YQKrASCq<Hbo-X]tL0aGP"@ }IAK}IT
2024-05-28 05:14:47 UTC	8000	IN	Data Raw: 66 1c b0 cf 6f cc 57 ad f8 70 58 a6 87 6d a5 6a ba 75 a2 c9 0c 7c ac 8d 86 2c 30 37 75 eb ed 5c cf 85 6e ac fc 1a d2 59 bd 9c f6 8d 72 8b f6 94 24 3b 01 80 72 ac 09 c6 48 1d fb d6 e2 5e e8 5e 21 d5 2d 5a 5b f6 b5 9a 56 30 c5 19 46 51 c1 01 79 23 1c 8e b9 35 f1 d9 b5 5a 98 99 b8 f2 be 4d d3 5b fe 0f d4 f5 70 90 83 6a db b3 a6 83 45 d1 bc 55 72 f3 49 a4 c3 64 9b 14 4c 22 3c c8 a8 49 2b b4 e4 8c 83 8c d7 9c 6a 9f 0e 6d b5 8b 8d 47 52 d0 b5 68 23 b7 85 cc 8d 14 f8 1e 5a 28 00 81 92 39 c8 3c 57 a9 78 76 d0 5c 6a 7a 84 6d 67 25 b5 db 4a 7f d3 4b 1d b2 85 e7 0a b9 da 07 3e 83 ad 56 f1 6e 8b aa e8 da 56 ac ba 56 95 6f 35 bc b1 6e 82 25 fb ce 78 dc 49 cf d4 e3 3d ab e6 f0 79 95 6c 2d 7e 4a 73 6a f6 49 37 a5 9e fb de fe 5a f4 7b 1d 55 70 f0 94 6e d7 fc 39 f3 bb 5d Data Ascii: foWpXmju\|,07u\nYr$;rH^^!-Z[V0FQy#5ZM[pjEUrIdL"<I+jmGRh#Z(9<Wxv\jzmg%JK>VnVVo5n%xI=yl-~JsjI7Z{Upn9]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49928	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	1025	OUT	GET /wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvbdgxpl9ga6k.jpeg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:48 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 27 Jul 2023 18:36:27 GMT Accept-Ranges: bytes Content-Length: 174543 Content-Type: image/jpeg
2024-05-28 05:14:48 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 ae 04 47 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$G"
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 47 51 eb 4c 77 23 18 ca c6 14 f2 32 3d fe b4 d6 88 15 21 46 0f 5f c6 a4 75 29 2e 77 01 ef eb 44 8c 15 4b e4 a9 27 a6 28 b8 5c 00 e0 6e 24 71 f7 73 d3 de 93 e4 27 62 28 5d a7 82 4f 5f 7a 71 8c e3 cc f9 b2 d8 cb 7f 4a 64 8b 9c a8 c6 57 83 c7 38 e0 ff 00 5a 40 3f 04 46 a0 70 ed d7 69 f4 a6 86 de a0 f0 73 9c d3 d6 05 dc 5a 32 ca e0 0c 92 73 f5 14 cc 6c 6c 48 54 1e fe b8 aa b6 80 22 c7 97 60 11 8a 30 23 9a 5c 0d 99 0a de 60 3b 5b 9a 91 72 5c 60 e0 64 0c 66 95 3f 79 86 f3 0a 03 91 ba a4 63 42 1d 9b f9 07 38 03 b6 7d 68 31 86 60 4e dc af 43 d8 d3 9d 8b 8c 6e 27 1c 0e 3a 50 cc 37 91 93 c0 18 3e 94 ef a5 84 34 89 37 22 f5 23 8c 74 14 d9 62 2c d8 da 08 18 1c 75 a9 19 9d 8e 77 67 6e 3b 75 a5 45 04 a9 21 90 8e 09 06 92 02 02 92 2a e4 e0 ee f9 42 0e 31 52 a0 c3 65 c6 Data Ascii: GQLw#2=!F_u).wDK'(\n$qs'b(]O_zqJdW8Z@?FpisZ2sllHT"`0#\`;[r\`df?ycB8}h1`NCn':P7>47"#tb,uwgn;uE!*B1Re
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: ae 07 6a 4f 98 49 84 19 4c f0 0f 51 f5 a9 d2 61 1b 6d 55 18 22 a3 77 f9 89 5f a9 04 fe 75 49 8d 30 f2 78 0a 02 60 f3 bb 3d 4d 20 84 ff 00 11 c9 c6 48 14 26 e0 30 79 1d f1 d6 9e 10 00 13 ef 38 1f c2 70 28 f3 40 46 c0 32 a8 39 ca e3 9a 71 25 7a a9 42 4e 46 7f 88 7a 54 bc 91 9d a4 a9 e3 38 ef 4d d8 e4 ed c6 46 49 1e b4 5c 08 c0 e8 01 20 b7 af 6a 90 46 c1 76 87 da 4f dd c0 a6 93 b5 c1 65 59 07 72 0f 43 e9 52 80 ce ad b4 a8 c9 ea 7b 62 95 86 33 60 24 be 32 cd c1 23 d2 90 be e7 fd d0 2d 83 c9 3d e9 72 41 c0 c9 03 8c 0e ff 00 4a 99 4a a8 5d bf 78 f4 3d a8 b8 98 d4 21 ce d5 93 6b 37 19 1c 8c ff 00 4a 70 03 6e 19 76 af e7 cd 30 66 30 f9 c0 e4 1f 94 52 b0 60 1d 72 09 07 70 cf 1c 7a 50 21 58 f9 a1 78 29 db 3d 73 46 42 0d bb c1 ed ed f8 d2 e2 36 55 39 60 e3 a7 a5 26 Data Ascii: jOILQamU"w_uI0x`=M H&0y8p(@F29q%zBNFzT8MFI\ jFvOeYrCR{b3`$2#-=rAJJ]x=!k7Jpnv0f0R`rpzP!Xx)=sFB6U9`&
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 3c 1f 5a 7a a1 18 24 92 b9 e0 50 f9 0e db 54 f2 71 93 c0 23 b5 03 2b ae 37 3a a6 7e 5c 12 a0 f2 3f 1a 6f c8 ec 70 b8 27 91 9e 84 7a 66 ad 79 43 27 08 17 23 0c 47 73 e9 50 10 78 57 18 45 3c 11 eb 40 15 c8 ee 98 18 38 2a 78 e7 d6 a2 58 70 76 9c e0 9e 83 bd 58 94 6e da 33 9f 4f af bd 2b 85 7c 94 62 ca 40 19 c7 7a 68 08 1f 01 08 38 e7 b1 ec 29 8c 99 ca a6 1f a1 c7 f4 ab 1b f0 8a cc 17 e6 e0 fb d4 64 18 ce 57 90 47 27 da 98 58 15 02 90 ee c1 38 c7 b5 39 a3 0e 7e ee 59 78 50 3d 0d 35 46 43 10 31 9f 6e 82 95 7c c2 a0 f0 ca 3d 0f e7 49 88 79 8d 50 63 1c 74 20 73 cf ad 34 a2 64 af 50 1b 23 3c 75 fe 74 e5 6c 0c aa e7 1c 01 df f1 a6 82 ae df bd c1 64 e5 45 09 5c 10 f2 15 50 86 5c 15 18 1d bf 0a 6c 91 31 40 c8 55 40 3d 09 a0 36 00 12 28 27 19 ce 68 40 53 03 72 80 79 Data Ascii: <Zz$PTq#+7:~\?op'zfyC'#GsPxWE<@8*xXpvXn3O+\|b@zh8)dWG'X89~YxP=5FC1n\|=IyPct s4dP#<utldE\P\l1@U@=6('h@Sry
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 1e a2 a0 0e 98 62 09 52 71 cd 29 72 5b 6e ee a3 90 0f 26 8e 51 13 03 85 ce d5 00 76 03 a9 f7 a4 fd d6 e5 76 0f bd bd fa 1f 5a 85 9d 43 e5 18 83 82 31 4f 8e 41 24 65 10 0d a7 b0 3d e8 b5 80 79 db b5 36 37 0d fc 27 9c 52 84 72 a7 76 58 21 e1 7d fb d3 03 90 c4 00 37 91 f2 ff 00 80 a7 b7 21 81 04 e0 73 ef 48 06 a8 45 45 24 ae ec f3 e8 69 5f e7 5d cd b0 80 73 91 eb 4d 49 79 04 90 1f 03 0b e8 29 cf 21 dc 72 4a a9 07 27 1d fe 95 40 47 bb 6b 89 00 eb 90 07 a9 a7 b6 e1 22 36 0e 71 c8 cf f2 a8 c4 69 b8 30 39 c7 24 8e e6 a5 ca 02 59 c3 67 38 c3 0e 5a 93 43 45 98 26 62 cc bb 40 2a 3b d5 a4 52 48 72 4b 10 3e e8 ed 54 a1 7d a4 86 93 76 7a 54 de 76 4a 04 6d bc 03 b8 f7 ac 9a 02 66 60 40 5f 2f 3b 78 e7 bd 0c fb 88 c0 20 03 8f 63 4c 2e b2 af 0c 17 07 18 cf 6a 18 a9 2c 10 Data Ascii: bRq)r[n&QvvZC1OA$e=y67'RrvX!}7!sHEE$i_]sMIy)!rJ'@Gk"6qi09$Yg8ZCE&b@*;RHrK>T}vzTvJmf`@_/;x cL.j,
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 71 40 a1 b1 96 27 f0 c5 3c 9e 56 35 3c 37 f1 7a 50 c8 fb 39 c1 dd 8c e2 9a 00 de db f7 64 67 df a1 f7 a6 aa 05 27 0b 90 bf 74 1e d4 e5 c6 06 5b 71 c6 09 f6 a5 70 db f6 ae 02 fa 67 83 40 09 bd 1c 6d 0b 86 27 93 e9 51 81 d4 26 0c 99 c9 e3 b5 49 80 cc 54 27 cc a7 9a 66 30 ec a0 ee 52 73 c1 c1 14 00 aa ca 17 a6 d2 33 8a 45 59 58 65 ce 33 d4 9f 4a 73 2e 3e 6d dc 8e 83 19 a3 85 54 61 f3 af 70 c7 8a 40 29 50 a8 55 5b 72 27 dd cf ad 1b c6 dc 81 80 06 09 3d 4f d6 90 c7 95 04 61 c9 3f 82 d3 b7 23 ef 20 0c e7 fb bd 4d 02 18 09 94 8c 9c 2e 38 c5 38 ee 6e 0e d1 fd e0 3b 62 9a cb f2 86 79 0b 02 31 c0 c6 28 dc 55 77 34 98 5f 51 df da 81 8e c0 21 91 dc 9e f8 ee bf 4a 4f 28 ba 61 1b 68 1d 0f 72 3b e4 d2 f5 52 15 72 0f 3b bf 8b 3e 9f 4a 66 19 b9 65 ce 07 04 1e 94 01 26 d0 Data Ascii: q@'<V5<7zP9dg't[qpg@m'Q&IT'f0Rs3EYXe3Js.>mTap@)PU[r'=Oa?# M.88n;by1(Uw4_Q!JO(ahr;Rr;>Jfe&
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: ae 22 21 b4 29 42 59 b1 d7 b6 68 8d 80 2d 86 39 3d 7d e9 59 77 63 6a 9d e0 70 c7 a7 e5 49 b5 53 38 ce d3 cf 34 c6 29 e3 69 56 e0 9e 8c 29 14 12 31 f7 4e 78 1d 73 4e 0a 41 1f 30 c7 5e 7f 95 22 e4 39 66 c9 fe ea 83 d0 fb d0 21 1f 72 73 b0 02 38 e3 fa d3 86 e6 38 45 00 71 92 4f 4a 3c c0 37 ee 4c 12 73 9e c6 9c b9 6e 01 03 db 14 00 2f 4c ed 18 1d 41 ee 69 50 06 56 50 bb 43 71 c5 22 9c ab 1f bd 9e 98 e3 f0 a5 62 55 36 a8 0a b9 ce 4f 24 52 00 ce 22 c2 9d f9 f9 79 ed 48 a0 92 09 dc c4 f4 ed 41 03 9c 1c 03 c7 1e b4 82 37 d9 22 b6 49 ce 43 0f 4a 00 71 ce 08 20 0d bc f2 73 8a 66 14 39 6d db 9b 1c 71 da 91 98 fd ed a3 04 75 1d e9 e4 b6 0b 39 03 18 c0 03 ad 30 23 94 2a 80 c7 ae 72 30 7a 9a 52 db c0 2c 59 78 e9 d4 e6 82 52 3c 33 29 52 7d 79 cf f8 51 09 de 01 c8 20 f2 Data Ascii: "!)BYh-9=}YwcjpIS84)iV)1NxsNA0^"9f!rs88EqOJ<7Lsn/LAiPVPCq"bU6O$R"yHA7"ICJq sf9mqu90#*r0zR,YxR<3)R}yQ
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 86 05 77 90 33 91 9a 63 ae e0 01 04 2b 7a 7a d2 14 da 1b 27 a0 e8 3b 55 00 a1 9a 25 23 68 63 9e 71 da 82 17 6a ed 38 05 b1 f4 a5 20 b8 20 b1 e4 e7 04 74 f5 a4 01 56 50 0f 7e 47 a0 a0 40 00 57 64 c1 1f ed 7a d0 54 31 04 3e 70 38 cd 38 12 18 a8 e5 71 d7 1f ce 98 fb 03 87 c8 c2 8c 71 de 80 4c 49 49 04 03 8d a1 b2 3d 69 d9 0a 70 39 5e a4 e7 91 48 76 60 9c 93 93 d5 b8 a7 21 0b ef 9f 4a 62 1b b7 76 e2 08 c6 3e f0 3f a5 2a 96 55 40 cc 39 18 5f 53 4d 18 8c fc fc 67 a0 1c d0 db 58 e4 77 ce 32 3a 50 31 ca 08 27 39 25 7d 3d 29 e8 46 d2 e5 4a 9c f0 33 c9 a6 01 bc 82 72 a8 a3 ae 7a 9a 64 aa cc 7b e7 bf a6 3d a9 21 92 ee 0b 81 82 a5 ce 48 1e 82 95 f2 41 61 92 a0 f2 0f 1f 4a 89 4b 05 21 41 27 a1 06 9c 32 0a 86 63 90 0e 28 48 4d 08 54 1f 95 4b 00 7f 8a 99 b8 fc ea c4 37 Data Ascii: w3c+zz';U%#hcqj8 tVP~G@WdzT1>p88qqLII=ip9^Hv`!Jbv>?*U@9_SMgXw2:P1'9%}=)FJ3rzd{=!HAaJK!A'2c(HMTK7
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: ad e5 a9 01 42 03 ce 49 3d e9 4e 54 30 00 e3 38 c8 ed 53 84 72 fe 62 ae 4e 31 cf 41 4c d8 c8 48 1d 4f 24 d0 4b 22 63 f2 b6 41 2a 3f 8a 9a 5c b3 75 fc 1f ae 29 e5 36 92 58 03 c7 40 33 48 40 fb e5 0b 11 d2 a9 0d 0d c8 19 6c 36 31 c6 d1 de a3 04 15 e0 6e 27 f8 49 e6 9c 70 84 9c 8f ab 1e 33 ef 49 8c 8d e0 e4 74 07 b8 aa 04 22 aa fd e2 bd 3f bb fc 34 60 b2 e6 42 08 eb 93 dc 52 e0 0c b0 3b 4e 33 8f eb 4e 62 59 77 64 ed c6 78 eb 9a 2e 2d 08 c1 1f 2e fe 84 90 3d 71 4e 2b 20 18 1b 17 d5 45 0d 90 37 6d ce 07 07 3d e9 b8 58 ce 58 90 a3 9c 77 39 a6 03 be ea 85 c6 7b b2 d4 6c 48 cb 72 a3 b8 ff 00 0a 97 1b 58 9e b8 e8 4d 30 a1 e0 c8 bf 7b b0 a0 2c 37 96 40 a7 6e 00 de 0f b5 23 2e 4e 40 0c 48 e4 35 3b 80 54 37 09 83 f3 76 a4 c8 63 b8 9c 29 3c 1a 63 43 15 82 9c ab 96 cf Data Ascii: BI=NT08SrbN1ALHO$K"cA*?\u)6X@3H@l61n'Ip3It"?4`BR;N3NbYwdx.-.=qN+ E7m=XXw9{lHrXM0{,7@n#.N@H5;T7vc)<cC
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 6a 36 93 83 92 0b 74 39 e4 7b 50 21 ab 14 64 6e 00 e4 77 0d d6 94 29 c1 27 fd 5e 38 1e 82 8c 15 7d cc 9b d4 f4 3e 94 31 00 96 6f de 28 3f 90 f4 a0 60 42 aa 9f 93 3d ce 4f 6a 70 2c 4a 96 03 83 dc 62 98 cb 96 2c d9 2b 9c e0 fa 52 93 bc 16 2c 7a 64 0a 62 15 fe 4c 31 5d c0 9e fe b4 67 24 6c 20 64 61 80 ed 4d 3c 83 d3 07 d7 af e1 4a 49 43 ed c7 27 f9 50 2b 8a cf 80 48 f9 88 00 15 1c 81 ef 41 39 c1 18 c1 ef e9 4d 00 80 fb 41 1b 86 0b 52 64 00 bb 06 48 14 00 e7 60 c5 76 82 c0 8e 5b e9 44 87 e6 66 e9 b3 d7 d2 9a d8 73 cb 73 dc 50 5b 68 f9 94 37 1d 3a d0 17 1a 58 71 f2 9e 48 e4 f7 f7 a4 69 14 60 29 f9 94 f4 34 16 7e 09 da cc 46 e0 3d 29 38 6c 16 01 9b a0 26 80 b8 f6 20 2e e2 a7 0d 8e 9d e8 52 a5 97 f8 b6 e7 39 ed 9a 77 9a 23 38 39 c1 e3 1d aa 3c b2 63 70 e3 20 83 Data Ascii: j6t9{P!dnw)'^8}>1o(?`B=Ojp,Jb,+R,zdbL1]g$l daM<JIC'P+HA9MARdH`v[DfssP[h7:XqHi`)4~F=)8l& .R9w#89<cp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49930	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	970	OUT	GET /wp-content/uploads/2023/07/SaveInsta.App-2876484693686955359_6076186385.mp4 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.campobahia.com/en/home-en/ Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0 Range: bytes=0-
2024-05-28 05:14:48 UTC	291	IN	HTTP/1.1 206 Partial Content Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 27 Jul 2023 18:03:14 GMT Accept-Ranges: bytes Content-Length: 10151098 Content-Range: bytes 0-10151097/10151098 Content-Type: video/mp4
2024-05-28 05:14:48 UTC	7901	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 63 ec 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 75 b9 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 4d 4e 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 75 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 02 d0 00 00 04 fe 00 00 00 00 00 24 65 64 74 Data Ascii: ftypisomisomiso2avc1mp41cmoovlmvhdu@MNtrak\tkhdu0@$edt
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 01 00 00 00 01 00 00 00 20 00 00 00 02 00 00 00 01 00 00 00 21 00 00 00 01 00 00 00 01 00 00 00 23 00 00 00 02 00 00 00 01 00 00 00 24 00 00 00 01 00 00 00 01 00 00 00 25 00 00 00 02 00 00 00 01 00 00 00 26 00 00 00 01 00 00 00 01 00 00 00 28 00 00 00 02 00 00 00 01 00 00 00 29 00 00 00 01 00 00 00 01 00 00 00 2a 00 00 00 02 00 00 00 01 00 00 00 2b 00 00 00 01 00 00 00 01 00 00 00 2d 00 00 00 02 00 00 00 01 00 00 00 2e 00 00 00 01 00 00 00 01 00 00 00 2f 00 00 00 02 00 00 00 01 00 00 00 30 00 00 00 01 00 00 00 01 00 00 00 32 00 00 00 02 00 00 00 01 00 00 00 33 00 00 00 01 00 00 00 01 00 00 00 34 00 00 00 02 00 00 00 01 00 00 00 35 00 00 00 01 00 00 00 01 00 00 00 37 00 00 00 02 00 00 00 01 00 00 00 38 00 00 00 01 00 00 00 01 00 00 00 39 00 00 00 02 00 00 Data Ascii: !#$%&()*+-./02345789
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 94 00 00 00 c9 00 00 68 9d 00 00 22 a7 00 00 17 1f 00 00 16 05 00 00 56 3f 00 00 1b f2 00 00 00 95 00 00 14 05 00 00 56 e8 00 00 2c d4 00 00 00 d0 00 00 17 57 00 00 59 22 00 00 17 be 00 00 58 77 00 00 1e f6 00 00 00 91 00 00 16 4e 00 00 62 b6 00 00 2e 92 00 00 00 bc 00 00 1d c0 00 00 57 a7 00 00 2d c7 00 00 17 a7 00 00 00 d4 00 00 24 8e 00 01 07 f1 00 00 5c 93 00 00 2a be 00 00 00 bf 00 00 17 8b 00 00 59 7a 00 00 16 9d 00 00 54 55 00 00 1c a9 00 00 00 94 00 00 16 77 00 00 4a 04 00 00 2d 22 00 00 00 94 00 00 16 b1 00 00 45 52 00 00 16 fc 00 01 40 c7 00 00 21 39 00 00 00 75 00 00 19 bc 00 00 9f 44 00 00 45 6c 00 00 00 8c 00 00 29 cd 00 00 95 67 00 00 27 d5 00 00 c1 9e 00 00 36 10 00 00 00 e8 00 00 30 05 00 00 85 2a 00 00 3c 4d 00 00 00 ec 00 00 27 7c 00 00 Data Ascii: h"V?V,WY"XwNb.W-$\YzTUwJ-"ER@!9uDEl)g'60<M'\|
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 30 eb 09 00 30 ed 76 00 30 ef 4b 00 31 0c 81 00 31 16 0d 00 31 19 6f 00 32 50 e8 00 32 53 e6 00 32 56 d8 00 32 71 aa 00 32 88 3a 00 32 8c 2f 00 32 94 82 00 32 af 9b 00 32 b2 8f 00 32 b5 ee 00 33 fa 60 00 33 fc f7 00 33 ff b8 00 34 56 3e 00 34 58 72 00 34 73 a6 00 34 75 bc 00 34 e6 c5 00 34 e9 54 00 34 eb c8 00 34 f2 8a 00 34 f4 64 00 36 2f 5d 00 36 32 58 00 36 34 4a 00 36 43 f1 00 36 45 ea 00 36 4b c8 00 36 4e d0 00 36 53 2e 00 36 59 bb 00 36 5c d4 00 36 5f 2c 00 37 de 3c 00 37 e0 53 00 37 e2 5e 00 38 39 c6 00 38 3d 45 00 38 3f d9 00 38 45 87 00 38 49 39 00 38 4b ee 00 38 4f 0a 00 38 51 28 00 38 53 1a 00 39 af 5e 00 39 b1 52 00 39 b3 57 00 39 ca 88 00 39 cf c8 00 39 d2 c6 00 39 d5 89 00 39 d7 6c 00 3b 2e da 00 3b 31 b7 00 3b 34 90 00 3c aa b2 00 3c ac f6 Data Ascii: 00v0K111o2P2S2V2q2:2/22223`334V>4Xr4s4u44T444d6/]62X64J6C6E6K6N6S.6Y6\6_,7<7S7^898=E8?8E8I98K8O8Q(8S9^9R9W99999l;.;1;4<<
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 64 7a 57 78 09 9d 9a 90 d6 c6 89 55 8d de 75 7c d3 46 c3 00 fa 28 73 64 cf 6b 9b de 00 28 c6 99 99 78 b0 d3 33 06 57 ac 8a 17 30 eb 88 c6 f8 bd 18 40 45 c4 fa ed ad ab 0b 00 c0 b7 2d a5 cc 5b d0 57 40 78 31 c5 43 60 75 a4 ff ce a7 c2 d8 e8 09 b0 8b f0 90 eb 18 0e 98 af 86 a3 71 fc 4d 26 d0 11 fa 61 d8 a1 bc 68 97 60 f6 14 51 26 2e 83 d6 36 81 e6 a2 09 64 5f 99 a1 2f 75 e0 d8 3c 2d 95 12 ec 70 fc 02 f1 7a 68 f6 a6 99 78 dc b0 86 d6 1c cc 15 2e ae 51 93 37 b4 3f 3d dd 86 d2 80 67 ad 0d 78 b1 58 45 be 13 57 e6 0a e4 cd 40 60 f5 64 e8 32 93 f1 c3 af bb a4 b2 85 eb 9b da bf ca db b7 1b ab 61 f9 7e ab 0c 10 b7 09 93 2a b8 82 8c 9a c7 4a b9 0a 62 86 cb d2 e3 b2 4f ef 64 91 4e 0b 71 c0 d8 68 9f 6c 6c 2b ce 15 5c f5 ea 91 e9 41 42 0a f6 18 ca 50 95 05 79 36 9f c3 Data Ascii: dzWxUu\|F(sdk(x3W0@E-[W@x1C`uqM&ah`Q&.6d_/u<-pzhx.Q7?=gxXEW@`d2a~*JbOdNqhll+\ABPy6
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: b5 78 fb d0 ae 26 67 d6 6d 77 23 09 ba 64 99 da 28 a5 fb 77 cb 8c 66 b2 d9 d3 fe 95 0d 46 84 9b bb f1 b8 4d e8 f3 f7 7d 52 7a 94 e3 f4 25 4a 83 fb 51 48 49 89 42 33 59 d1 11 78 bc bd e9 22 41 67 b7 39 c2 d2 90 37 1b 2d 52 81 1d b1 1b fe 11 42 0d 4e cd e4 cb 42 ff f1 ea 73 78 17 2d 79 ce 29 b8 d7 00 23 13 2e bd ef 1e 1d 5b c4 0e 57 14 95 45 dd 7e de 9b 56 32 09 9e c9 dd d0 11 b9 4d b8 a4 74 26 3c a6 1c fe eb bf d8 d8 a1 06 eb d1 ed 70 c9 9a 74 b5 c5 82 40 56 46 bb a4 bc 05 8b 36 71 44 bd 7e 88 86 ee e3 8d 16 24 41 99 a9 ae 72 52 d5 42 60 02 de 30 9a c0 e9 74 b0 4e 7a 30 ca 94 cf ea e4 b3 ad 47 59 e2 cc d9 d8 91 a3 ad 34 4a 49 80 4d 7b 03 c5 87 79 d3 c2 24 0d d8 50 c7 eb 54 59 1b 47 83 70 f2 fc 7b 1d 18 3e 62 60 bb 0a 77 c3 b0 7b cf eb 39 2f e2 6f 18 a2 0d Data Ascii: x&gmw#d(wfFM}Rz%JQHIB3Yx"Ag97-RBNBsx-y)#.[WE~V2Mt&<pt@VF6qD~$ArRB`0tNz0GY4JIM{y$PTYGp{>b`w{9/o
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 17 ce a7 31 e1 76 9f d1 bf 12 51 85 83 5c c0 a4 7f 14 33 5f 0c 95 c4 87 83 9e df 32 2d f4 83 be 49 2c d8 ba 09 93 7b dd 6f 19 11 67 5d 8a 43 06 fa 37 17 c9 90 12 09 d2 d5 f5 84 e6 53 b3 1f 4c 9a 2f 75 58 60 20 c9 61 94 8b 8c 04 cf 47 db b9 71 87 28 34 fe 4c b4 75 be 3b 46 9e c7 5d 33 bb 70 e1 23 f6 fd 2c b0 4e a7 44 cc f6 0c b8 97 00 20 1d d8 17 f1 7a be 28 e4 00 da a7 dd 78 5c 68 fe 93 97 00 45 5d f8 dd be e8 96 fa ea fc 06 2f 2d 7c f6 3e af 70 c5 5e f9 79 df ad 32 a9 b9 30 a4 b7 ac 8d e8 87 0c 34 df 9a db f3 b7 fd ef f3 ba 3c ca 86 87 a2 cf 9b ba 00 73 3c 86 c7 a2 e1 63 a9 f9 ae bc 00 93 77 4c ad 33 d0 c9 1d bf df b6 01 6d d3 82 a4 46 61 68 98 e4 56 d2 22 cf e4 19 fd a1 91 f4 eb da 2b 76 69 d1 b2 d8 f2 2a 09 e2 d3 9e c0 87 84 63 e5 f0 11 03 80 8c ee 7b Data Ascii: 1vQ\3_2-I,{og]C7SL/uX` aGq(4Lu;F]3p#,ND z(x\hE]/-\|>p^y204<s<cwL3mFahV"+vi*c{
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 4b 7f a4 05 60 38 6e e5 44 48 4f 93 81 1d 8b 83 6e 23 a5 7a ef 35 2d ad 63 8d eb 8e 47 85 fd 97 e9 5a 02 2e f5 20 62 5d 08 31 e7 98 ed 84 be e2 e6 0e bf be 48 65 c0 70 68 6c ae 88 16 58 b0 2c ea 33 cc 1a 47 35 53 e9 42 a0 4f da 48 12 9f 03 37 e9 88 1a 60 7c 32 b6 44 98 e5 1e 86 8c b1 b3 a6 02 71 9e aa 09 68 c6 cb d4 ab 2c 70 d7 ca 8b 45 e7 9c 11 d0 02 7d 5c 6f ba a1 10 bb a9 fc a0 e2 04 c5 c3 cc 01 a5 56 20 f6 dc 6e 0b 25 b8 ad 28 93 4c 95 3c b7 5f 0e 68 46 6c 53 8e 3e 44 85 85 93 30 74 98 e8 3d 3a 2b 3d a3 4d 2b e4 58 95 09 5f a8 bd 97 55 20 1d d6 67 67 70 62 f2 14 f3 7a fb e4 f2 28 c6 fa 1c 6c 64 82 37 4a d9 e8 dd 12 ed 32 f5 49 d9 44 ba 77 1c 79 68 43 bc 56 dd 27 cb 78 12 f4 cd b8 8c 5c 46 57 25 fb b4 ca 1a 50 c6 6d 64 1d 27 d1 68 fe dc 2e e9 2e c1 4b Data Ascii: K`8nDHOn#z5-cGZ. b]1HephlX,3G5SBOH7`\|2Dqh,pE}\oV n%(L<_hFlS>D0t=:+=M+X_U ggpbz(ld7J2IDwyhCV'x\FW%Pmd'h..K
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 27 89 03 da ec e7 ee d6 14 f5 5f ab 72 d3 99 5b a0 7b fe 27 da 3b 90 19 f1 8f 97 e8 bd ad fa 86 aa a8 03 34 78 93 f7 29 3d fb c1 a0 57 59 9a 4a d3 bc 61 bd 8e 66 b3 7d fe d5 36 17 7a 5e 4c 3c 4b 7f 90 d7 21 71 6a bc 27 ab 54 38 89 8a 90 b1 75 fa db 3c bf 4d c0 f9 f9 b7 9b 15 67 29 41 68 c8 c1 af 15 c2 86 28 44 01 fe e1 56 91 b5 ff b4 08 fe 9a a2 73 16 da 5b ef b0 74 79 15 49 66 20 8d 24 a9 64 3c 33 6e 6b c3 32 21 03 1d a1 5a 9d 0b 36 54 fa 12 3b 41 e8 9b 2f 05 39 ac 08 ce dc 98 36 f8 db d3 60 b9 b4 d7 7f d6 08 da d5 61 bd 5d 9f 6c 8f 28 d2 66 9e 80 69 28 1c a3 78 56 5f c4 91 43 47 78 c8 c3 8a 36 87 d3 d7 76 c3 09 09 a8 f7 50 ec 5d 7d 31 76 51 ea 3b 84 7c c5 fc 83 fa e7 1f 4d 35 31 68 be f3 db 8d 0a d1 b7 15 8d b7 4e 93 07 b2 5f 17 85 ed 70 ae 15 a7 79 f0 Data Ascii: '_r[{';4x)=WYJaf}6z^L<K!qj'T8u<Mg)Ah(DVs[tyIf $d<3nk2!Z6T;A/96`a]l(fi(xV_CGx6vP]}1vQ;\|M51hN_py
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 90 00 80 3d b0 26 3e 61 e5 95 59 68 45 a7 7e d5 b0 81 b3 f9 6f 70 3b 42 2a 2b fa 9c 95 85 f9 67 d3 68 de dc 49 ee 99 23 0a 01 29 00 27 ef 2b 0e ce 28 bb d3 31 df ea 55 45 71 fd 1e 1f cf c1 fe 26 ca 5a 49 9b 93 33 ab 29 81 3b 71 51 96 b2 ec a2 03 d6 b4 ac 60 fd ec 06 60 fc c3 06 fa 80 c8 80 a2 0f 3f a2 e8 dd e1 09 72 7e a8 b0 ee 91 fb d7 47 c1 51 77 f0 9b 6f b6 3b 1e 2f 4c 8e c9 c2 0b 76 43 1c fd 41 ee 94 62 9a 7f bf 96 50 e6 e4 90 6a 90 ee ce 8b d3 bd 33 60 43 73 2d cd c2 76 14 e7 e1 3d b3 02 44 67 66 53 c8 a0 a1 74 fa 44 e6 1b e6 76 9d e2 23 d0 ff 5a bb 64 61 cd 56 63 a7 d8 f5 24 b3 43 fc bf 0b 66 b1 b6 4b ea d5 3c 55 b6 b1 38 65 21 6c ad d6 ef 52 c2 09 24 35 21 51 0c 9c 48 12 d4 03 7b 14 90 46 78 25 a4 0d e7 2a aa 3c 58 f6 c2 86 9e 57 ce fb 82 32 a7 01 Data Ascii: =&>aYhE~op;B+ghI#)'+(1UEq&ZI3);qQ``?r~GQwo;/LvCAbPj3`Cs-v=DgfStDv#ZdaVc$CfK<U8e!lR$5!QH{Fx%<XW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49929	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:47 UTC	912	OUT	GET /wp-includes/js/twemoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:48 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 02 Apr 2024 20:35:16 GMT Accept-Ranges: bytes Content-Length: 32934 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:48 UTC	7923	IN	Data Raw: 2f 2a 6a 73 6c 69 6e 74 20 69 6e 64 65 6e 74 3a 20 32 2c 20 62 72 6f 77 73 65 72 3a 20 74 72 75 65 2c 20 62 69 74 77 69 73 65 3a 20 74 72 75 65 2c 20 70 6c 75 73 70 6c 75 73 3a 20 74 72 75 65 20 2a 2f 0a 76 61 72 20 74 77 65 6d 6f 6a 69 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 0a 20 20 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 54 77 69 74 74 65 72 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 2f 2a 0a 20 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 2f 62 6c 6f 62 2f 67 68 2d 70 61 67 65 73 2f 4c 49 43 45 4e 53 45 0a 20 20 2a 2f 0a 0a 20 20 2f 2f 20 57 41 52 4e 49 4e 47 3a 20 20 20 74 Data Ascii: /jslint indent: 2, browser: true, bitwise: true, plusplus: true /var twemoji = (function ( /! Copyright Twitter Inc. and other contributors. Licensed under MIT //* https://github.com/jdecked/twemoji/blob/gh-pages/LICENSE */ // WARNING: t
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 64 61 72 64 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 28 73 74 72 2c 20 63 61 6c 6c 62 61 63 6b 29 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 75 6d 65 6e 74 73 20 73 75 63 68 3a 0a 20 20 20 20 20 20 20 2a 20 20 63 61 6c 6c 62 61 63 6b 28 0a 20 20 20 20 20 20 20 2a 20 20 20 20 72 61 77 54 65 78 74 2c 20 20 2f 2f 20 74 68 65 20 65 6d 6f 6a 69 20 6d 61 74 63 68 0a 20 20 20 20 20 20 20 2a 20 20 29 3b 0a 20 20 20 20 20 20 20 2a 0a 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 64 20 6f 74 68 65 72 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 63 65 69 76 65 Data Ascii: dard * String.prototype.replace(str, callback) * arguments such: * callback( * rawText, // the emoji match * ); * * and others commonly receive
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 Data Ascii: ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d\udc66\u200d\ud83d\udc66\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 0a 20 20 20 20 20 20 73 75 62 6e 6f 64 65 2c 0a 20 20 20 20 20 20 6e 6f 64 65 54 79 70 65 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0a 20 20 20 20 20 20 73 75 62 6e 6f 64 65 20 3d 20 63 68 69 6c 64 4e 6f 64 65 73 5b 6c 65 6e 67 74 68 5d 3b 0a 20 20 20 20 20 20 6e 6f 64 65 54 79 70 65 20 3d 20 73 75 62 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3b 0a 20 20 20 20 20 20 2f 2f 20 70 61 72 73 65 20 65 6d 6f 6a 69 20 6f 6e 6c 79 20 69 6e 20 74 65 78 74 20 6e 6f 64 65 73 0a 20 20 20 20 20 20 69 66 20 28 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 33 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 6f 6c 6c 65 63 74 20 74 68 65 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 65 6d 6f 6a 69 20 6c 61 74 65 72 0a 20 20 20 20 20 20 Data Ascii: .length, subnode, nodeType; while (length--) { subnode = childNodes[length]; nodeType = subnode.nodeType; // parse emoji only in text nodes if (nodeType === 3) { // collect them to process emoji later
2024-05-28 05:14:48 UTC	1011	IN	Data Raw: 79 70 65 6f 66 20 68 6f 77 2e 62 61 73 65 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 20 3f 20 68 6f 77 2e 62 61 73 65 20 3a 20 74 77 65 6d 6f 6a 69 2e 62 61 73 65 2c 0a 20 20 20 20 20 20 65 78 74 3a 20 20 20 20 20 20 20 20 68 6f 77 2e 65 78 74 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 65 78 74 2c 0a 20 20 20 20 20 20 73 69 7a 65 3a 20 20 20 20 20 20 20 68 6f 77 2e 66 6f 6c 64 65 72 20 7c 7c 20 74 6f 53 69 7a 65 53 71 75 61 72 65 64 41 73 73 65 74 28 68 6f 77 2e 73 69 7a 65 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 73 69 7a 65 29 2c 0a 20 20 20 20 20 20 63 6c 61 73 73 4e 61 6d 65 3a 20 20 68 6f 77 2e 63 6c 61 73 73 4e 61 6d 65 20 7c 7c 20 74 77 65 6d 6f 6a 69 2e 63 6c 61 73 73 4e 61 6d 65 2c 0a 20 20 20 20 20 20 6f 6e 65 72 72 6f 72 3a 20 20 20 20 68 6f 77 2e 6f 6e 65 72 Data Ascii: ypeof how.base === 'string' ? how.base : twemoji.base, ext: how.ext \|\| twemoji.ext, size: how.folder \|\| toSizeSquaredAsset(how.size \|\| twemoji.size), className: how.className \|\| twemoji.className, onerror: how.oner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49932	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:48 UTC	913	OUT	GET /wp-includes/js/wp-emoji.js?ver=6.5.3 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:48 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:48 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 29 Mar 2023 18:58:10 GMT Accept-Ranges: bytes Content-Length: 8969 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:48 UTC	7924	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 77 70 2d 65 6d 6f 6a 69 2e 6a 73 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 70 6c 61 63 65 20 65 6d 6f 6a 69 20 77 69 74 68 20 69 6d 61 67 65 73 20 69 6e 20 62 72 6f 77 73 65 72 73 20 77 68 65 6e 20 74 68 65 20 62 72 6f 77 73 65 72 0a 20 2a 20 64 6f 65 73 6e 27 74 20 73 75 70 70 6f 72 74 20 65 6d 6f 6a 69 20 6e 61 74 69 76 65 6c 79 2e 0a 20 2a 0a 20 2a 20 40 6f 75 74 70 75 74 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 65 6d 6f 6a 69 2e 6a 73 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 73 65 74 74 69 6e 67 73 20 29 20 7b 0a 09 2f 2a 2a 0a 09 20 2a 20 52 65 70 6c 61 63 65 73 20 65 6d 6f 6a 69 20 77 69 74 68 20 69 6d 61 67 65 73 20 77 68 65 6e 20 62 72 6f 77 73 65 72 73 20 64 6f 6e 27 74 20 Data Ascii: /** * wp-emoji.js is used to replace emoji with images in browsers when the browser * doesn't support emoji natively. * * @output wp-includes/js/wp-emoji.js /( function( window, settings ) {/* * Replaces emoji with images when browsers don't
2024-05-28 05:14:48 UTC	1045	IN	Data Raw: 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 65 72 72 6f 72 27 2c 20 27 6c 6f 61 64 2d 66 61 69 6c 65 64 27 20 29 3b 0a 09 09 09 09 09 09 74 77 65 6d 6f 6a 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 20 74 77 65 6d 6f 6a 69 2e 61 6c 74 20 29 2c 20 74 77 65 6d 6f 6a 69 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 2c 0a 09 09 09 09 64 6f 4e 6f 74 50 61 72 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6e 6f 64 65 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 0a 09 09 09 09 09 09 6e 6f 64 65 20 26 26 0a 09 09 09 09 09 09 6e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 20 26 26 0a 09 09 09 09 09 09 74 79 70 65 6f 66 20 6e 6f 64 65 2e 63 6c 61 Data Ascii: s.setAttribute( 'data-error', 'load-failed' );twemoji.parentNode.replaceChild( document.createTextNode( twemoji.alt ), twemoji );}},doNotParse: function( node ) {if (node &&node.className &&typeof node.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49933	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:48 UTC	952	OUT	GET /wp-content/plugins/elementor/assets/js/video.57bb05ea17924bda3c02.bundle.js HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:48 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:48 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 6114 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:48 UTC	6114	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 69 64 65 6f 22 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 68 61 6e 64 6c 65 72 73 2f 76 69 64 65 6f 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /"use strict";(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["video"],{/**/ "../assets/dev/js/frontend/handlers/video.js":/!**************************************************!\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49934	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:48 UTC	958	OUT	GET /wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:48 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:48 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 2800 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:14:48 UTC	2800	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 65 78 74 2d 65 64 69 74 6f 72 22 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 68 61 6e 64 6c 65 72 73 2f 74 65 78 74 2d 65 64 69 74 6f 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /"use strict";(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["text-editor"],{/**/ "../assets/dev/js/frontend/handlers/text-editor.js":/!********************************************

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49936	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:48 UTC	955	OUT	GET /wp-content/uploads/2021/09/Desktop-Video-Atualizado-2021.mp4 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.campobahia.com/en/home-en/ Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0 Range: bytes=0-
2024-05-28 05:14:48 UTC	291	IN	HTTP/1.1 206 Partial Content Date: Tue, 28 May 2024 05:14:48 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 21:13:35 GMT Accept-Ranges: bytes Content-Length: 43035696 Content-Range: bytes 0-43035695/43035696 Content-Type: video/mp4
2024-05-28 05:14:48 UTC	7901	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 6d 70 34 32 6d 70 34 31 00 00 5f 83 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 dd 53 25 4d dd 53 25 4e 00 01 5f 90 00 39 03 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 38 29 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 01 dd 53 25 4d dd 53 25 4d 00 00 00 01 00 00 00 00 00 38 f4 f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 Data Ascii: ftypmp42mp42mp41_moovlmvhdS%MS%N_9@8)trak\tkhdS%MS%M8@8$edtsels
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0b Data Ascii:
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 00 68 00 00 00 10 00 00 00 01 00 00 00 6a 00 00 00 0f 00 00 00 01 00 00 00 6b 00 00 00 10 00 00 00 01 00 00 00 6d 00 00 00 0f 00 00 00 01 00 00 00 6e 00 00 00 10 00 00 00 01 00 00 00 70 00 00 00 0f 00 00 00 01 00 00 00 71 00 00 00 10 00 00 00 01 00 00 00 73 00 00 00 0f 00 00 00 01 00 00 00 74 00 00 00 10 00 00 00 01 00 00 00 75 00 00 00 0f 00 00 00 01 00 00 00 76 00 00 00 10 00 00 00 01 00 00 00 78 00 00 00 0f 00 00 00 01 00 00 00 79 00 00 00 10 00 00 00 01 00 00 00 7b 00 00 00 0f 00 00 00 01 00 00 00 7c 00 00 00 10 00 00 00 01 00 00 00 7d 00 00 00 06 00 00 00 01 00 00 1e 7c 73 74 73 7a 00 00 00 00 00 00 00 00 00 00 07 9a 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 Data Ascii: hjkmnpqstuvxy{\|}\|stszONNONNONNON
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 63 6f 00 00 00 00 00 00 00 7d 00 06 82 bc 00 0b 13 73 00 10 bb 76 00 16 8e 15 00 1c 0e 06 00 20 ab 12 00 26 1e df 00 29 a9 85 00 33 0a e6 00 39 d0 df 00 40 19 5d 00 46 90 22 00 4d a0 0e 00 53 a1 3f 00 59 e1 93 00 60 5e b2 00 66 7b 5a 00 6e 46 24 00 73 8c 4a 00 78 8e 26 00 7d fa 5a 00 83 fc 91 00 89 2f 88 00 8d db 7d 00 93 eb 98 00 98 fa d7 00 9f db ec 00 a5 f6 4b 00 ab c5 71 00 b1 27 04 00 b7 9b c7 00 bc 66 6e 00 c1 3b ca 00 c6 8e a8 00 cb 95 7b 00 d2 16 04 00 d7 45 c5 00 db af 14 00 e0 e4 d3 00 e7 13 13 00 eb f3 2d 00 f0 6e cd 00 f7 30 25 00 fa 9c 98 01 01 02 f2 01 05 67 73 01 0c 17 22 01 10 a9 5f 01 16 6d 59 01 1b 47 fe 01 1e 92 d2 01 26 6a 4f 01 29 87 5f 01 2c 5c 50 01 31 98 38 01 33 e8 73 01 37 fb dc 01 3b 64 64 01 40 09 af 01 44 1f 79 01 47 82 5b 01 Data Ascii: co}sv &)39@]F"MS?Y`^f{ZnF$sJx&}Z/}Kq'fn;{E-n0%gs"_mYG&jO)_,\P183s7;dd@DyG[
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-28 05:14:48 UTC	8000	IN	Data Raw: f1 1e 35 c5 34 26 80 6d 0b 01 7e bb 86 14 fc fb 03 7b 61 fa d0 72 85 5d a8 de a9 b9 66 d2 68 e9 4c 00 9f 1b 03 e8 51 73 4f 26 82 20 81 84 29 1a 38 bb d8 2e a9 4f 0e cd 5e 4b ee e1 82 08 e4 35 47 32 78 18 81 ac b7 01 7d 59 61 34 a8 94 59 d2 e7 ba 7f 11 da f0 f7 b8 4d 55 17 bd 28 60 cd ac 7b 45 99 c1 3e 75 7e aa 80 0d 17 d1 58 b8 eb 99 a7 c2 4d 19 47 93 3c 87 f3 4c f6 9d b8 c5 ba 44 8f 0b 67 d9 91 56 2b ae a2 66 f6 9d df 8c 5d a9 d6 3a 4f c3 ae cc 1c dc af 66 9a ed 97 39 8f cc 9a 37 0f 33 a7 d9 53 49 f6 bc 13 a1 39 1f ed 33 98 90 fb 62 1c de cc 52 44 32 aa 3f 14 5e c9 2f c8 6c de 15 33 f2 41 98 98 bc 67 66 28 3d 55 9c 3f f6 eb ec 5b c4 99 44 21 10 11 17 48 eb cb 42 3f e4 03 cf 99 29 ae a6 f1 fe 27 39 a7 43 d8 27 fd dc 47 6b 04 ae f5 b2 53 b1 d8 3d b5 fc 4b Data Ascii: 54&m~{ar]fhLQsO& )8.O^K5G2x}Ya4YMU(`{E>u~XMG<LDgV+f]:Of973SI93bRD2?^/l3Agf(=U?[D!HB?)'9C'GkS=K
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: 75 08 bc 90 76 fb 3b 43 b6 c0 9b 19 86 ec bf f6 35 ba c6 63 03 fd 90 01 10 27 6b 41 76 ce 8f 33 9b 12 3a af 41 ba ec 84 1e 7f 0a c8 e3 dd ef 69 f1 9d 60 67 a1 c8 78 d6 22 20 8f e0 4a 6c 37 69 92 08 ee 8f e2 27 83 8d 03 04 74 29 5b c3 26 d1 32 98 0c d2 75 e0 48 a2 79 f4 54 0d 56 d5 45 98 af 47 86 de 09 7c 2f 47 25 b8 3d 68 7f ae d6 71 84 fb 51 8d 7a 36 10 a1 3b a3 8f d9 e3 de 3f 84 b2 8f e2 9e 95 06 57 ad 4f e6 8a ce 01 87 af ff f0 2a 03 59 61 0e 1e 4b a4 78 0a ea fb a7 2e b0 a0 a1 57 69 5b 86 04 94 29 b7 78 16 db fc dd 45 91 01 e9 6e c0 96 f0 7d 73 24 1d 1e 5d a5 ed 8f 39 38 d4 74 5d 20 45 b5 94 0a 09 bf 10 e1 ac 1d 73 6e ac 2e eb c8 ce 07 a6 0e 7e 4d a4 8b 82 61 a3 09 4b c9 f1 4b c6 92 14 63 79 88 a8 56 13 ff 6c b4 e7 b7 91 2f 2d db 08 ad 48 18 b0 c4 d3 Data Ascii: uv;C5c'kAv3:Ai`gx" Jl7i't)[&2uHyTVEG\|/G%=hqQz6;?WO*YaKx.Wi[)xEn}s$]98t] Esn.~MaKKcyVl/-H
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: d2 23 5e 1e 3a f6 48 36 be fb 02 98 88 24 75 73 1c 4f f9 2e af c9 07 ee 13 3f ca 69 90 b9 fe 95 ef db 1c 79 08 79 8e e6 bb 6d ca d4 7a b0 f8 7a 5e c2 75 b7 ed 94 ef 84 de 52 df ce 20 6e ec 30 67 c9 6a f9 39 9c 68 e7 f2 e9 2b e4 4d 90 55 fb 9d a0 77 26 d6 f1 6e 14 7d 4d 4c b2 ee 69 dd 83 0f 2a 63 ad 10 71 8e 92 51 42 2c 58 83 ec d5 cc be 50 cb 9d 45 b3 19 c0 44 b3 73 35 22 39 70 0e 49 46 ab c2 2a 22 2c be 8c 1f 87 fc 4d 06 ae 73 5e d9 23 af 97 11 29 b9 ae f1 ae 6e 52 10 24 f0 4e b1 ed 81 d7 c6 02 9a dd 05 0d 3f 29 ae 64 59 1f 97 4a 3b f0 39 26 b6 f7 cc 4a 4f ab ad f6 34 40 da 70 4f 17 46 2c 0c bf 3d 64 c6 f3 c1 68 df c0 4a 1e ce 1d 4e 7f 81 a9 a8 fd fa f3 3d dd 6f 16 72 fd 19 7a f6 52 c3 5b 6c 34 de c4 a9 2c e3 8d 1a d6 b7 f8 ff df 92 1b d4 9c 04 41 67 09 Data Ascii: #^:H6$usO.?iyymzz^uR n0gj9h+MUw&n}MLicqQB,XPEDs5"9pIF",Ms^#)nR$N?)dYJ;9&JO4@pOF,=dhJN=orzR[l4,Ag
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: 03 5a 60 20 88 01 1b 5d 72 7f 92 e1 fe af 63 d8 f3 e4 20 b1 95 9f df ca 40 ad 3b f3 f0 b3 ec b0 8e b5 5a f0 e3 d0 1e a9 b5 4e 74 8e ac 30 3e 6d 69 e5 46 e2 87 33 ff 8c f7 cf 2a c3 81 9f 3d cc e6 c7 52 66 0c de 73 95 43 69 d2 b3 2d 2e e3 65 5e 88 a2 bc 03 aa dc c1 4a ba 22 b4 91 af 88 61 42 ba b1 84 54 d1 ba 2e 3d c1 f4 5e cc 7a 6a b7 c6 b6 53 1e aa 3e 62 22 0f fa 6b c7 54 90 a8 38 47 2d f2 9d 10 14 e2 e1 c3 cc eb ed 58 c1 b5 59 fe c6 f4 b3 69 0e 82 e6 f1 c2 27 01 01 f6 45 17 8f 9e 74 6f 4d 72 ad ec 76 e7 b3 0a 4a 6c d7 9c 5d 8f 6d 44 13 2a f4 93 84 ff f5 8e 00 a5 c6 3f c0 b9 53 50 3a 77 e7 8c 93 c3 10 2b 87 ae 34 fe d4 c7 62 ac 1a 06 d1 74 b6 24 3c 80 60 97 67 50 7b cd f3 9e f3 9f 28 bc 59 a0 48 e0 4a 87 3e 66 e7 55 8c 5a cc f3 3c 4d eb 29 18 e8 bd a0 a3 Data Ascii: Z` ]rc @;ZNt0>miF3=RfsCi-.e^J"aBT.=^zjS>b"kT8G-XYi'EtoMrvJl]mD?SP:w+4bt$<`gP{(YHJ>fUZ<M)
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: 57 bc 31 59 14 05 91 b0 e8 da 3e 10 54 89 e5 55 61 31 db 7c b9 33 8b ce d7 e5 f8 65 5b 95 3c 20 7a 4a a6 de 35 18 95 37 ba c7 e0 51 14 b8 f7 df 7a 5b 33 60 7b 81 9f 3f 10 2d df 85 dd 30 4d cd 22 e9 bf db ad 90 2d 26 84 b4 b8 de 2b 5b 43 47 83 9e 5b b4 49 27 1f 88 35 41 cd a2 3a 23 b1 63 bb 59 98 ef 25 67 2e fc 36 4b d7 ac d4 1e e2 60 e7 af 38 f8 e7 27 f5 ec 4c 06 b0 92 0d 23 e0 1f 8f 0d da 15 fe 4b 03 19 43 d9 53 a0 03 04 dd 8e 13 a1 da 85 9e 3b b1 07 bf 19 50 87 56 c8 35 b9 61 ee 9e f2 c8 3b fd 5c 1c 01 b9 36 69 58 ef 27 e4 08 de 11 23 c4 27 d9 ca bd fc eb e7 b0 ed c7 43 3e c1 ec 72 7c 55 74 51 38 82 5f 29 cc 8e 34 ed c7 e7 fd 52 85 f5 2e 4f 28 53 da 98 15 1f 10 0c 32 1d d0 66 96 4a 59 88 c6 01 00 26 d0 af 7e 44 5b 2c c7 f4 4f 23 2a 6a cb 76 d0 50 bd 25 Data Ascii: W1Y>TUa1\|3e[< zJ57Qz[3`{?-0M"-&+[CG[I'5A:#cY%g.6K`8'L#KCS;PV5a;\6iX'#'C>r\|UtQ8_)4R.O(S2fJY&~D[,O#*jvP%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49941	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	767	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:51 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:14:51 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49937	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	760	OUT	GET /wp-content/plugins/cm-pop-up-banners/shared/assets/images/close_modal.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:50 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 25 May 2024 08:34:23 GMT Accept-Ranges: bytes Content-Length: 1581 Content-Type: image/png
2024-05-28 05:14:50 UTC	1581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 05 b3 49 44 41 54 78 da b4 56 6b 4c 14 57 18 3d f7 ce ce 2c b3 4b 01 5d a3 2e ab c2 16 db e8 62 62 ad 2d 46 8b 82 49 93 26 14 13 4d d0 04 c5 26 6a aa b1 d1 34 be c0 5a b1 6a 6d e3 23 ad d5 f8 88 fd 83 8f 46 45 6d 7d c5 d6 95 90 2c b5 5a 5b a2 55 6b 09 d8 a8 2b 82 3c 56 81 65 64 99 9d 9d 3b b7 7f 94 82 ce f2 f0 71 7e ce 3d f7 9e f9 66 be 73 be 4b 32 33 33 01 00 9c 73 08 42 0c e2 e3 63 61 b7 db a0 28 0a 4e 9c 38 4e 00 e0 f0 e1 23 c2 c9 93 a7 d2 54 b5 7d 2a e7 48 Data Ascii: PNGIHDR;0pHYs cHRMz%u0`:o_FIDATxVkLW=,K].bb-FI&M&j4Zjm#FEm},Z[Uk+<Ved;q~=fsK233sBca(N8N#T}*H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49938	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	752	OUT	GET /wp-content/uploads/2023/09/Pop-up-Julho-atualizado-2-copiar-2.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:50 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 24 May 2024 17:15:49 GMT Accept-Ranges: bytes Content-Length: 399229 Content-Type: image/jpeg
2024-05-28 05:14:50 UTC	7957	IN	Data Raw: ff d8 ff e1 0a 26 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 01 24 f8 00 00 00 27 10 01 24 f8 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 35 3a 32 34 20 31 34 3a 31 35 3a 33 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 06 0c a0 03 00 04 00 00 00 01 00 00 06 e6 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1!r2i$'$'Adobe Photoshop 25.0 (Macintosh)2024:05:24 14:15:32"
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 30 2d 30 38 2d 32 36 54 31 35 3a 30 32 3a 35 30 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 32 34 54 31 34 3a 31 35 3a 33 32 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 32 34 54 31 34 3a 31 35 3a 33 32 2d 30 Data Ascii: /1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2020-08-26T15:02:50-03:00" xmp:MetadataDate="2024-05-24T14:15:32-03:00" xmp:ModifyDate="2024-05-24T14:15:32-0
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 46 36 32 38 45 34 36 32 36 42 32 41 36 44 43 34 35 41 39 45 33 35 43 46 33 46 37 44 30 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 34 35 31 41 34 45 43 31 46 41 38 39 41 30 45 33 36 43 31 39 37 43 43 39 31 46 34 46 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 38 46 31 34 31 45 36 34 32 45 46 42 31 45 31 31 35 36 36 39 37 46 41 35 37 37 35 45 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 43 33 34 38 42 46 45 38 36 31 37 30 30 43 46 35 35 36 30 30 32 35 39 32 45 42 33 33 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 32 33 37 37 34 35 35 42 39 36 38 45 34 45 43 30 35 32 45 31 46 44 46 41 34 38 39 35 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>4F628E4626B2A6DC45A9E35CF3F7D0C6</rdf:li> <rdf:li>50451A4EC1FA89A0E36C197CC91F4F58</rdf:li> <rdf:li>518F141E642EFB1E1156697FA5775E72</rdf:li> <rdf:li>51C348BFE861700CF556002592EB3398</rdf:li> <rdf:li>522377455B968E4EC052E1FDFA489519</rdf:li>
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 63 37 37 35 61 30 35 36 64 66 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 33 39 35 30 61 62 66 2d 61 30 64 66 2d 39 66 34 35 2d 38 66 61 66 2d 36 33 34 32 38 36 37 61 32 34 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 33 61 62 63 65 34 64 2d 63 33 62 31 2d 31 31 37 38 2d 39 65 37 65 2d 66 37 39 35 34 32 64 35 36 64 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 35 32 37 33 39 66 32 2d 39 36 34 34 2d 65 39 34 31 2d 62 61 37 34 2d 38 36 32 66 61 63 31 32 37 37 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: c775a056dfa</rdf:li> <rdf:li>adobe:docid:photoshop:33950abf-a0df-9f45-8faf-6342867a2422</rdf:li> <rdf:li>adobe:docid:photoshop:33abce4d-c3b1-1178-9e7e-f79542d56dff</rdf:li> <rdf:li>adobe:docid:photoshop:352739f2-9644-e941-ba74-862fac127795</rdf:li> <rdf:l
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 30 31 62 39 62 36 63 2d 38 38 37 64 2d 62 32 34 36 2d 61 34 38 36 2d 34 64 62 61 30 64 31 39 62 35 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 36 64 35 62 33 30 2d 37 63 62 64 2d 31 31 37 62 2d 38 36 32 37 2d 38 36 65 36 33 32 34 64 62 63 65 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 39 34 37 36 35 65 37 2d 36 61 64 64 2d 31 31 65 35 2d 61 34 39 62 2d 61 32 62 31 63 65 33 32 65 32 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 Data Ascii: <rdf:li>adobe:docid:photoshop:c01b9b6c-887d-b246-a486-4dba0d19b577</rdf:li> <rdf:li>adobe:docid:photoshop:c36d5b30-7cbd-117b-8627-86e6324dbcea</rdf:li> <rdf:li>adobe:docid:photoshop:c94765e7-6add-11e5-a49b-a2b1ce32e280</rdf:li> <rdf:li>adobe:docid:photos
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 62 34 61 33 37 64 63 38 64 66 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 65 62 32 64 64 35 2d 64 63 32 63 2d 34 33 39 64 2d 62 63 36 34 2d 37 62 66 64 66 65 64 39 38 66 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 61 38 38 31 38 64 63 2d 62 66 64 65 2d 65 63 34 34 2d 62 36 39 32 2d 33 64 65 63 62 65 30 33 31 34 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 63 35 66 38 61 64 2d 37 62 33 65 2d 34 61 62 36 2d 39 62 62 38 2d 33 39 63 62 61 31 64 33 61 35 63 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 63 31 63 30 66 36 34 2d 33 64 64 65 2d 66 66 34 61 2d 38 31 33 61 2d 38 38 61 30 35 30 64 66 Data Ascii: b4a37dc8dfa</rdf:li> <rdf:li>xmp.did:79eb2dd5-dc2c-439d-bc64-7bfdfed98fa3</rdf:li> <rdf:li>xmp.did:7a8818dc-bfde-ec44-b692-3decbe031456</rdf:li> <rdf:li>xmp.did:7bc5f8ad-7b3e-4ab6-9bb8-39cba1d3a5c4</rdf:li> <rdf:li>xmp.did:7c1c0f64-3dde-ff4a-813a-88a050df
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 09 0a 18 19 26 36 45 1a 27 64 74 55 37 f2 a3 b3 c3 28 29 d3 e3 f3 84 94 a4 b4 c4 d4 e4 f4 65 75 85 95 a5 b5 c5 d5 e5 f5 46 56 66 76 86 96 a6 b6 c6 d6 e6 f6 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e7 c6 b9 96 e0 ba b4 18 ab b1 43 81 db 14 b4 30 a1 d8 ab 88 38 ad 38 f8 e2 ae df a6 28 76 29 6f 02 ba 98 55 d8 12 dd 69 8a bb 15 71 c2 ad 62 86 f7 c5 5a 02 b8 ad 35 4c 58 d3 bd f1 56 f1 4b 43 14 37 8b 27 62 8b 77 7d b1 56 f7 c5 59 56 89 bd 9a 7f b2 ff 00 89 36 73 fa bf ae 5f e6 ff 00 b8 7a 0d 27 f7 71 ff 00 3b fd da 62 06 62 39 8b c6 28 5c 30 25 d8 ab a9 8a ba 98 a5 be 38 15 d8 12 d8 c5 2b b1 57 62 ab 48 c5 Data Ascii: &6E'dtU7()euFVfvGWgw8HXhx9IYiy*:JZjz?C088(v)oUiqbZ5LXVKC7'bw}VYV6s_z'q;bb9(\0%8+WbH
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 78 ab b0 ab b1 43 b1 57 64 82 b8 64 90 bb 14 37 8a ad 23 15 5b 8a 56 93 8a ad 27 0a b5 5c 55 a2 71 56 b1 56 b1 55 b8 a5 a3 8a b5 8a ad 38 aa dc 55 69 c5 5a 38 55 69 c5 5d 8a ac 6c 2a b4 e2 ad 1c 2a b7 15 6b 15 6b 0a ad c5 5c 71 42 d3 85 5a 38 aa dc 55 a3 85 56 9c 55 ac 55 69 c2 ad 1c 55 ac 28 6b 15 7f ff d7 84 d3 33 1c 06 a9 4d f1 56 e9 8a b8 d2 9b e0 4b 74 c5 5c 31 57 50 e2 ab a8 31 4b a9 4c 50 d5 31 56 e8 71 56 b0 a1 bc 09 75 31 57 0d b7 c5 5c 06 2a de 29 77 7d f1 56 8e 16 2d d0 f5 c0 96 c0 f1 c0 95 fe 9d 70 a5 52 3b 56 22 a7 a7 be 44 94 80 98 41 a6 33 ff 00 66 46 db 38 51 31 e9 8a 8d 47 c8 da 69 1c b0 2a ad 14 53 df 05 b2 a5 16 4e 2b b6 2a e8 81 0b be 69 75 3f 59 fc 7f 0b b7 d3 fd 03 f1 fc 4b f3 19 c8 6f 0a b6 30 2b 78 ab 78 ab b1 4b 78 ab b0 2b 8e 2a Data Ascii: xCWdd7#[V'\UqVVU8UiZ8Ui]l*kk\qBZ8UVUUiU(k3MVKt\1WP1KLP1VqVu1W\)w}V-pR;V"DA3fF8Q1GiSN+iu?YKo0+xxKx+*
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 37 92 92 45 bc 55 0a 09 1c 8f c5 f6 ff 00 9b ec 65 72 0d b1 28 09 fc c5 7e f2 fa c6 77 e5 5e 8a c4 28 ff 00 27 82 fc 18 d2 da 73 ad 5d cb ab 68 d0 5f 39 3c d6 42 8c 01 f8 5b ed fe f7 87 f3 7f cd 78 13 76 c4 f8 32 b5 5a b4 c9 31 46 47 33 c8 bc 50 ef 91 64 0b 51 d9 b1 63 cf 76 eb 8d ad 2a 9b 31 27 6a 63 69 a4 65 9e 9f f1 54 6e 32 24 a4 04 e6 0b 1e 22 a4 d7 21 6c e9 18 88 ab d3 02 57 34 a0 6d 8a ad 77 14 a0 eb ef 8a b1 1d 65 4a dd b8 3f e4 ff 00 c4 57 35 59 fe a2 ec b0 fd 21 05 98 ed ed e2 ad e2 ae c0 97 62 97 60 56 c6 29 6f 15 6f 02 bb 15 6a b8 a5 b0 70 2b 78 a5 70 c5 55 53 22 aa 83 02 ae a6 2a 9a 69 fe 5e ba bf 8c 4b 1f 10 86 b4 2c 7a d3 e1 fd 9e 59 93 8f 4d 29 8b 0e 3c f3 c6 06 8a 3e 3f 26 dc 1f ef 24 41 f2 a9 ff 00 9a 32 f1 a1 3d 4c 5a 4e ac 77 23 23 f2 Data Ascii: 7EUer(~w^('s]h_9<B[xv2Z1FG3PdQcv1'jcieTn2$"!lW4mweJ?W5Y!b`V)oojp+xpUS"i^K,zYM)<>?&$A2=LZNw##
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 15 5a 71 55 a7 15 5b 8a b5 8a b9 54 b1 0a 3a 93 4c 20 5e ca 55 af ac 9e c9 c4 72 10 49 15 db 2d cb 88 e3 34 5a f1 cc 4c 58 42 d7 29 6c 6b 14 ad c5 5a c5 56 9c 55 ac 2a b4 e2 ad 1c 55 a3 85 56 9c 55 ac 52 d1 c2 85 b8 ab 58 ab 58 55 6e 2a d1 c2 86 8e 2a d1 c5 56 e2 ad 1c 2a b4 e2 ad 1c 55 69 c2 ad 1c 55 ac 28 6b 15 7f ff d3 8d 53 33 1c 1a 6c 01 81 57 53 e9 c0 97 53 14 ae 11 93 8a d2 aa 45 be 2a 02 fe 14 db 02 5a 2d 4d bb e2 ae e6 4e 2a b8 35 37 c5 2d 99 47 6c 56 d4 9a 56 38 58 d9 55 88 d7 ae 02 90 8e 1f 10 14 34 03 22 cd 5e 05 a7 7c 8b 24 df 4b b7 b8 bc 2c b6 c9 cc 81 53 b8 ff 00 8d b2 25 98 29 a0 d0 b5 0e 82 13 bf ba ff 00 cd 59 14 a3 b5 16 5d 3a ca 3b 27 60 66 e5 cd 80 fd 9c 52 93 8b fd e8 a7 1a 5b 44 c6 64 23 90 6f a3 03 25 43 7a 63 dd c8 a0 c1 4b 6a 6d Data Ascii: ZqU[T:L ^UrI-4ZLXB)lkZVUUVURXXUnVUiU(kS3lWSSEZ-MN57-GlVV8XU4"^\|$K,S%)Y]:;'`fR[Dd#o%CzcKjm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49943	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	730	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fen%2Fhome-en%2F&rl=&if=false&ts=1716873284087&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_8e639628fbfdf3b2fc6336b8c94756c264a1fbfb296bcf95fb83d7dd6afdae1f&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873281682&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:51 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=97, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:14:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49939	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	740	OUT	GET /wp-content/uploads/2021/07/img-mapa-footer-mobile.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:50 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:56:05 GMT Accept-Ranges: bytes Content-Length: 150320 Content-Type: image/jpeg
2024-05-28 05:14:50 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: ec c5 61 0b 2f e6 5d d1 8f 51 ee 3d 46 a5 f0 be 2b a9 20 48 88 2c ae bd dd 7e e0 47 fd 3a 95 4d 28 12 37 4d f6 df 40 e7 c4 a3 72 de de 9a 2d 0f 91 36 ed 1b f4 d4 41 2c 09 f9 b7 fc da 1a 59 3b 74 1e da a8 0a a4 ea 85 10 53 ae ab 36 10 63 32 1e e2 4e c7 51 61 b1 01 57 25 7a ef f5 d4 c5 48 d8 85 ed 71 d3 54 d1 18 86 dd 3d 07 5d 03 65 fe 35 dc 75 3f 5d 04 0c 95 27 cb 54 8e ab 64 2d e3 84 56 22 b1 fa 8a 6c aa e4 44 dd c6 37 0e ac ad 1c 83 ed 75 23 62 34 94 b1 4f af 4d e9 5b c3 4f 96 e3 d8 2c 06 1b 0f 72 c6 2b 01 8e 86 b8 9c aa c8 e1 31 d6 2a 4a 8a 89 59 5d 09 47 8c a7 42 76 ee fa e9 31 c2 9b 8a 52 1c 8f 23 85 c1 1b 98 3b 55 f8 ac 71 71 ec 85 54 2a 71 a8 f6 b7 7a f5 6c 3b 01 b4 a6 35 fb 18 10 9b 7a 80 42 e9 a6 39 d5 eb d5 92 cf 06 82 c4 16 e9 cb ca 24 ce 8e 51 Data Ascii: a/]Q=F+ H,~G:M(7M@r-6A,Y;tS6c2NQaW%zHqT=]e5u?]'Td-V"lD7u#b4OM[O,r+1JY]GBv1R#;UqqTqzl;5zB9$Q
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 91 9e 4c e6 26 bd ef d5 e4 73 35 27 d9 ee 7c e2 67 fd 4c b6 d5 94 4b 1b 48 37 ee 06 3f b5 5f 61 ce 5b 2f f5 3a de 25 9f d2 d7 fc 93 7e 9f 26 c6 70 7c 56 26 e2 d8 c5 73 7b 06 38 2f c6 cc 81 e1 b8 b1 d6 3b 0d bb bb be 1b 12 74 3b 11 b1 df a8 d7 4e 79 c7 9e f9 f6 b8 e6 bc 7d 83 cc 24 d4 ed 63 b1 39 4c 75 85 f8 65 a5 92 a1 05 84 30 85 ec 08 43 46 c1 80 50 00 df db 5a f9 cf cc 63 fc 76 7a ab 8e 37 19 47 19 8f a1 88 c6 d5 8a 9d 0c 65 78 ea 50 a9 0a 84 8e 38 62 50 a8 88 a3 d0 00 3a 0d 73 b2 d7 48 f1 df 96 71 d9 1c 6e 43 c8 fc 8a e7 8b 29 73 ec 14 8f 36 42 be 66 29 b1 f2 5b af db 4e 28 15 65 a9 6d 52 62 b0 cd 18 24 c7 21 fb 4e ea 37 e9 ad f5 f5 db 76 53 8f bb 9e 66 58 f5 6f 0d c2 3f 16 e2 9c 5f 03 34 c6 6b 98 6c 45 2a 77 2d b1 ef 79 65 86 04 59 1d a4 23 76 25 81 Data Ascii: L&s5'\|gLKH7?_a[/:%~&p\|V&s{8/;t;Ny}$c9Lue0CFPZcvz7GexP8bP:sHqnC)s6Bf)[N(emRb$!N7vSfXo?_4klE*w-yeY#v%
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: c3 be 38 5c 0b 5f be 57 12 fe af f5 bf 1c a1 c1 56 8c 24 2c 3b 86 de c0 92 dd 28 b7 60 06 6c e1 a9 b7 24 8d 20 cd a9 99 2f 24 6e ae 8c 16 67 11 48 ac bd 36 78 c2 b6 de db ec 7a ea 56 a3 b4 a1 58 6d bf 5d 64 67 7e 50 f2 06 07 c5 5c 46 ef 32 e5 30 e6 66 e3 f8 d7 1f d5 67 c1 e3 2c e5 66 ab 07 6b 3c 96 a6 82 aa bb a4 11 2a 13 24 9b 6c a3 d7 d7 5a 93 4b 71 52 e3 fe 78 f1 96 53 21 47 09 36 73 23 81 e4 39 2e 19 73 c8 29 c6 b3 b8 db 58 dc 84 5c 76 95 9f d2 4d 72 68 27 40 63 3d fd 55 1b ef 64 fb c0 ed d5 f8 b3 f2 67 b4 bc f3 e2 9b 9e 3d e5 fe 4f 97 90 de c1 f1 4e 05 42 b6 5b 97 c5 9d c4 5e c5 e5 69 e3 ef a7 c9 46 df f4 eb 11 89 e5 8a e2 75 81 d0 11 21 0c a3 ee 56 51 db e4 f3 df ae b6 a7 4b 8f 46 2b 0e 45 9c 4c 90 ad a8 6d 33 a4 b5 7e 12 9f 22 cc 1d 89 40 a1 4f 77 Data Ascii: 8\_WV$,;(`l$ /$ngH6xzVXm]dg~P\F20fg,fk<*$lZKqRxS!G6s#9.s)X\vMrh'@c=Udg=ONB[^iFu!VQKF+ELm3~"@Ow
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 01 79 1c 80 37 24 01 f5 3d 07 5d 5c d3 d3 cd bc eb 9e dc ce d1 c7 cb 76 4c df 09 f1 e6 6e c3 57 c2 60 b1 f0 49 17 38 e7 72 a2 ee 29 62 e9 ee 93 d0 a8 ff 00 9a 49 5b b2 63 1f dc cd 5a 2d e4 3b 9c e3 37 a7 73 8c 78 72 c6 77 1f 8b 83 c9 38 8c 5e 07 85 e0 fe 36 e2 5e 00 c0 f6 ff 00 a7 f1 e1 1c 4a 92 66 1d 15 06 52 c8 7e a5 48 fd 32 b6 e4 24 af fc d2 bd 12 3d 10 77 54 54 40 11 11 42 a2 28 01 55 40 d8 00 07 40 00 f6 1a e7 5b 84 a8 27 db 73 a9 aa 75 55 bd 36 3b 7b 8d 58 cd 36 64 0a 59 76 fc 06 95 67 85 02 ca ae 7f 9f d0 ad f2 fc 94 7c 7d 4b fa 95 ba c0 ee ad 96 ca ab 45 4c b0 f4 ee af 59 65 70 3d 8c aa 7e 9a d4 b9 13 dd 17 33 45 cd e5 b8 4f 09 6e e7 ab 96 bd 26 67 90 c2 3a ab 63 30 e1 64 ec 90 7f 96 4b 52 40 a4 7b 8d f4 e7 d1 d5 f2 c4 f2 dc 57 16 72 f6 ed 88 a5 Data Ascii: y7$=]\vLnW`I8r)bI[cZ-;7sxrw8^6^JfR~H2$=wTT@B(U@@['suU6;{X6dYvg\|}KELYep=~3EOn&g:c0dKR@{Wr
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: c6 f8 0e 7d 4e 5e 4f 85 ab 20 06 1f ea 11 15 ad 9d ad d8 c0 8d a7 0f 0d 9e d1 d0 97 90 ed eb a7 1d 6c fe 47 db cf 9d fd bb 1e 2d e3 38 cc 6f 21 cf e2 f2 eb 2e 4f 94 78 91 9f 01 c4 32 16 e7 96 c3 43 c6 72 a0 5c a1 2c 6a ff 00 60 95 e3 1f a5 92 50 3b d8 57 0a 5b 6d c6 b7 dd fc b9 72 dd 23 73 23 6c dd 06 b9 eb a6 1c 73 df b0 1e dd 34 d6 4d 32 32 fa ea 5a a4 05 25 94 fb 6a 29 f1 1b 7d dd 75 a6 40 39 4d c7 69 23 df 54 c2 8a 06 03 d8 1f 5d 45 8f 37 79 2b 03 07 90 79 87 8e 78 a5 b8 ac a5 ba f9 a6 e4 59 3f 8a 57 85 6b f1 ec 6e cb 6e 0b 00 7d b2 c7 7e 73 05 73 1b 02 1c 77 91 b7 6e fa ef 32 72 e1 2f 57 a5 bb c8 b5 67 e6 9c af 84 70 9c 76 67 23 c7 6e d0 69 f9 66 77 90 62 24 58 2e 56 c7 42 ad 46 3a b1 4c e8 e1 0d e9 66 28 48 1b fc 71 b9 5e d6 0a c3 1c dc 9a e9 d4 f3 Data Ascii: }N^O lG-8o!.Ox2Cr\,j`P;W[mr#s#ls4M22Z%j)}u@9Mi#T]E7y+yxY?Wknn}~sswn2r/Wgpvg#nifwb$X.VBF:Lf(Hq^
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 23 54 8a 64 72 5e 22 04 8a 02 b1 24 a6 e3 bb 6f 4f 7d 5c 65 32 54 40 0e fb ee ba 2c 33 13 12 76 27 a6 a2 e0 48 14 36 fb fb fb 69 a6 22 a2 02 37 8f 7d 9b eb ac e3 43 64 60 59 47 e6 d0 d3 4b 16 dd c5 89 ee 03 a6 a4 8b 7a 34 03 13 f7 93 ad 63 29 69 e9 dc 9b 9f 63 be 90 b7 c1 4b 21 1d 0f 51 be aa 61 f3 22 b1 0c 7d 47 b0 d0 c1 ab 82 db 6d eb a1 83 69 23 07 b4 f5 fc 74 0e 19 02 2f 70 1e da a9 61 b5 47 91 1b bd 48 56 ea 0f a6 e3 f0 d2 b3 0c aa 30 3d a0 74 fa ea 6b 78 54 ac 14 01 f4 d0 82 0c 3b 07 af 71 d5 0b 8d ff 00 cc 07 e1 a5 14 2c a7 cb 5b 33 34 ee 09 2d 2a cf 03 7a 77 28 20 8d 8f e1 b6 da ed c5 d8 f2 fd 92 ce 9e 68 e5 5c 7f 9a e2 78 c7 31 c2 d3 e2 13 f3 aa 59 a8 33 26 9d fc 25 b8 3f a8 16 c9 bc f2 ed 6e 95 d6 87 b9 fb a5 db ba 19 18 1f 5d 81 d6 3a fa b6 ec Data Ascii: #Tdr^"$oO}\e2T@,3v'H6i"7}Cd`YGKz4c)icK!Qa"}Gmi#t/paGHV0=tkxT;q,[34-*zw( h\x1Y3&%?n]:
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: da bf 60 95 01 a4 79 4d c0 9f 76 e0 2a 8d 86 ad f1 12 79 3f 85 9e ba 3d 49 97 27 82 e5 f8 4e 0f 66 cb 73 3c f5 2a 0d 2e 42 df 26 3b 43 14 35 12 00 2b 89 21 46 54 76 0c ec 85 44 7f 6e c4 87 a0 f6 5d a8 0a d4 64 f1 bf 1e c4 d4 e4 58 c7 8f 1f c7 db 2b ff 00 2b 8d a7 06 4d 1a cd b9 62 aa 84 96 9c a6 fd e8 17 e4 6d f6 e8 1b aa 2d 76 fc 59 4b 03 66 95 be 53 87 c4 e7 31 2f 69 23 c5 0a f9 a8 e5 ac 8f 15 47 69 7f 51 4a ac a4 98 e2 9d e5 2c 49 fb 8e c1 48 1d bb 6a 5f 03 4f 12 06 55 04 91 b1 eb ac da a6 b6 5f 94 9f 95 bf 0f c7 53 4a 9e ac aa 84 9f a7 43 ad b3 22 2a d8 54 84 45 18 11 c6 a3 65 8d 40 55 00 7b 05 1b 01 a9 6b 52 04 72 f7 a9 53 d7 f6 ea 55 12 29 53 dc c4 91 f4 d0 4a 55 88 8d ff 00 c4 6a c4 10 65 20 90 a3 a7 e1 a1 15 ee 41 09 b1 40 4c 00 ef a9 27 7f 4f f2 Data Ascii: `yMvy?=I'Nfs<.B&;C5+!FTvDn]dX++Mbm-vYKfS1/i#GiQJ,IHj_OU_SJC"*TEe@U{kRrSU)SJUje A@L'O
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: d1 cd 19 f5 d9 e3 60 55 88 3b 63 d2 d7 c2 39 1d cc cd 1b 74 b3 b4 eb e3 f9 87 1c 99 69 72 bc 7d 73 bc 3f 31 5e e8 ae 55 04 96 fd 35 b4 fe 6c 24 f5 1d 51 be f4 6d 63 a8 dc a8 99 78 ac 57 c8 4d 3b b3 6d 34 9f 25 7b 03 71 fb 00 3e c4 6b af 17 63 87 d9 2c ac 83 9b 78 9f 88 f3 8b cf c8 26 fe a3 c4 b9 d7 c4 b1 56 f2 57 15 b3 fd 2f 39 1a a7 54 59 a6 45 68 ae 46 a7 af c5 6a 39 14 fe 1a d5 9b ec e7 bb cf a6 6b c9 e4 e7 3c 0f 0d 7a a7 91 38 ea 79 a3 c6 96 e1 15 b3 dc 97 8f 62 56 5c 94 35 88 ed 69 33 bc 60 fc 91 db 8b de 49 68 ee 57 d4 c0 06 b8 75 f5 67 98 f5 f1 f7 ce bc 55 37 0d 83 14 70 0f 9e fe d6 f9 87 1d cb 71 ea b2 ff 00 cc f8 cb 23 7a 5b dc 52 46 6d 8b 43 4a cc 65 ed e0 a7 d8 7d a8 03 43 bf 46 85 7d 46 2d f3 fd 73 fd ff 00 3f fe 5d 24 fc f3 fe bf f8 b4 61 7c Data Ascii: `U;c9tir}s?1^U5l$QmcxWM;m4%{q>kc,x&VW/9TYEhFj9k<z8ybV\5i3`IhWugU7pq#z[RFmCJe}CF}F-s?]$a\|
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: f8 22 8c ff 00 bd a6 c8 65 ab 3f 1b e2 7c 7b 8b 25 84 e3 78 78 71 d2 dc 3d d7 6e 2f 74 d7 2c 1d f7 ee 9e d4 a5 e6 94 ef ee ce 75 9f 95 ab f1 c5 53 93 79 6b 85 f1 5c 9b e0 a6 b9 6f 91 f2 84 1d d3 71 6e 3d 59 f2 57 a2 1b ed bc e2 2f e5 c1 ff 00 d5 5d 75 33 3d 92 5b e9 44 87 c9 f9 4f f5 45 6e 45 c9 b8 16 4f 15 c5 28 d0 9a 1c 64 94 a6 8b 2d 91 a5 2c ee 0c f6 72 58 ea 41 a4 8d 4c 31 80 ad 03 4d db f7 06 0a 4e b5 3a e6 f8 94 bc 75 3c d8 bd 45 1d 6e 7f 35 0e 77 e3 4e 7d 4e ae 3f 29 4c 63 b3 19 dc 6c 51 64 92 d5 5a f2 34 b1 a4 45 9b e3 86 c4 12 3b a1 32 a3 15 0c ca 53 b8 0d ae e7 b6 6f 9f 49 9e 3d cb 5e b1 4e 6c 26 6e d4 d7 f2 74 a0 83 27 42 f5 b6 56 b3 67 17 90 69 0d 69 27 2a a8 0c 91 b4 6f 13 6c a3 f2 a9 f7 d6 7a fd af 2b fb 38 53 d3 ed d6 5a 79 cf c9 fc cb 05 Data Ascii: "e?\|{%xxq=n/t,uSyk\oqn=YW/]u3=[DOEnEO(d-,rXAL1MN:u<En5wN}N?)LclQdZ4E;2SoI=^Nl&nt'BVgii'*olz+8SZy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49940	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	709	OUT	GET /?ob=open-bridge/events HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:51 UTC	396	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 28 May 2024 05:14:50 GMT Server: Apache X-Redirect-By: WordPress Set-Cookie: pll_language=pt; expires=Wed, 28 May 2025 05:14:51 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.campobahia.com/?ob=open-bridge%2Fevents Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49944	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:50 UTC	789	OUT	GET /wp-content/uploads/elementor/thumbs/capa-hotel-copiar-2-qa1kg758tnw9wdm96xc55dwvl3hw0hl1s9289njj34.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:50 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 27 Jul 2023 18:59:53 GMT Accept-Ranges: bytes Content-Length: 271200 Content-Type: image/jpeg
2024-05-28 05:14:50 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 70 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$p"
2024-05-28 05:14:50 UTC	8000	IN	Data Raw: 22 eb 4d d4 f4 4b 79 ec 02 97 37 53 00 b3 40 a3 93 87 1c 92 31 91 cd 75 17 1a b4 f0 f8 56 0d 2b c3 d7 ea 64 7b 61 24 77 93 b6 41 4c 81 b4 f5 c1 e7 1d 3b 57 09 e3 19 7e cb e1 6b 85 3a a6 a2 2d 6f 55 3c a1 21 3b 83 06 19 19 dd d0 81 f9 1a e0 f4 2d 4b 50 f0 cc c2 47 b8 77 b5 97 0b 24 2d 21 2a e9 c1 c6 0f 1d 85 79 54 f2 7f af 50 78 84 f5 8b d2 36 76 76 f5 eb d3 b7 73 bf eb 10 a6 d4 65 d4 f4 18 b5 9d 72 2d 2d b4 eb 9d 08 9b a5 72 64 68 c2 94 b9 8c 77 3c e3 b8 c1 f7 35 d6 e9 76 b6 96 1e 09 d3 a4 84 ad da 59 a9 92 38 e3 6c cb 33 00 08 4c 93 d4 e3 1c 9e f5 8f e2 3d 62 f2 1f 06 4c d6 57 50 da 45 3c 5e 65 b4 d0 b9 f3 22 46 19 f2 f0 31 c7 23 bf 6e 95 e6 50 f8 b2 3d 12 d6 41 a2 99 37 c8 bf b8 86 43 f2 46 e3 fe 5a 27 a3 72 39 1c f0 2b 2a 19 7c f1 d1 bc 17 2b 52 d9 5f Data Ascii: "MKy7S@1uV+d{a$wAL;W~k:-oU<!;-KPGw$-!yTPx6vvser--rdhw<5vY8l3L=bLWPE<^e"F1#nP=A7CFZ'r9+\|+R_
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: ac 80 8c f1 92 38 cf f0 d7 95 ea 96 97 1a 17 88 1b 43 d4 6e 25 b5 8d a4 c8 77 6c fc a7 9d c0 73 8c f4 ae 0c 36 6b 5b 1f 52 50 8d 48 f2 c5 37 a2 dd 77 df a7 96 e8 ea 95 35 04 ae ae 7b 27 84 fc 18 1a c1 75 6d 23 5c 92 59 d7 31 cd 08 23 62 73 cf 3e b9 18 cd 63 f8 e7 c4 3a 4e a9 e1 88 f4 9d 56 19 ed ef ed a5 6d a9 bb e6 90 71 89 0f 1c 8e 3f 1a a9 e1 0f 88 16 5f 0f b4 5b ad 3d ed af 2f 4b 3b 49 0b a0 de ac 9b 8f de 2a 38 ea 3a e2 a0 f8 93 7f e1 5f 13 68 b6 1a ce 9a d1 c1 73 1c 38 96 16 62 1c 0c 0c 00 0f 50 39 af 12 86 02 a4 b1 8a a5 6b b8 f3 7b b2 4a de 9b 6e b5 b5 ad a1 db 39 27 46 d1 b5 fa 9e 73 77 a7 98 ac 63 36 97 2f 70 cd 26 e2 84 e3 69 e3 90 2b a1 b7 f0 f4 c3 40 fe d2 96 68 d0 9e 52 16 23 12 10 70 47 b1 ea 7f 0a e6 2d 27 7b 42 82 f6 09 53 cc 1b 91 48 20 Data Ascii: 8Cn%wls6k[RPH7w5{'um#\Y1#bs>c:NVmq?_[=/K;I*8:_hs8bP9k{Jn9'Fswc6/p&i+@hR#pG-'{BSH
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: fa d4 d4 d6 fc 45 a5 8f 11 de cd 0d bb 2e 9a c8 8a 16 5f de bb 38 0b c8 66 24 e3 23 d6 b3 6f fc 4f 7f aa c2 a9 1c b2 4a 82 6c 9f 34 f0 a8 32 02 81 d3 18 c7 e5 58 7a 8b b1 43 04 ac 08 84 00 ac 0f 1f 4a a2 97 b2 c8 a9 14 6e ca 15 41 61 9e 2b e9 28 60 29 a8 45 da f6 b6 fa ec 70 ce 72 96 ac da 9e de 59 e2 fb 10 e5 f7 84 50 0f 20 1e 39 3d 71 5d 15 8f c3 db 1b 5d 1a f6 f3 56 82 f9 ee 78 8e d1 60 03 6b c8 70 17 9c 8f e2 20 1a e3 c5 c4 b2 bc 8d 2c 98 f3 17 6e e0 79 1e f9 ae fd be 21 cd e2 ef ec 3b 18 af a6 d2 e5 b0 65 52 12 42 22 76 cf 0e c0 63 db f2 ae 7c ce 58 a8 46 2a 8e 91 fb 4f b5 b5 fc 76 65 50 84 25 ac 8e 2a e5 35 bf 0f 34 ba 5d e4 57 36 6f b9 5d e0 dd c6 48 04 1c 83 e8 45 4f e1 57 8a 6f 12 c6 da 94 e0 07 93 73 16 19 05 fb 67 db ae 6b d5 bc 4f a6 6a 3f 10 Data Ascii: E._8f$#oOJl42XzCJnAa+(`)EprYP 9=q]]Vx`kp ,ny!;eRB"vc\|XFOveP%54]W6o]HEOWosgkOj?
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 80 c1 1c d3 b0 de 50 e4 70 30 71 8d c7 bd 73 36 fe 3d 6d 16 c1 d2 03 2d cb cb b9 c8 9d f2 a8 49 e9 ce 73 5e bd 2a d8 ea f2 e7 e4 4a 5b 6d af 7e fd 3f 13 82 a4 68 43 45 26 6c c9 e1 7d 2a e6 09 24 b1 d5 1e 1f 2a 35 6b 8b 79 c7 ce ce 07 2a 08 cf 7c f1 9c 54 1e 22 f8 7d 65 77 af 15 d3 6e ed e1 82 f0 f0 71 b0 06 cf 24 00 30 01 c8 fc ba 57 23 61 e2 d9 05 c4 b7 6e 91 85 63 96 4e 85 8d 75 1e 13 9e 5f 15 45 26 8f 78 a5 2e 34 d4 fb 45 b5 c1 5c 96 18 3f 23 0f f8 07 5c f7 ae 1c 5b c6 60 d3 9f 3d a3 d7 ca fe 5e 4e c6 b4 94 27 65 62 4d 53 e0 de a1 6d 73 6f 71 a3 ea 56 b3 db f9 67 7c cc cd 84 61 9c 8e 9e 98 fc eb 9a bb d0 ad 6c 8a c1 ab dd 43 26 f6 38 92 dc 93 83 93 d7 81 5e 91 67 a9 cd a5 e8 f3 b5 c5 e6 99 15 fc 4f be 2b 58 08 11 81 c0 21 87 72 57 3d bb 8a e3 ae ac b4 Data Ascii: Pp0qs6=m-Is^J[m~?hCE&l}$5ky\|T"}ewnq$0W#ancNu_E&x.4E\?#\[`=^N'ebMSmsoqVg\|alC&8^gO+X!rW=
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: e9 f3 2f ee ef e2 0a c2 53 cf ca e1 47 07 a7 61 d4 57 d6 70 a6 32 10 ff 00 66 52 5c bd b5 4e fd 75 7a 3f 35 d3 a1 8e 3e 8b b7 b4 49 fe 87 30 74 88 12 25 68 e4 53 81 92 a3 ef 0c fa 8a ea 3e 1b 5d 69 31 6a 97 7a 66 b5 aa 0d 3f 4e b9 87 12 33 10 a2 56 04 60 6e 3c 0e a6 b1 ae ae e1 ba 89 1d 22 45 62 09 0c a7 04 8c d6 77 90 93 22 48 d9 55 dd b8 92 38 23 d6 be bf 31 c1 c3 13 46 54 66 ec 9f 5e be a7 05 2a be cd a9 1e c0 bf 18 fc 37 3c 37 0b 7b 6b 3c d8 5f 2e 3b 50 09 42 17 38 39 03 93 cd 71 de 2d f8 93 1e a5 a5 cb a3 69 6c 2e b4 cb f4 56 91 25 e2 5b 77 56 ce df a7 ca a7 a7 7a e2 b5 97 48 2e d2 4b 53 19 8d b9 ca f3 cd 62 9b a0 27 21 79 62 c3 ee f7 f7 af 9b c3 70 e6 0a 84 94 e9 26 ed dd dd 1b 56 cc a7 52 36 d2 c5 cb d4 86 df 0c f9 cb 01 9d c7 05 b8 e3 fc 2b 22 52 Data Ascii: /SGaWp2fR\Nuz?5>I0t%hS>]i1jzf?N3V`n<"Ebw"HU8#1FTf^*7<7{k<_.;PB89q-il.V%[wVzH.KSb'!ybp&VR6+"R
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 3e 52 48 76 13 8c f1 f8 f3 5a b2 78 a2 68 2e 67 db f6 70 ec 76 23 cb ce 14 1c 01 8c 1e 80 60 57 18 97 3f 6a bc 82 de 37 db 0a 9c 93 9c 28 03 ae 6b a4 f0 fe 8f 61 af 5f de b6 8f 1c 77 12 db a0 79 04 87 fd 69 18 05 50 73 dc f5 f6 ae 4c 5d 0a 54 db a9 5b 55 f9 6b d5 95 4e 72 9c 6c 91 ea 56 fa 86 e8 74 6b a7 b6 69 3c c5 68 de 66 3b b7 44 76 ee 2c 7a fa 57 05 a7 f8 5f 4f b9 bb d5 0d a7 9b 63 2d be 12 39 89 c8 dc 73 9c 8c e0 8e 9c f5 aa da 2f c4 2b ad 02 e6 6b 76 8e 46 2e 5a 36 b4 95 f6 ac 5c f4 ef fc bb 56 17 88 fc 43 6c 63 16 9a 7c ef 1a 40 e1 8a 77 60 0e 4f cd ff 00 d6 af 9d c3 65 78 aa 75 25 4e 1a 29 75 f9 df 55 f3 b7 6d 4e 87 5a 3b fd e7 70 35 8d 7b 42 d4 f4 e1 aa dd 30 68 8b 08 a6 c0 3f 29 43 81 fa f7 f5 ae ef 53 d5 e0 bd d0 d4 b4 a1 6e 9c 2e 6e 00 04 16 Data Ascii: >RHvZxh.gpv#`W?j7(ka_wyiPsL]T[UkNrlVtki<hf;Dv,zW_Oc-9s/+kvF.Z6\VClc\|@w`Oexu%N)uUmNZ;p5{B0h?)CSn.n
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: c0 3e 58 fc a1 7f c8 35 a1 6f 69 74 82 e2 3b b9 a5 82 e1 71 fb a1 1e 77 03 9c e4 64 7a 7e b5 da 68 ff 00 0e fc 49 71 79 e4 5a bc 52 cb 10 05 61 70 55 a5 8c ff 00 16 79 c0 eb d8 f4 ae da d8 ca 18 64 dd 59 25 eb f2 30 8a a9 51 b5 08 dc f3 3d 42 ff 00 ec f1 ba 4d 6a c6 e5 5f 05 d8 71 4d 4b 94 bf 99 21 5b 26 8e 3d 9c ba f0 73 c7 3f ce bb 89 3c 0b e2 5d 67 c4 ad a2 5b 5a bd b4 8e 8c cd 0d d9 24 0c 02 72 bc 73 9c 7a 0e b5 47 59 f0 e6 b3 e0 fb 43 0e b7 61 2d bc 25 cc 71 48 d9 c4 84 67 ee e4 74 e0 d6 94 f3 0c 2d 49 aa 70 9a 72 6a f6 bf 7e c6 b1 c3 ca 30 e6 51 16 d2 cd f4 eb 58 6c ae 21 c4 17 2c 18 ec 3f 79 3e bd 7b d5 3d 77 47 33 47 35 f4 31 14 cb 85 58 f3 c6 38 ff 00 1a af a6 6a 0f 29 24 4b 2f 95 07 25 73 ce 3d bf 2a b5 2d dd cc 90 35 cb 41 1b c7 9e 62 2d f9 36 Data Ascii: >X5oit;qwdz~hIqyZRapUydY%0Q=BMj_qMK![&=s?<]g[Z$rszGYCa-%qHgt-Iprj~0QXl!,?y>{=wG3G51X8j)$K/%s=*-5Ab-6
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 4f 74 cc 41 b6 94 3f c3 ee 6b a9 b4 29 56 4f 44 ca 4b 37 93 20 69 14 73 ce 0f 6a d2 b1 69 18 4a 54 11 9e fe d5 94 d6 f3 dd 4a 40 52 aa 08 c9 6e f5 ad 25 cf 97 12 81 1e d5 03 1b 87 63 51 53 6b 05 46 9a 51 4c 64 33 a5 b4 ec 5c 7c b2 70 0b 75 53 fe 7f 9d 68 32 1f b3 f9 a1 63 07 19 00 56 3c e5 98 09 02 97 20 fa 56 a5 9d e4 53 c0 e1 c1 8a 54 c6 14 f3 bc 56 73 5d 4a 85 92 1d 6b 33 b6 52 44 fb ff 00 c5 9a 75 e6 a8 b1 5d c7 6d 6e b1 cd b2 3c b3 0e 71 9c f0 71 de 92 fe e6 3f ec d1 e5 2b 1b 96 c2 ae 07 0a 2b 1e e9 cd 9c 51 ba 05 56 2d b9 9c f5 cf 1c 54 46 2a 5b a3 45 3d 6c 5c 59 8a 06 51 16 4b 72 41 ab 53 43 71 3c 48 62 6f 92 15 c9 2d f7 b1 e9 58 92 5d cf 74 4c df 30 61 8f 99 47 18 ab 50 ea 17 0b 22 96 7f 91 40 20 91 c6 7d eb 49 41 ee 4b 7d 49 d2 54 8d a4 f3 14 a1 Data Ascii: OtA?k)VODK7 isjiJTJ@Rn%cQSkFQLd3\\|puSh2cV< VSTVs]Jk3RDu]mn<qq?++QV-TF*[E=l\YQKrASCq<Hbo-X]tL0aGP"@ }IAK}IT
2024-05-28 05:14:51 UTC	8000	IN	Data Raw: 66 1c b0 cf 6f cc 57 ad f8 70 58 a6 87 6d a5 6a ba 75 a2 c9 0c 7c ac 8d 86 2c 30 37 75 eb ed 5c cf 85 6e ac fc 1a d2 59 bd 9c f6 8d 72 8b f6 94 24 3b 01 80 72 ac 09 c6 48 1d fb d6 e2 5e e8 5e 21 d5 2d 5a 5b f6 b5 9a 56 30 c5 19 46 51 c1 01 79 23 1c 8e b9 35 f1 d9 b5 5a 98 99 b8 f2 be 4d d3 5b fe 0f d4 f5 70 90 83 6a db b3 a6 83 45 d1 bc 55 72 f3 49 a4 c3 64 9b 14 4c 22 3c c8 a8 49 2b b4 e4 8c 83 8c d7 9c 6a 9f 0e 6d b5 8b 8d 47 52 d0 b5 68 23 b7 85 cc 8d 14 f8 1e 5a 28 00 81 92 39 c8 3c 57 a9 78 76 d0 5c 6a 7a 84 6d 67 25 b5 db 4a 7f d3 4b 1d b2 85 e7 0a b9 da 07 3e 83 ad 56 f1 6e 8b aa e8 da 56 ac ba 56 95 6f 35 bc b1 6e 82 25 fb ce 78 dc 49 cf d4 e3 3d ab e6 f0 79 95 6c 2d 7e 4a 73 6a f6 49 37 a5 9e fb de fe 5a f4 7b 1d 55 70 f0 94 6e d7 fc 39 f3 bb 5d Data Ascii: foWpXmju\|,07u\nYr$;rH^^!-Z[V0FQy#5ZM[pjEUrIdL"<I+jmGRh#Z(9<Wxv\jzmg%JK>VnVVo5n%xI=yl-~JsjI7Z{Upn9]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	62517	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:51 UTC	975	OUT	GET /wp-content/uploads/2021/06/favicon.png HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/en/home-en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; pll_language=en; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0
2024-05-28 05:14:52 UTC	232	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:52 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Sep 2021 14:49:37 GMT Accept-Ranges: bytes Content-Length: 9191 Content-Type: image/png
2024-05-28 05:14:52 UTC	7960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 65 00 00 00 64 08 06 00 00 00 9f 20 fe 6a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRed jtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-28 05:14:52 UTC	1231	IN	Data Raw: 0e 6e c3 b5 cc 2f 0d 1d 54 de b6 0c 0e 49 29 ba bd 0c 97 53 9a 44 bc 98 d8 19 c7 0d 57 14 85 51 52 0a bb db 84 b6 93 84 95 2b 54 ee 7b 02 24 d9 b1 78 cd 58 0c 21 94 76 1a af ab 83 82 75 9f 0b 02 4f af 84 70 be 52 a0 28 53 64 76 50 f6 a6 37 1a a0 bc 48 4e eb 28 ae ff 5c b0 45 75 54 08 ae db 80 6a 3b 07 08 46 c3 bf 7f 10 3b 7b 08 ee aa 57 98 09 3f 8e 9c 62 7e a4 73 79 18 e7 9a 89 ac a3 f8 d3 54 d1 a3 28 6a a9 f2 be 73 c4 53 84 ae 63 2a fe 8f f9 cc 43 21 3d 45 0d 72 8b b1 3a 16 6c 67 43 f9 4d ae a3 a0 af a3 a2 5a 5d 22 42 43 24 58 7c bb 72 ff e9 f1 60 da 1c 64 b6 0a 7f ab da 8a 58 ba 0e 37 8d e1 f5 16 13 3e f5 fc 4c 0d 0f e8 31 13 f9 74 a0 50 c8 e7 40 df 7f 09 82 31 0e 25 ad 0a a5 a3 a1 fe 7a 9d 0e 45 7f 17 b1 be 32 f1 74 0c 9d b9 03 a5 b0 52 85 b6 d0 40 b6 Data Ascii: n/TI)SDWQR+T{$xX!vuOpR(SdvP7HN(\EuTj;F;{W?b~syT(jsSc*C!=Er:lgCMZ]"BC$X\|r`dX7>L1tP@1%zE2tR@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	62521	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:54 UTC	711	OUT	GET /?ob=open-bridge%2Fevents HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:14:54 UTC	420	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:54 GMT Server: Apache Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/", <https://www.campobahia.com/wp-json/wp/v2/pages/85>; rel="alternate"; type="application/json", <https://www.campobahia.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-28 05:14:54 UTC	7772	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3a 61 64 64 74 68 69 73 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 68 65 6c 70 2f 61 70 69 2d 73 70 65 63 22 20 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 61 68 42 79 7a 64 71 6f 4f 4f 47 43 5a 6a 48 6d 47 76 73 4f 6a 4c 69 7a 56 4d 36 70 65 32 72 56 51 72 51 61 48 41 6c 66 30 77 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" ><head><meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" /><meta c
2024-05-28 05:14:54 UTC	8618	IN	Data Raw: 74 49 74 65 6d 28 0a 09 09 09 09 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 4b 65 79 2c 0a 09 09 09 09 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 20 69 74 65 6d 20 29 0a 09 09 09 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 7d 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 68 65 63 6b 73 20 69 66 20 74 77 6f 20 73 65 74 73 20 6f 66 20 45 6d 6f 6a 69 20 63 68 61 72 61 63 74 65 72 73 20 72 65 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 76 69 73 75 61 6c 6c 79 2e 0a 09 20 2a 0a 09 20 2a 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 73 65 72 69 61 6c 69 7a 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 61 20 57 6f 72 6b 65 72 2e 20 54 68 65 72 65 66 6f 72 65 2c 20 69 74 20 63 61 6e 6e 6f 74 20 72 65 66 65 72 20 74 6f 20 76 61 72 69 61 Data Ascii: tItem(sessionStorageKey,JSON.stringify( item ));} catch ( e ) {}}/** * Checks if two sets of Emoji characters render the same visually. * * This function may be serialized to run in a Worker. Therefore, it cannot refer to varia
2024-05-28 05:14:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:54 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 6f 72 64 69 6e 67 6c 79 2e 0a 09 09 09 20 2a 2f 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 74 65 73 74 20 69 6e 20 73 75 70 70 6f 72 74 54 65 73 74 73 20 29 20 7b 0a 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 20 3d 20 73 75 70 70 6f 72 74 54 65 73 74 73 5b 20 74 65 73 74 20 5d 3b 0a 0a 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 3d 0a 09 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 26 26 20 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 3b 0a 0a 09 09 09 09 69 66 20 28 20 27 66 6c 61 67 27 20 21 3d 3d 20 74 65 73 74 20 29 20 7b 0a 09 09 09 09 09 73 65 74 74 69 Data Ascii: 4000ordingly. */for ( var test in supportTests ) {settings.supports[ test ] = supportTests[ test ];settings.supports.everything =settings.supports.everything && settings.supports[ test ];if ( 'flag' !== test ) {setti
2024-05-28 05:14:54 UTC	8198	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 Data Ascii: kground-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--w
2024-05-28 05:14:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:54 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 31 70 78 20 31 70 78 20 31 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 20 75 6c 5b 69 64 5e 3d 22 6e 76 2d 70 72 69 6d 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 22 5d 20 6c 69 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6d 65 6e 75 20 6c 69 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 Data Ascii: 4000olor: #ffffff;border-radius:0px 0px 0px 0px;border:none;border-width:1px 1px 1px 1px; font-size: 14px; line-height: 1.6em; } .button.button-primary:hover, ul[id^="nv-primary-navigation"] li.button.button-primary > a:hover, .menu li.button.button-pri
2024-05-28 05:14:54 UTC	8198	IN	Data Raw: 20 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 6c 69 20 3e 20 61 20 73 76 67 7b 20 77 69 64 74 68 3a 20 31 65 6d 3b 68 65 69 67 68 74 3a 20 31 65 6d 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 7b 20 70 61 64 64 69 6e 67 3a 30 65 6d 20 30 65 6d 20 33 65 6d 20 30 65 6d 3b 6d 61 72 67 69 6e 3a 30 65 6d 20 30 65 6d 20 30 65 6d 20 30 65 6d 3b 20 7d 20 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 20 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 2c 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 20 Data Ascii: uppercase; } .builder-item--secondary-menu .nav-ul li > a svg{ width: 1em;height: 1em; } .builder-item--secondary-menu{ padding:0em 0em 3em 0em;margin:0em 0em 0em 0em; } .footer-top-inner{ background-color: #ffffff; } .footer-top-inner,.footer-top-inner
2024-05-28 05:14:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:14:54 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 70 78 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6e 61 76 2d 69 63 6f 6e 7b 20 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 3e 20 6c 69 3a 6e 6f 74 28 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 29 7b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 73 74 79 6c 65 2d 66 75 6c 6c 2d 68 65 69 67 68 74 20 2e 6e 61 76 2d 75 6c 20 6c 69 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 69 74 65 6d 2d 6e 61 76 2d 73 65 61 72 63 68 29 3a 6e 6f 74 28 2e 6d 65 6e 75 2d Data Ascii: 4000px 15px 10px 15px; } .builder-item--nav-icon{ margin:0px 0px 0px 0px; } .builder-item--primary-menu .nav-ul > li:not(:last-of-type){ margin-right:20px; } .builder-item--primary-menu .style-full-height .nav-ul li:not(.menu-item-nav-search):not(.menu-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	62522	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:54 UTC	775	OUT	GET /wp-content/uploads/elementor/thumbs/capa-qa1jcrsz0yv4boioygr3hwtzhqjx6qvbdgxpl9ga6k.jpeg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:14:54 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:14:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 27 Jul 2023 18:36:27 GMT Accept-Ranges: bytes Content-Length: 174543 Content-Type: image/jpeg
2024-05-28 05:14:54 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 ae 04 47 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$G"
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 47 51 eb 4c 77 23 18 ca c6 14 f2 32 3d fe b4 d6 88 15 21 46 0f 5f c6 a4 75 29 2e 77 01 ef eb 44 8c 15 4b e4 a9 27 a6 28 b8 5c 00 e0 6e 24 71 f7 73 d3 de 93 e4 27 62 28 5d a7 82 4f 5f 7a 71 8c e3 cc f9 b2 d8 cb 7f 4a 64 8b 9c a8 c6 57 83 c7 38 e0 ff 00 5a 40 3f 04 46 a0 70 ed d7 69 f4 a6 86 de a0 f0 73 9c d3 d6 05 dc 5a 32 ca e0 0c 92 73 f5 14 cc 6c 6c 48 54 1e fe b8 aa b6 80 22 c7 97 60 11 8a 30 23 9a 5c 0d 99 0a de 60 3b 5b 9a 91 72 5c 60 e0 64 0c 66 95 3f 79 86 f3 0a 03 91 ba a4 63 42 1d 9b f9 07 38 03 b6 7d 68 31 86 60 4e dc af 43 d8 d3 9d 8b 8c 6e 27 1c 0e 3a 50 cc 37 91 93 c0 18 3e 94 ef a5 84 34 89 37 22 f5 23 8c 74 14 d9 62 2c d8 da 08 18 1c 75 a9 19 9d 8e 77 67 6e 3b 75 a5 45 04 a9 21 90 8e 09 06 92 02 02 92 2a e4 e0 ee f9 42 0e 31 52 a0 c3 65 c6 Data Ascii: GQLw#2=!F_u).wDK'(\n$qs'b(]O_zqJdW8Z@?FpisZ2sllHT"`0#\`;[r\`df?ycB8}h1`NCn':P7>47"#tb,uwgn;uE!*B1Re
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: ae 07 6a 4f 98 49 84 19 4c f0 0f 51 f5 a9 d2 61 1b 6d 55 18 22 a3 77 f9 89 5f a9 04 fe 75 49 8d 30 f2 78 0a 02 60 f3 bb 3d 4d 20 84 ff 00 11 c9 c6 48 14 26 e0 30 79 1d f1 d6 9e 10 00 13 ef 38 1f c2 70 28 f3 40 46 c0 32 a8 39 ca e3 9a 71 25 7a a9 42 4e 46 7f 88 7a 54 bc 91 9d a4 a9 e3 38 ef 4d d8 e4 ed c6 46 49 1e b4 5c 08 c0 e8 01 20 b7 af 6a 90 46 c1 76 87 da 4f dd c0 a6 93 b5 c1 65 59 07 72 0f 43 e9 52 80 ce ad b4 a8 c9 ea 7b 62 95 86 33 60 24 be 32 cd c1 23 d2 90 be e7 fd d0 2d 83 c9 3d e9 72 41 c0 c9 03 8c 0e ff 00 4a 99 4a a8 5d bf 78 f4 3d a8 b8 98 d4 21 ce d5 93 6b 37 19 1c 8c ff 00 4a 70 03 6e 19 76 af e7 cd 30 66 30 f9 c0 e4 1f 94 52 b0 60 1d 72 09 07 70 cf 1c 7a 50 21 58 f9 a1 78 29 db 3d 73 46 42 0d bb c1 ed ed f8 d2 e2 36 55 39 60 e3 a7 a5 26 Data Ascii: jOILQamU"w_uI0x`=M H&0y8p(@F29q%zBNFzT8MFI\ jFvOeYrCR{b3`$2#-=rAJJ]x=!k7Jpnv0f0R`rpzP!Xx)=sFB6U9`&
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 3c 1f 5a 7a a1 18 24 92 b9 e0 50 f9 0e db 54 f2 71 93 c0 23 b5 03 2b ae 37 3a a6 7e 5c 12 a0 f2 3f 1a 6f c8 ec 70 b8 27 91 9e 84 7a 66 ad 79 43 27 08 17 23 0c 47 73 e9 50 10 78 57 18 45 3c 11 eb 40 15 c8 ee 98 18 38 2a 78 e7 d6 a2 58 70 76 9c e0 9e 83 bd 58 94 6e da 33 9f 4f af bd 2b 85 7c 94 62 ca 40 19 c7 7a 68 08 1f 01 08 38 e7 b1 ec 29 8c 99 ca a6 1f a1 c7 f4 ab 1b f0 8a cc 17 e6 e0 fb d4 64 18 ce 57 90 47 27 da 98 58 15 02 90 ee c1 38 c7 b5 39 a3 0e 7e ee 59 78 50 3d 0d 35 46 43 10 31 9f 6e 82 95 7c c2 a0 f0 ca 3d 0f e7 49 88 79 8d 50 63 1c 74 20 73 cf ad 34 a2 64 af 50 1b 23 3c 75 fe 74 e5 6c 0c aa e7 1c 01 df f1 a6 82 ae df bd c1 64 e5 45 09 5c 10 f2 15 50 86 5c 15 18 1d bf 0a 6c 91 31 40 c8 55 40 3d 09 a0 36 00 12 28 27 19 ce 68 40 53 03 72 80 79 Data Ascii: <Zz$PTq#+7:~\?op'zfyC'#GsPxWE<@8*xXpvXn3O+\|b@zh8)dWG'X89~YxP=5FC1n\|=IyPct s4dP#<utldE\P\l1@U@=6('h@Sry
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 1e a2 a0 0e 98 62 09 52 71 cd 29 72 5b 6e ee a3 90 0f 26 8e 51 13 03 85 ce d5 00 76 03 a9 f7 a4 fd d6 e5 76 0f bd bd fa 1f 5a 85 9d 43 e5 18 83 82 31 4f 8e 41 24 65 10 0d a7 b0 3d e8 b5 80 79 db b5 36 37 0d fc 27 9c 52 84 72 a7 76 58 21 e1 7d fb d3 03 90 c4 00 37 91 f2 ff 00 80 a7 b7 21 81 04 e0 73 ef 48 06 a8 45 45 24 ae ec f3 e8 69 5f e7 5d cd b0 80 73 91 eb 4d 49 79 04 90 1f 03 0b e8 29 cf 21 dc 72 4a a9 07 27 1d fe 95 40 47 bb 6b 89 00 eb 90 07 a9 a7 b6 e1 22 36 0e 71 c8 cf f2 a8 c4 69 b8 30 39 c7 24 8e e6 a5 ca 02 59 c3 67 38 c3 0e 5a 93 43 45 98 26 62 cc bb 40 2a 3b d5 a4 52 48 72 4b 10 3e e8 ed 54 a1 7d a4 86 93 76 7a 54 de 76 4a 04 6d bc 03 b8 f7 ac 9a 02 66 60 40 5f 2f 3b 78 e7 bd 0c fb 88 c0 20 03 8f 63 4c 2e b2 af 0c 17 07 18 cf 6a 18 a9 2c 10 Data Ascii: bRq)r[n&QvvZC1OA$e=y67'RrvX!}7!sHEE$i_]sMIy)!rJ'@Gk"6qi09$Yg8ZCE&b@*;RHrK>T}vzTvJmf`@_/;x cL.j,
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 71 40 a1 b1 96 27 f0 c5 3c 9e 56 35 3c 37 f1 7a 50 c8 fb 39 c1 dd 8c e2 9a 00 de db f7 64 67 df a1 f7 a6 aa 05 27 0b 90 bf 74 1e d4 e5 c6 06 5b 71 c6 09 f6 a5 70 db f6 ae 02 fa 67 83 40 09 bd 1c 6d 0b 86 27 93 e9 51 81 d4 26 0c 99 c9 e3 b5 49 80 cc 54 27 cc a7 9a 66 30 ec a0 ee 52 73 c1 c1 14 00 aa ca 17 a6 d2 33 8a 45 59 58 65 ce 33 d4 9f 4a 73 2e 3e 6d dc 8e 83 19 a3 85 54 61 f3 af 70 c7 8a 40 29 50 a8 55 5b 72 27 dd cf ad 1b c6 dc 81 80 06 09 3d 4f d6 90 c7 95 04 61 c9 3f 82 d3 b7 23 ef 20 0c e7 fb bd 4d 02 18 09 94 8c 9c 2e 38 c5 38 ee 6e 0e d1 fd e0 3b 62 9a cb f2 86 79 0b 02 31 c0 c6 28 dc 55 77 34 98 5f 51 df da 81 8e c0 21 91 dc 9e f8 ee bf 4a 4f 28 ba 61 1b 68 1d 0f 72 3b e4 d2 f5 52 15 72 0f 3b bf 8b 3e 9f 4a 66 19 b9 65 ce 07 04 1e 94 01 26 d0 Data Ascii: q@'<V5<7zP9dg't[qpg@m'Q&IT'f0Rs3EYXe3Js.>mTap@)PU[r'=Oa?# M.88n;by1(Uw4_Q!JO(ahr;Rr;>Jfe&
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: ae 22 21 b4 29 42 59 b1 d7 b6 68 8d 80 2d 86 39 3d 7d e9 59 77 63 6a 9d e0 70 c7 a7 e5 49 b5 53 38 ce d3 cf 34 c6 29 e3 69 56 e0 9e 8c 29 14 12 31 f7 4e 78 1d 73 4e 0a 41 1f 30 c7 5e 7f 95 22 e4 39 66 c9 fe ea 83 d0 fb d0 21 1f 72 73 b0 02 38 e3 fa d3 86 e6 38 45 00 71 92 4f 4a 3c c0 37 ee 4c 12 73 9e c6 9c b9 6e 01 03 db 14 00 2f 4c ed 18 1d 41 ee 69 50 06 56 50 bb 43 71 c5 22 9c ab 1f bd 9e 98 e3 f0 a5 62 55 36 a8 0a b9 ce 4f 24 52 00 ce 22 c2 9d f9 f9 79 ed 48 a0 92 09 dc c4 f4 ed 41 03 9c 1c 03 c7 1e b4 82 37 d9 22 b6 49 ce 43 0f 4a 00 71 ce 08 20 0d bc f2 73 8a 66 14 39 6d db 9b 1c 71 da 91 98 fd ed a3 04 75 1d e9 e4 b6 0b 39 03 18 c0 03 ad 30 23 94 2a 80 c7 ae 72 30 7a 9a 52 db c0 2c 59 78 e9 d4 e6 82 52 3c 33 29 52 7d 79 cf f8 51 09 de 01 c8 20 f2 Data Ascii: "!)BYh-9=}YwcjpIS84)iV)1NxsNA0^"9f!rs88EqOJ<7Lsn/LAiPVPCq"bU6O$R"yHA7"ICJq sf9mqu90#*r0zR,YxR<3)R}yQ
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 86 05 77 90 33 91 9a 63 ae e0 01 04 2b 7a 7a d2 14 da 1b 27 a0 e8 3b 55 00 a1 9a 25 23 68 63 9e 71 da 82 17 6a ed 38 05 b1 f4 a5 20 b8 20 b1 e4 e7 04 74 f5 a4 01 56 50 0f 7e 47 a0 a0 40 00 57 64 c1 1f ed 7a d0 54 31 04 3e 70 38 cd 38 12 18 a8 e5 71 d7 1f ce 98 fb 03 87 c8 c2 8c 71 de 80 4c 49 49 04 03 8d a1 b2 3d 69 d9 0a 70 39 5e a4 e7 91 48 76 60 9c 93 93 d5 b8 a7 21 0b ef 9f 4a 62 1b b7 76 e2 08 c6 3e f0 3f a5 2a 96 55 40 cc 39 18 5f 53 4d 18 8c fc fc 67 a0 1c d0 db 58 e4 77 ce 32 3a 50 31 ca 08 27 39 25 7d 3d 29 e8 46 d2 e5 4a 9c f0 33 c9 a6 01 bc 82 72 a8 a3 ae 7a 9a 64 aa cc 7b e7 bf a6 3d a9 21 92 ee 0b 81 82 a5 ce 48 1e 82 95 f2 41 61 92 a0 f2 0f 1f 4a 89 4b 05 21 41 27 a1 06 9c 32 0a 86 63 90 0e 28 48 4d 08 54 1f 95 4b 00 7f 8a 99 b8 fc ea c4 37 Data Ascii: w3c+zz';U%#hcqj8 tVP~G@WdzT1>p88qqLII=ip9^Hv`!Jbv>?*U@9_SMgXw2:P1'9%}=)FJ3rzd{=!HAaJK!A'2c(HMTK7
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: ad e5 a9 01 42 03 ce 49 3d e9 4e 54 30 00 e3 38 c8 ed 53 84 72 fe 62 ae 4e 31 cf 41 4c d8 c8 48 1d 4f 24 d0 4b 22 63 f2 b6 41 2a 3f 8a 9a 5c b3 75 fc 1f ae 29 e5 36 92 58 03 c7 40 33 48 40 fb e5 0b 11 d2 a9 0d 0d c8 19 6c 36 31 c6 d1 de a3 04 15 e0 6e 27 f8 49 e6 9c 70 84 9c 8f ab 1e 33 ef 49 8c 8d e0 e4 74 07 b8 aa 04 22 aa fd e2 bd 3f bb fc 34 60 b2 e6 42 08 eb 93 dc 52 e0 0c b0 3b 4e 33 8f eb 4e 62 59 77 64 ed c6 78 eb 9a 2e 2d 08 c1 1f 2e fe 84 90 3d 71 4e 2b 20 18 1b 17 d5 45 0d 90 37 6d ce 07 07 3d e9 b8 58 ce 58 90 a3 9c 77 39 a6 03 be ea 85 c6 7b b2 d4 6c 48 cb 72 a3 b8 ff 00 0a 97 1b 58 9e b8 e8 4d 30 a1 e0 c8 bf 7b b0 a0 2c 37 96 40 a7 6e 00 de 0f b5 23 2e 4e 40 0c 48 e4 35 3b 80 54 37 09 83 f3 76 a4 c8 63 b8 9c 29 3c 1a 63 43 15 82 9c ab 96 cf Data Ascii: BI=NT08SrbN1ALHO$K"cA*?\u)6X@3H@l61n'Ip3It"?4`BR;N3NbYwdx.-.=qN+ E7m=XXw9{lHrXM0{,7@n#.N@H5;T7vc)<cC
2024-05-28 05:14:54 UTC	8000	IN	Data Raw: 6a 36 93 83 92 0b 74 39 e4 7b 50 21 ab 14 64 6e 00 e4 77 0d d6 94 29 c1 27 fd 5e 38 1e 82 8c 15 7d cc 9b d4 f4 3e 94 31 00 96 6f de 28 3f 90 f4 a0 60 42 aa 9f 93 3d ce 4f 6a 70 2c 4a 96 03 83 dc 62 98 cb 96 2c d9 2b 9c e0 fa 52 93 bc 16 2c 7a 64 0a 62 15 fe 4c 31 5d c0 9e fe b4 67 24 6c 20 64 61 80 ed 4d 3c 83 d3 07 d7 af e1 4a 49 43 ed c7 27 f9 50 2b 8a cf 80 48 f9 88 00 15 1c 81 ef 41 39 c1 18 c1 ef e9 4d 00 80 fb 41 1b 86 0b 52 64 00 bb 06 48 14 00 e7 60 c5 76 82 c0 8e 5b e9 44 87 e6 66 e9 b3 d7 d2 9a d8 73 cb 73 dc 50 5b 68 f9 94 37 1d 3a d0 17 1a 58 71 f2 9e 48 e4 f7 f7 a4 69 14 60 29 f9 94 f4 34 16 7e 09 da cc 46 e0 3d 29 38 6c 16 01 9b a0 26 80 b8 f6 20 2e e2 a7 0d 8e 9d e8 52 a5 97 f8 b6 e7 39 ed 9a 77 9a 23 38 39 c1 e3 1d aa 3c b2 63 70 e3 20 83 Data Ascii: j6t9{P!dnw)'^8}>1o(?`B=Ojp,Jb,+R,zdbL1]g$l daM<JIC'P+HA9MARdH`v[DfssP[h7:XqHi`)4~F=)8l& .R9w#89<cp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	62525	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:57 UTC	737	OUT	GET /send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. HTTP/1.1 Host: api.whatsapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:58 UTC	1622	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob:;script-src 'unsafe-eval' 'unsafe-inline' .fbcdn.net .whatsapp.com .whatsapp.net 'self' data: blob:;style-src 'self' 'unsafe-inline' data: blob: whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net .whatsapp.net;connect-src 'self' https://.whatsapp.com data: blob:;font-src https://.fbcdn.net https://static.whatsapp.net data:;img-src whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net *.whatsapp.net;frame-src whatsapp: 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
2024-05-28 05:14:58 UTC	1776	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 64 51 78 34 54 59 57 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="hdQx4TYW">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 70 70 73 2e 77 68 61 74 73 61 70 70 2e 6e 65 74 2f 76 2f 74 36 31 2e 32 34 36 39 34 2d 32 34 2f 34 32 37 32 33 31 39 31 35 5f 33 35 38 35 30 33 37 33 37 31 38 36 36 37 38 5f 32 36 32 38 39 36 32 35 30 33 30 39 36 37 37 33 37 37 39 5f 6e 2e 6a 70 67 3f 63 63 62 3d 31 31 2d 34 26 61 6d 70 3b 6f 68 3d 30 31 5f 51 35 41 61 49 47 5a 30 45 33 36 66 59 66 39 79 5a 54 68 47 52 6d 63 6d 54 7a 73 6a 36 56 43 4e 37 53 36 53 6a 49 62 4f 57 4f 57 4e 5a 66 2d 39 26 61 6d 70 3b 6f 65 3d 36 36 35 39 34 37 42 32 26 61 6d 70 3b 5f 6e 63 5f 73 69 64 3d 65 36 65 64 36 63 26 61 6d 70 3b 5f 6e 63 5f 63 61 74 3d 31 30 31 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 Data Ascii: og:image" content="https://pps.whatsapp.net/v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101" /><meta property="og:sit
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 38 34 38 34 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 39 36 33 33 30 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 32 34 39 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 39 33 36 38 39 34 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 38 33 37 35 35 39 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 31 39 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 Data Ascii: 8484":{"r":1,"s":1},"1963303":{"r":1,"s":1},"249":{"r":1,"s":1},"4883":{"r":1,"s":1},"1936894":{"r":1,"s":1},"1837559":{"r":1},"1848815":{"r":10000,"s":1}},"gkxData":{"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20935":{"result
2024-05-28 05:14:58 UTC	259	IN	Data Raw: 73 69 74 69 6f 6e 73 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 39 33 36 22 2c 5b 22 42 6c 75 65 43 6f 6d 70 61 74 52 6f 75 74 65 72 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 42 6c 75 65 43 6f 6d 70 61 74 52 6f 75 74 65 72 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 39 22 2c 5b 22 44 54 53 47 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 54 53 47 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 36 30 22 2c 5b 22 44 54 53 47 5f 41 53 59 4e 43 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 54 53 47 5f 41 53 59 4e 43 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 Data Ascii: sitionsWWW"],{"__rc":["setTimeoutAcrossTransitionsWWW",null]},-1],["cr:7936",["BlueCompatRouter"],{"__rc":["BlueCompatRouter",null]},-1],["cr:8959",["DTSG"],{"__rc":["DTSG",null]},-1],["cr:8960",["DTSG_ASYNC"],{"__rc":["DTSG_ASYNC",null]},-1],["cr:696703"
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 7a 43 76 79 59 4a 36 67 64 77 77 68 Data Ascii: {"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"zCvyYJ6gdwwh
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 39 37 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 Data Ascii: omTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":97,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryA
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 72 75 65 2c 22 68 73 69 22 3a 22 37 33 37 33 39 31 34 36 36 32 36 31 35 30 31 38 30 36 33 22 2c 22 73 65 6d 72 5f 68 6f 73 74 5f 62 75 63 6b 65 74 22 3a 22 33 22 2c 22 62 6c 5f 68 61 73 68 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 63 6f 6d 65 74 5f 65 6e 76 22 3a 30 2c 22 77 62 6c 6f 6b 73 5f 65 6e 76 22 3a 66 61 6c 73 65 2c 22 65 66 5f 70 61 67 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 70 6f 73 65 5f 62 6f 6f 74 6c 6f 61 64 73 22 3a 66 61 6c 73 65 2c 22 73 70 69 6e 22 3a 30 2c 22 5f 5f 73 70 69 6e 5f 72 22 3a 31 30 31 33 37 38 35 37 38 39 2c 22 5f 5f 73 70 69 6e 5f 62 22 3a 22 74 72 75 6e 6b 22 2c 22 5f 5f 73 70 69 6e 5f 74 22 3a 31 37 31 36 38 37 33 32 39 37 2c 22 76 69 70 22 3a 22 31 35 37 2e 32 34 30 2e 32 35 33 2e 36 30 22 7d 2c 33 31 37 5d 2c 5b 22 53 70 72 Data Ascii: rue,"hsi":"7373914662615018063","semr_host_bucket":"3","bl_hash_version":2,"comet_env":0,"wbloks_env":false,"ef_page":null,"compose_bootloads":false,"spin":0,"__spin_r":1013785789,"__spin_b":"trunk","__spin_t":1716873297,"vip":"157.240.253.60"},317],["Spr
2024-05-28 05:14:58 UTC	1500	IN	Data Raw: 22 78 67 34 6b 65 6e 2e 63 6f 6d 22 2c 22 74 65 63 68 6e 6f 70 61 72 6b 2e 72 75 22 2c 22 6f 66 66 69 63 65 64 65 70 6f 74 2e 63 6f 6d 2e 6d 78 22 2c 22 62 65 73 74 62 75 79 2e 63 6f 6d 2e 6d 78 22 2c 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 6e 69 62 69 6f 2e 6e 6f 22 2c 22 6d 79 77 6f 72 6b 64 61 79 6a 6f 62 73 2e 63 6f 6d 22 2c 22 75 6e 69 74 65 64 2d 75 6e 69 74 65 64 2e 63 6f 6d 22 2c 22 67 63 63 2e 67 6e 75 2e 6f 72 67 22 5d 7d 2c 33 38 37 31 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 2c 5b 5d 2c 7b 22 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 22 3a 22 55 4e 4b 4e 4f 57 4e 22 7d 2c 34 37 30 35 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 45 6e 64 70 6f 69 6e 74 43 6f 6e 66 69 67 22 2c 5b Data Ascii: "xg4ken.com","technopark.ru","officedepot.com.mx","bestbuy.com.mx","booking.com","nibio.no","myworkdayjobs.com","united-united.com","gcc.gnu.org"]},3871],["WebConnectionClassServerGuess",[],{"connectionClass":"UNKNOWN"},4705],["BootloaderEndpointConfig",[
2024-05-28 05:14:58 UTC	905	IN	Data Raw: 28 5b 2e 2c 21 3f 5c 5c 73 5d 7c 24 29 22 7d 2c 22 70 61 74 74 65 72 6e 73 22 3a 7b 22 5c 2f 5c 75 30 30 30 31 28 2e 2a 29 28 27 7c 26 23 30 33 39 3b 29 73 5c 75 30 30 30 31 28 3f 3a 27 7c 26 23 30 33 39 3b 29 73 28 2e 2a 29 5c 2f 22 3a 22 5c 75 30 30 30 31 24 31 24 32 73 5c 75 30 30 30 31 24 33 22 2c 22 5c 2f 5f 5c 75 30 30 30 31 28 5b 5e 5c 75 30 30 30 31 5d 2a 29 5c 75 30 30 30 31 5c 2f 22 3a 22 6a 61 76 61 73 63 72 69 70 74 22 7d 7d 2c 31 34 39 36 5d 2c 5b 22 49 6e 74 6c 56 69 65 77 65 72 43 6f 6e 74 65 78 74 22 2c 5b 5d 2c 7b 22 47 45 4e 44 45 52 22 3a 33 2c 22 72 65 67 69 6f 6e 61 6c 4c 6f 63 61 6c 65 22 3a 6e 75 6c 6c 7d 2c 37 37 32 5d 2c 5b 22 4e 75 6d 62 65 72 46 6f 72 6d 61 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 63 69 6d 61 6c 53 65 70 Data Ascii: ([.,!?\\s]\|$)"},"patterns":{"\/\u0001(.)('\|')s\u0001(?:'\|')s(.)\/":"\u0001$1$2s\u0001$3","\/_\u0001([^\u0001]*)\u0001\/":"javascript"}},1496],["IntlViewerContext",[],{"GENDER":3,"regionalLocale":null},772],["NumberFormatConfig",[],{"decimalSep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	62530	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	622	OUT	GET /rsrc.php/v3/yI/l/0,cross/C2fHuK6eV5E.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	2008	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Tue, 20 May 2025 22:27:27 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" x-fb-optimizer: 0 content-md5: /yjTedR4bvWD4O6B5GL9ew== X-FB-Debug: L0l+BL3Y4XgYGUkqFuEE7fVNK+j4t050ApJIazPlxq15UVE/cEEke+dSEd2J+2dYNsefaWunZxKD9Ro88DfF0A== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3340, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 31 61 31 62 0d 0a 2e 72 69 63 68 2d 74 65 78 74 20 61 2e 66 72 61 67 6d 65 6e 74 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 39 36 70 78 29 7b 2e 72 69 63 68 2d 74 65 78 74 20 61 2e 66 72 61 67 6d 65 6e 74 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 31 70 78 3b 6d 61 72 67 69 6e 2d 74 Data Ascii: 1a1b.rich-text a.fragment{border:0;box-sizing:border-box;display:block;font-size:0;height:0;line-height:0;outline:none;pointer-events:none;position:relative;text-decoration:none}@media (min-width: 1096px){.rich-text a.fragment{padding-top:121px;margin-t
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 31 70 78 7d 2e 72 69 63 68 2d 74 65 78 74 20 74 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 7d 2e 72 69 63 68 2d 74 65 78 74 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 63 6f 6c 6f 72 3a 23 62 30 62 30 62 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 33 70 78 20 73 6f 6c 69 64 20 23 65 35 65 Data Ascii: al-align:top;padding-top:9px;padding-bottom:10px;padding-right:20px;padding-left:12px;font-size:14px;line-height:21px}.rich-text td{border-bottom:1px solid #e5e5e5}.rich-text th{text-align:left;font-weight:normal;color:#b0b0b0;border-bottom:3px solid #e5e
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 64 65 6e 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 39 35 70 78 29 7b 2e 72 69 63 68 2d 74 65 78 74 20 68 33 20 61 7b 68 65 69 67 68 74 3a 38 31 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 31 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 39 36 70 78 29 7b 2e 72 69 63 68 2d 74 65 78 74 20 68 33 20 61 7b 68 65 69 67 68 74 3a 31 30 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 38 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 72 69 63 68 2d 74 65 78 74 20 68 33 20 61 7b 68 65 69 67 68 74 3a 37 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 34 70 78 7d 7d 2e 72 69 63 68 2d 74 65 Data Ascii: den}@media (min-width: 768px) and (max-width: 1095px){.rich-text h3 a{height:81px;margin-top:-81px}}@media (min-width: 1096px){.rich-text h3 a{height:108px;margin-top:-108px}}@media (max-width: 767px){.rich-text h3 a{height:74px;margin-top:-74px}}.rich-te
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 23 6e 6f 6b 69 61 5f 73 65 61 72 63 68 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 72 69 63 68 2d 74 65 78 74 20 6c 69 20 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 69 63 68 2d 74 65 78 74 20 2e 69 63 6f 6e 2d 6c 61 72 67 65 7b 6d 61 78 2d 77 69 64 74 68 3a 33 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 7d 2e 72 69 63 68 2d 74 65 78 74 20 2e 69 63 6f 6e 7b 6d 61 78 2d 77 69 64 74 68 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: #nokia_search .title{font-size:100%}.rich-text li p{display:block;width:100%}.rich-text .icon-large{max-width:34px!important;max-height:34px!important;vertical-align:middle;margin-left:2px}.rich-text .icon{max-width:25px!important;max-height:25px!importan
2024-05-28 05:14:59 UTC	696	IN	Data Raw: 68 69 72 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 72 69 63 68 2d 74 65 78 74 20 69 6d 67 2e 68 61 6c 66 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 72 69 63 68 2d 74 65 78 74 20 69 6d 67 2e 68 61 6c 66 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 2c 2e 72 69 63 68 2d 74 65 78 74 20 69 6d 67 2e 74 68 69 72 64 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 72 69 63 68 2d 74 65 78 74 20 69 6d 67 2e 68 61 6c 66 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 3a 61 66 74 65 72 2c 2e 72 69 63 68 2d 74 65 78 74 20 69 6d 67 2e 74 68 69 72 64 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 2e 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b Data Ascii: hird:first-child,.rich-text img.half:first-child{margin-left:0}.rich-text img.half:last-of-type,.rich-text img.third:last-of-type{float:none}.rich-text img.half:last-of-type:after,.rich-text img.third:last-of-type:after{content:'.';display:block;height:0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	62528	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	622	OUT	GET /rsrc.php/v3/y5/l/0,cross/rBt2u2pvsTD.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	2015	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Thu, 22 May 2025 11:32:55 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" origin-agent-cluster: ?0 content-md5: NkEgJFGqAIXp7/ocIBwwUQ== X-FB-Debug: g9uZRZPl2LXygsWjVF4xu01gIIVVDmC69kUDDe2DBZGfyhBSN1TyMMJPWpaVoLbvrP8S7Q7wqjVQYADauYs5LA== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3338, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 31 66 62 63 36 0d 0a 2e 5f 38 6c 5f 66 20 75 6c 2c 2e 5f 38 6c 5f 66 20 6f 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 34 30 70 78 7d 2e 5f 38 6c 5f 66 20 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6c 6f 77 65 72 2d 61 6c 70 68 61 7d 2e 5f 38 6c 5f 66 20 6f 6c 20 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6c 6f 77 65 72 2d 72 6f 6d 61 6e 7d 2e 5f 38 6c 5f 66 20 70 2c 2e 5f 38 6c 5f 66 20 75 6c 2c 2e 5f 38 6c 5f 66 20 6f 6c 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 0a 2e 5f 61 64 68 63 20 68 31 2c 2e 5f 61 64 68 63 20 68 32 2c 2e 5f 61 64 68 63 20 68 33 2c 2e 5f 61 64 68 63 20 68 34 2c 2e 5f 61 64 68 63 20 68 Data Ascii: 1fbc6._8l_f ul,._8l_f ol{margin-left:1.5em;padding-inline-start:40px}._8l_f ol ol{list-style-type:lower-alpha}._8l_f ol ol ol{list-style-type:lower-roman}._8l_f p,._8l_f ul,._8l_f ol{word-wrap:break-word}._adhc h1,._adhc h2,._adhc h3,._adhc h4,._adhc h
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 65 78 2d 67 72 6f 77 3a 31 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 5f 61 64 68 63 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 34 70 78 7d 2e 5f 61 64 68 63 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 30 2e 30 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 2e 5f 61 64 68 63 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 38 70 78 7d 2e 5f 61 64 68 63 20 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 5f 61 64 68 63 20 Data Ascii: ex-grow:1}@media (min-width: 768px){._adhc h1{font-size:64px}._adhc h2{font-size:40px;letter-spacing:-0.03em;line-height:44px}._adhc h3{font-size:32px;letter-spacing:-1px;line-height:38px}._adhc h4{font-size:24px;letter-spacing:.36px;line-height:1}._adhc
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 20 6c 69 2c 2e 5f 39 72 5f 37 20 6f 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 5f 39 72 5f 37 20 68 34 2e 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 5f 39 72 5f 37 20 6c 69 20 61 2c 2e 5f 39 72 5f 37 20 2e 5f 37 67 7a 35 20 61 2c 2e 5f 39 72 5f 37 20 70 20 61 7b 63 6f 6c 6f 72 3a 23 33 39 62 33 65 64 7d 2e 5f 39 72 5f 37 20 6c 69 20 61 3a 68 6f 76 65 72 2c 2e 5f 39 72 5f 37 20 2e 5f 37 67 7a 35 20 61 3a 68 6f 76 65 72 2c 2e 5f 39 72 5f 37 20 70 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 5f 39 72 5f 37 20 6c 69 20 2e 5f 39 76 67 33 20 61 2c 2e 5f 39 72 5f 37 20 2e 5f 37 67 7a 35 20 2e 5f 39 76 67 33 20 61 2c Data Ascii: li,._9r_7 ol{font-size:16px;line-height:26px}._9r_7 h4.bold{font-weight:700}._9r_7 li a,._9r_7 ._7gz5 a,._9r_7 p a{color:#39b3ed}._9r_7 li a:hover,._9r_7 ._7gz5 a:hover,._9r_7 p a:hover{text-decoration:underline}._9r_7 li ._9vg3 a,._9r_7 ._7gz5 ._9vg3 a,
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 31 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 32 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 33 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 34 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 35 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 36 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 2e 5f 37 67 7a 35 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 70 2c 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 5f 39 72 5f 37 20 2e 5f 39 76 63 77 20 68 31 2c 2e 5f 39 72 5f 37 20 2e Data Ascii: e-height:26px}._9r_7 ._9vcw h1,._9r_7 ._9vcw h2,._9r_7 ._9vcw h3,._9r_7 ._9vcw h4,._9r_7 ._9vcw h5,._9r_7 ._9vcw h6,._9r_7 ._9vcw ._7gz5,._9r_7 ._9vcw p,._9r_7 ._9vcw a{padding-left:3%;padding-right:3%}}@media (min-width: 1024px){._9r_7 ._9vcw h1,._9r_7 .
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 2e 33 34 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 65 6d 62 65 64 7d 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6c 61 62 65 6c 2c 73 65 6c 65 63 74 2c 74 64 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 63 6f 6c 6f 72 3a 23 31 63 31 65 32 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d Data Ascii: .34;margin:0;padding:0;unicode-bidi:embed}body,button,input,label,select,td,textarea{font-family:Helvetica, Arial, sans-serif;font-size:12px}h1,h2,h3,h4,h5,h6{color:#1c1e21;font-size:13px;font-weight:600;margin:0;padding:0}h1{font-size:14px}h4,h5,h6{font-
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 6d 69 6e 69 5f 69 66 72 61 6d 65 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 76 69 73 69 62 6c 65 7d 2e 61 75 74 6f 5f 72 65 73 69 7a 65 5f 69 66 72 61 6d 65 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 69 70 65 7b 63 6f 6c 6f 72 3a 67 72 61 79 3b 70 61 64 64 69 6e 67 3a 30 20 33 70 78 7d 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 70 72 6f 66 69 6c 65 20 23 63 6f 6e 74 65 6e 74 2c 2e 68 6f 6d 65 20 23 63 6f 6e 74 65 6e 74 2c 2e 73 65 61 72 63 68 20 23 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 7d 2e 55 49 53 74 61 6e Data Ascii: overflow-y:scroll}.mini_iframe{overflow-y:visible}.auto_resize_iframe{height:auto;overflow:hidden}.pipe{color:gray;padding:0 3px}#content{margin:0;outline:none;padding:0;width:auto}.profile #content,.home #content,.search #content{min-height:600px}.UIStan
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 7d 2e 5f 39 62 68 7a 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 5f 39 62 68 2d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 5f 39 62 68 5f 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 7d 2e 5f 39 62 69 30 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 39 62 69 31 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 5f 39 62 69 32 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 7d 2e 5f 39 62 69 33 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 5f 39 62 69 34 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 65 76 65 6e 6c Data Ascii: }._9bhz{align-items:flex-end}._9bh-{align-items:flex-start}._9bh_{align-items:stretch}._9bi0{justify-content:center}._9bi1{justify-content:flex-end}._9bi2{justify-content:space-around}._9bi3{justify-content:space-between}._9bi4{justify-content:space-evenl
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 31 36 20 2e 5f 39 74 32 69 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 7d 2e 5f 61 6c 6c 67 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 5f 39 74 32 69 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 39 74 32 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 62 32 31 7d 2e 5f 61 65 6f 6b 2c 2e 5f 39 74 32 69 20 68 31 2c 2e 5f 39 74 32 69 20 68 32 2c 2e 5f 39 74 32 69 20 68 33 2c 2e 5f 39 74 32 69 20 68 34 2c 2e 5f 39 74 32 69 20 68 35 2c 2e 5f 39 74 32 69 20 68 36 2c 2e 5f 39 74 32 69 20 70 7b Data Ascii: 16 ._9t2i{font-family:Roboto, Helvetica Neue, Helvetica, Arial, sans-serif}._allg{display:flex;flex-direction:column;flex-grow:1}._9t2i{width:100%}._9t2i{background-color:#111b21}._aeok,._9t2i h1,._9t2i h2,._9t2i h3,._9t2i h4,._9t2i h5,._9t2i h6,._9t2i p{
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 5f 61 62 70 70 20 2e 5f 39 74 32 69 20 2e 5f 39 74 32 6b 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 5f 61 62 70 70 20 2e 5f 39 74 32 6d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 20 32 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 61 65 5f 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 75 6e 73 65 74 7d 2e 5f 61 65 5f 72 20 2e 5f 61 65 5f 73 20 2e 5f 39 76 63 76 2c 2e 5f 39 74 32 6c 20 2e 5f 61 65 5f 73 20 2e 5f 39 76 63 76 2c 2e 5f 61 65 6f 6c 20 2e 5f 61 65 5f 73 20 2e 5f 39 76 63 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: px;text-transform:uppercase}._abpp ._9t2i ._9t2k{padding-left:0;padding-right:0}._abpp ._9t2m{box-sizing:border-box;padding:0 24px;width:100%}._ae_s{display:flex;padding-top:unset}._ae_r ._ae_s ._9vcv,._9t2l ._ae_s ._9vcv,._aeol ._ae_s ._9vcv{background-c
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 5f 61 66 6f 6f 2c 2e 5f 61 6b 67 76 20 2e 5f 61 66 6f 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 2e 5f 61 65 5f 76 2c 2e 5f 61 6b 67 76 20 2e 5f 61 65 5f 76 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 5f 39 74 32 69 20 2e 5f 61 66 62 69 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 5f 39 74 32 6a 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 7d 2e 5f 39 74 32 6b 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 39 74 32 69 20 2e 5f 61 65 6f 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e Data Ascii: _afoo,._akgv ._afoo{margin-left:auto}._ae_v,._akgv ._ae_v{margin-right:auto}._9t2i ._afbi{margin-left:16px}}@media (min-width: 1024px){._9t2j{display:flex;justify-content:center;margin:0}._9t2k{display:flex;justify-content:center}._9t2i ._aeol{display:non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	62527	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	622	OUT	GET /rsrc.php/v3/y9/l/0,cross/58P2v5ZIoPt.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	1989	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Mon, 26 May 2025 15:55:52 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" content-md5: F102fTW6K2i+E8itnTIK4Q== X-FB-Debug: vMuMsUpji/p0PeBWVQinfNhztRIXqw8mKZPFXfYNFhX+BSqJpaXDwWKwx8AuR+NypwrDS5FFCFtKQewpVbRHsg== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 33 31 37 63 0d 0a 2e 5f 39 79 31 36 20 2e 5f 39 74 6a 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 7d 2e 55 49 49 6e 74 65 72 6e 70 61 67 65 5f 43 6f 6e 74 65 6e 74 20 2e 5f 39 74 6a 72 2c 2e 5f 39 74 6a 72 2c 2e 5f 39 79 31 36 20 2e 5f 39 74 6a 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 32 38 63 37 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 31 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 Data Ascii: 317c._9y16 ._9tjr{font-family:Roboto, Helvetica Neue, Helvetica, Arial, sans-serif}.UIInternpage_Content ._9tjr,._9tjr,._9y16 ._9tjr{align-items:center;background-color:#128c7e;display:flex;height:61px;justify-content:center;max-width:100%;min-width:100
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 5f 61 6b 67 76 20 2e 5f 61 66 2d 32 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 55 49 49 6e 74 65 72 6e 70 61 67 65 5f 43 6f 6e 74 65 6e 74 20 2e 5f 61 66 2d 32 2c 2e 5f 61 66 77 31 2c 2e 5f 61 66 77 64 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 5f 61 66 76 78 2c 2e 5f 61 6b 67 76 20 2e 5f 61 66 76 78 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 75 6e 73 65 74 Data Ascii: h:100%;position:fixed;top:0;z-index:1000}._akgv ._af-2{display:flex}.UIInternpage_Content ._af-2,._afw1,._afwd{z-index:1}._afvx,._akgv ._afvx{align-items:center;box-sizing:border-box;display:flex;justify-content:space-between;padding:0 24px;position:unset
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 62 32 32 32 32 7d 2e 5f 61 69 63 79 20 2e 5f 61 66 77 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 35 64 33 36 36 7d 2e 5f 61 69 63 79 20 2e 5f 61 66 77 6a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 33 37 2c 20 32 31 31 2c 20 31 30 31 2c 20 2e 38 29 7d 2e 5f 61 66 77 6a 2e 5f 61 67 34 76 2c 2e 5f 61 67 34 76 2e 5f 61 66 77 6b 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 5f 61 66 2d 32 7b 68 65 69 67 68 74 Data Ascii: rder-bottom:1px solid #0b2222}._aicy ._afwk{background-color:#25d366}._aicy ._afwj{background-color:rgba(37, 211, 101, .8)}._afwj._ag4v,._ag4v._afwk{-webkit-backdrop-filter:none;backdrop-filter:none;background:#fff}@media (min-width: 1200px){._af-2{height
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 6f 72 3a 23 65 35 39 37 30 30 7d 0a 2e 5f 34 71 62 61 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 7d 2e 5f 34 71 62 62 2c 2e 5f 34 71 62 63 2c 2e 5f 34 71 62 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 5f 34 71 62 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 39 39 7d 2e 5f 34 71 62 62 2c 2e 5f 34 71 62 63 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 7d 2e 5f 34 71 62 62 3a 68 6f 76 65 72 2c 2e 5f 34 71 62 63 3a 68 6f 76 65 72 2c 2e 5f 34 71 62 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 63 3b Data Ascii: or:#e59700}._4qba{font-style:inherit}._4qbb,._4qbc,._4qbd{background:none;font-style:inherit;padding:0;width:auto}._4qbd{border-bottom:1px solid #f99}._4qbb,._4qbc{border-bottom:1px solid #999}._4qbb:hover,._4qbc:hover,._4qbd:hover{background-color:#fcc;
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 6e 3a 30 7d 2e 5f 39 77 6d 37 20 2e 5f 39 77 6d 62 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 34 38 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 5f 39 77 6d 35 20 2e 5f 39 77 6d 39 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 63 62 33 39 62 7d 2e 5f 61 62 6a 2d 20 2e 5f 39 77 6d 37 20 2e 5f 39 77 6d 35 20 2e 5f 39 77 6d 39 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 5f 61 62 6a 2d 20 2e 5f 39 77 6d 37 20 2e 5f 39 77 6d 35 20 2e 5f 39 77 6d 39 3a 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 5f 39 77 6d 35 20 2e 5f 39 77 6d 39 Data Ascii: n:0}._9wm7 ._9wmb{color:#5e5e5e;pointer-events:none;transition:transform 480ms ease-in-out}._9wm5 ._9wm9{background-color:#1cb39b}._abj- ._9wm7 ._9wm5 ._9wm9{background-color:#fff}._abj- ._9wm7 ._9wm5 ._9wm9::after{transform:translateY(-50%)}._9wm5 ._9wm9
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 31 30 30 25 7d 2e 5f 39 77 6d 37 2e 5f 61 65 64 66 3a 6e 6f 74 28 2e 5f 61 65 64 67 29 20 2e 5f 39 77 6d 61 3a 6e 6f 74 28 2e 5f 39 77 6d 35 29 20 2e 5f 39 77 6d 36 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 2e 5f 39 77 6d 37 2e 5f 61 65 64 67 20 2e 5f 39 77 6d 36 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 5f 39 77 6d 37 2e 5f 61 65 64 66 20 2e 5f 39 77 6d 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 5f 39 77 6d 37 2e 5f 61 65 64 66 20 2e 5f 39 77 6d 61 20 2e 5f 39 77 6d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 35 25 7d 7d 0a 2e 5f 61 65 62 35 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 5f 61 65 62 36 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a Data Ascii: 100%}._9wm7._aedf:not(._aedg) ._9wma:not(._9wm5) ._9wm6{max-height:0}._9wm7._aedg ._9wm6{visibility:visible}._9wm7._aedf ._9wma{display:flex;flex-direction:column}._9wm7._aedf ._9wma ._9wm6{margin-left:35%}}._aeb5{opacity:0}._aeb6{max-width:100%;opacity:
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 63 6f 6e 74 61 69 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 2d 31 30 30 25 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 63 61 6c 63 28 33 30 30 20 2a 20 31 6d 73 29 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 55 49 49 6e 74 65 72 6e 70 61 67 65 5f 43 6f 6e 74 65 6e 74 20 2e 5f 39 74 30 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 55 49 49 6e 74 65 72 6e 70 61 67 65 5f 43 6f 6e 74 65 6e 74 20 2e 5f 39 74 30 67 2c 2e 5f 39 74 30 66 7b 72 69 67 68 74 3a 30 7d 2e 5f 39 74 Data Ascii: verflow-y:auto;overscroll-behavior:contain;position:fixed;right:-100%;top:0;transition:right calc(300 * 1ms) ease-in-out;visibility:hidden;width:100%;z-index:2}.UIInternpage_Content ._9t0g{position:relative}.UIInternpage_Content ._9t0g,._9t0f{right:0}._9t
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 32 37 35 70 78 7d 2e 5f 61 67 31 32 20 2e 5f 61 67 31 33 20 2e 5f 39 76 63 76 20 2e 5f 61 38 33 68 7b 68 65 69 67 68 74 3a 31 31 70 78 7d 2e 5f 61 67 31 34 2c 2e 5f 61 6b 67 76 20 2e 5f 61 67 31 34 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 33 34 36 33 66 7d 2e 5f 61 67 31 32 20 2e 5f 61 67 31 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 33 34 36 33 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 32 34 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 61 67 31 32 20 2e 5f 61 67 31 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 Data Ascii: ight:16px;width:275px}._ag12 ._ag13 ._9vcv ._a83h{height:11px}._ag14,._akgv ._ag14{border-bottom:1px solid #33463f}._ag12 ._ag1m{border-top:1px solid #33463f;display:flex;gap:24px;justify-content:center;padding:16px 0;width:100%}._ag12 ._ag1n{color:#fff;p
2024-05-28 05:14:59 UTC	681	IN	Data Raw: 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 5f 61 66 2d 31 20 2e 5f 61 66 6f 67 3a 3a 61 66 74 65 72 2c 2e 5f 61 66 2d 31 20 2e 5f 61 66 6f 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 5f 61 66 2d 31 20 2e 5f 61 66 6f 64 3a 68 6f 76 65 72 20 2e 5f 39 76 67 33 2c 2e 5f 61 66 2d 31 20 2e 5f 61 66 6f 64 3a 68 6f 76 65 72 20 2e 5f 61 66 6f 6c 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 5f 61 66 76 76 20 2e 5f 61 66 6f 67 3a 3a 61 66 74 65 72 2c 2e 5f 61 66 76 76 20 2e 5f 61 66 6f 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 35 64 33 36 36 7d 2e 5f 61 66 76 76 20 2e 5f 61 66 6f 64 20 2e 5f 39 76 67 33 2c 2e 5f 61 66 76 76 20 2e 5f 61 66 6f 64 20 2e 5f 61 66 6f 6c 7b 63 6f 6c 6f 72 3a 23 66 66 66 Data Ascii: nsform:rotate(90deg)}._af-1 ._afog::after,._af-1 ._afoi{background-color:#fff}._af-1 ._afod:hover ._9vg3,._af-1 ._afod:hover ._afol{color:#fff}._afvv ._afog::after,._afvv ._afoi{background-color:#25d366}._afvv ._afod ._9vg3,._afvv ._afod ._afol{color:#fff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	62529	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	599	OUT	GET /rsrc.php/v3/yE/r/IAsbxbxXkof.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	2010	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Wed, 21 May 2025 20:19:12 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" origin-agent-cluster: ?0 content-md5: TyL89WaDJm+2nPP9AwR9hg== X-FB-Debug: kBZz7iRw6VLAv2+9E5o0KL26x3cwd09YxplLm8VrJeAeZ6VGHgrOzIN4L6rCMP4Wfpdm6yU5+KJ6wgO77dEKCg== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400
2024-05-28 05:14:59 UTC	21	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Connection: close
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 33 37 36 66 61 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e Data Ascii: 376fa;/FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 64 6c 65 45 76 65 6e 74 28 61 29 7d 63 61 74 63 68 28 61 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 7d 29 7d 66 26 26 66 2e 6f 6e 63 65 26 26 63 5b 22 64 65 6c 65 74 65 22 5d 28 67 29 7d 72 65 74 75 72 6e 21 30 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 63 3d 7b 7d 3b 61 2e 41 62 6f 72 74 53 69 67 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 61 21 3d 3d 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 22 29 3b 62 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 5f 61 62 6f 72 74 65 64 3d 21 31 7d 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 Data Ascii: dleEvent(a)}catch(a){setTimeout(function(){throw a})}f&&f.once&&c["delete"](g)}return!0};return a}(),c={};a.AbortSignal=function(){function a(a){if(a!==c)throw new TypeError("Illegal constructor.");b.call(this);this._aborted=!1}a.prototype=Object.create(b
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 63 3d 5b 5d 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 62 61 63 6b 20 66 75 6e 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 61 62 6c 65 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2c 61 5b 64 5d 2c 64 2c 61 29 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 65 29 3a 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 61 74 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 74 68 Data Ascii: c=[];if(typeof b!=="function")throw new TypeError("Callback function must be callable.");for(var d=0;d<a.length;d++){var e=b.call(a,a[d],d,a);Array.isArray(e)?c.push.apply(c,e):c.push(e)}return c};Array.prototype.flatMap=function(a){var c=arguments[1]\|\|th
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 22 5d 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 29 7d 29 28 29 3b 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 3d 6e 75 6c 6c 26 26 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 61 2e 63 61 6c 6c 28 62 Data Ascii: "]\|\|(Array.prototype[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]=Array.prototype.values)})();"use strict";Array.prototype.findLast==null&&(Array.prototype.findLast=function(a,b){var c=this;for(var d=c.length-1;d>=0;d--){var e=c[d],f=a.call(b
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 61 2e 72 65 70 6c 61 63 65 28 22 3f 22 2c 22 22 29 3a 61 7d 29 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 2b 22 29 22 2b 28 62 2e 72 65 74 75 72 6e 73 3f 22 3a 22 2b 62 2e 72 65 74 75 72 6e 73 3a 22 22 29 3a 76 6f 69 64 20 30 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 73 6f 75 72 63 65 6d 65 74 61 22 69 6e 20 5f 5f 74 72 61 6e 73 66 6f 72 6d 5f 69 6e 63 6c 75 64 65 73 26 26 28 61 2e 5f 5f 53 4d 6d 65 74 61 3d 62 29 3b 69 66 28 22 74 79 70 65 63 68 65 63 6b 73 22 69 6e 20 5f 5f 74 72 61 6e 73 66 6f 72 6d 5f 69 6e 63 6c 75 64 65 73 29 7b Data Ascii: map(function(a){return/\?/.test(a)?"?"+a.replace("?",""):a}).join(","):"")+")"+(b.returns?":"+b.returns:""):void 0)},e=function(a,b,c){return a},f=function(a,b,c){"sourcemeta"in __transform_includes&&(a.__SMmeta=b);if("typechecks"in __transform_includes){
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 3d 68 28 41 72 72 61 79 29 2c 62 3b 61 7c 7c 28 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 74 68 69 73 2e 24 31 3d 61 2c 74 68 69 73 2e 24 32 3d 62 2c 74 68 69 73 2e 24 33 3d 30 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 31 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3b 76 61 72 20 61 3d 74 68 69 73 2e 24 31 2c 62 3d 74 68 69 73 2e 24 31 2e 6c 65 6e 67 74 68 2c 66 3d 74 68 69 73 2e 24 33 2c 67 3d 74 68 69 73 2e 24 32 3b 69 66 28 66 3e 3d 62 29 7b 74 68 69 73 2e 24 31 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 7b 76 61 6c Data Ascii: =h(Array),b;a\|\|(b=function(){"use strict";function a(a,b){this.$1=a,this.$2=b,this.$3=0}var b=a.prototype;b.next=function(){if(this.$1==null)return{value:void 0,done:!0};var a=this.$1,b=this.$1.length,f=this.$3,g=this.$2;if(f>=b){this.$1=void 0;return{val
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 69 6e 67 73 20 64 65 66 61 75 6c 74 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 6e 27 74 20 69 6d 70 6c 65 6d 65 6e 74 20 65 6e 74 72 69 65 73 2e 22 29 7d 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 70 72 6f 74 6f 74 79 70 65 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 61 2e 70 Data Ascii: ings default iterator doesn't implement entries.")}}}();function h(a){return typeof a.prototype[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]==="function"&&typeof a.prototype.values==="function"&&typeof a.prototype.keys==="function"&&typeof a.p
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 65 6f 66 20 45 6c 65 6d 65 6e 74 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 21 31 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 61 5b 31 5d 3b 63 3d 4e 75 6d 62 65 72 28 63 29 7c 7c 30 3b 64 3d 4e 75 6d 62 65 72 28 64 29 7c 7c 30 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 61 3d 61 5b 30 5d 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 3d 61 2e 6c 65 66 74 3b 64 3d 61 2e 74 6f 70 3b 63 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 4e 75 6d 62 65 72 28 63 29 7c 7c 30 29 3b 64 21 Data Ascii: eof Element==="undefined"\|\|Element.prototype.scroll)return;function a(a,b){b===void 0&&(b=!1);if(a.length===0)return;var c=a[0],d=a[1];c=Number(c)\|\|0;d=Number(d)\|\|0;if(a.length===1){a=a[0];if(a==null)return;c=a.left;d=a.top;c!==void 0&&(c=Number(c)\|\|0);d!
2024-05-28 05:14:59 UTC	1500	IN	Data Raw: 65 74 75 72 6e 20 64 7d 7d 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 29 7d 29 28 29 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 29 61 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 74 79 70 65 6f 66 20 4f 62 6a 65 Data Ascii: eturn d}}(JSON.stringify))})();(function(){var a=Object.prototype.hasOwnProperty;Object.entries=function(b){if(b==null)throw new TypeError("Object.entries called on non-object");var c=[];for(var d in b)a.call(b,d)&&c.push([d,b[d]]);return c};typeof Obje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	62531	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	611	OUT	GET /rsrc.php/v3/yq/r/mdQNdcFMi0p.png HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	1966	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: IVaYuPdjzmEsQZZPDxTlBw== Expires: Thu, 22 May 2025 16:14:01 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" x-fb-optimizer: 0 X-FB-Debug: DM9CqnzdtoObdebBiiQG+unDgpqXSW/0c6Hu66rvf2bnC7lEPS6KgqgfGjelO8VC8vvC0loJf+leg7mM2QCKhA== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3340, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 29526
2024-05-28 05:14:59 UTC	14746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d ee 00 00 03 3e 08 03 00 00 00 e1 72 80 a5 00 00 00 33 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 41 2e 2a 00 00 00 10 74 52 4e 53 00 a0 e0 20 10 f0 60 c0 40 80 30 d0 90 b0 50 70 36 e4 34 5f 00 00 72 c2 49 44 41 54 78 5e ec dd 59 76 e4 b8 11 40 51 70 00 01 70 c4 fe 57 6b d9 6d 7f 94 6b e8 2e 95 a4 04 c1 7b 97 90 f9 f5 4e 80 11 e1 f5 58 f3 9b a5 fc e5 48 df 1b ca 5f f2 bf 85 86 01 00 00 08 bc ab 94 21 a5 14 eb 7b 6c 29 1d a5 94 16 e2 0f 00 00 80 35 2f a5 a4 34 d6 0f 35 a6 54 ca 92 d7 f0 b5 00 00 00 58 73 29 29 c5 fa c9 62 4a a5 7c 7e f6 01 00 00 90 cf 32 a4 58 bf d8 98 86 4f a9 Data Ascii: PNGIHDR>r3PLTEGpLA.*tRNS `@0Pp64_rIDATx^Yv@QppWkmk.{NXH_!{l)5/45TXs))bJ\|~2XO
2024-05-28 05:14:59 UTC	14780	IN	Data Raw: 0e 77 e5 4f e8 de 2f 6a ea 6b 95 01 fa 0e dd 43 e4 22 6e cf c6 2e 29 5f 88 5c 46 15 75 eb de 82 ee 09 b2 5a fc b6 ea 41 f7 42 24 bd 24 03 83 1a 2e 43 37 dc 3d 06 46 ef 75 7f dd 65 27 43 c1 bd d6 6e 6e 79 a7 a7 5d 01 1e b4 73 52 0b ee 81 ee 21 bc 77 ec 7e d9 d7 10 d4 85 f7 e8 bb 34 dd ba 17 a0 7b 32 ac 7b f6 4a 1b 80 ee 65 d2 4d bd e6 78 d9 d0 bd 64 22 09 f5 a1 28 d6 bd e9 f0 00 b8 33 d5 2e 3a bc 52 af 62 09 fc e7 45 c5 38 06 78 ce 11 6c 13 99 be 7a 07 c3 2e aa 54 78 6f ed cb 3f 42 f7 1a 11 74 6f 8d 19 3b 6d 03 ba 17 22 e9 a7 9f 77 79 cf d0 bd 93 6d 8c 99 ff fb b5 6e 8f 8d 44 4c b5 7b 82 3c 65 43 ed 70 e2 71 d2 0b c6 31 00 e4 54 3f 34 9e 0c 43 61 78 fb 8a 85 f7 1e 0d 33 9c bc 8e 21 1a af d6 bd 31 e6 ec 07 ed 06 ba 97 2b 99 e0 50 a9 7c 49 7c b4 81 7c 37 e7 Data Ascii: wO/jkC"n.)_\FuZAB$$.C7=Fue'Cnny]sR!w~4{2{JeMxd"(3.:RbE8xlz.Txo?Bto;m"wymnDL{<eCpq1T?4Cax3!1+P\|I\|\|7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	62532	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:58 UTC	798	OUT	GET /v/t39.8562-34/435524640_1127495198676263_4923359980655354883_n.png?ccb=1-7&_nc_sid=73b08c&_nc_ohc=5pgnz3LNoTkQ7kNvgGoc6H_&_nc_ht=scontent.whatsapp.net&oh=01_Q5AaIG1qZp1y_B84Ex9VEc53d0TuOf1_RBZGe8G9e3ljYLbl&oe=665B55A1 HTTP/1.1 Host: scontent.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:14:59 UTC	569	IN	HTTP/1.1 200 OK Last-Modified: Thu, 11 Apr 2024 17:21:45 GMT Content-Type: image/png X-Needle-Checksum: 4007564090 thrift_fmhk: GBB7ukJSqTz5+NaLt1zJ4dvVFfarm9sDvFUAHCYEAAAA cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Tue, 28 May 2024 05:14:59 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3340, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2604
2024-05-28 05:14:59 UTC	2604	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 17 08 03 00 00 00 28 56 01 70 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 ee 50 4c 54 45 00 00 00 25 d3 66 03 0f 07 06 20 10 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 Data Ascii: PNGIHDRc(Vp cHRMz&u0`:pQ<PLTE%f %f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	62533	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:59 UTC	745	OUT	GET /v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101 HTTP/1.1 Host: pps.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:00 UTC	756	IN	HTTP/1.1 200 OK Last-Modified: Mon, 01 Apr 2024 20:42:41 GMT Content-Type: image/jpeg X-Needle-Checksum: 2760307490 thrift_fmhk: GBBxNdsAIv4OvUQflHRcZoOeFfarm9sDvFUAHCYEAAAA content-digest: adler32=2760307490 Cache-Control: public; max-age=460800 cross-origin-resource-policy: cross-origin Date: Tue, 28 May 2024 05:15:00 GMT X-FB-Edge-Debug: JC4HEERVP4KX3W-Zc2DIH_gnPsPu5IWTkBVQbAvNgrg-1Gc9Y_TRVSaCj3VOmoDfUbFLYQcT8iujHFUx1aTB9dM4aV5l1iT1kfLcR-f3jxw X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=109, ullat=0 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-wa-metadata x-fb-application-protocol: Connection: close Content-Length: 17393
2024-05-28 05:15:00 UTC	744	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 43 53 75 a2 d1 17 25 63 93 a3 b2 f0 f1 26 34 35 45 73 c2 e1 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 04 02 05 ff c4 00 2c 11 01 00 02 02 02 02 01 05 00 00 05 05 00 00 00 00 00 01 02 03 11 12 21 04 31 41 13 14 22 32 51 23 61 71 a1 b1 42 52 81 91 c1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 a2 22 f1 1e e8 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 Data Ascii: CSu%c&45Es,!1A"2Q#aqBR?"
2024-05-28 05:15:00 UTC	14140	IN	Data Raw: d9 65 ba 1f ce d7 63 95 9f fc b4 a7 c7 78 c1 f7 09 f0 7b 39 73 e6 17 9f 25 c4 f0 ad 7a a7 a8 b5 de ad 6e c6 73 9b 7c 7f 9c 8a 50 04 c0 0e 8e e5 ca 68 89 e8 e1 be de 8a 6f 8a b7 ee be d1 4f 22 d4 ea fe 98 ad 14 87 38 c1 32 3d 3c bf 4d 8f e4 74 4e 86 68 c9 74 72 0d cc 73 b3 7d 83 d8 7c 5a 76 fa 74 3b 28 f2 cb 31 35 9d 4b 74 4c 4c 6e 04 44 50 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 88 80 88 88 08 8b db b4 5a 6b ef b7 5a 4b 3d b2 9d f3 d5 56 4c d8 62 8d a3 72 e7 13 c9 4f be 89 9d 7b 4c 34 83 4a ee da a9 93 32 d5 48 5d 0d 0c 1b 49 5d 55 b7 28 a3 df a0 fd 63 cc 01 f5 e8 b5 7c 8c 0c 6b 74 7f 49 43 6d 74 76 d6 06 5e 2e f1 8d fd 8d a7 ab 5a 7e f4 ee 1e 27 e1 eb e0 bd 3a 0b 08 d2 2c 42 d3 a5 b8 43 Data Ascii: ecx{9s%zns\|PhoO"82=<MtNhtrs}\|Zvt;(15KtLLnDPZkZK=VLbrO{L4J2H]I]U(c\|ktICmtv^.Z~':,BC
2024-05-28 05:15:00 UTC	1009	IN	Data Raw: 14 ea 3d 99 27 26 68 dc c7 4a 97 b6 b7 fa 5d 8f ff 00 60 7f f8 8a 25 a4 7d 9d 6f 1a a3 8e dc 6f e6 bc db 62 60 31 5b cc b1 1e 1a 89 47 52 7f 54 74 dc 78 9f 42 bb 7e d6 f9 66 37 95 65 36 4a 8c 6e f5 49 71 8e 0a 27 b6 47 d3 4a 1e 1a ee f3 7d 89 1e 2a 47 a1 1d a6 ac d8 f5 9e 8f 09 cd a9 c5 25 35 1b 3b aa 5a f8 59 bb 03 77 e4 24 68 e6 0f eb 0f aa a2 78 5b 34 f2 5f fe 25 70 47 08 ed 4b 66 1a 45 a8 b8 15 43 cd ef 1c ac 64 2c 76 cd ac 85 a6 58 1d e5 ef b7 90 27 c8 ec bc 58 44 9a 8f 51 90 d2 53 61 93 de 7e d0 74 ad e0 14 ef 7f 23 bf 57 6c 76 e1 1e 3b f2 d9 7d 05 b5 e6 58 8d fe 95 b3 da 72 2b 6d 64 4f 1b fe 6e a1 8e e5 ea 37 e4 bd 97 5c b1 db 73 1d 3b ab 6d f4 cc ea e7 f7 8c 60 f9 92 ac 8f 1e 2b 3c ab 65 51 e5 db 5c 66 af 3d b5 b5 91 db 29 85 c1 cd 75 50 85 82 72 Data Ascii: ='&hJ]`%}oob`1[GRTtxB~f7e6JnIq'GJ}*G%5;ZYw$hx[4_%pGKfECd,vX'XDQSa~t#Wlv;}Xr+mdOn7\s;m`+<eQ\f=)uPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	62534	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:14:59 UTC	562	OUT	GET /v/t39.8562-34/435524640_1127495198676263_4923359980655354883_n.png?ccb=1-7&_nc_sid=73b08c&_nc_ohc=5pgnz3LNoTkQ7kNvgGoc6H_&_nc_ht=scontent.whatsapp.net&oh=01_Q5AaIG1qZp1y_B84Ex9VEc53d0TuOf1_RBZGe8G9e3ljYLbl&oe=665B55A1 HTTP/1.1 Host: scontent.whatsapp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:00 UTC	569	IN	HTTP/1.1 200 OK Last-Modified: Thu, 11 Apr 2024 17:21:45 GMT Content-Type: image/png X-Needle-Checksum: 4007564090 thrift_fmhk: GBA0UOc/GxzeltPIFJ+eCf60Ffarm9sDvFUAHCYEAAAA cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Tue, 28 May 2024 05:15:00 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3338, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2604
2024-05-28 05:15:00 UTC	2604	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 17 08 03 00 00 00 28 56 01 70 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 ee 50 4c 54 45 00 00 00 25 d3 66 03 0f 07 06 20 10 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 66 25 d3 Data Ascii: PNGIHDRc(Vp cHRMz&u0`:pQ<PLTE%f %f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	62536	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:00 UTC	375	OUT	GET /rsrc.php/v3/yq/r/mdQNdcFMi0p.png HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:00 UTC	1893	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: IVaYuPdjzmEsQZZPDxTlBw== Expires: Wed, 14 May 2025 07:01:05 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" x-fb-optimizer: 0 X-FB-Debug: L01CR+0Hgps2KvtcThxsez0kiaolULbV5OD0hTCJ5lCI0k17Ug1Mj1HqoVF7z7WgQetXH98Jeu6+qSrFNuubOw== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 28 May 2024 05:15:00 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 29526
2024-05-28 05:15:00 UTC	14819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d ee 00 00 03 3e 08 03 00 00 00 e1 72 80 a5 00 00 00 33 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 41 2e 2a 00 00 00 10 74 52 4e 53 00 a0 e0 20 10 f0 60 c0 40 80 30 d0 90 b0 50 70 36 e4 34 5f 00 00 72 c2 49 44 41 54 78 5e ec dd 59 76 e4 b8 11 40 51 70 00 01 70 c4 fe 57 6b d9 6d 7f 94 6b e8 2e 95 a4 04 c1 7b 97 90 f9 f5 4e 80 11 e1 f5 58 f3 9b a5 fc e5 48 df 1b ca 5f f2 bf 85 86 01 00 00 08 bc ab 94 21 a5 14 eb 7b 6c 29 1d a5 94 16 e2 0f 00 00 80 35 2f a5 a4 34 d6 0f 35 a6 54 ca 92 d7 f0 b5 00 00 00 58 73 29 29 c5 fa c9 62 4a a5 7c 7e f6 01 00 00 90 cf 32 a4 58 bf d8 98 86 4f a9 Data Ascii: PNGIHDR>r3PLTEGpLA.*tRNS `@0Pp64_rIDATx^Yv@QppWkmk.{NXH_!{l)5/45TXs))bJ\|~2XO
2024-05-28 05:15:00 UTC	14707	IN	Data Raw: b4 73 52 0b ee 81 ee 21 bc 77 ec 7e d9 d7 10 d4 85 f7 e8 bb 34 dd ba 17 a0 7b 32 ac 7b f6 4a 1b 80 ee 65 d2 4d bd e6 78 d9 d0 bd 64 22 09 f5 a1 28 d6 bd e9 f0 00 b8 33 d5 2e 3a bc 52 af 62 09 fc e7 45 c5 38 06 78 ce 11 6c 13 99 be 7a 07 c3 2e aa 54 78 6f ed cb 3f 42 f7 1a 11 74 6f 8d 19 3b 6d 03 ba 17 22 e9 a7 9f 77 79 cf d0 bd 93 6d 8c 99 ff fb b5 6e 8f 8d 44 4c b5 7b 82 3c 65 43 ed 70 e2 71 d2 0b c6 31 00 e4 54 3f 34 9e 0c 43 61 78 fb 8a 85 f7 1e 0d 33 9c bc 8e 21 1a af d6 bd 31 e6 ec 07 ed 06 ba 97 2b 99 e0 50 a9 7c 49 7c b4 81 7c 37 e7 a1 58 f7 56 50 00 d7 71 6a 77 78 4c 53 77 fc b8 ae 97 1f 64 95 83 c1 f7 00 74 cf 71 1b ce e4 8e ee c9 87 f7 2e 4f 77 7a 43 f7 e4 c9 63 cc 19 37 68 1e 74 6f c3 5b 02 ca 37 2c f4 72 7e 28 b4 85 a5 57 f7 1c c5 67 3e 0c 9e Data Ascii: sR!w~4{2{JeMxd"(3.:RbE8xlz.Txo?Bto;m"wymnDL{<eCpq1T?4Cax3!1+P\|I\|\|7XVPqjwxLSwdtq.OwzCc7hto[7,r~(Wg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	62535	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:00 UTC	611	OUT	GET /rsrc.php/v3/yJ/r/Qhrnh5evyPV.png HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:00 UTC	1946	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: xLWjtClzX1uuuuJMJlqnCw== Expires: Tue, 20 May 2025 18:37:27 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" X-FB-Debug: beZAB/j70pH4EE7FboX8mPgUsrsMlwb2ioj0MoyIJwv7N//AtSFN+A4QLIzAMjZ1dXKWWa5jqcekgI7Pr0qAKg== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 28 May 2024 05:15:00 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1222
2024-05-28 05:15:00 UTC	1222	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 26 08 03 00 00 00 74 f8 60 da 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 10 ef 70 40 bf 20 60 df 9f 80 90 cf af 50 30 8f 1f 7f a0 b0 5f 6f 5e 9e c5 a3 00 00 04 16 49 44 41 54 78 5e cd 97 6b 97 9b 20 10 86 1d ee a8 a8 9b 74 cb ff ff a7 65 2e 64 b4 66 73 b6 3d a7 8d f3 65 11 70 78 f6 9d 8b 64 d8 1b 2c 9b 4f b5 d6 e4 37 37 5c cf 5c 31 55 cd e4 70 2d bc e0 eb ef 76 29 c4 9f a4 9e f1 36 3a e7 96 91 69 53 bc 0c df 46 3c 16 54 d0 98 70 ea 76 11 be 8c ea d9 e3 1c Data Ascii: PNGIHDR&t`HPLTEGpLztRNSp@ `P0_o^IDATx^k te.dfs=epxd,O77\\1Up-v)6:iSF<Tpv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	62537	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:00 UTC	599	OUT	GET /rsrc.php/v3/yz/r/JU3TMHT_W2V.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:00 UTC	2005	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Thu, 22 May 2025 16:01:04 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" content-md5: Zlc/2KJPHD/oapx0COyHiw== X-FB-Debug: XjclmrMVKa6xLxfNucVRjH52BKNi5JFNnOcx+6Acme6ul2d3QR7Z7T0iqcdHvwHjexy5VqeGKGjERBoTuqlVuw== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:00 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=14, mss=1392, tbw=3338, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 33 36 62 32 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 45 76 65 6e 74 45 6d 69 74 74 65 72 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 22 2c 5b 22 42 61 73 65 45 76 65 6e 74 45 6d 69 74 74 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 2c 63 29 7b 76 61 72 20 64 3b 64 3d 61 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 64 2e 24 45 76 65 6e 74 45 6d 69 74 74 65 72 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 31 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 3b 64 2e 24 45 76 Data Ascii: 36b2;/FB_PKG_DELIM/__d("EventEmitterWithValidation",["BaseEventEmitter"],(function(a,b,c,d,e,f){"use strict";a=function(a){babelHelpers.inheritsLoose(b,a);function b(b,c){var d;d=a.call(this)\|\|this;d.$EventEmitterWithValidation1=Object.keys(b);d.$Ev
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 74 69 6f 6e 73 22 29 28 67 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 64 26 26 64 2e 72 65 6d 6f 76 65 28 29 2c 64 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 29 2c 65 26 26 65 2e 72 65 6d 6f 76 65 28 29 2c 65 3d 6e 75 6c 6c 7d 7d 7d 2c 73 75 70 70 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 28 22 45 76 65 6e 74 22 29 2e 6b 69 6c 6c 28 61 29 7d 7d 3b 62 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 57 57 57 22 2c 5b 22 63 72 3a 31 33 35 33 33 35 39 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d Data Ascii: tions")(g)}function g(){d&&d.remove(),d=null}return{remove:function(){g(),e&&e.remove(),e=null}}},suppress:function(a){c("Event").kill(a)}};b=a;g["default"]=b}),98);__d("EventListenerWWW",["cr:1353359"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 31 31 38 33 35 37 39 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 49 6e 6c 69 6e 65 46 62 74 52 65 73 75 6c 74 49 6d 70 6c 22 2c 5b 22 63 78 22 2c 22 46 62 74 48 6f 6f 6b 73 22 2c 22 46 62 74 52 65 61 63 74 55 74 69 6c 22 2c 22 46 62 74 52 65 73 75 6c 74 42 61 73 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 3d 22 5f 34 71 62 61 22 3b 65 21 3d 6e 75 6c 6c 26 26 65 21 3d 22 22 26 26 28 62 3d 3d 3d 22 54 52 41 4e 53 4c 41 54 49 4f 4e 22 3f 66 3d 22 5f 34 71 62 62 22 3a 62 3d 3d 3d 22 41 50 50 52 4f 56 45 22 3f 66 3d 22 5f 34 71 62 63 22 3a 62 3d 3d 3d 22 52 45 50 4f 52 Data Ascii: "default"]=b("cr:1183579")}),98);__d("InlineFbtResultImpl",["cx","FbtHooks","FbtReactUtil","FbtResultBase"],(function(a,b,c,d,e,f,g,h){var i;function j(a,b,c,e){var f="_4qba";e!=null&&e!=""&&(b==="TRANSLATION"?f="_4qbb":b==="APPROVE"?f="_4qbc":b==="REPOR
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 75 72 6e 20 63 28 22 49 6e 74 6c 56 61 72 69 61 74 69 6f 6e 73 22 29 2e 4e 55 4d 42 45 52 5f 4f 54 48 45 52 7d 7d 3b 62 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 49 6e 74 6c 43 4c 44 52 4e 75 6d 62 65 72 54 79 70 65 30 39 22 2c 5b 22 49 6e 74 6c 56 61 72 69 61 74 69 6f 6e 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 67 65 74 56 61 72 69 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 3d 31 29 72 65 74 75 72 6e 20 63 28 22 49 6e 74 6c 56 61 72 69 61 74 69 6f 6e 73 22 29 2e 4e 55 4d 42 45 52 5f 4f 4e 45 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 63 28 22 49 6e 74 6c 56 61 72 69 61 74 69 6f 6e 73 22 29 Data Ascii: urn c("IntlVariations").NUMBER_OTHER}};b=a;g["default"]=b}),98);__d("IntlCLDRNumberType09",["IntlVariations"],(function(a,b,c,d,e,f,g){"use strict";a={getVariation:function(a){if(a===1)return c("IntlVariations").NUMBER_ONE;else return c("IntlVariations")
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 5b 22 63 72 3a 36 30 31 36 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 36 30 31 36 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 6d 69 78 49 6e 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 22 69 6e 76 61 72 69 61 6e 74 22 2c 22 45 76 65 6e 74 45 6d 69 74 74 65 72 57 69 74 68 48 6f 6c 64 69 6e 67 22 2c 22 45 76 65 6e 74 45 6d 69 74 74 65 72 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 22 2c 22 45 76 65 6e 74 48 6f 6c 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 29 7b 62 7c 7c 68 28 30 2c 33 31 35 39 29 3b 76 61 72 20 64 3d 61 Data Ascii: ["cr:6016"],(function(a,b,c,d,e,f,g){g["default"]=b("cr:6016")}),98);__d("mixInEventEmitter",["invariant","EventEmitterWithHolding","EventEmitterWithValidation","EventHolder"],(function(a,b,c,d,e,f,g,h){"use strict";function a(a,b,c){b\|\|h(0,3159);var d=a
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 72 65 22 2c 5b 22 6d 69 78 49 6e 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 22 70 61 67 65 49 44 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 7b 4e 41 56 49 47 41 54 49 4f 4e 5f 44 4f 4e 45 3a 22 4e 41 56 49 47 41 54 49 4f 4e 5f 44 4f 4e 45 22 2c 45 56 45 4e 54 5f 4f 43 43 55 52 52 45 44 3a 22 45 56 45 4e 54 5f 4f 43 43 55 52 52 45 44 22 7d 2c 69 3d 7b 74 74 69 3a 22 74 74 69 22 2c 65 32 65 3a 22 65 32 65 22 2c 61 6c 6c 5f 70 61 67 65 6c 65 74 73 5f 6c 6f 61 64 65 64 3a 22 61 6c 6c 5f 70 61 67 65 6c 65 74 73 5f 6c 6f 61 64 65 64 22 2c 61 6c 6c 5f 70 61 67 65 6c 65 74 73 5f 64 69 73 70 6c 61 79 65 64 3a 22 61 6c 6c 5f 70 61 67 65 6c 65 74 73 5f 64 69 73 70 6c 61 79 65 64 22 7d 2c 6a 3d 30 2c 6b 3d 7b Data Ascii: re",["mixInEventEmitter","pageID"],(function(a,b,c,d,e,f,g){var h={NAVIGATION_DONE:"NAVIGATION_DONE",EVENT_OCCURRED:"EVENT_OCCURRED"},i={tti:"tti",e2e:"e2e",all_pagelets_loaded:"all_pagelets_loaded",all_pagelets_displayed:"all_pagelets_displayed"},j=0,k={
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 73 65 72 76 65 72 4c 49 44 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 6b 5b 62 5d 29 3b 64 65 6c 65 74 65 20 6b 5b 62 5d 7d 6d 2e 65 6d 69 74 41 6e 64 48 6f 6c 64 28 68 2e 4e 41 56 49 47 41 54 49 4f 4e 5f 44 4f 4e 45 2c 74 68 69 73 2e 6c 69 64 2c 61 29 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 6d 3d 7b 45 76 65 6e 74 73 3a 68 2c 70 6f 73 74 50 61 67 65 6c 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 7d 2c 73 69 74 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 6c 29 7d 2c 73 65 74 50 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 73 65 72 76 65 72 4c 49 44 29 72 65 74 75 72 6e 3b 6b 5b 61 2e 73 65 72 76 65 72 4c 49 44 5d 3d 7b 70 61 67 65 3a 61 2e 70 61 67 65 2c 70 61 67 65 54 79 70 65 3a 61 2e 70 61 67 Data Ascii: serverLID;Object.assign(a,k[b]);delete k[b]}m.emitAndHold(h.NAVIGATION_DONE,this.lid,a)};return a}(),m={Events:h,postPagelet:function(a,b,c){},siteInit:function(a){a(l)},setPage:function(a){if(!a.serverLID)return;k[a.serverLID]={page:a.page,pageType:a.pag
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 69 67 61 74 69 6f 6e 53 74 61 72 74 29 2e 73 65 74 45 32 45 28 61 29 2e 64 6f 6e 65 4e 61 76 69 67 61 74 69 6f 6e 28 29 7d 29 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 28 22 4e 61 76 69 67 61 74 69 6f 6e 4d 65 74 72 69 63 73 43 6f 72 65 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 54 72 61 6e 73 41 70 70 49 6e 6c 69 6e 65 4d 6f 64 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 53 54 52 49 4e 47 5f 4d 41 4e 41 47 45 52 3a 22 53 54 52 49 4e 47 5f 4d 41 4e 41 47 45 52 22 2c 54 52 41 4e 53 4c 41 54 49 4f 4e 3a 22 54 52 41 4e 53 4c 41 54 49 4f 4e 22 2c 41 50 50 52 4f 56 45 3a 22 41 50 50 52 4f 56 45 22 2c 52 45 50 4f 52 54 3a 22 52 45 50 4f 52 54 22 2c 4e 4f 5f Data Ascii: igationStart).setE2E(a).doneNavigation()})});g["default"]=c("NavigationMetricsCore")}),98);__d("TransAppInlineMode",[],(function(a,b,c,d,e,f){a=Object.freeze({STRING_MANAGER:"STRING_MANAGER",TRANSLATION:"TRANSLATION",APPROVE:"APPROVE",REPORT:"REPORT",NO_
2024-05-28 05:15:00 UTC	1500	IN	Data Raw: 77 72 61 70 70 65 64 46 62 74 22 2c 5b 22 46 62 74 52 65 73 75 6c 74 47 4b 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 63 6f 6e 74 65 6e 74 73 3b 76 61 72 20 63 3d 62 28 22 46 62 74 52 65 73 75 6c 74 47 4b 22 29 2e 69 6e 6c 69 6e 65 4d 6f 64 65 2c 64 3d 62 28 22 46 62 74 52 65 73 75 6c 74 47 4b 22 29 2e 73 68 6f 75 6c 64 52 65 74 75 72 6e 46 62 74 52 65 73 75 6c 74 3b 69 66 28 21 64 26 26 63 21 3d 3d 22 52 45 50 4f 52 54 22 29 72 65 74 75 72 6e 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 6c 65 6e 67 74 68 29 3d 3d 3d 31 26 26 74 79 70 65 6f 66 20 61 5b 30 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 5b 30 5d 3a 61 7d 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e Data Ascii: wrappedFbt",["FbtResultGK"],(function(a,b,c,d,e,f){function a(a){a=a.contents;var c=b("FbtResultGK").inlineMode,d=b("FbtResultGK").shouldReturnFbtResult;if(!d&&c!=="REPORT")return(a==null?void 0:a.length)===1&&typeof a[0]==="string"?a[0]:a}e.exports=a}),n
2024-05-28 05:15:00 UTC	515	IN	Data Raw: 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 69 73 54 72 75 74 68 79 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 42 6f 6f 6c 65 61 6e 28 61 29 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 5b 22 49 64 6c 65 43 61 6c 6c 62 61 63 6b 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 2c 22 54 69 6d 65 53 6c 69 63 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 61 2e 72 65 71 75 65 73 74 49 64 Data Ascii: =a}),98);__d("isTruthy",[],(function(a,b,c,d,e,f){"use strict";function a(a){return a!=null&&Boolean(a)}f["default"]=a}),66);__d("requestIdleCallbackAcrossTransitions",["IdleCallbackImplementation","TimeSlice"],(function(a,b,c,d,e,f,g){var h=a.requestId

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	62539	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	509	OUT	GET /v/t61.24694-24/427231915_358503737186678_2628962503096773779_n.jpg?ccb=11-4&oh=01_Q5AaIGZ0E36fYf9yZThGRmcmTzsj6VCN7S6SjIbOWOWNZf-9&oe=665947B2&_nc_sid=e6ed6c&_nc_cat=101 HTTP/1.1 Host: pps.whatsapp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:01 UTC	629	IN	HTTP/1.1 200 OK Last-Modified: Mon, 01 Apr 2024 20:42:41 GMT Content-Type: image/jpeg X-Needle-Checksum: 2760307490 thrift_fmhk: GBCVDobAlN04aG05K8YeWsjcFfarm9sDvFUAHCYEAAAA content-digest: adler32=2760307490 Cache-Control: public; max-age=460800 cross-origin-resource-policy: cross-origin Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3340, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-wa-metadata x-fb-application-protocol: Connection: close Content-Length: 17393
2024-05-28 05:15:01 UTC	15901	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-28 05:15:01 UTC	1492	IN	Data Raw: 6b a3 b9 c3 f4 ff 00 50 6d 59 07 16 d4 e2 51 05 56 e7 61 dc bf dd 7e ff 00 20 41 fd 95 6e 0b fd 3b ed 4e 7a 7d 4c 73 0d bd 94 69 7d b7 23 d4 3c 6b 3b a8 23 bc b1 b6 50 f6 9f f5 a7 91 8b fb ae dd cb d5 d7 6c ec 60 3a 6d 73 b9 c5 33 59 5b 50 cf 64 a4 07 ab a4 7f 2d c7 c9 bc 4e fa 2e dd 9a af a6 a4 71 1c ea c9 cf a7 f2 d8 ff 00 e6 b2 a7 6a dd 4c a2 cc f2 9a 2b 05 8a e1 0d 5d ae d3 17 79 de c2 f0 e6 49 3b c7 3e 63 91 01 a0 0f 99 2b 6e 5b d6 95 99 af b9 60 c3 4b 64 b4 45 bd 42 8b 25 ce 25 ee 71 73 9c 49 24 f5 27 7e 6a fe ec 79 98 43 64 cd eb f1 aa c9 db 1c 57 ca 76 88 78 8f c5 3c 64 96 8f a8 32 7d 76 54 02 f6 6d d7 0a cb 55 75 3d ca df 50 f8 2a 69 64 6c b1 48 c3 b3 98 e0 77 04 2c 14 bc e3 b4 59 e9 64 a4 64 a4 d1 f4 5f 53 30 5a 2d 49 c3 ab b1 6a c7 f7 46 76 87 Data Ascii: kPmYQVa~ An;Nz}Lsi}#<k;#Pl`:ms3Y[Pd-N.qjL+]yI;>c+n[`KdEB%%qsI$'~jyCdWvx<d2}vTmUu=P*idlHw,Ydd_S0Z-IjFv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	62538	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	375	OUT	GET /rsrc.php/v3/yJ/r/Qhrnh5evyPV.png HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:01 UTC	1892	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: xLWjtClzX1uuuuJMJlqnCw== Expires: Thu, 15 May 2025 01:12:30 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" x-fb-optimizer: 0 X-FB-Debug: rFkrxBZALRJdAFYwK8R+ASqPKkXx3jgaBAWtNdFErGkzWC+mAIfBvtNJukgML2SO7XMxX5FwcVzSF5PNdMehGQ== cross-origin-resource-policy: cross-origin timing-allow-origin: Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1222
2024-05-28 05:15:01 UTC	1222	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 26 08 03 00 00 00 74 f8 60 da 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 10 ef 70 40 bf 20 60 df 9f 80 90 cf af 50 30 8f 1f 7f a0 b0 5f 6f 5e 9e c5 a3 00 00 04 16 49 44 41 54 78 5e cd 97 6b 97 9b 20 10 86 1d ee a8 a8 9b 74 cb ff ff a7 65 2e 64 b4 66 73 b6 3d a7 8d f3 65 11 70 78 f6 9d 8b 64 d8 1b 2c 9b 4f b5 d6 e4 37 37 5c cf 5c 31 55 cd e4 70 2d bc e0 eb ef 76 29 c4 9f a4 9e f1 36 3a e7 96 91 69 53 bc 0c df 46 3c 16 54 d0 98 70 ea 76 11 be 8c ea d9 e3 1c Data Ascii: PNGIHDR&t`HPLTEGpLztRNSp@ `P0_o^IDATx^k te.dfs=epxd,O77\\1Up-v)6:iSF<Tpv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	62541	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	610	OUT	GET /rsrc.php/v3i7M54/yu/l/en_US/CMbvlktGnP3.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:02 UTC	2010	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Sat, 24 May 2025 14:45:45 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" origin-agent-cluster: ?0 content-md5: mgpiFicvVeSgrVtAC00W8A== X-FB-Debug: 23Ihtgji7ywCuyrPrDn706G9PVVhiXxkRhEG80BAGp4RkLnbfZCbbvv0nu+ulAxrurJ3xKhJA64fRrQmt0n3WQ== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400
2024-05-28 05:15:02 UTC	21	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Connection: close
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 32 35 63 32 63 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 72 62 69 74 65 72 4d 69 78 69 6e 22 2c 5b 22 41 72 62 69 74 65 72 22 2c 22 67 75 69 64 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 22 61 72 62 69 74 65 72 24 22 2b 63 28 22 67 75 69 64 22 29 28 29 2c 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 61 3d 7b 5f 67 65 74 41 72 62 69 74 65 72 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 68 29 3f 74 68 69 73 5b 68 5d 3a 74 68 69 73 5b 68 5d 3d 6e 65 77 28 63 28 22 41 72 62 69 74 65 72 22 29 29 28 29 7d 2c 69 6e 66 6f 72 6d 3a 66 75 6e Data Ascii: 25c2c;/FB_PKG_DELIM/__d("ArbiterMixin",["Arbiter","guid"],(function(a,b,c,d,e,f,g){var h="arbiter$"+c("guid")(),i=Object.prototype.hasOwnProperty;a={_getArbiterInstance:function(){return i.call(this,h)?this[h]:this[h]=new(c("Arbiter"))()},inform:fun
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 28 74 79 70 65 6f 66 20 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 62 2b 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 65 6c 73 65 7b 76 61 72 20 66 3b 28 66 3d 74 68 69 73 2e 5f 5f 65 72 72 6f 72 4c 69 73 74 65 6e 65 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 6f 6e 53 74 72 69 6e 67 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 45 72 72 6f 72 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 6f 6e 53 74 72 69 6e 67 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 45 72 72 6f 72 28 65 29 7d 7d 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 74 68 69 73 29 7c 7c 28 74 68 69 73 2e 24 32 3d 62 29 3b 72 65 74 75 72 6e 20 62 7d 3b 62 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 Data Ascii: (typeof e==="string"\|\|e instanceof a)b+=e.toString();else{var f;(f=this.__errorListener)==null?void 0:f.onStringSerializationError==null?void 0:f.onStringSerializationError(e)}}Object.isFrozen(this)\|\|(this.$2=b);return b};b.toJSON=function(){return this.t
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 67 3d 21 30 3b 76 61 72 20 61 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 62 3d 2f 28 3f 3a 4d 53 49 45 2e 28 5c 64 2b 5c 2e 5c 64 2b 29 29 7c 28 3f 3a 28 3f 3a 46 69 72 65 66 6f 78 7c 47 72 61 6e 50 61 72 61 64 69 73 6f 7c 49 63 65 77 65 61 73 65 6c 29 2e 28 5c 64 2b 5c 2e 5c 64 2b 29 29 7c 28 3f 3a 4f 70 65 72 61 28 3f 3a 2e 2b 56 65 72 73 69 6f 6e 2e 7c 2e 29 28 5c 64 2b 5c 2e 5c 64 2b 29 29 7c 28 3f 3a 41 70 70 6c 65 57 65 62 4b 69 74 2e 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 29 7c 28 3f 3a 54 72 69 64 65 6e 74 5c 2f 5c 64 2b 5c 2e 5c 64 2b 2e 2a 72 76 3a 28 5c 64 2b 5c 2e 5c 64 2b 29 29 2f 2e 65 78 65 63 28 61 29 2c 63 3d 2f 28 4d 61 63 20 4f 53 20 58 29 7c 28 57 69 6e 64 6f 77 73 29 7c 28 4c 69 6e 75 78 29 2f 2e 65 78 65 63 Data Ascii: g=!0;var a=navigator.userAgent,b=/(?:MSIE.(\d+\.\d+))\|(?:(?:Firefox\|GranParadiso\|Iceweasel).(\d+\.\d+))\|(?:Opera(?:.+Version.\|.)(\d+\.\d+))\|(?:AppleWebKit.(\d+(?:\.\d+)?))\|(?:Trident\/\d+\.\d+.*rv:(\d+\.\d+))/.exec(a),c=/(Mac OS X)\|(Windows)\|(Linux)/.exec
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 75 78 3d 44 3b 66 2e 69 70 68 6f 6e 65 3d 45 3b 66 2e 6d 6f 62 69 6c 65 3d 46 3b 66 2e 6e 61 74 69 76 65 41 70 70 3d 47 3b 66 2e 61 6e 64 72 6f 69 64 3d 48 3b 66 2e 69 70 61 64 3d 49 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 69 73 53 63 61 6c 61 72 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 2f 73 74 72 69 6e 67 7c 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 2f 2e 74 65 73 74 28 74 79 70 65 6f 66 20 61 29 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 44 4f 4d 22 2c 5b 22 24 22 2c 22 44 4f 4d 51 75 65 72 79 22 2c 22 45 76 65 6e 74 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 46 62 74 52 65 73 75 6c 74 42 61 73 65 22 2c 22 48 54 Data Ascii: ux=D;f.iphone=E;f.mobile=F;f.nativeApp=G;f.android=H;f.ipad=I}),66);__d("isScalar",[],(function(a,b,c,d,e,f){function a(a){return/string\|number\|boolean/.test(typeof a)}f["default"]=a}),66);__d("DOM",["$","DOMQuery","Event","FBLogger","FbtResultBase","HT
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 70 61 72 65 6e 74 22 29 29 3b 76 61 72 20 64 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 6a 28 62 2c 64 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3f 64 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 3a 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 29 7d 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 61 7c 7c 21 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 74 68 72 6f 77 20 63 28 22 66 62 2d 65 72 72 6f 72 22 29 2e 54 41 41 4c 2e 62 6c 61 6d 65 54 6f 50 72 65 76 69 6f 75 73 46 69 6c 65 28 6e 65 77 20 45 72 72 6f 72 28 22 72 65 66 65 72 65 6e 63 65 20 65 6c 65 Data Ascii: t does not have a parent"));var d=a.parentNode;return j(b,d,function(b){a.nextSibling?d.insertBefore(b,a.nextSibling):d.appendChild(b)})},insertBefore:function(a,b){if(!a\|\|!a.parentNode)throw c("fb-error").TAAL.blameToPreviousFile(new Error("reference ele
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 4d 4c 28 67 2b 61 29 3b 66 26 26 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 62 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 7d 65 6c 73 65 20 69 66 28 63 28 22 69 73 54 65 78 74 4e 6f 64 65 22 29 28 62 29 29 7b 62 2e 64 61 74 61 3d 61 3b 72 65 74 75 72 6e 5b 61 5d 7d 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 76 61 72 20 68 3b 66 3d 5b 5d 3b 62 3d 5b 5d 3b 76 61 72 20 69 3d 21 31 3b 61 3d 63 28 22 63 72 65 61 74 65 41 72 72 61 79 46 72 6f 6d 4d 69 78 65 64 22 29 28 61 29 3b 61 2e 6c 65 6e 67 74 68 3d 3d 3d 31 26 26 61 5b 30 5d 69 6e 73 74 61 6e 63 65 6f 66 20 63 28 22 46 62 74 52 65 73 75 6c 74 42 61 73 Data Ascii: ML(g+a);f&&b.removeChild(b.firstChild);return Array.from(b.childNodes)}}else if(c("isTextNode")(b)){b.data=a;return[a]}g=document.createDocumentFragment();var h;f=[];b=[];var i=!1;a=c("createArrayFromMixed")(a);a.length===1&&a[0]instanceof c("FbtResultBas
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 6e 74 65 6e 74 22 3a 62 28 22 44 4f 4d 22 29 2e 70 72 65 70 65 6e 64 43 6f 6e 74 65 6e 74 28 68 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 73 65 72 74 41 66 74 65 72 22 3a 62 28 22 44 4f 4d 22 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 68 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 73 65 72 74 42 65 66 6f 72 65 22 3a 62 28 22 44 4f 4d 22 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 68 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6d 6f 76 65 22 3a 62 28 22 44 4f 4d 22 29 2e 72 65 6d 6f 76 65 28 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 70 6c 61 63 65 22 3a 62 28 22 44 4f 4d 22 29 2e 72 65 70 6c 61 63 65 28 68 2c 65 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 62 28 22 46 42 4c 6f 67 67 65 72 22 29 28 22 61 73 79 6e 63 5f 64 6f Data Ascii: ntent":b("DOM").prependContent(h,e);break;case"insertAfter":b("DOM").insertAfter(h,e);break;case"insertBefore":b("DOM").insertBefore(h,e);break;case"remove":b("DOM").remove(h);break;case"replace":b("DOM").replace(h,e);break;default:b("FBLogger")("async_do
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 20 6e 75 6c 6c 3b 69 66 28 63 28 22 48 54 4d 4c 22 29 2e 69 73 48 54 4d 4c 28 61 29 29 7b 76 61 72 20 62 3d 6e 65 77 28 63 28 22 48 54 4d 4c 22 29 29 28 61 29 3b 72 65 74 75 72 6e 20 62 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7d 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 62 2e 67 65 74 45 72 72 6f 72 49 73 57 61 72 6e 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 65 72 72 6f 72 49 73 57 61 72 6e 69 6e 67 7d 3b 62 2e 69 73 53 69 6c 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 73 69 6c 65 6e 74 45 72 72 6f 72 7d 3b 62 2e 69 73 54 72 61 6e 73 69 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 Data Ascii: null;if(c("HTML").isHTML(a)){var b=new(c("HTML"))(a);return b.getRootNode().textContent}return a.toString()};b.getErrorIsWarning=function(){return!!this.errorIsWarning};b.isSilent=function(){return!!this.silentError};b.isTransient=function(){return!!this
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 22 2f 2a 3c 21 2d 2d 20 66 65 74 63 68 2d 73 74 72 65 61 6d 20 2d 2d 3e 2a 2f 22 7d 29 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 53 74 72 65 61 6d 42 6c 6f 63 6b 52 65 61 64 65 72 22 2c 5b 22 50 72 6f 6d 69 73 65 22 2c 22 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 21 61 2e 67 65 74 52 65 61 64 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 67 65 74 52 65 61 64 65 72 20 6d 65 74 68 6f 64 20 66 6f 75 6e 64 20 6f 6e 20 67 69 76 65 6e 20 6f 62 6a 65 63 74 22 29 3b 74 68 Data Ascii: "/... fetch-stream -->/"});f["default"]=a}),66);__d("StreamBlockReader",["Promise","regeneratorRuntime"],(function(a,b,c,d,e,f){var g;a=function(){function a(a){var c=this;if(!a.getReader)throw new Error("No getReader method found on given object");th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	62540	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	599	OUT	GET /rsrc.php/v3/yV/r/HzxD9aAXSyD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:02 UTC	2005	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Mon, 19 May 2025 19:16:33 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" content-md5: tlUR82STHQmMN6lS/sot9A== X-FB-Debug: GlRIav+oT6tWMZ6UtOz2q0iUeYXxIHrD3TFOTjA4ONNyTHIGea3Ce75P04C9yDMk31XiKl3e1c+Es4oimhdZbw== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3338, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 64 64 36 36 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 2f 39 63 69 73 62 37 46 65 37 69 68 2f 0a 20 2a 2f 0a 5f 5f 64 28 22 69 6d 6d 75 74 61 62 6c 65 2d 33 2e 37 2e 33 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 7b 7d 2c 68 3d 7b 65 78 70 6f 72 74 73 3a 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 79 70 65 6f 66 20 67 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 68 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 68 2e Data Ascii: dd66;/FB_PKG_DELIM//** * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ */__d("immutable-3.7.3",[],(function(a,b,c,d,e,f){"use strict";var g={},h={exports:g};function i(){(function(b,c){typeof g==="object"&&typeof h!=="undefined"?h.
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 3d 22 40 40 5f 5f 49 4d 4d 55 54 41 42 4c 45 5f 4b 45 59 45 44 5f 5f 40 40 22 2c 66 61 3d 22 40 40 5f 5f 49 4d 4d 55 54 41 42 4c 45 5f 49 4e 44 45 58 45 44 5f 5f 40 40 22 2c 67 61 3d 22 40 40 5f 5f 49 4d 4d 55 54 41 42 4c 45 5f 4f 52 44 45 52 45 44 5f 5f 40 40 22 2c 68 61 3d 30 2c 41 3d 31 2c 42 3d 32 2c 69 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 6a 61 3d 22 40 40 69 74 65 72 61 74 6f 72 22 2c 6b 61 3d 69 61 7c 7c 6a 61 3b 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 61 7d 43 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 49 74 65 72 61 74 6f 72 5d 22 7d 3b 43 2e Data Ascii: ="@@__IMMUTABLE_KEYED__@@",fa="@@__IMMUTABLE_INDEXED__@@",ga="@@__IMMUTABLE_ORDERED__@@",ha=0,A=1,B=2,ia=typeof Symbol==="function"&&Symbol.iterator,ja="@@iterator",ka=ia\|\|ja;function C(a){this.next=a}C.prototype.toString=function(){return"[Iterator]"};C.
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 29 3f 61 2e 65 6e 74 72 79 53 65 71 28 29 3a 61 2e 74 6f 49 6e 64 65 78 65 64 53 65 71 28 29 3a 7a 61 28 61 29 7d 48 2e 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 49 6e 64 65 78 65 64 53 65 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 74 6f 53 74 72 69 6e 67 28 22 53 65 71 20 5b 22 2c 22 5d 22 29 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 74 65 72 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 43 61 28 74 68 69 73 2c 61 2c 62 2c 21 31 29 7d 3b 48 2e Data Ascii: )?a.entrySeq():a.toIndexedSeq():za(a)}H.of=function(){return H(arguments)};H.prototype.toIndexedSeq=function(){return this};H.prototype.toString=function(){return this.__toString("Seq [","]")};H.prototype.__iterate=function(a,b){return Ca(this,a,b,!1)};H.
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 64 5b 62 3f 65 2d 66 3a 66 5d 3b 72 65 74 75 72 6e 20 66 2b 2b 3e 65 3f 45 28 29 3a 44 28 61 2c 67 2c 63 5b 67 5d 29 7d 29 7d 3b 73 61 2e 70 72 6f 74 6f 74 79 70 65 5b 67 61 5d 3d 21 30 3b 62 28 74 61 2c 48 29 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 74 68 69 73 2e 5f 69 74 65 72 61 62 6c 65 3d 61 2c 74 68 69 73 2e 73 69 7a 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 61 2e 73 69 7a 65 7d 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 74 65 72 61 74 65 55 6e 63 61 63 68 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 63 68 65 52 65 73 75 6c 74 28 29 2e 5f 5f 69 74 65 72 61 74 65 28 61 2c 62 29 3b 62 3d 74 68 69 73 2e 5f 69 74 65 72 61 62 6c 65 3b 62 3d Data Ascii: nction(){var g=d[b?e-f:f];return f++>e?E():D(a,g,c[g])})};sa.prototype[ga]=!0;b(ta,H);function ta(a){this._iterable=a,this.size=a.length\|\|a.size}ta.prototype.__iterateUncached=function(a,b){if(b)return this.cacheResult().__iterate(a,b);b=this._iterable;b=
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 72 20 6b 65 79 65 64 20 6f 62 6a 65 63 74 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 76 61 72 20 62 3d 42 61 28 61 29 3b 69 66 28 21 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 41 72 72 61 79 20 6f 72 20 69 74 65 72 61 62 6c 65 20 6f 62 6a 65 63 74 20 6f 66 20 76 61 6c 75 65 73 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 76 61 72 20 62 3d 42 61 28 61 29 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 65 77 20 73 61 28 61 29 3b 69 66 28 21 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 41 72 72 61 79 20 6f 72 20 69 74 65 72 61 62 6c 65 Data Ascii: r keyed object: "+a);return b}function za(a){var b=Ba(a);if(!b)throw new TypeError("Expected Array or iterable object of values: "+a);return b}function Aa(a){var b=Ba(a)\|\|typeof a==="object"&&new sa(a);if(!b)throw new TypeError("Expected Array or iterable
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 28 4b 61 29 2e 74 6f 4d 61 70 28 29 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7c 7c 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 76 6f 69 64 20 30 29 7d 76 61 72 20 4d 61 3d 74 79 70 65 6f 66 20 4d 61 74 68 2e 69 6d 75 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 4d 61 74 68 2e 69 6d 75 6c 28 34 32 39 34 39 36 37 32 39 35 2c 32 29 3d 3d 3d 2d 32 3f 4d 61 74 68 2e 69 6d 75 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 7c 30 3b 62 3d 62 7c 30 3b 76 61 72 20 63 3d 61 26 36 35 35 33 35 2c 64 3d 62 26 36 35 35 33 35 3b 72 65 74 75 72 6e 20 63 2a 64 2b 28 28 61 3e 3e 3e 31 36 29 2a 64 2b 63 2a 28 62 3e 3e 3e 31 36 29 3c 3c 31 36 3e 3e Data Ascii: (Ka).toMap():a}function La(a){return a&&(a.constructor===Object\|\|a.constructor===void 0)}var Ma=typeof Math.imul==="function"&&Math.imul(4294967295,2)===-2?Math.imul:function(a,b){a=a\|0;b=b\|0;var c=a&65535,d=b&65535;return cd+((a>>>16)d+c*(b>>>16)<<16>>
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 62 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 5b 58 61 5d 3d 61 3b 65 6c 73 65 20 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 76 6f 69 64 20 30 29 62 5b 58 61 5d 3d 61 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 73 65 74 20 61 20 6e 6f 6e 2d 65 6e 75 6d 65 72 61 62 6c 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 6f 62 6a 65 63 74 2e 22 29 3b 72 65 74 75 72 6e 20 61 7d 76 61 72 20 52 61 3d 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 2c 53 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: type.propertyIsEnumerable.apply(this,arguments)},b.propertyIsEnumerable[Xa]=a;else if(b.nodeType!==void 0)b[Xa]=a;else throw new Error("Unable to set a non-enumerable property on object.");return a}var Ra=Object.isExtensible,Sa=function(){try{Object.defin
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 73 2e 5f 69 74 65 72 2e 5f 5f 69 74 65 72 61 74 6f 72 28 61 2c 62 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 5f 69 74 65 72 2e 5f 5f 69 74 65 72 61 74 6f 72 28 41 2c 62 29 2c 64 3d 62 3f 78 62 28 74 68 69 73 29 3a 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 65 2e 64 6f 6e 65 3f 65 3a 44 28 61 2c 62 3f 2d 2d 64 3a 64 2b 2b 2c 65 2e 76 61 6c 75 65 2c 65 29 7d 29 7d 3b 4d 2e 70 72 6f 74 6f 74 79 70 65 5b 67 61 5d 3d 21 30 3b 62 28 63 62 2c 48 29 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 74 68 69 73 2e 5f 69 74 65 72 3d 61 2c 74 68 69 73 2e 73 69 7a 65 3d 61 2e 73 69 7a 65 7d 63 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 3d 66 75 6e 63 74 69 Data Ascii: s._iter.__iterator(a,b);var c=this._iter.__iterator(A,b),d=b?xb(this):0;return new C(function(){var e=c.next();return e.done?e:D(a,b?--d:d++,e.value,e)})};M.prototype[ga]=!0;b(cb,H);function cb(a){this._iter=a,this.size=a.size}cb.prototype.includes=functi
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 65 52 65 73 75 6c 74 3d 65 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 63 68 65 52 65 73 75 6c 74 3d 41 62 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 61 29 7b 76 61 72 20 62 3d 7a 62 28 61 29 3b 62 2e 5f 69 74 65 72 3d 61 3b 62 2e 73 69 7a 65 3d 61 2e 73 69 7a 65 3b 62 2e 66 6c 69 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 3b 62 2e 72 65 76 65 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 72 65 76 65 72 73 65 2e 61 70 70 6c 79 28 74 68 69 73 29 3b 62 2e 66 6c 69 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 76 65 72 73 65 28 29 7d 3b 72 65 74 75 72 6e 20 62 7d 3b 62 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 6e 63 6c 75 64 65 73 28 62 29 7d 3b 62 2e 69 Data Ascii: eResult=eb.prototype.cacheResult=Ab;function fb(a){var b=zb(a);b._iter=a;b.size=a.size;b.flip=function(){return a};b.reverse=function(){var b=a.reverse.apply(this);b.flip=function(){return a.reverse()};return b};b.has=function(b){return a.includes(b)};b.i
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 29 7d 2c 21 63 29 7d 3b 63 2e 5f 5f 69 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 69 74 65 72 61 74 6f 72 28 62 2c 21 63 29 7d 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7a 62 28 61 29 3b 64 26 26 28 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 61 2e 67 65 74 28 64 2c 67 29 3b 72 65 74 75 72 6e 20 65 21 3d 3d 67 26 26 21 21 62 2e 63 61 6c 6c 28 63 2c 65 2c 64 2c 61 29 7d 2c 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 67 65 74 28 64 2c 67 29 3b 72 65 74 75 72 6e 20 66 21 3d 3d 67 26 26 62 2e 63 61 6c 6c 28 63 2c 66 2c 64 2c 61 29 3f 66 3a 65 7d 29 3b 65 2e 5f 5f 69 74 Data Ascii: )},!c)};c.__iterator=function(b,c){return a.__iterator(b,!c)};return c}function ib(a,b,c,d){var e=zb(a);d&&(e.has=function(d){var e=a.get(d,g);return e!==g&&!!b.call(c,e,d,a)},e.get=function(d,e){var f=a.get(d,g);return f!==g&&b.call(c,f,d,a)?f:e});e.__it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	62543	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	599	OUT	GET /rsrc.php/v3/y3/r/Rn_Qb5J-qbY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:02 UTC	2010	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Sat, 24 May 2025 22:04:28 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" origin-agent-cluster: ?0 content-md5: DJOeFP/m2eIniW96+2LAqA== X-FB-Debug: wbQfm87daNNu5eMm6L//WC2YpymC137PeiSIDmayaD44BoZ1HCPDt225nEmrI1iy0JGYIyk1k1Z9Tb2PlQp2ng== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400
2024-05-28 05:15:02 UTC	21	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Connection: close
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 62 65 32 34 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 6e 7a 61 69 41 64 61 70 74 65 72 22 2c 5b 22 63 72 3a 35 38 36 36 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 35 38 36 36 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 6e 7a 61 69 43 6f 6e 73 74 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 7b 53 45 4e 44 3a 22 42 61 6e 7a 61 69 3a 53 45 4e 44 22 2c 4f 4b 3a 22 42 61 6e 7a 61 69 3a 4f 4b 22 2c 45 52 52 4f 52 3a 22 42 61 6e 7a 61 69 3a 45 52 52 4f 52 22 2c 53 48 55 54 44 4f 57 4e 3a 22 42 61 6e 7a 61 69 3a 53 48 55 54 44 4f 57 4e 22 2c 42 41 53 49 43 3a 22 62 61 73 Data Ascii: be24;/FB_PKG_DELIM/__d("BanzaiAdapter",["cr:5866"],(function(a,b,c,d,e,f,g){g["default"]=b("cr:5866")}),98);__d("BanzaiConsts",[],(function(a,b,c,d,e,f){a={SEND:"Banzai:SEND",OK:"Banzai:OK",ERROR:"Banzai:ERROR",SHUTDOWN:"Banzai:SHUTDOWN",BASIC:"bas
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 21 68 2e 69 73 4c 6f 67 67 65 64 49 6e 28 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 49 4e 54 45 52 4e 5f 53 49 54 45 29 72 65 74 75 72 6e 21 30 3b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 45 4e 54 45 52 50 52 49 53 45 5f 55 53 45 52 7c 7c 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 49 4d 41 47 49 4e 45 5f 55 53 45 52 7c 7c 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 Data Ascii: :function(){var a;if(!h.isLoggedIn())return!1;if((g\|\|(g=b("CurrentUserInitialData"))).IS_INTERN_SITE)return!0;if((g\|\|(g=b("CurrentUserInitialData"))).IS_ENTERPRISE_USER\|\|(g\|\|(g=b("CurrentUserInitialData"))).IS_IMAGINE_USER\|\|(g\|\|(g=b("CurrentUserInitialDat
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 6f 72 6b 55 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 57 4f 52 4b 5f 55 53 45 52 7d 2c 69 73 57 6f 72 6b 72 6f 6f 6d 73 55 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 57 4f 52 4b 52 4f 4f 4d 53 5f 55 53 45 52 7d 2c 69 73 47 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 67 7c 7c 28 67 3d 62 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 49 53 5f 47 52 41 59 7d 2c 69 73 55 6e 64 65 72 61 67 65 3a 66 75 6e Data Ascii: orkUser:function(){return!!(g\|\|(g=b("CurrentUserInitialData"))).IS_WORK_USER},isWorkroomsUser:function(){return!!(g\|\|(g=b("CurrentUserInitialData"))).IS_WORKROOMS_USER},isGray:function(){return!!(g\|\|(g=b("CurrentUserInitialData"))).IS_GRAY},isUnderage:fun
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 28 67 3d 62 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 41 62 73 6f 6c 75 74 65 4e 6f 77 22 29 29 29 28 29 2d 28 68 7c 7c 28 68 3d 62 28 22 42 61 6e 7a 61 69 43 6f 6e 73 74 73 22 29 29 29 2e 45 58 50 49 52 59 7d 2c 66 69 6c 74 65 72 50 6f 73 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 2c 65 29 7b 69 66 28 65 2e 6f 76 65 72 6c 69 6d 69 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 65 2e 73 65 6e 64 4d 69 6e 69 6d 75 6d 4f 6e 65 50 6f 73 74 26 26 61 5b 34 5d 2b 65 2e 63 75 72 72 65 6e 74 53 69 7a 65 3e 28 68 7c 7c 28 68 3d 62 28 22 42 61 6e 7a 61 69 43 6f 6e 73 74 73 22 29 29 29 2e 42 41 54 43 48 5f 53 49 5a 45 5f 4c 49 4d 49 54 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 66 3d 61 2e 5f 5f 6d 65 74 61 3b 69 66 28 66 2e 73 74 61 74 75 73 21 3d 6e 75 6c 6c 26 26 Data Ascii: (g=b("performanceAbsoluteNow")))()-(h\|\|(h=b("BanzaiConsts"))).EXPIRY},filterPost:function(a,c,d,e){if(e.overlimit)return!0;if(!e.sendMinimumOnePost&&a[4]+e.currentSize>(h\|\|(h=b("BanzaiConsts"))).BATCH_SIZE_LIMIT)return!0;var f=a.__meta;if(f.status!=null&&
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 62 53 65 73 73 69 6f 6e 49 64 3a 62 28 22 57 65 62 53 65 73 73 69 6f 6e 22 29 2e 67 65 74 49 64 28 29 7d 3b 72 65 74 75 72 6e 20 64 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 69 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 22 2c 5b 22 63 72 3a 37 33 38 34 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 37 33 38 34 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 53 65 74 49 64 6c 65 54 69 6d 65 6f 75 74 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 5b 22 4e 61 76 69 67 61 74 69 6f 6e 4d 65 74 72 69 63 73 22 2c 22 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 22 2c 22 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: bSessionId:b("WebSession").getId()};return d}};e.exports=i}),null);__d("cancelIdleCallback",["cr:7384"],(function(a,b,c,d,e,f,g){g["default"]=b("cr:7384")}),98);__d("SetIdleTimeoutAcrossTransitions",["NavigationMetrics","cancelIdleCallback","clearTimeou
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 22 42 61 6e 7a 61 69 43 6f 6e 73 74 73 22 29 29 29 2e 4c 41 53 54 5f 53 54 4f 52 41 47 45 5f 46 4c 55 53 48 29 2c 31 30 29 29 3b 76 61 72 20 64 3d 6e 26 26 28 69 7c 7c 28 69 3d 62 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 41 62 73 6f 6c 75 74 65 4e 6f 77 22 29 29 29 28 29 2d 6e 3e 3d 28 68 7c 7c 28 68 3d 62 28 22 42 61 6e 7a 61 69 43 6f 6e 73 74 73 22 29 29 29 2e 53 54 4f 52 41 47 45 5f 46 4c 55 53 48 5f 49 4e 54 45 52 56 41 4c 3b 64 26 26 61 28 29 3b 28 64 7c 7c 21 6e 29 26 26 28 6e 3d 28 69 7c 7c 28 69 3d 62 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 41 62 73 6f 6c 75 74 65 4e 6f 77 22 29 29 29 28 29 2c 28 67 7c 7c 28 67 3d 62 28 22 57 65 62 53 74 6f 72 61 67 65 22 29 29 29 2e 73 65 74 49 74 65 6d 47 75 61 72 64 65 64 28 63 2c 28 68 7c 7c 28 68 3d 62 28 22 42 Data Ascii: "BanzaiConsts"))).LAST_STORAGE_FLUSH),10));var d=n&&(i\|\|(i=b("performanceAbsoluteNow")))()-n>=(h\|\|(h=b("BanzaiConsts"))).STORAGE_FLUSH_INTERVAL;d&&a();(d\|\|!n)&&(n=(i\|\|(i=b("performanceAbsoluteNow")))(),(g\|\|(g=b("WebStorage"))).setItemGuarded(c,(h\|\|(h=b("B
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 6c 29 7b 62 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 7d 62 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 64 29 29 29 7d 29 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 21 31 29 3b 76 61 72 20 63 3d 7b 7d 3b 69 66 28 61 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 63 3b 61 3d 61 2e 73 70 6c 69 74 28 22 26 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2e 73 70 6c 69 74 28 22 3d 22 2c 32 29 2c 66 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: l){b.push(c);return}b.push(encodeURIComponent(c)+"="+encodeURIComponent(String(d)))});return b.join("&")}function a(a,b){b===void 0&&(b=!1);var c={};if(a==="")return c;a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=",2),f=decodeURIComponent
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 65 74 75 72 6e 20 6d 26 26 63 28 22 6c 6f 77 65 72 46 61 63 65 62 6f 6f 6b 44 6f 6d 61 69 6e 22 29 2e 77 61 73 44 6f 6d 61 69 6e 4c 6f 77 65 72 65 64 28 29 3f 77 69 6e 64 6f 77 2e 74 6f 70 3a 6e 75 6c 6c 7d 2c 69 6e 66 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 2e 69 6e 66 6f 72 6d 28 61 29 7d 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6c 2e 73 75 62 73 63 72 69 62 65 28 61 2c 62 29 7d 2c 77 72 61 70 49 6e 54 69 6d 65 53 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 28 22 54 69 6d 65 53 6c 69 63 65 22 29 2e 67 75 61 72 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 7d 2c 62 2c 7b 70 72 6f 70 61 67 61 74 69 6f 6e 54 79 70 65 3a 63 28 22 54 69 6d 65 53 6c 69 63 Data Ascii: eturn m&&c("lowerFacebookDomain").wasDomainLowered()?window.top:null},inform:function(a){l.inform(a)},subscribe:function(a,b){return l.subscribe(a,b)},wrapInTimeSlice:function(a,b){return c("TimeSlice").guard(function(){a()},b,{propagationType:c("TimeSlic
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 73 42 75 66 66 65 72 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 21 67 28 29 3f 21 31 3a 42 75 66 66 65 72 2e 69 73 42 75 66 66 65 72 28 61 29 7d 76 61 72 20 6b 3d 22 41 72 67 75 6d 65 6e 74 20 63 6f 6d 70 72 65 73 73 65 64 20 6d 75 73 74 20 62 65 20 74 79 70 65 20 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 42 75 66 66 65 72 2c 20 6f 72 20 55 69 6e 74 38 41 72 72 61 79 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 21 68 28 61 29 26 26 21 69 28 61 29 26 26 21 6a 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 6b 29 3b 76 61 72 20 62 3d 21 31 2c 63 3d Data Ascii: sBuffer(a))}function i(a){return a instanceof ArrayBuffer}function j(a){return!g()?!1:Buffer.isBuffer(a)}var k="Argument compressed must be type of ArrayBuffer, Buffer, or Uint8Array";function a(a){if(!h(a)&&!i(a)&&!j(a))throw new TypeError(k);var b=!1,c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	62542	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	599	OUT	GET /rsrc.php/v3/yV/r/vjbKCjVd5OR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:02 UTC	2005	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Tue, 20 May 2025 19:09:46 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" content-md5: xkNHXn+eeqm47mzY20/deg== X-FB-Debug: HZGlN0xZDa55TQlzno9A5FM22j23BQjdOwl2rHAsQyNNZzRIaxNsu87n5/NXNEvKJTVDKaW/yXxw4reFkJf8BA== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 61 63 62 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 2f 74 33 68 4f 4c 73 38 77 6c 58 79 2f 0a 20 2a 2f 0a 5f 5f 64 28 22 62 6f 64 79 2d 73 63 72 6f 6c 6c 2d 6c 6f 63 6b 2d 33 2e 31 2e 35 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 7b 7d 2c 68 3d 7b 65 78 70 6f 72 74 73 3a 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 29 62 28 67 29 3b 65 6c 73 65 7b 76 61 72 20 63 Data Ascii: acb;/FB_PKG_DELIM//** * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ */__d("body-scroll-lock-3.1.5",[],(function(a,b,c,d,e,f){"use strict";var g={},h={exports:g};function i(){!function(a,b){if("undefined"!=typeof g)b(g);else{var c
2024-05-28 05:15:02 UTC	1275	IN	Data Raw: 61 72 67 65 74 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 63 2c 66 3d 28 62 3d 62 29 2e 74 61 72 67 65 74 54 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 2d 6b 2c 64 28 62 2e 74 61 72 67 65 74 29 7c 7c 28 61 26 26 30 3d 3d 3d 61 2e 73 63 72 6f 6c 6c 54 6f 70 26 26 30 3c 66 7c 7c 28 61 3d 61 29 26 26 61 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2d 61 2e 73 63 72 6f 6c 6c 54 6f 70 3c 3d 61 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 26 26 66 3c 30 3f 65 28 62 29 3a 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 29 7d 2c 6a 7c 7c 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 65 2c 62 3f 7b 70 61 73 73 69 76 65 3a 21 31 7d 3a 76 6f 69 64 20 30 29 2c 6a 3d 21 30 29 Data Ascii: argetTouches.length&&(a=c,f=(b=b).targetTouches[0].clientY-k,d(b.target)\|\|(a&&0===a.scrollTop&&0<f\|\|(a=a)&&a.scrollHeight-a.scrollTop<=a.clientHeight&&f<0?e(b):b.stopPropagation()))},j\|\|(document.addEventListener("touchmove",e,b?{passive:!1}:void 0),j=!0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	62544	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:01 UTC	610	OUT	GET /rsrc.php/v3ihVQ4/y6/l/en_US/6m6v2_nvObo.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.whatsapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://api.whatsapp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://api.whatsapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:02 UTC	2010	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT Expires: Thu, 22 May 2025 17:11:06 GMT Cache-Control: public,max-age=31536000,immutable report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" X-Content-Type-Options: nosniff reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" origin-agent-cluster: ?0 content-md5: b6zwJ5xZGj2ZoUqVzKwH6w== X-FB-Debug: 4VzDwQtyUq3FEFFWS+eOjQGtZYYZJcw+Vkp13vmUnd/rNlPUbNMZ8RlaNWviGr31zUJet3qnYVobw6kEH27aoQ== cross-origin-resource-policy: cross-origin timing-allow-origin: Accept-Ranges: bytes Transfer-Encoding: chunked Date: Tue, 28 May 2024 05:15:01 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3339, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400
2024-05-28 05:15:02 UTC	21	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Connection: close
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 39 39 62 36 0d 0a 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 72 74 69 6c 6c 65 72 79 53 65 67 6d 65 6e 74 22 2c 5b 22 69 6e 76 61 72 69 61 6e 74 22 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 41 62 73 6f 6c 75 74 65 4e 6f 77 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 76 61 72 20 69 2c 6a 3d 30 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 7c 7c 68 28 30 2c 31 34 39 36 29 2c 22 63 61 74 65 67 6f 72 79 22 69 6e 20 61 26 26 22 64 65 73 63 72 69 70 74 69 6f 6e 22 69 6e 20 61 7c 7c 68 28 30 2c 33 31 33 38 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 29 2c 74 68 69 73 2e 24 31 3d 21 31 2c 74 68 69 73 2e 24 32 3d 62 61 62 65 6c 48 65 6c 70 Data Ascii: 99b6;/FB_PKG_DELIM/__d("ArtillerySegment",["invariant","performanceAbsoluteNow"],(function(a,b,c,d,e,f,g,h){var i,j=0;a=function(){function a(a){a\|\|h(0,1496),"category"in a&&"description"in a\|\|h(0,3138,JSON.stringify(a)),this.$1=!1,this.$2=babelHelp
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 32 2c 7b 69 64 3a 74 68 69 73 2e 24 32 2e 69 64 2c 73 65 67 6d 65 6e 74 73 3a 74 68 69 73 2e 24 33 2e 73 6c 69 63 65 28 29 7d 29 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 41 72 74 69 6c 6c 65 72 79 54 72 61 63 65 22 2c 5b 22 69 6e 76 61 72 69 61 6e 74 22 2c 22 41 72 74 69 6c 6c 65 72 79 53 65 67 6d 65 6e 74 22 2c 22 41 72 74 69 6c 6c 65 72 79 53 65 71 75 65 6e 63 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 Data Ascii: tion(){return babelHelpers["extends"]({},this.$2,{id:this.$2.id,segments:this.$3.slice()})};return a}();g["default"]=a}),98);__d("ArtilleryTrace",["invariant","ArtillerySegment","ArtillerySequence"],(function(a,b,c,d,e,f,g,h){a=function(){function a(){th
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 36 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 65 74 50 6f 73 74 65 64 28 29 2e 67 65 74 50 6f 73 74 44 61 74 61 28 29 7d 29 2c 73 65 67 6d 65 6e 74 73 3a 74 68 69 73 2e 24 37 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 65 74 50 6f 73 74 65 64 28 29 2e 67 65 74 50 6f 73 74 44 61 74 61 28 29 7d 29 2c 6d 61 72 6b 73 3a 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 38 29 2c 63 6f 6e 6e 65 63 74 69 6f 6e 73 3a 74 68 69 73 2e 24 39 2e 73 6c 69 63 65 28 29 7d 29 7d 3b 62 2e 73 65 74 4f 6e 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 30 26 26 68 28 30 2c 34 39 32 33 29 3b 74 68 69 73 2e 24 31 30 3d 61 3b 72 65 Data Ascii: 6.map(function(a){return a.setPosted().getPostData()}),segments:this.$7.map(function(a){return a.setPosted().getPostData()}),marks:babelHelpers["extends"]({},this.$8),connections:this.$9.slice()})};b.setOnPost=function(a){this.$10&&h(0,4923);this.$10=a;re
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 69 66 28 69 5b 61 5d 29 72 65 74 75 72 6e 20 69 5b 61 5d 3b 76 61 72 20 63 3d 6c 28 29 2c 64 3d 69 5b 61 5d 3d 6e 65 77 28 67 7c 7c 28 67 3d 62 28 22 50 72 6f 6d 69 73 65 22 29 29 29 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 62 28 22 70 72 6f 6d 69 73 65 44 6f 6e 65 22 29 28 6d 2e 67 65 74 57 6f 72 6b 65 72 52 65 67 69 73 74 72 61 74 69 6f 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 21 66 29 7b 76 61 72 20 68 3d 62 28 22 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 2e 6c 69 73 74 65 6e 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 61 3d 61 2e 64 61 74 61 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6d 6d Data Ascii: ction(a){if(i[a])return i[a];var c=l(),d=i[a]=new(g\|\|(g=b("Promise")))(function(d,e){b("promiseDone")(m.getWorkerRegistration(a),function(f){if(!f){var h=b("EventListener").listen(window,"message",function(a){(a==null?void 0:(a=a.data)==null?void 0:a.comm
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 3d 21 30 3b 63 28 22 42 61 6e 7a 61 69 22 29 2e 73 75 62 73 63 72 69 62 65 28 63 28 22 42 61 6e 7a 61 69 22 29 2e 53 48 55 54 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 2e 5f 70 6f 73 74 41 6c 6c 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6e 3d 6e 75 6c 6c 2c 6d 3d 6e 75 6c 6c 2c 71 3d 7b 7d 2c 70 3d 7b 7d 2c 6f 3d 6e 75 6c 6c 2c 73 3d 21 31 7d 76 61 72 20 76 3d 7b 69 73 45 6e 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 2c 63 72 65 61 74 65 54 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 29 3b 76 61 72 20 61 3d 6e 65 77 28 63 28 22 41 72 74 69 6c 6c 65 72 79 54 72 61 63 65 22 29 29 28 29 3b 61 2e 73 65 74 4f 6e 50 6f 73 74 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 2e 65 6d 69 74 41 6e 64 48 6f Data Ascii: =!0;c("Banzai").subscribe(c("Banzai").SHUTDOWN,function(){v._postAll()})}function u(){n=null,m=null,q={},p={},o=null,s=!1}var v={isEnabled:function(){return k},createTrace:function(){t();var a=new(c("ArtilleryTrace"))();a.setOnPost(function(a){v.emitAndHo
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 7b 72 65 74 75 72 6e 21 61 2e 69 73 50 6f 73 74 65 64 28 29 26 26 61 2e 70 6f 73 74 28 29 7d 29 7d 7d 3b 63 28 22 6d 69 78 49 6e 45 76 65 6e 74 45 6d 69 74 74 65 72 22 29 28 76 2c 7b 70 6f 73 74 74 72 61 63 65 3a 21 30 7d 29 3b 61 3d 76 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 68 72 6f 6d 65 64 6f 6d 65 22 2c 5b 22 66 62 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2c 62 3d 2f 5e 69 6e 74 65 72 6e 5c 2e 2f 2e 74 65 73 74 28 61 29 3b 69 66 28 62 29 72 65 Data Ascii: {return!a.isPosted()&&a.post()})}};c("mixInEventEmitter")(v,{posttrace:!0});a=v;g["default"]=a}),98);__d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)re
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 63 6f 6c 6f 72 3a 72 65 64 3b 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 74 72 6f 6b 65 3a 31 70 78 20 62 6c 61 63 6b 3b 22 5d 2c 5b 61 2c 64 5d 2c 5b 63 2c 64 5d 2c 5b 22 22 2c 22 22 5d 5d 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 62 69 6e 64 28 63 6f 6e 73 6f 6c 65 2c 22 5c 6e 25 63 22 2b 61 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2c 61 5b 31 5d 29 29 7d 29 7d 67 2e 73 74 61 72 74 3d 61 7d 29 2c 32 32 36 29 3b 0a 5f 5f 64 28 22 44 61 74 61 41 74 74 72 69 62 75 74 65 55 74 69 6c 73 22 2c 5b 22 63 72 3a 36 36 36 39 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 Data Ascii: 0px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226);__d("DataAttributeUtils",["cr:6669"],(function(a,b,c,d,e,f
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 67 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 61 7d 29 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 78 74 2d 76 69 6d 70 5d 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2e 70 75 73 68 28 62 5b 63 5d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 47 65 6e 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 64 3d 62 28 22 63 72 Data Ascii: eElements:function(){var a=g.map(function(a){return document.getElementById(a)}).filter(function(a){return!!a}),b=document.querySelectorAll("[data-xt-vimp]");for(var c=0;c<b.length;c++)a.push(b[c]);return a},getDataAttributeGeneric:function(a,c,d){d=b("cr
2024-05-28 05:15:02 UTC	1500	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 7b 67 65 74 5f 69 6e 74 65 72 6e 5f 72 65 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 7b 76 61 72 20 62 3d 7b 70 72 6f 66 69 6c 65 5f 6d 69 6e 69 66 65 65 64 3a 31 2c 67 62 5f 63 6f 6e 74 65 6e 74 5f 61 6e 64 5f 74 6f 6f 6c 62 61 72 3a 31 2c 67 62 5f 6d 75 66 66 69 6e 5f 61 72 65 61 3a 31 2c 65 67 6f 3a 31 2c 62 6f 6f 6b 6d 61 72 6b 73 5f 6d 65 6e 75 3a 31 2c 6a 65 77 65 6c 42 6f 78 4e 6f 74 69 66 3a 31 2c 6a 65 77 65 6c 4e 6f 74 69 66 3a 31 2c 42 65 65 70 65 72 42 6f 78 3a 31 2c 73 65 61 72 63 68 42 61 72 43 6c 69 63 6b 52 65 66 3a 31 7d 3b 66 6f 72 28 61 3d 61 3b 61 26 26 61 21 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: nction(a,b,c,d,e,f){var g={get_intern_ref:function(a){if(a){var b={profile_minifeed:1,gb_content_and_toolbar:1,gb_muffin_area:1,ego:1,bookmarks_menu:1,jewelBoxNotif:1,jewelNotif:1,BeeperBox:1,searchBarClickRef:1};for(a=a;a&&a!=document.body;a=a.parentNode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	62524	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:03 UTC	1065	OUT	POST /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=1&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1 Host: api.whatsapp.com Connection: keep-alive Content-Length: 1403 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryTnWebqh1i5sBr7aJ Accept: / Origin: https://api.whatsapp.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:03 UTC	1403	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 6e 57 65 62 71 68 31 69 35 73 42 72 37 61 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 38 37 33 33 30 31 39 36 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 6e 57 65 62 71 68 31 69 35 73 42 72 37 61 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 70 6f 73 74 73 22 3a 22 78 51 6a 49 57 31 73 69 5a 6d 46 73 59 32 38 36 63 57 55 79 58 32 70 7a 58 32 56 34 63 47 39 7a Data Ascii: ------WebKitFormBoundaryTnWebqh1i5sBr7aJContent-Disposition: form-data; name="ts"1716873301961------WebKitFormBoundaryTnWebqh1i5sBr7aJContent-Disposition: form-data; name="q"[{"app_id":"256281040558","posts":"xQjIW1siZmFsY286cWUyX2pzX2V4cG9z
2024-05-28 05:15:03 UTC	1635	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob:;script-src 'unsafe-eval' 'unsafe-inline' .fbcdn.net .whatsapp.com .whatsapp.net 'self' data: blob:;style-src 'self' 'unsafe-inline' data: blob: whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net .whatsapp.net;connect-src 'self' https://.whatsapp.com data: blob:;font-src https://.fbcdn.net https://static.whatsapp.net data:;img-src whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net *.whatsapp.net;frame-src whatsapp: 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top
2024-05-28 05:15:03 UTC	2013	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:15:03 UTC	21	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	62546	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:04 UTC	675	OUT	GET /hotel/5659?currencyId=16&lang=pt-BR HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:05 UTC	1364	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.4 Set-Cookie: session_time=1716875104; expires=Tue, 28 May 2024 05:45:04 GMT; Max-Age=1800; path=/ Set-Cookie: PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; expires=Tue, 28 May 2024 05:45:04 GMT; Max-Age=1800; path=/; secure; HttpOnly Set-Cookie: XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:04 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:04 GMT; Max-Age=1800; path=/; secure; httponly
2024-05-28 05:15:05 UTC	309	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 Data Ascii: Expires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidateCache-Control: no-cache, privatePragma: no-cacheVary: Accept-EncodingStrict-Transport-Security: max-age=31536000; includeSubDomainsCF-Cache-Status: DYNAMIC
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f Data Ascii: 7ffa<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Co
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 6b 2e 6f 6d 6e 69 62 65 65 73 2e 63 6f 6d 2f 76 33 2f 63 73 73 2f 76 65 6e 64 6f 72 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 76 33 2f 63 73 73 2f 68 65 61 64 65 72 2e 63 73 73 3f 76 65 72 73 69 6f 6e 3d 31 2e 30 2e 30 2e 33 39 35 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 76 33 2f 63 73 73 2f 66 6f 6f 74 65 72 2e 63 73 73 3f 76 65 72 73 69 6f 6e 3d 31 2e 30 2e 30 2e 33 39 35 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 Data Ascii: k.omnibees.com/v3/css/vendor/bootstrap.min.css"><link rel="stylesheet" type="text/css" href="/v3/css/header.css?version=1.0.0.395"><link rel="stylesheet" type="text/css" href="/v3/css/footer.css?version=1.0.0.395"><link rel="stylesheet" type="text/css"
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 3a 20 23 41 46 41 41 39 36 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 2d 68 6f 74 65 6c 2d 63 75 73 74 6f 6d 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 2d 68 6f 74 65 6c 2d 63 75 73 74 6f 6d 2d 62 74 6e 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 2d 68 6f 74 65 6c 2d 63 75 73 74 6f 6d 2d 62 74 6e 2d 62 67 2d 63 6f 6c 6f 72 3a 20 23 46 46 39 39 31 37 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 2d 68 6f 74 65 6c 2d 63 75 73 74 6f 6d 2d 62 74 6e 2d 62 72 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 Data Ascii: : #AFAA96; --hotel-custom-text-color: #FFFFFF; --hotel-custom-btn-text-color: #FFFFFF; --hotel-custom-btn-bg-color: #FF9917; --hotel-custom-btn-brd-color: #FFFFFF; } html, body {margin: 0; p
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 20 31 3b 7d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 69 64 5e 3d 22 68 6f 74 65 6c 73 22 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 20 31 3b 7d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 69 64 5e 3d 22 68 6f 74 65 6c 73 22 5d 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 6f 70 61 63 69 74 79 3a 20 31 3b 7d 0a 20 20 20 20 20 20 20 20 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 2c 0a 20 20 20 20 20 20 20 20 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 73 74 61 72 74 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 2c 0a 20 20 20 20 20 20 Data Ascii: 1;} input[id^="hotels"]:-ms-input-placeholder { color: #fff;opacity: 1;} input[id^="hotels"]:-moz-placeholder { color: #fff; opacity: 1;} .zc-date[data-in-range] .zc-date-inner, .zc-date[data-start] .zc-date-inner,
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 61 79 20 6f 66 20 74 68 65 20 77 65 65 6b 20 61 6e 64 20 6c 61 73 74 20 64 61 79 20 6f 66 20 74 68 65 20 77 65 65 6b 2c 20 64 6f 6e 74 20 74 6f 73 73 20 73 68 61 64 6f 77 20 6f 75 74 73 69 64 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 2e 6c 69 67 68 74 70 69 63 6b 5f 5f 64 61 79 73 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 31 29 2e 69 73 2d 69 6e 2d 72 61 6e 67 65 3a 6e 6f 74 28 2e 69 73 2d 65 6e 64 2d 64 61 74 65 29 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 64 72 6f 70 2d 73 68 61 64 6f 77 28 31 38 70 78 20 30 70 78 20 30 70 78 20 23 46 46 39 39 31 37 29 20 62 72 69 67 68 74 6e 65 73 73 28 30 2e 38 29 3b 20 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 69 67 68 74 70 69 63 6b 5f 5f 64 61 79 73 20 64 69 76 3a 6e Data Ascii: ay of the week and last day of the week, dont toss shadow outside */ .lightpick__days div:nth-child(7n+1).is-in-range:not(.is-end-date){ filter: drop-shadow(18px 0px 0px #FF9917) brightness(0.8); } .lightpick__days div:n
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 2e 69 73 2d 73 74 61 72 74 2d 64 61 74 65 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 64 72 6f 70 2d 73 68 61 64 6f 77 28 2d 31 37 70 78 20 30 70 78 20 30 70 78 20 23 46 46 39 39 31 37 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 73 2d 69 6e 2d 72 61 6e 67 65 2b 2e 69 73 2d 73 74 61 72 74 2d 64 61 74 65 2c 2e 6c 69 67 68 74 70 69 63 6b 5f 5f 64 61 79 73 20 2e 69 73 2d 69 6e 2d 72 61 6e 67 65 2e 69 73 2d 73 74 61 72 74 2d 64 61 74 65 2c 2e 6c 69 67 68 74 70 69 63 6b 5f 5f 64 61 79 73 20 2e 69 73 2d 69 6e 2d 72 61 6e 67 65 2e 2e 69 73 2d 65 6e 64 2d 64 61 74 65 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 31 30 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 Data Ascii: .is-start-date{ filter: drop-shadow(-17px 0px 0px #FF9917); } .is-in-range+.is-start-date,.lightpick__days .is-in-range.is-start-date,.lightpick__days .is-in-range..is-end-date{ filter: brightness(100%); opaci
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 20 20 20 20 2e 63 75 73 74 6f 6d 2d 61 63 74 69 6f 6e 2d 74 65 78 74 2d 72 65 6d 6f 76 65 7b 63 6f 6c 6f 72 3a 23 46 46 39 39 31 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 61 63 74 69 6f 6e 2d 74 65 78 74 2d 72 65 6d 6f 76 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 61 63 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 65 6d 6f 76 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 46 46 39 39 31 37 3b 7d 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 61 63 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 65 6d 6f 76 65 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 46 46 39 39 31 37 21 69 6d 70 6f 72 74 Data Ascii: .custom-action-text-remove{color:#FF9917 !important;} .custom-action-text-remove:hover{color:#FFFFFF!important;} .custom-action-border-remove{border-color:#FF9917;} .custom-action-border-remove:hover{border-color:#FF9917!import
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 73 76 67 2d 63 6f 6c 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 23 41 46 41 41 39 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 73 76 67 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 23 46 46 39 39 31 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2f 2a 20 46 4f 52 20 53 54 45 50 20 34 20 43 55 53 54 4f 4d 20 43 4f 4c 4f 52 53 20 2a 2f 0a 20 20 20 20 20 20 20 20 2e 63 75 73 74 6f 6d 2d 68 6f 74 65 6c 2d 73 76 67 Data Ascii: !important; } .custom-svg-color { fill:#AFAA96 !important; } .custom-svg-color-primary-color { fill:#FF9917 !important; } /* FOR STEP 4 CUSTOM COLORS */ .custom-hotel-svg
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 63 6f 6e 64 61 72 79 2d 62 67 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 39 39 31 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 2f 2a 52 4f 4f 4d 20 4d 4f 44 41 4c 20 49 43 4f 4e 20 48 4f 56 45 52 20 43 4f 4c 4f 52 2a 2f 0a 0a 20 20 20 20 20 20 20 20 2e 61 6d 65 6e 69 74 79 2d 72 6f 6f 6d 2d 74 6f 6f 6c 74 69 70 3a 68 6f 76 65 72 20 23 50 61 74 68 5f 32 31 37 30 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 23 46 46 39 39 31 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 61 6d 65 6e 69 74 79 2d 72 6f 6f 6d 2d 74 6f 6f 6c 74 69 70 3a 68 6f 76 65 72 20 73 76 67 20 Data Ascii: condary-bg:hover { background:#FF9917 !important; } /ROOM MODAL ICON HOVER COLOR/ .amenity-room-tooltip:hover #Path_2170 { fill:#FF9917 !important; } .amenity-room-tooltip:hover svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	62548	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:04 UTC	653	OUT	GET /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=1&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1 Host: api.whatsapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:05 UTC	1658	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob:;script-src 'unsafe-eval' 'unsafe-inline' .fbcdn.net .whatsapp.com .whatsapp.net 'self' data: blob:;style-src 'self' 'unsafe-inline' data: blob: whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net .whatsapp.net;connect-src 'self' https://.whatsapp.com data: blob:;font-src https://.fbcdn.net https://static.whatsapp.net data:;img-src whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net *.whatsapp.net;frame-src whatsapp: 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top
2024-05-28 05:15:05 UTC	1794	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	62547	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:05 UTC	1395	OUT	GET /v3/css/fonts_v3_css.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:05 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:05 GMT Content-Type: text/css Content-Length: 2304 Connection: close Cf-Bgj: minify Cf-Polished: origSize=3339 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "d0b-618df06cfe9e7-gzip" Last-Modified: Mon, 20 May 2024 09:07:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4761 Expires: Tue, 28 May 2024 17:15:05 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3cf4d7d7d1a-EWR
2024-05-28 05:15:05 UTC	772	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 6f 70 74 69 6f 6e 61 6c 3b 73 72 63 3a 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 33 30 30 2e 65 6f 74 29 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 20 4c 69 67 68 74 27 29 2c 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 33 30 30 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f Data Ascii: @font-face{font-family:roboto;font-style:normal;font-weight:300;font-display:optional;src:url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.eot);src:local('Roboto Light'),local('Roboto-Light'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-300.eot?#iefix) fo
2024-05-28 05:15:05 UTC	1369	IN	Data Raw: 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 Data Ascii: ss/fonts/roboto-v20-latin_latin-ext-regular.eot?#iefix) format('embedded-opentype'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff2) format('woff2'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff) format('woff'),url(/v3/css/fonts/rob
2024-05-28 05:15:05 UTC	163	IN	Data Raw: 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 37 30 30 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 2f 76 33 2f 63 73 73 2f 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2d 76 32 30 2d 6c 61 74 69 6e 5f 6c 61 74 69 6e 2d 65 78 74 2d 37 30 30 2e 73 76 67 23 52 6f 62 6f 74 6f 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 7d Data Ascii: format('woff'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-700.ttf) format('truetype'),url(/v3/css/fonts/roboto-v20-latin_latin-ext-700.svg#Roboto) format('svg')}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	62551	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:05 UTC	1385	OUT	GET /v3/css/vendor/bootstrap.min.css HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:06 UTC	541	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:01 GMT ETag: W/"2606e-618df02adbe34-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 3713 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3d278b67271-EWR
2024-05-28 05:15:06 UTC	828	IN	Data Raw: 37 64 38 33 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7d83/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a Data Ascii: Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adj
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 35 36 62 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 Data Ascii: :80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabinde
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b Data Ascii: isabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 68 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 Data Ascii: -height:1.2}.display-2{font-size:5.5rem;font-weight:300;line-height:1.2}.display-3{font-size:4.5rem;font-weight:300;line-height:1.2}.display-4{font-size:3.5rem;font-weight:300;line-height:1.2}hr{margin-top:1rem;margin-bottom:1rem;border:0;border-top:1px s
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 34 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d Data Ascii: l}.pre-scrollable{max-height:340px;overflow-y:scroll}.container{width:100%;padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}@media (min-width:576px){.container{max-width:540px}}@media (min-width:768px){.container{max-width:720px}}@m
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 7d 2e 63 6f 6c 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 61 75 74 6f 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 Data Ascii: on:relative;width:100%;padding-right:15px;padding-left:15px}.col{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.col-auto{-ms-flex:0 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-1{-ms-flex:0 0 8.333333%;flex:0
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 6f 72 64 65 72 2d 39 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 6f 72 64 65 72 3a 39 7d 2e 6f 72 64 65 72 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 6f 72 64 65 72 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 6f 72 64 65 72 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 32 3b 6f 72 64 65 72 3a 31 32 7d 2e 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e Data Ascii: x-order:8;order:8}.order-9{-ms-flex-order:9;order:9}.order-10{-ms-flex-order:10;order:10}.order-11{-ms-flex-order:11;order:11}.order-12{-ms-flex-order:12;order:12}.offset-1{margin-left:8.333333%}.offset-2{margin-left:16.666667%}.offset-3{margin-left:25%}.
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 Data Ascii: :83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-ms-flex-order:-1;order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-ord
2024-05-28 05:15:06 UTC	1369	IN	Data Raw: 78 2d 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 34 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 Data Ascii: x-width:8.333333%}.col-md-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-md-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-md-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-md-5{-ms-flex:0 0 41.666667%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	62550	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	1389	OUT	GET /v3/css/header.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	600	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Content-Length: 29866 Connection: close Cf-Bgj: minify Cf-Polished: origSize=40797 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "9f5d-618df02ac7614-gzip" Last-Modified: Mon, 20 May 2024 09:06:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5949 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d338b5c358-EWR
2024-05-28 05:15:07 UTC	769	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 64 66 32 7d 62 6f 64 79 3a 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 2f 69 63 6f 6e 73 2f 69 63 6f 6e 73 5f 57 68 69 74 65 2f 69 63 6f 6e 57 68 69 74 65 5f 43 68 65 63 6b 62 6f 78 5f 53 65 6c 65 63 74 65 64 2e 73 76 67 29 7d 2e 68 65 61 64 65 72 2d 74 6f 70 2d 62 61 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 30 3b 70 61 64 64 69 6e 67 3a 31 33 70 78 7d 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 68 Data Ascii: body{background-color:#eaedf2}body::after{position:absolute;width:0;height:0;overflow:hidden;z-index:-1;content:url(/icons/icons_White/iconWhite_Checkbox_Selected.svg)}.header-top-bar{width:100%;position:sticky;top:0;z-index:20;padding:13px}.modal-open .h
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 36 33 32 33 37 7d 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 62 61 72 7b 74 6f 70 3a 31 32 32 70 78 7d 2e 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 62 61 72 2d 73 70 61 63 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 23 6c 6f 79 61 6c 74 79 5f 63 6f 64 65 5b 64 69 73 61 62 6c 65 64 5d 2c 23 67 72 6f 75 70 5f 63 6f 64 65 5b 64 69 73 61 62 6c 65 64 5d 2c 23 43 6f 64 65 5b 64 69 73 61 62 6c 65 64 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 38 64 64 65 38 7d 2e 73 65 63 74 69 6f Data Ascii: 10px 0 rgba(0,0,0,.2);background-color:#263237}.modal-open .header-search-bar{top:122px}.header-search-bar-spacer{content:'';height:100px;transition:.15s ease-in-out}#loyalty_code[disabled],#group_code[disabled],#Code[disabled]{background:#d8dde8}.sectio
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 72 6f 6f 6d 5f 6e 61 6d 65 3a 68 6f 76 65 72 3e 2e 73 69 6e 67 6c 65 5f 72 6f 6f 6d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 65 6e 75 5f 69 74 65 6d 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6d 65 6e 75 5f 69 74 65 6d 73 7b 7a 2d 69 6e 64 65 78 3a 32 35 30 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 66 69 72 73 Data Ascii: ver{cursor:pointer}.room_name:hover>.single_room{text-decoration:underline}.menu_items{display:flex;justify-content:end;align-items:center}#menu_items{z-index:250;height:16px;display:flex;justify-content:flex-end;align-items:center;position:relative}#firs
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 7d 23 6c 6f 67 69 6e 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 69 6d 61 67 65 2d 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 6f 67 69 6e 2d 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 23 73 61 76 65 5f 6c 61 6e 67 5f 63 75 72 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: tion:relative;z-index:200;line-height:15px}#login:hover{cursor:pointer}.image-span{padding-right:5px;position:relative}.login-span{padding-right:15px;line-height:16px}#save_lang_curr{margin-top:20px;display:block;width:-webkit-fill-available;border-radius
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 72 67 69 6e 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 Data Ascii: rgin:10px;display:block;width:-webkit-fill-available;margin:0;font-family:roboto,sans-serif;font-size:14px;font-weight:700;line-height:19px;text-align:left;color:#2c2f33;margin-bottom:20px;-webkit-appearance:none;-moz-appearance:none;background-image:url(
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 61 69 6c 73 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 64 72 6f 70 2d 6c 6f 67 67 65 64 5f 5f 64 65 74 61 69 6c 73 5f 5f 6c 61 73 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 64 72 6f 70 2d 6c 6f 67 67 65 64 5f 5f 64 65 74 61 69 6c 73 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 77 65 6c 63 6f 6d 65 2d 6d 73 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 34 35 35 61 36 34 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 6c 6f 67 67 65 64 2d 77 65 6c 63 6f 6d 65 2d 62 61 63 Data Ascii: ails:hover{cursor:pointer}.drop-logged__details__last{margin-bottom:0}.drop-logged__details img{margin-right:10px}.welcome-msg{font-size:16px;font-weight:700;line-height:1.19;text-align:left;color:#455a64;margin-bottom:8px;display:flex}.logged-welcome-bac
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 66 66 66 7d 23 6c 6f 67 6f 75 74 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 31 3b 63 6f 6c 6f 72 3a 23 34 62 38 63 66 34 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 38 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 6c 6f 67 6f 75 74 2d 62 74 6e 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 67 72 65 65 6e 2d 64 6f 74 7b 68 65 69 67 68 74 3a 32 33 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 2d 36 70 78 7d 23 63 Data Ascii: fff}#logout-btn{background:0 0;font-size:14px;line-height:1.21;color:#4b8cf4;padding-left:48px;text-decoration:underline;display:inline-block;margin-bottom:0}#logout-btn:hover{cursor:pointer}.green-dot{height:23px;position:absolute;left:5px;bottom:-6px}#c
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 64 34 37 30 30 7d 23 6c 6f 67 69 6e 2d 72 65 67 69 73 74 2d 70 6f 70 75 70 20 2e 6d 61 69 6e 2d 68 65 61 64 69 6e 67 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 34 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 70 6f 70 75 70 2d 63 6c 6f 73 65 7b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 6e 74 61 69 6e 7d 2e 70 6f 70 75 70 2d 6c 69 6e 6b 2d 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 36 70 78 Data Ascii: d4700}#login-regist-popup .main-heading h3{font-size:13px;line-height:1.54;color:#333;margin-top:4px;text-align:left;font-weight:400}.popup-close{width:12px;height:12px;object-fit:contain}.popup-link-holder{display:inline-block;position:absolute;right:6px
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 75 5f 63 75 72 72 65 6e 74 20 61 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 34 35 35 61 36 34 7d 2e 75 6e 64 65 72 6c 69 6e 65 2d 6e 61 76 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 35 35 61 36 34 3b 68 65 69 67 68 74 3a 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 65 61 73 65 20 2e 33 37 73 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 65 6e 75 5f 69 63 6f 6e 5f 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 72 Data Ascii: u_current a svg path{fill:#455a64}.underline-nav{background:#455a64;height:2px;position:absolute;bottom:0;transition:all ease .37s;display:none}.menu_icon_holder{display:inline-flex;justify-content:center;align-items:center;height:24px;width:24px;margin-r
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 77 69 64 74 68 3a 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 23 68 6f 74 65 6c 73 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 23 68 6f 74 65 6c 73 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 64 65 31 65 33 7d 23 68 6f 74 65 6c 73 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 39 63 39 66 61 31 7d 23 68 6f 74 65 6c 73 61 75 Data Ascii: t-scrollbar{width:6px;background:0 0}#hotelsautocomplete-list::-webkit-scrollbar-track{background:0 0}#hotelsautocomplete-list::-webkit-scrollbar-thumb{background:#dde1e3}#hotelsautocomplete-list::-webkit-scrollbar-thumb:hover{background:#9c9fa1}#hotelsau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	62558	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	1389	OUT	GET /v3/css/footer.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Content-Length: 1744 Connection: close Cf-Bgj: minify Cf-Polished: origSize=2259 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "8d3-618df02aa5eed-gzip" Last-Modified: Mon, 20 May 2024 09:06:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5687 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d36df40cbe-EWR
2024-05-28 05:15:07 UTC	772	IN	Data Raw: 2e 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 35 34 39 35 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 33 70 78 7d 2e 63 65 6e 74 72 61 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 75 6e 73 65 74 7d 2e 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 70 7b 6d 61 72 67 69 6e 3a 75 6e 73 65 74 7d 23 69 6e 66 6f 2d 62 61 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 70 61 64 64 69 Data Ascii: .top{background-color:#454950;color:#fff}.bottom{background-color:#2c2f33;text-align:center;color:#fff}.top .container{display:flex}.top-logo{margin-right:13px}.central{padding-right:unset}.bottom .container p{margin:unset}#info-bar{padding-top:20px;paddi
2024-05-28 05:15:07 UTC	972	IN	Data Raw: 72 3a 23 66 66 66 7d 23 6f 6d 6e 69 62 65 65 73 2d 74 61 67 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 7d 2e 66 6f 6f 74 65 72 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 63 6f 6e 64 65 6e 73 65 64 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 37 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 6f 6f 74 65 72 2d 74 65 78 74 7b 66 6f 6e Data Ascii: r:#fff}#omnibees-tags{padding-top:15px;padding-bottom:18px}.footer-title{font-size:12px;font-weight:700;font-stretch:condensed;font-style:normal;line-height:1.17;letter-spacing:normal;text-align:left;margin-bottom:5px;display:inline-block}.footer-text{fon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	62552	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	1396	OUT	GET /v3/css/zcalendar_css.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	600	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Content-Length: 12682 Connection: close Cf-Bgj: minify Cf-Polished: origSize=17101 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "42cd-618df02aa5eed-gzip" Last-Modified: Mon, 20 May 2024 09:06:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5704 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d33c1c41b2-EWR
2024-05-28 05:15:07 UTC	769	IN	Data Raw: 2e 7a 63 61 6c 65 6e 64 61 72 2d 77 72 61 70 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 7a 63 61 6c 65 6e 64 61 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 3b 77 69 64 74 68 3a 39 37 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 75 6e 73 65 74 7d 2e 7a 63 2d 6d 6f 6e 74 68 2d 69 6e 66 6f 7b 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: .zcalendar-wrap{overflow:hidden}.zcalendar{margin-left:auto;margin-right:auto;margin-top:1px;background:#fff;color:#2c2f33;position:relative;top:-1px;z-index:2;width:972px;font-family:roboto,sans-serif;display:none;overflow:unset}.zc-month-info{text-align
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 7a 63 2d 62 74 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 7a 63 2d 62 74 6e 2d 70 72 65 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 33 70 78 3b 6c 65 66 74 3a 32 30 2e 35 70 78 7d 2e 6f 70 61 63 69 74 79 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 7a 63 2d 62 74 6e 2d 6e 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 33 70 78 3b 72 69 67 68 74 3a 32 30 2e 35 70 78 7d 2e 7a 63 2d 6d 6f 6e 74 68 73 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 2e 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 2e 35 70 78 3b 70 61 64 Data Ascii: th:100%;height:100%;vertical-align:top}.zc-btn:focus{outline:none}.zc-btn-prev{position:absolute;top:33px;left:20.5px}.opacity{opacity:.5}.zc-btn-next{position:absolute;top:33px;right:20.5px}.zc-months{width:auto;margin-left:20.5px;margin-right:20.5px;pad
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 2d 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 35 32 70 78 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 38 64 64 65 38 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 7a 63 2d 64 61 74 65 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 31 29 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 7a 63 2d 64 61 74 65 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 37 29 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 7a 63 2d 6d 69 Data Ascii: -right:0;height:52px;color:#2c2f33;border:1px solid #d8dde8;display:inline-block}.zc-date[data-disabled] .zc-date-inner{border:0}.zc-date:nth-child(7n+1) .zc-date-inner::after{display:none}.zc-date:nth-child(7n+7) .zc-date-inner::after{display:none}.zc-mi
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 6f 70 65 6e 3d 66 61 6c 73 65 5d 20 2e 7a 63 2d 64 61 74 65 2d 70 72 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 2d 2d 22 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 64 34 37 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 34 30 70 78 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 33 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 33 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 7a 63 2d Data Ascii: xt-decoration:line-through}.zc-date[data-open=false] .zc-date-price:before{content:"--"}.zc-date[data-in-range] .zc-date-inner{background-color:#fd4700;box-shadow:inset 0 0 0 40px rgba(255,255,255,.3);border-color:rgba(255,255,255,.3);border-radius:0}.zc-
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 61 6e 73 70 61 72 65 6e 74 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 73 74 61 72 74 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 20 30 20 30 20 32 70 78 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 65 6e 64 5d 20 2e 7a 63 2d 64 61 74 65 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 32 70 78 20 32 70 78 20 30 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 5d 3a 6e 6f 74 28 5b 64 61 74 61 2d 73 74 61 72 74 5d 29 3a 6e 6f 74 28 5b 64 61 74 61 2d 65 6e 64 5d 29 20 2e 7a 63 2d 64 61 74 65 2d 62 6f 78 7b 77 69 64 74 68 3a 35 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 75 6e 69 78 5d 3a 6e 6f 74 28 5b 64 61 74 61 2d Data Ascii: ansparent}.zc-date[data-start] .zc-date-inner{border-radius:2px 0 0 2px}.zc-date[data-end] .zc-date-inner{border-radius:0 2px 2px 0}.zc-date[data-in-range]:not([data-start]):not([data-end]) .zc-date-box{width:50px;float:left}.zc-date[data-unix]:not([data-
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 37 70 78 7d 2e 7a 63 61 6c 65 6e 64 61 72 20 5b 64 61 74 61 2d 74 69 74 6c 65 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 7a 63 61 6c 65 6e 64 61 72 20 5b 64 61 74 61 2d 74 69 74 6c 65 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 61 74 74 72 28 64 61 74 61 2d 74 69 74 6c 65 29 20 27 5c 61 27 20 61 74 74 72 28 64 61 74 61 2d 6d 69 6e 69 6d 75 6d 2d 73 74 61 79 2d 6d 65 73 73 61 67 65 29 20 27 5c 61 27 20 61 74 74 72 28 64 61 74 61 2d 6d 61 78 69 6d 75 6d 2d 73 74 61 79 2d 6d 65 73 73 61 67 65 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 Data Ascii: splay:inline-block;margin-bottom:3px;border-radius:5px;margin-right:7px}.zcalendar [data-title]{position:relative}.zcalendar [data-title]:after{content:attr(data-title) '\a' attr(data-minimum-stay-message) '\a' attr(data-maximum-stay-message);position:abs
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 3d 74 72 75 65 5d 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 3d 74 72 75 65 5d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 7a 63 2d 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 7d 2e 7a 63 2d 63 6c 6f 73 65 20 69 6d Data Ascii: c-date[data-in-range=true]:hover:after,.zc-date[data-in-range=true]:hover:before{opacity:1!important;visibility:visible!important}.zc-close{position:absolute;top:10px;right:10px;display:none;cursor:pointer;width:30px;height:30px;padding:7.5px}.zc-close im
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 69 63 6f 6e 20 73 70 61 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 32 70 78 7d 23 68 6f 74 65 6c 5f 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6e 65 77 5f 63 72 69 74 65 72 69 61 5f 70 6f 70 75 70 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 72 69 67 68 74 3a 31 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 39 70 78 20 31 30 70 78 20 31 30 70 78 3b 66 6f 6e Data Ascii: icon span{position:relative;top:-2px}#hotel_search .search{position:relative}#new_criteria_popup{display:none;position:absolute;top:50px;background-color:#fff;color:#2c2f33;border-radius:4px;right:18px;min-width:max-content;padding:10px 29px 10px 10px;fon
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 70 78 3b 77 69 64 74 68 3a 35 37 70 78 7d 2e 7a 63 2d 64 61 74 65 73 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 7a 63 2d 64 61 74 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 37 29 7d 2e 7a 63 2d 64 61 74 65 3a 6e 6f 74 28 5b 64 61 74 61 2d 75 6e 69 78 5d 29 2e 7a 63 2d 64 61 74 65 3a 6e 74 68 2d 6c 61 73 74 2d 6f 66 2d 74 79 70 65 28 2d 6e 2b 37 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 7a 63 2d 6d 69 6e 69 6d 75 6d 2d 73 74 61 79 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 33 70 78 7d 2e 7a 63 2d 62 74 6e 2d 70 72 65 76 2c 2e 7a 63 2d 62 74 6e 2d 6e 65 78 74 7b 74 6f 70 3a 37 30 70 78 7d 2e 7a 63 2d 62 74 6e 2d 70 72 65 76 7b 6c 65 66 74 3a 33 34 70 78 7d 2e 7a 63 2d 62 74 6e 2d 6e 65 78 74 7b 72 69 67 68 74 3a 33 34 70 78 7d 2e 7a Data Ascii: px;width:57px}.zc-dates{text-align:left}.zc-date{width:calc(100%/7)}.zc-date:not([data-unix]).zc-date:nth-last-of-type(-n+7){display:none}.zc-minimum-stay{top:0;right:3px}.zc-btn-prev,.zc-btn-next{top:70px}.zc-btn-prev{left:34px}.zc-btn-next{right:34px}.z
2024-05-28 05:15:07 UTC	961	IN	Data Raw: 6c 65 6e 64 61 72 20 5b 64 61 74 61 2d 74 69 74 6c 65 5d 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 29 3a 3a 61 66 74 65 72 2c 2e 7a 63 61 6c 65 6e 64 61 72 20 5b 64 61 74 61 2d 74 69 74 6c 65 5d 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 36 29 3a 3a 61 66 74 65 72 2c 2e 7a 63 61 6c 65 6e 64 61 72 20 5b 64 61 74 61 2d 74 69 74 6c 65 5d 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 35 29 3a 3a 61 66 74 65 72 7b 6c 65 66 74 3a 75 6e 73 65 74 3b 72 69 67 68 74 3a 2d 31 37 70 78 7d 2e 7a 63 2d 69 6e 66 6f 2d 62 61 72 3e 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 7a 63 2d 64 61 74 65 5b 64 61 74 61 2d 69 6e 2d 72 61 6e 67 65 5d Data Ascii: lendar [data-title]:nth-child(7n)::after,.zcalendar [data-title]:nth-child(7n+6)::after,.zcalendar [data-title]:nth-child(7n+5)::after{left:unset;right:-17px}.zc-info-bar>span:nth-child(2){display:block;margin-left:0;margin-top:6px}.zc-date[data-in-range]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	62556	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	595	OUT	GET /BEImages/5643.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:07 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: image/jpeg Content-Length: 2360 Connection: close Cache-Control: public, max-age=2678400 expires: Fri, 28 Jun 2024 05:15:06 GMT x-aspnet-version: 4.0.30319 strict-transport-security: max-age=31536000 access-control-allow-origin: https://myhotel2.omnibees.com CF-Cache-Status: MISS Last-Modified: Tue, 28 May 2024 05:15:06 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d33be28c47-EWR
2024-05-28 05:15:07 UTC	891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 0e c3 51 12 00 04 00 00 00 01 00 00 0e c3 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 Data Ascii: JFIF``ZExifMM*JQQQC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 7e 71 93 ea 38 07 8e c7 2e f2 ee b4 b8 45 de 91 2d cd c5 9a a8 77 b7 9d 48 5d bf ec f1 91 c7 f7 47 bf cc 78 a6 49 af 5b b5 fd ba bc cb b9 30 d1 f9 b8 24 6e eb bb 6f 07 1d 46 31 f7 4e 7a 02 74 96 47 7b 78 6d fe d3 22 5c 4f d6 29 21 da a0 1e 58 60 8c e0 0c 8e 0f a5 1a 0f 53 47 4f bf 87 52 b3 4b 98 09 da dd 54 f5 53 e8 7f ce 0f 51 90 45 5b ae 73 4c 66 b4 f1 55 ed 9e 14 24 f1 f9 e5 50 92 a1 b2 3f 53 92 7f 00 3b 57 47 4d 12 14 51 45 30 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 39 bd 69 0c 5e 21 d3 e6 2b 98 a7 53 0b e4 e3 38 ce 17 3e ac 5b 1f 9f 4e b5 3c c6 17 17 12 b0 95 21 8c 9f f4 77 80 bc 6c 47 de 24 7a e7 3d 0e 32 33 de af ea 9a 74 7a a5 8b 5b bb 6c 6c ee 8e 4c 72 8d d8 ff 00 43 ec 4d 62 5a ea 73 db 16 d3 35 67 4b 79 18 b7 ef 1e 32 56 50 Data Ascii: ~q8.E-wH]GxI[0$noF1NztG{xm"\O)!X`SGORKTSQE[sLfU$P?S;WGMQE0(((((9i^!+S8>[N<!wlG$z=23tz[llLrCMbZs5gKy2VP
2024-05-28 05:15:07 UTC	100	IN	Data Raw: be 28 02 d5 bc a6 68 12 42 a1 4b 0e 99 cd 4b 45 14 c0 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 ff d9 Data Ascii: (hBKKE((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	62555	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	1391	OUT	GET /v3/css/main_css.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	600	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Content-Length: 31340 Connection: close Cf-Bgj: minify Cf-Polished: origSize=42094 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "a46e-618dea4b0f8e8-gzip" Last-Modified: Mon, 20 May 2024 08:39:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4972 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d33ee00f99-EWR
2024-05-28 05:15:07 UTC	769	IN	Data Raw: 68 74 6d 6c 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 6f 76 65 72 6c 61 79 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 76 77 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 30 70 78 7d 2e 63 6f 6e 74 61 69 6e 2d 73 69 64 65 73 2d 70 61 64 64 69 6e 67 2d 7a 65 72 6f 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 63 75 73 74 6f 6d 2d 63 61 72 64 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 63 75 73 74 6f 6d 2d 63 61 72 64 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e Data Ascii: html{overflow-y:overlay}body{font-family:roboto,sans-serif;max-width:100vw;min-height:320px}.contain-sides-padding-zero{padding-left:0;padding-right:0}.custom-card{flex-direction:row}.custom-card:hover{box-shadow:0 0 20px 0 rgba(0,0,0,.4);transition:all .
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 39 63 32 64 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 31 7d 23 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 39 63 32 64 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 31 7d 23 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 39 63 32 64 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 31 7d 23 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 Data Ascii: aceholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input:-moz-placeholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input::-moz-placeholder{color:#b9c2d3;font-size:14px;line-height:1.21}#search-input:-ms-input-placeholder{color:#b
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 32 70 78 20 31 32 70 78 7d 2e 72 61 64 69 6f 2d 63 75 73 74 6f 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 72 61 64 69 6f 2d 63 75 73 74 6f 6d 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 72 61 64 69 6f 2d 63 75 73 74 6f 6d 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 20 27 3b 64 Data Ascii: ight:16px;width:16px;background-size:12px 12px}.radio-custom{display:none}.radio-custom-label{display:inline-flex;align-items:center;cursor:pointer;user-select:none;font-size:13px;line-height:1.15;position:relative}.radio-custom-label:before{content:' ';d
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 5f 68 6f 6c 64 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 63 38 33 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 61 6c 69 67 6e Data Ascii: ;font-style:normal;line-height:1.15;letter-spacing:normal;text-align:left;color:#2c2f33;padding-top:4px}.error_message_holder{width:100%;height:80px;padding:0 20px;background-color:#0c83d9;border-radius:4px;display:flex;justify-content:space-between;align
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 64 65 78 3a 31 3b 72 69 67 68 74 3a 32 30 70 78 7d 2e 72 61 74 65 5f 70 6c 61 6e 5b 64 61 74 61 2d 68 61 73 2d 6c 6f 79 61 6c 74 79 3d 74 72 75 65 5d 20 2e 74 2d 74 69 70 5f 5f 6e 65 78 74 2b 2e 74 2d 74 69 70 20 2e 74 2d 74 69 70 5f 5f 74 65 78 74 3a 68 6f 76 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 61 74 65 5f 70 6c 61 6e 5b 64 61 74 61 2d 68 61 73 2d 6c 6f 79 61 6c 74 79 3d 74 72 75 65 5d 20 2e 72 65 73 74 72 69 63 74 65 64 5f 74 65 78 74 5f 68 6f 6c 64 65 72 20 2e 74 2d 74 69 70 5f 5f 74 65 78 74 7b 74 6f 70 3a 2d 31 35 70 78 3b 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 61 74 65 5f 70 6c 61 6e 5b 64 61 74 61 2d 68 61 73 2d 6c 6f 79 61 6c 74 79 3d 74 72 75 65 5d 20 2e 72 65 73 74 72 69 63 Data Ascii: dex:1;right:20px}.rate_plan[data-has-loyalty=true] .t-tip__next+.t-tip .t-tip__text:hover{display:block!important}.rate_plan[data-has-loyalty=true] .restricted_text_holder .t-tip__text{top:-15px;right:0!important}.rate_plan[data-has-loyalty=true] .restric
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 73 68 61 72 65 5f 5f 68 6f 6c 64 65 72 5f 5f 72 61 74 69 6e 67 7b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 69 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 54 41 5f 73 6f 63 69 61 6c 42 75 74 74 6f 6e 42 75 62 62 6c 65 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 7d 2e 54 41 5f 73 6f 63 69 61 6c 42 75 74 74 6f 6e 42 75 62 62 6c 65 73 20 2e 69 63 6f 6e 2d 73 68 61 72 65 5f 5f 68 6f 6c 64 65 72 5f 5f 72 61 74 69 6e 67 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 63 6f 6e 2d 73 68 61 72 65 5f 5f 68 6f 6c 64 65 72 5f 5f 72 61 74 69 6e 67 20 2e 73 6f 63 69 61 6c 57 69 64 67 65 74 2e 63 78 5f 62 72 61 6e 64 5f 72 65 66 72 65 73 68 31 20 2e 73 6f 63 69 61 6c Data Ascii: share__holder__rating{padding:0;width:auti;cursor:pointer}.TA_socialButtonBubbles{padding-left:9px;padding-top:6px}.TA_socialButtonBubbles .icon-share__holder__rating::before{display:none}.icon-share__holder__rating .socialWidget.cx_brand_refresh1 .social
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 65 72 74 69 63 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 37 30 30 70 78 7d 23 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 70 6f 70 75 70 20 2e 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 23 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 70 6f 70 75 70 20 2e 63 6c 6f 73 65 3a 66 6f 63 75 73 7b 6f 70 61 63 69 74 79 3a 31 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 23 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 70 6f 70 75 70 20 2e 63 6c 6f 73 65 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 70 6f 70 75 70 20 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 2d 69 63 6f 6e 20 73 76 67 Data Ascii: ertical .modal-content{height:700px}#information-popup .close:hover{opacity:1}#information-popup .close:focus{opacity:1;outline:none}#information-popup .close span{display:flex;flex-direction:row;align-items:center}#information-popup .modal-close-icon svg
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 63 32 66 33 33 7d 23 6c 6f 79 61 6c 74 79 2d 69 6e 66 6f 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 68 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 38 64 64 65 38 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 7d 23 63 68 69 6c 64 72 65 6e 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 20 2e 63 6c 6f 73 65 20 69 6d 67 2c 23 73 65 6c 65 63 74 2d 68 6f 74 65 6c 20 2e 63 6c 6f 73 65 20 69 6d 67 2c 23 73 65 73 73 69 6f 6e 2d 65 78 70 69 72 65 64 20 2e 63 6c 6f 73 65 20 69 6d 67 2c 23 70 72 69 76 61 63 79 2d 6d 6f 64 61 6c 20 2e 63 6c 6f 73 65 20 69 6d 67 7b 68 65 69 67 68 74 3a 31 37 70 78 3b 77 69 64 74 68 3a 31 37 70 78 7d 23 70 72 69 76 61 63 79 2d 6d 6f Data Ascii: c2f33}#loyalty-info-modal .modal-content hr{width:100%;height:1px;border-top:1px solid #d8dde8;margin:20px 0}#children-not-allowed .close img,#select-hotel .close img,#session-expired .close img,#privacy-modal .close img{height:17px;width:17px}#privacy-mo
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 68 35 7b 63 6f 6c 6f 72 3a 23 32 37 33 32 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 23 73 65 73 73 69 6f 6e 2d 65 78 70 69 72 65 64 20 70 7b 77 69 64 74 68 3a 32 38 36 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 73 65 73 73 69 6f 6e 2d 65 78 70 69 72 65 64 20 70 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 23 72 6f 6f 6d 2d 6d 6f 64 61 Data Ascii: h5{color:#273240;font-size:28px;text-align:center;margin-bottom:30px}#session-expired p{width:286px;color:#fff;text-align:center;font-size:17px;margin:0 auto;padding:15px 30px;border-radius:4px;cursor:pointer}#session-expired p:hover{opacity:.8}#room-moda
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 65 72 72 6f 72 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 69 6d 67 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6c 6f 61 64 65 64 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 69 6d 67 7b 6f 70 61 63 69 74 79 3a 2e 33 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 68 74 6d 6c 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 20 2e 66 6f 74 6f 72 61 6d Data Ascii: :before,.fotorama__stage:before{background-image:none}.fotorama__wrap{margin:0 auto}.fotorama__error .fotorama__img,.fotorama__loaded .fotorama__img{opacity:.3!important}.fotorama__wrap--css3 .fotorama__html,.fotorama__wrap--css3 .fotorama__stage .fotoram

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	62559	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:06 UTC	1396	OUT	GET /v3/css/cookieConsent.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	598	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:06 GMT Content-Type: text/css Content-Length: 4769 Connection: close Cf-Bgj: minify Cf-Polished: origSize=5794 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "16a2-618dea4b219f7-gzip" Last-Modified: Mon, 20 May 2024 08:39:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4762 Expires: Tue, 28 May 2024 17:15:06 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3d37a6e17bd-EWR
2024-05-28 05:15:07 UTC	771	IN	Data Raw: 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2d 68 6f 6c 64 65 72 7b 70 61 64 64 69 6e 67 3a 32 31 70 78 20 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 2d 35 70 78 20 2d 35 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 34 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 36 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 Data Ascii: .cookie-consent-holder{padding:21px 0;box-shadow:-5px -5px 20px 0 rgba(0,0,0,.24);background-color:#f0f0f0;position:fixed;bottom:0;width:100vw;z-index:10}.cookie-consent-text{font-size:14px;font-weight:600;line-height:1.36;color:#2c2f33;margin-bottom:20px
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 68 65 61 64 65 72 2d 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 35 3b 63 6f 6c 6f 72 3a 23 32 34 32 32 32 33 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6c 6f 73 65 72 7b 64 69 73 70 6c 61 79 Data Ascii: ntent{width:100%}.cookie-popup-header-holder{display:flex;justify-content:space-between;margin-bottom:15px}.cookie-popup-header{font-size:20px;font-weight:700;line-height:1.65;color:#242223;margin-bottom:0;display:inline-block}.cookie-popup-closer{display
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 36 32 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6d 70 61 6e 79 20 70 2c 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6f 6f 6b 69 65 73 2d 64 6f 6d 61 69 6e 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 7d 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6f 6f 6b 69 65 73 2d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 Data Ascii: line-block;height:100%;width:62%;padding-top:8px;padding-bottom:8px}.cookie-popup-cookies-company p,.cookie-popup-cookies-domain p{margin-bottom:0;font-size:12px;font-weight:700;line-height:1.75;color:#2c2f33}.cookie-popup-cookies-body{background:#fff;dis
2024-05-28 05:15:07 UTC	1260	IN	Data Raw: 67 29 7d 2e 61 72 72 6f 77 2d 66 6c 69 70 2d 64 6f 77 6e 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 2e 63 6f 6f 6b 69 65 2d 73 65 6c 65 63 74 2d 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 63 6f 6f 6b 69 65 2d 73 65 6c 65 63 74 2d 68 6f 6c 64 65 72 20 68 34 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 63 6f 6f 6b 69 65 2d 73 65 6c 65 63 Data Ascii: g)}.arrow-flip-down{-moz-transition:transform .5s;-webkit-transition:transform .5s;transition:transform .5s;transform:rotate(0deg)}.cookie-select-holder{display:flex;justify-content:space-between}.cookie-select-holder h4{display:inline-block}.cookie-selec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	62560	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1388	OUT	GET /v3/css/index.css?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	600	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Type: text/css Content-Length: 25496 Connection: close Cf-Bgj: minify Cf-Polished: origSize=33241 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "81d9-618df06cfe5ff-gzip" Last-Modified: Mon, 20 May 2024 09:07:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 2960 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de4851429b-EWR
2024-05-28 05:15:07 UTC	769	IN	Data Raw: 2e 73 65 63 74 69 6f 6e 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 73 65 63 74 69 6f 6e 33 7b 6d 61 72 67 69 6e 3a 35 30 70 78 20 30 20 31 34 32 70 78 7d 2e 73 65 63 74 69 6f 6e 34 7b 6d 61 72 67 69 6e 3a 35 30 70 78 20 30 20 31 31 30 70 78 7d 2e 73 65 63 74 69 6f 6e 35 7b 6d 61 72 67 69 6e 3a 35 30 70 78 20 30 7d 23 69 6d 61 67 65 2d 68 65 69 67 68 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 78 2d 68 65 69 67 68 74 3a 36 30 30 70 78 7d 23 69 6e 64 65 78 5f 63 6f 76 65 72 7b Data Ascii: .section2{border-radius:10px;margin-left:auto;margin-right:auto;padding:0;margin-bottom:53px}.section3{margin:50px 0 142px}.section4{margin:50px 0 110px}.section5{margin:50px 0}#image-height{visibility:hidden;overflow:hidden;max-height:600px}#index_cover{
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 74 72 61 6e 73 70 61 72 65 6e 74 2c 23 66 66 66 66 66 66 29 3b 62 6f 74 74 6f 6d 3a 35 70 78 3b 72 69 67 68 74 3a 33 30 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 23 69 6e 64 65 78 20 69 6e 70 75 74 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 Data Ascii: nt:'';position:absolute;width:50px;height:42px;background:linear-gradient(90deg,transparent,#ffffff);bottom:5px;right:30px;pointer-events:none}#index input{border-radius:2px;background-color:var(--white);outline:none;font-size:14px;font-weight:700;font-st
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 72 74 61 6e 74 7d 23 68 6f 74 65 6c 73 3a 66 6f 63 75 73 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 23 68 6f 74 65 6c 73 3a 66 6f 63 75 73 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 6e 70 75 74 2d 6f 76 65 72 6c 61 79 2b 23 68 6f 74 65 6c 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 33 30 70 78 29 7d 23 63 61 6c 65 6e 64 61 72 5f 64 61 74 65 73 7b 77 69 64 74 68 3a 31 37 36 70 78 Data Ascii: rtant}#hotels:focus:-moz-placeholder{color:#fff!important;opacity:0!important}#hotels:focus::placeholder{color:#fff!important;opacity:0!important}.input-overlay+#hotels{padding-right:40px;background-position-x:calc(100% + 30px)}#calendar_dates{width:176px
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 63 6f 6e 73 2f 69 63 6f 6e 73 5f 47 72 65 79 44 61 72 6b 2f 69 63 6f 6e 47 72 65 79 44 61 72 6b 5f 41 72 72 6f 77 44 6f 77 6e 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 72 69 67 68 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: round-image:url(/icons/icons_GreyDark/iconGreyDark_ArrowDown.svg);background-repeat:no-repeat;background-position-x:right;background-position-y:center;background-origin:content-box;padding-right:8px;padding-left:5px;-webkit-appearance:none;-moz-appearance
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 31 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 67 72 6f 75 70 5f 63 6f 64 65 2e 63 6f 64 65 2d 61 63 74 69 76 65 2c 23 6c 6f 79 61 6c 74 79 5f 63 6f 64 65 2e 63 6f 64 65 2d 61 63 74 69 76 65 2c 23 43 6f 64 65 2e 63 6f 64 65 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 35 34 39 35 30 7d 23 69 6e 64 65 78 20 23 6c 6f 79 61 6c 74 79 5f 63 6f 64 65 2c 23 69 6e 64 65 78 20 23 67 72 6f 75 70 5f 63 6f 64 65 2c 23 69 6e 64 65 78 20 23 43 6f Data Ascii: 14px;font-weight:700;line-height:1.21;color:#2c2f33;padding-left:10px;border-width:0;outline:none;border-radius:2px}#group_code.code-active,#loyalty_code.code-active,#Code.code-active{border-color:#454950}#index #loyalty_code,#index #group_code,#index #Co
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 64 66 32 7d 2e 74 69 74 6c 65 2d 68 6f 6c 64 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 74 69 74 6c 65 2d 68 6f 6c 64 65 72 3e 64 69 76 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 69 74 6c 65 2d 68 6f 6c 64 65 72 20 68 72 7b 77 69 64 74 68 3a 33 35 70 78 3b 68 65 69 67 68 74 3a 34 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 75 6e 73 65 74 7d 23 69 6e 63 65 6e 74 69 76 65 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 75 6e 73 65 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 75 6e 73 65 74 7d 23 69 6e 63 65 6e 74 69 76 65 73 5f 64 69 76 73 7b 64 69 73 70 6c 61 79 Data Ascii: ckground-color:#eaedf2}.title-holder{padding-left:10px;margin-bottom:50px}.title-holder>div{text-align:center}.title-holder hr{width:35px;height:4px;margin:0 auto;border-top:unset}#incentives{padding-left:unset;padding-right:unset}#incentives_divs{display
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 7d 2e 64 6f 75 62 6c 65 5f 69 6e 63 20 2e 63 61 72 64 2d 74 65 78 74 2c 2e 74 72 69 70 6c 65 5f 69 6e 63 20 2e 63 61 72 64 2d 74 65 78 74 2c 2e 71 75 61 64 72 75 70 6c 65 5f 69 6e 63 20 2e 63 61 72 64 2d 74 65 78 74 2c 2e 6d 6f 72 65 5f 74 68 61 6e 5f 66 6f 75 72 5f 69 6e 63 20 2e 63 61 72 64 2d 74 65 78 74 7b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 33 3b 6c 69 6e 65 2d 63 6c 61 6d 70 3a 33 7d 2e 73 69 6e 67 6c 65 20 Data Ascii: dden;text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:2;line-clamp:2;-webkit-box-orient:vertical}.double_inc .card-text,.triple_inc .card-text,.quadruple_inc .card-text,.more_than_four_inc .card-text{-webkit-line-clamp:3;line-clamp:3}.single
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 75 74 65 3b 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 30 70 78 29 7d 2e 69 6e 63 6c 75 64 65 64 5f 73 65 65 5f 6d 6f 72 65 5f 68 6f 6c 64 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 69 6e 2d 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 69 6e 63 6c 75 64 65 64 5f 73 65 65 5f 6d 6f 72 65 5f 68 6f 6c 64 65 72 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 63 35 63 35 63 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 69 6e 63 6c 75 64 65 64 5f 73 65 65 5f 6c 65 73 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 61 72 64 2d 74 65 78 74 2d 70 61 63 6b 61 67 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: ute;bottom:20px;width:calc(100% - 40px)}.included_see_more_holder{margin-left:20px;cursor:pointer;min-width:fit-content}.included_see_more_holder span{color:#c5c5c5;text-decoration:underline}.included_see_less{display:none}.card-text-package{margin-bottom
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 61 64 64 69 6e 67 3a 31 34 70 78 20 32 30 70 78 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 7d 2e 6d 6f 72 65 5f 74 68 61 6e 5f 66 6f 75 72 5f 68 6f 74 65 6c 20 2e 73 68 6f 77 2d 6d 6f 72 65 2c 2e 71 75 61 64 72 75 70 6c 65 5f 68 6f 74 65 6c 20 2e 73 68 6f 77 2d 6d 6f 72 65 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 68 6f 77 2d 6d 6f 72 65 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 35 70 78 20 30 20 34 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 35 70 78 20 Data Ascii: erif;font-size:16px;font-weight:700;padding:14px 20px;height:48px;line-height:18px}.more_than_four_hotel .show-more,.quadruple_hotel .show-more{width:100%}.show-more:hover{-webkit-box-shadow:inset 0 -5px 0 40px rgba(0,0,0,.1);-moz-box-shadow:inset 0 -5px
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 65 72 7d 2e 6d 69 64 64 6c 65 2d 62 61 73 6b 65 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 63 68 65 63 6b 6d 61 72 6b 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 32 63 32 66 33 33 7d 2e 63 68 65 63 6b 6d 61 72 6b 2d 74 69 74 6c 65 20 69 Data Ascii: er}.middle-basket{margin-right:40px;margin-left:40px;white-space:nowrap}.checkmark-title{font-family:roboto,sans-serif;font-size:13px;font-weight:700;font-style:normal;line-height:1.15;letter-spacing:normal;text-align:left;color:#2c2f33}.checkmark-title i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	62561	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1380	OUT	GET /v3/css/vendor/fotorama.css HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	599	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Type: text/css Content-Length: 15138 Connection: close Cf-Bgj: minify Cf-Polished: origSize=17900 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "45ec-618df02adae94-gzip" Last-Modified: Mon, 20 May 2024 09:06:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 481 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de496d0cb8-EWR
2024-05-28 05:15:07 UTC	770	IN	Data Raw: 2f 2a 21 2a 20 46 6f 74 6f 72 61 6d 61 20 34 2e 36 2e 34 20 7c 20 68 74 74 70 3a 2f 2f 66 6f 74 6f 72 61 6d 61 2e 69 6f 2f 6c 69 63 65 6e 73 65 2f 2a 2f 2e 66 6f 74 6f 72 61 6d 61 5f 5f 61 72 72 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 66 75 6c 6c 73 63 72 65 65 6e 2d 69 63 6f 6e 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 68 74 6d 6c 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 69 6d 67 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 5f 5f 66 72 61 6d 65 3a 66 6f 63 75 73 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 64 6f 74 3a 61 66 74 65 72 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 5f 5f 66 72 61 6d 65 3a 66 6f 63 75 73 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 74 68 75 6d 62 3a 61 66 74 65 72 2c 2e 66 6f 74 6f 72 61 Data Ascii: /! Fotorama 4.6.4 \| http://fotorama.io/license/*/.fotorama__arr:focus:after,.fotorama__fullscreen-icon:focus:after,.fotorama__html,.fotorama__img,.fotorama__nav__frame:focus .fotorama__dot:after,.fotorama__nav__frame:focus .fotorama__thumb:after,.fotora
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 73 6f 72 3a 2d 6f 2d 67 72 61 62 62 69 6e 67 3b 63 75 72 73 6f 72 3a 2d 6d 73 2d 67 72 61 62 62 69 6e 67 3b 63 75 72 73 6f 72 3a 67 72 61 62 62 69 6e 67 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 70 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 35 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 35 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 61 72 72 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 66 75 6c 6c 73 63 72 65 65 6e 2d 69 63 6f 6e 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f Data Ascii: sor:-o-grabbing;cursor:-ms-grabbing;cursor:grabbing}.fotorama__spinner{position:absolute!important;top:50%!important;left:50%!important}.fotorama__wrap--css3 .fotorama__arr,.fotorama__wrap--css3 .fotorama__fullscreen-icon,.fotorama__wrap--css3 .fotorama__
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 68 74 6d 6c 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 69 6d 67 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 73 68 61 66 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 33 20 2e 66 6f 74 6f 72 61 6d 61 5f Data Ascii: o .fotorama__stage__frame--video .fotorama__html,.fotorama__wrap--video .fotorama__stage__frame--video .fotorama__img,.fotorama__wrap--video .fotorama__stage__shaft{-webkit-transform:none!important;transform:none!important}.fotorama__wrap--css3 .fotorama_
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 65 5f 5f 66 72 61 6d 65 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 73 68 61 66 74 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 63 6c 6f 73 65 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 61 72 72 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 66 75 6c 6c 73 63 72 65 65 6e 2d 69 63 6f 6e 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 63 6c 6f 73 65 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 69 63 6f 6e 73 2f 66 6f 74 6f 72 61 6d 61 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 7d 40 6d 65 64 Data Ascii: e__frame,.fotorama__stage__shaft,.fotorama__video-close,.fotorama__video-play{-webkit-tap-highlight-color:transparent}.fotorama__arr,.fotorama__fullscreen-icon,.fotorama__video-close,.fotorama__video-play{background:url(/icons/fotorama.png) no-repeat}@med
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 72 74 6c 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 70 61 6e 2d 79 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 20 2e 66 6f 74 Data Ascii: t:100%;position:relative;direction:ltr;z-index:0}.fotorama__wrap--rtl .fotorama__stage__frame{direction:rtl}.fotorama__nav,.fotorama__stage{overflow:hidden;position:relative;max-width:100%}.fotorama__wrap--pan-y{-ms-touch-action:pan-y}.fotorama__wrap .fot
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 6f 72 61 6d 61 5f 5f 6e 61 76 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6f 6e 6c 79 2d 61 63 74 69 76 65 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 7b 6d 61 78 2d 77 69 64 74 68 3a 39 39 39 39 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6f 6e 6c 79 2d 61 63 74 69 76 65 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6f 6e 6c 79 2d 61 63 74 69 76 65 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 2e 66 6f 74 6f 72 61 6d 61 5f 5f 61 63 74 69 76 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 66 6f 74 6f 72 61 6d 61 5f Data Ascii: orama__nav,.fotorama__wrap--only-active .fotorama__stage{max-width:99999px!important}.fotorama__wrap--only-active .fotorama__stage__frame{visibility:hidden}.fotorama__wrap--only-active .fotorama__stage__frame.fotorama__active{visibility:visible}.fotorama_
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 5f 5f 66 72 61 6d 65 3a 66 6f 63 75 73 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 74 68 75 6d 62 7b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 74 68 75 6d 62 2d 62 6f 72 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 39 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 61 66 65 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 20 72 69 67 68 74 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 35 29 2c Data Ascii: ;width:100%;height:100%}.fotorama__nav__frame:focus .fotorama__thumb{z-index:2}.fotorama__thumb-border{position:absolute;z-index:9;top:0;left:0;border-style:solid;border-color:#00afea;background-image:linear-gradient(to bottom right,rgba(255,255,255,.25),
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 68 74 6d 6c 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 73 74 61 67 65 5f 5f 66 72 61 6d 65 2d 2d 76 69 64 65 6f 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 69 6d 67 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 61 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 30 29 22 3b 66 69 6c 74 65 72 3a Data Ascii: ion-property:opacity;transition-timing-function:linear;transition-duration:.3s}.fotorama__wrap--video .fotorama__stage__frame--video .fotorama__html,.fotorama__wrap--video .fotorama__stage__frame--video .fotorama__img{-ms-filter:"alpha(Opacity=0)";filter:
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 64 65 6f 2d 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 65 72 72 6f 72 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6c 6f 61 64 65 64 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 5f 5f 66 72 61 6d 65 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 7b 6f 70 61 63 69 74 79 3a 31 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 6e 61 76 5f 5f 66 72 61 6d 65 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 76 69 64 65 6f 2d 70 6c 61 79 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 36 70 78 3b 6d Data Ascii: deo-play{display:none}.fotorama__error .fotorama__video-play,.fotorama__loaded .fotorama__video-play,.fotorama__nav__frame .fotorama__video-play{opacity:1;display:block}.fotorama__nav__frame .fotorama__video-play{width:32px;height:32px;margin-left:-16px;m
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 2d 63 73 73 32 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6e 6f 2d 63 6f 6e 74 72 6f 6c 73 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 74 6f 67 67 6c 65 2d 61 72 72 6f 77 73 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 66 75 6c 6c 73 63 72 65 65 6e 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 32 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6e 6f 2d 63 6f 6e 74 72 6f 6c 73 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 74 6f 67 67 6c 65 2d 61 72 72 6f 77 73 20 2e 66 6f 74 6f 72 61 6d 61 5f 5f 61 72 72 3a 66 6f 63 75 73 2c 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 63 73 73 32 2e 66 6f 74 6f 72 61 6d 61 5f 5f 77 72 61 70 2d 2d 6e 6f 2d 63 6f 6e 74 72 6f 6c 73 2e Data Ascii: -css2.fotorama__wrap--no-controls.fotorama__wrap--toggle-arrows .fotorama__fullscreen-icon{display:none}.fotorama__wrap--css2.fotorama__wrap--no-controls.fotorama__wrap--toggle-arrows .fotorama__arr:focus,.fotorama__wrap--css2.fotorama__wrap--no-controls.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	62565	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1419	OUT	GET /v3/css/fonts/roboto-v20-latin_latin-ext-300.woff2 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://book.omnibees.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Length: 22544 Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: "5810-618df06d22c05" Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6971 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de3f8d198e-EWR
2024-05-28 05:15:07 UTC	866	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 58 10 00 12 00 00 00 00 d9 7c 00 00 57 ab 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b aa 18 1c 84 62 06 60 00 8e 68 08 58 09 83 3c 11 0c 0a 82 ce 00 82 ab 78 0b 86 74 00 12 83 44 01 36 02 24 03 8d 64 04 20 05 82 7c 07 20 0c 82 3a 1b cd c3 27 d0 6d db 55 b2 48 77 02 ed cb d2 4e fd 0e 26 dc 61 77 ab 5d 93 84 44 1f 15 c1 c6 21 00 fc 7f 51 c9 ff ff 9f 96 54 c6 d8 76 70 e3 80 5a 5a 69 45 0a 44 8a e4 d6 d0 a8 21 1b 7a 26 8d 44 ba d1 48 cc 91 d4 d8 b6 c5 42 5f b1 9a b7 05 cf 70 7f 0c ee 3d eb 29 56 fc 2c 3a 02 9d a1 0a 5a 28 55 5f e9 25 9a ed 1d aa bc ab fe 7e 7c 70 61 de 45 47 a0 be 98 af 30 84 17 54 9c 0a 7f 0a 0f 85 97 4a 7e 76 0a 37 fd 2f 7e 66 a2 b1 ca 37 19 8a ef 48 d5 46 74 42 8b 5b f9 50 Data Ascii: wOF2X\|W\|b`hX<xtD6$d \| :'mUHwN&aw]D!QTvpZZiED!z&DHB_p=)V,:Z(U_%~\|paEG0TJ~v7/~f7HFtB[P
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 10 e0 ca 61 25 87 94 ca 10 62 15 43 d1 4b ea dc 94 2e 4a 17 9d fa c6 6d ef a2 29 7d b9 4c a9 ee a5 9d b9 f7 bf 66 5e 6e e7 4f df 77 51 68 43 e0 26 30 80 05 30 47 de 73 93 d6 ad 5d 3c 4a a9 95 39 ac 22 43 a3 10 18 9b 79 c2 32 41 a5 21 1a 18 08 59 2b 99 80 c1 ed 71 61 16 62 44 fa f8 f4 55 bf 46 ba f7 2d 96 76 7f 70 4e 4c 36 84 90 15 57 44 86 e1 63 bf df ca 32 5c 66 bd cd 5f 3b 3f 01 0e 0a 85 20 09 49 d9 b6 a1 56 e3 dc 97 dc 97 9e 56 9d 6c b0 0d 5d 80 84 c0 9e ef 1f c1 90 80 15 fd 57 8b e7 43 1b 10 f5 78 00 f1 e1 6b 00 c4 97 01 10 5f 07 40 7c 17 00 f1 23 26 f0 b3 d2 c0 5f aa 1f dc fb 3d 01 e6 76 6c 80 a4 4d 9a 80 64 56 5a 81 64 4e 86 80 10 0c 10 07 24 01 02 04 e1 43 20 20 86 92 68 43 53 f7 cd 08 07 80 b7 cf 29 14 0f f0 0e 38 62 02 01 de a1 b3 f0 5b 00 2f 34 Data Ascii: a%bCK.Jm)}Lf^nOwQhC&00Gs]<J9"Cy2A!Y+qabDUF-vpNL6WDc2\f_;? IVVl]WCxk_@\|#&_=vlMdVZdN$C hCS)8b[/4
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 72 2b b4 f6 0d b3 f5 1c 9a 87 35 a2 b5 cf 98 da 73 ab 39 cb f7 31 f2 10 17 6c e7 89 24 e8 51 91 f1 f7 52 a4 47 ce d6 ad 68 d1 f4 a8 02 95 d9 9c a4 69 9a d2 12 ad 53 3d 2b b2 3f b0 44 19 2d f4 dd 9e e0 a7 25 55 db 7a d3 96 40 4e 3a fe 33 b0 4f 44 ee d2 fd 59 59 31 1b 3c cc 6a c8 82 da 76 75 36 83 b9 4e 1f 97 de c7 25 a5 c6 cd a9 ea 6c a8 bd f1 73 d7 fb 96 aa 24 cc 69 8a 75 66 12 23 28 6f d1 93 7e 70 e5 b3 f2 0c 56 bb df 7e 33 ce 0f 99 96 50 db fe ab 1a 39 4e 02 03 63 d8 31 f5 01 1b 7d 50 f0 21 e9 57 81 d3 12 69 16 f2 f8 a4 1f b9 26 78 30 4b 3e 3f 88 f3 0b 60 cb 81 20 4e be 28 a8 f3 8b e1 c6 c3 55 32 7d 09 4a cf 7f 9d 6e f7 48 32 28 65 5f f7 5f 29 c7 21 ff ff 5d 81 cf 81 51 14 ee 08 40 45 34 0a bc a2 14 2d 21 31 8e 29 72 cc 63 2e 36 88 20 c4 c5 2a 56 23 25 Data Ascii: r+5s91l$QRGhiS=+?D-%Uz@N:3ODYY1<jvu6N%ls$iuf#(o~pV~3P9Nc1}P!Wi&x0K>?` N(U2}JnH2(e__)!]Q@E4-!1)rc.6 *V#%
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: d2 2a f5 e9 df 7d 5b ca a4 54 4a a4 58 0a 72 98 c4 49 a4 98 28 e0 f2 33 01 2e 3f e5 72 7e fb 31 6f bf f7 df fa 37 a4 57 3c 1b a8 c6 fa cc ec 37 b6 4e 6f 89 c3 29 f7 59 25 01 7b fb ba 39 82 d7 bf 9a f0 45 82 8f fe 7d 1d e1 2f e0 2b 49 81 88 13 4f 7c 09 f1 8d 94 d0 4b b4 c4 48 ac c4 49 3c df 49 fb fa c2 77 95 2e 23 82 11 8a 70 44 22 2a d3 07 59 b2 7d 92 13 db d8 c5 3e 0e 71 8c 93 dc 38 c7 45 0b 45 b9 d5 af 79 c8 93 1f cf 78 c5 3b e8 f8 bc ee 7b a7 40 e1 57 1c 66 8a 14 27 3a e4 8a ab bf 3f c1 a1 23 a7 61 96 bf 73 3b 95 a9 0a 29 51 a1 24 26 f7 8c a5 cf 03 8c 00 ae 27 00 80 ae 2e c8 ed f8 99 15 f6 19 b7 3f d9 4d 53 cc d7 67 7f 81 5b 16 da 64 84 cd 76 78 b0 bf d3 97 76 39 e4 f9 fe 61 77 1c 71 52 c4 29 a7 7d e5 4c 5c b8 21 9a 5c 74 c9 37 2e c7 8d 26 51 b7 6f c2 Data Ascii: }[TJXrI(3.?r~1o7W<7No)Y%{9E}/+IO\|KHI<Iw.#pD"Y}>q8EEyx;{@Wf':?#as;)Q$&'.?MSg[dvxv9awqR)}L\!\t7.&Qo
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: d3 e6 e6 5e b2 dd d2 ed a6 19 07 a0 1c 72 15 06 2e b7 cc fd 8b a6 97 4e ca 66 ef f9 6b 89 26 90 90 b0 1c 79 5a c4 b6 3b 4f 92 08 2d 7d bb 2d da 49 43 c6 1f 63 8d 48 b6 71 8f ef 8c 71 54 2a 6a 07 ca dc fd c0 93 5b ef 47 72 94 1b 49 d9 b0 af 5f 42 d0 2c 92 30 90 43 6e 88 c2 93 a8 aa bb dd 08 c2 66 14 0d 4f 18 5e 9b d5 44 ad c8 11 a0 65 dd 54 2a 05 75 26 bb 45 9c 77 7b 5b e7 21 50 1b 91 c9 d6 27 c6 86 18 a5 a1 24 81 76 ad 78 92 d9 25 1d ed 2f 66 57 26 a4 0f f4 c1 41 44 fd b4 1c 38 aa 15 59 fe bf db cd 9d c5 43 73 bb d7 61 86 02 cf dc 33 e2 ba 81 53 98 60 af fc a3 b9 18 26 7f f3 0a d5 cc 9e 19 74 06 6d a2 30 c2 cd 2c 66 cb 3d 1b 92 ad e2 ec 45 ec 59 ab 16 72 7c 7c f2 ef a0 fe f9 e4 87 a9 8c f2 b4 73 96 fe df ca f3 c9 64 6d 63 57 fd f3 39 96 b0 49 c2 53 9a 45 Data Ascii: ^r.Nfk&yZ;O-}-ICcHqqTj[GrI_B,0CnfO^DeTu&Ew{[!P'$vx%/fW&AD8YCsa3S`&tm0,f=EYr\|\|sdmcW9ISE
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 71 41 e8 35 26 39 d6 e3 0a f2 14 42 a1 af fc de 00 b0 c0 13 ed 8d a5 6a 51 10 1c 71 13 3a d9 ac d4 2e 2f 5b 17 ef c4 79 4b 8b 63 53 8e 56 8d 53 8e 19 26 4f 36 86 7a 7e a1 9a 8d a2 4e 83 02 35 c8 1f 58 20 63 74 41 02 16 d9 c8 95 e4 25 68 b4 b8 e9 07 78 f7 23 3a 59 b0 d7 89 7a f2 c3 96 34 34 27 62 a8 e2 66 a1 c4 d7 b5 38 c9 05 e2 5a 8e 39 88 91 ee be 2f 98 f2 3a 9f e7 a1 7c 88 02 e9 f8 d1 b2 58 86 26 b5 91 a5 e4 21 5f 46 61 b2 55 75 a1 be 10 47 e9 c4 83 32 c1 4e cd 5e 52 07 44 89 fa de e5 23 f6 e3 8f 99 77 37 bc 4f 6d 6e 52 a2 69 0c 8f f9 97 98 3d 2d 3e 9b 61 f3 31 6d db 39 c3 63 97 4c 8b 84 5c f0 5d 4b c6 15 03 6c 17 bb 77 4c df aa 0a 55 db 9c e3 04 dd 1a d4 30 e6 b5 ed 1e d0 21 f6 58 0e 60 9f 7a 87 d6 48 72 53 25 a4 24 19 f2 7f 54 62 42 09 53 6c 2b 0c 04 Data Ascii: qA5&9BjQq:./[yKcSVS&O6z~N5X ctA%hx#:Yz44'bf8Z9/:\|X&!_FaUuG2N^RD#w7OmnRi=->a1m9cL\]KlwLU0!X`zHrS%$TbBSl+
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 72 68 d2 c2 f6 4a 3f 36 f6 5b ed bd 92 a5 7f 36 3c 8a 3c 14 bf 0a 53 9b 58 fb ec ea ea e2 ec de a6 34 52 48 c8 c8 22 86 3c b7 b7 31 e6 9f 4c 0d 93 4a bb 96 35 14 3f 7a ba b7 9c b8 e9 17 39 42 21 65 dd ef 2a af ec a8 29 2b 1c a9 18 20 25 a8 24 ac ef 61 f6 82 49 c1 9d 86 37 c4 fe 26 49 8a bd e2 d5 55 72 35 7f f1 d1 78 76 93 10 a2 70 18 6e 5d 3d fb f1 62 7d 73 ef df 93 89 c3 35 e8 44 18 b4 b8 b5 3c af aa 66 76 b0 ae 67 f1 b6 63 cc 0d 23 2d 7f a5 fe 51 7f 66 5a 29 05 16 a8 86 dd 30 2a 6c 6a 97 fe 79 ae ff de 6c 6c dc 0a ad cc 31 29 cd a7 c3 18 f2 12 13 3a 93 2a ec 87 9d 78 f0 b5 2a bb e3 75 7b 47 c7 13 8c 6e 73 a0 f8 41 60 8c 78 b3 b9 26 76 5c 51 5b 49 3d 24 a9 37 50 32 e6 46 d9 64 ec e8 bf 97 2b 6b 7f 5f 8c 51 0a ee c7 de 08 94 8c eb 0d e9 ff b0 1e ff 69 83 Data Ascii: rhJ?6[6<<SX4RH"<1LJ5?z9B!e)+ %$aI7&IUr5xvpn]=b}s5D<fvgc#-QfZ)0ljyll1):xu{GnsA`x&v\Q[I=$7P2Fd+k_Qi
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: f1 75 ac bb ff e9 3d 70 3d 50 2d 6c c9 f8 cb 91 34 16 76 c3 eb cb f3 5e d0 62 2c c1 35 95 98 ae ab c0 f6 ef ed f5 f1 dd b0 56 9a a2 60 80 00 44 9f 10 ea f6 d4 9b ab b4 44 f0 f3 e6 0f 65 61 b5 c1 d7 f1 1f 90 0f f7 8b 5b 3e 62 a5 6c 62 da b2 e9 08 61 34 e8 90 86 31 57 fc fa 99 c4 f9 d5 3a c2 8f a7 29 d9 bd ef d6 2e 75 84 5d 8a 6d a9 8c 6b e8 fd b8 26 f6 a4 f7 bd 65 a0 f8 df ed 1b f7 5f 85 76 78 12 01 02 04 d3 e4 85 36 be 1d dd 97 06 48 74 4f 9a bf 94 bd 76 7b f0 d7 6d f5 55 59 eb 91 8f 36 2c f3 4d 1a f9 a4 4c aa 8a f4 7b 23 37 76 f6 1d e3 47 03 1a ae a1 d5 ef 75 5e 85 46 1a 08 73 b5 a4 09 56 d8 df b4 a1 59 58 4b 06 13 4d 65 eb 34 e6 64 b3 0f dd 97 d4 d2 d6 53 66 58 47 ef c3 a7 e1 13 14 1d 92 0a 46 83 37 71 81 e2 ff b7 af df 7f 1d da 4d 5b 19 7c 75 e5 e3 e9 Data Ascii: u=p=P-l4v^b,5V`DDea[>blba41W:).u]mk&e_vx6HtOv{mUY6,ML{#7vGu^FsVYXKMe4dSfXGF7qM[\|u
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: cf c5 9b cd 8d 20 97 66 fb 9c cd 9f ce cd 9a 3f ee 77 ae 48 9f fa 64 e7 14 98 16 91 14 ee 7b ab 25 aa 21 4b cb d1 da dd 16 85 35 36 0d a0 c5 36 27 a6 52 0a 72 53 35 dc 78 9c 2c 6d 94 43 35 0e db 12 de 15 c6 26 c2 13 12 49 fc f7 02 a4 f9 30 9b 8a 65 73 65 be df 7e 9c 39 fd 2d e5 30 d7 d7 a2 28 4a b5 12 a3 36 29 f5 52 eb 65 45 fb ee b6 89 52 9b e5 1e 1f 23 d1 26 e0 a2 ea e8 98 94 6c 1d 13 1e 55 7c f9 25 83 54 28 76 ad 10 69 6e 86 1a 45 f5 db e2 ec 8d 1c 9d 4c fd 41 5d 35 b2 46 3a 81 de 81 3c 12 be 4b b8 9c 1c 5f 4c 5e ee e3 82 c2 b9 dc c2 6c ac 81 8b 73 b2 a3 b3 81 91 23 52 5f 0f 89 d4 16 87 69 a5 61 d3 06 08 03 35 d8 9a 01 02 e7 d5 53 03 8c 81 de ed 72 0d 0b 1d 75 ff 20 33 1d 1b 84 b5 b3 bb 8b 99 3f be 3a e7 6f 0e 19 8b 89 88 c2 ee 3c 1d 70 86 de b3 77 b2 Data Ascii: f?wHd{%!K566'RrS5x,mC5&I0ese~9-0(J6)ReER#&lU\|%T(vinELA]5F:<K_L^ls#R_ia5Sru 3?:o<pw
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 2d d7 62 ee 6e c0 cd fd 93 b9 7c d6 a1 fc e1 cf 65 cc b5 a4 cd ef f2 be 06 a9 a1 99 d0 d6 9a 4b 17 17 29 7f 0f 7d 2f a9 c3 05 69 6b 9b a5 6b c2 c6 8c 5e d6 45 fb 45 87 a4 7e 0f b7 56 a8 de 55 d2 0a 69 ca 96 06 a6 1b e7 b2 e4 c1 2d 6d 69 cf b1 e6 1e 01 34 fe 89 65 84 c6 d8 89 2c 76 bb 2a f0 7a d4 95 71 49 df 86 c1 65 c8 03 86 73 b2 9a 9c 87 a4 43 60 92 fc 8a 70 15 fe ac 56 c9 60 ea cd 5c 4c bd b8 2c fb 3b 92 fb f9 9b ea 93 53 8b e7 0d 59 f8 d2 f1 30 57 a6 ae 11 e9 b1 a9 95 01 73 f5 23 2d 74 bd 9b a0 e7 c6 c9 b2 b8 b2 29 31 2f 8b 06 1d 0e 4a 97 58 b3 98 42 a1 15 b4 39 c3 06 b0 35 c1 8b da 6b 7b 73 d5 d1 8c e8 6e b5 3c 78 64 17 c9 09 25 5b 25 6f a6 45 7f 2f 56 2b 25 fd 5c c9 8a 99 3b 38 7b e1 fd 4f 60 68 e6 7b 55 64 85 9e b1 82 5d 4a 26 54 ec 5f fc d0 3c 5b Data Ascii: -bn\|eK)}/ikk^EE~VUi-mi4e,v*zqIesC`pV`\L,;SY0Ws#-t)1/JXB95k{sn<xd%[%oE/V+%\;8{O`h{Ud]J&T_<[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	62564	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1423	OUT	GET /v3/css/fonts/roboto-v20-latin_latin-ext-regular.woff2 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://book.omnibees.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Length: 22644 Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: "5874-618dea1b7676a" Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6971 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de4a508c99-EWR
2024-05-28 05:15:07 UTC	866	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 58 74 00 12 00 00 00 00 da c8 00 00 58 0e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b aa 18 1c 84 62 06 60 00 8e 68 08 54 09 83 3c 11 0c 0a 82 d0 48 82 ae 49 0b 86 74 00 12 83 44 01 36 02 24 03 8d 64 04 20 05 82 74 07 20 0c 82 49 1b 21 c5 15 ca 6d 17 71 3b 00 ef a6 bb 67 57 30 dd e6 a1 dc 0e fb 8a c8 36 30 32 10 6c 1c 00 90 fe 8b 09 fe ff 98 40 65 0c 69 bd e9 06 2a 67 e0 10 1c 23 19 45 09 d2 d1 ae 11 d3 b3 53 da ca c0 97 b0 56 3f ab 34 6f dd 70 7d 68 75 ec c2 c2 e5 89 0d 16 14 f6 a5 be 2d ff 22 ca 08 8d 90 49 9b 0e 26 fa 62 f3 a3 7d e6 de 2e 89 94 10 1e be 96 35 ce e0 e0 4a 8f e9 bf 8f 3b 03 db 46 fe 24 27 2f cf 3f cf af 5c bf f6 b5 57 9d 38 30 e2 81 11 37 eb ef 26 a9 33 44 73 bb 5f 11 4a Data Ascii: wOF2XtX\|b`hT<HItD6$d t I!mq;gW0602l@ei*g#ESV?4op}hu-"I&b}.5J;F$'/?\W807&3Ds_J
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: f0 21 45 31 7c 22 b2 5f a7 f9 87 b9 ed 1e 98 bd d8 81 72 df 74 82 f2 45 5c 06 94 2f 67 0a f4 9d 60 80 63 80 53 20 40 2c 98 f9 fb 1c 21 47 07 e2 76 77 b0 72 04 3c 8f 4d c6 e3 00 cf 13 f1 41 e1 80 e7 69 7e 71 91 80 07 02 20 a8 2e f1 d4 c7 e3 23 01 63 73 bb 1f 01 06 dc 9f 79 3b 04 e5 92 35 b7 be b9 29 6c 66 8f bf 78 33 6a 19 9b e3 da 5c bf d7 ab 96 b7 3e ae af eb 77 ff 3e 00 e2 2e 1b eb 78 d5 a6 b2 05 6f 72 a3 72 b3 19 37 36 9b e9 bf d9 1c ee 0d 90 3f bf b5 ce 2f 72 70 31 c6 6f d7 d9 cc 16 41 73 59 fb d0 df 1b eb 76 bf 0d 1b 74 5f a1 fa 3b db 82 d5 cc 40 6b ab 96 91 78 8b 6d e3 36 ce ec 36 c1 8a 86 12 07 52 b6 da 06 92 f1 04 b4 41 5a 5b e1 08 a9 f0 3b d4 0c 38 42 1d 59 61 cb 8d ed fb 2b 02 ca 09 27 61 88 39 47 82 a4 f3 64 c9 51 a4 44 99 0a 35 1a 34 69 d3 a1 Data Ascii: !E1\|"_rtE\/g`cS @,!Gvwr<MAi~q .#csy;5)lfx3j\>w>.xorr76?/rp1oAsYvt_;@kxm66RAZ[;8BYa+'a9GdQD54i
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: c9 e0 2c 42 6f 54 a1 9a 0d 38 6a 83 b0 db 60 d0 85 e1 c4 48 42 b8 40 09 13 35 3a 56 a2 31 53 dc cc 61 e3 63 d5 3d 3f 7b 8e 04 38 db 44 b8 77 2f ca 93 b7 b3 8a 6d e7 90 bb 97 30 6c 9c a4 49 2a fb de 3f 28 e7 3d fe ff 3d 7a 2a ff da b9 4b 48 f5 d3 ac 2a bf ae 69 f5 bb b6 0e a9 5d 5d 32 7a 7a 64 f6 f5 c9 1a 18 90 3d 3c 2c 67 74 54 ee f8 b8 bc c9 49 f9 d3 d3 0a 66 67 15 ce 6f 23 ec ee aa d9 df 47 3e 79 52 6d 28 a4 ee f4 69 f5 67 cf 9a ce 9f 37 5f bc 68 b9 7c d9 7a f5 aa ed fa 75 fb cd 9b 8e db b7 9d 77 9f ba 5e bd 72 bf 79 e3 79 f7 ce fb e1 b3 ef eb 7f bf ea af 80 ab 18 46 c5 f3 3a a9 54 e7 cc 19 6c 6b ab b1 b3 93 d8 db 43 0e 0e 98 2b 57 b4 93 13 e3 da b5 d2 9d 3b c8 0b 2f e4 de 78 c3 ba 77 4f 7b f0 a0 f5 8e 77 d4 de f5 2e ef 3d ef 89 a0 d1 a1 83 8d 31 63 28 Data Ascii: ,BoT8j`HB@5:V1Sac=?{8Dw/m0lI?(==zKH*i]]2zzd=<,gtTIfgo#G>yRm(ig7_h\|zuw^ryyF:TlkC+W;/xwO{w.=1c(
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: be 54 e7 47 6f 66 cb 00 f0 9b cf 89 dc c9 ea cf 8b 91 fe 8b c2 91 b2 ed fb f7 5b c2 2b 40 8e dc c0 33 32 b3 b2 c9 93 1f c6 1c e4 48 8e e6 58 8e 2b 50 f8 1b c3 d5 8a a0 28 02 11 8c 50 84 23 a2 d8 1e a2 12 ef 94 c6 3e 0e c1 c6 31 4e 71 56 16 97 b8 36 c9 1d 92 67 5f 9c 37 92 f2 f8 c4 37 7e f1 4f c0 7b bf bd 54 a8 fc d5 a1 3b 55 aa 93 92 54 29 b3 5f 87 d9 de 3b 70 14 d6 7c 38 0d 69 4c 53 92 92 9c b4 a4 67 dc d5 8c 99 73 12 60 3c 4a b6 b9 87 61 43 39 7e 71 f1 ba 33 5e 61 dc 0a b4 7a a3 cd a0 80 7b c8 5b 97 4c 8b 32 63 d1 87 7b 49 b6 65 f7 7c bd ef db f7 c0 a6 7f 1e 7a 24 c7 e3 da fa 81 7c 79 6e 5b 9e 9d 7a dd 10 e3 7e 03 05 de d6 61 20 b6 17 f8 a4 d0 e7 f5 dd 76 c6 0f 3f 11 fc f2 8f c0 fe 0f c5 75 dc 10 1b d1 8b 3d 60 6f 20 8e 03 88 80 5e 62 a0 74 89 07 94 0c Data Ascii: TGof[+@32HX+P(P#>1NqV6g_77~O{T;UT)_;p\|8iLSgs`<JaC9~q3^az{[L2c{Ie\|z$\|yn[z~a v?u=`o ^bt
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: d7 d4 db 6d 80 61 6c 85 4b 38 76 11 c3 0d 60 00 3c a8 d6 a7 6d 11 18 92 6e 24 55 f5 e5 5a 6c 3c 2a ba 5a 5e 30 33 35 00 dc 5c 6e fd c5 32 1c 9b b0 b1 91 da 9e 6d 99 da e7 47 7b 85 3d 50 7a 1a c6 58 fa 23 6d 5a 77 28 2b 66 79 c4 d1 6a b8 34 ab 46 91 16 1f 3c 8b 6c 0f 7d 9b 67 f5 fc 82 85 4c 8e 89 d1 12 81 cb c2 43 12 96 6d 4b 95 1f e1 4e e0 da f9 39 de 9a b2 14 98 af 09 a8 bf 84 67 f8 4a f6 e1 93 8a 02 29 1b df fa c6 5a 20 6c d2 9d 46 54 8c d3 9a 6f b7 ae 31 78 74 65 35 09 03 59 64 0f 50 38 f5 dd 87 7c 7c 02 18 44 31 c6 05 2c 55 8b 1a b7 63 80 cf 64 f8 a2 00 35 52 0d f2 b4 f1 19 e8 ac ce f5 3e 0a 80 3d 92 d6 e8 0c c4 91 ca 55 b0 45 aa 7e 49 6a 0f ee 11 9a db 11 b3 f3 2a 18 99 eb 09 1c c6 b0 60 bb b9 44 c8 87 c3 56 6a 63 d0 dd c9 f1 29 c8 23 01 11 04 21 66 Data Ascii: malK8v`<mn$UZl<Z^035\n2mG{=PzX#mZw(+fyj4F<l}gLCmKN9gJ)Z lFTo1xte5YdP8\|\|D1,Ucd5R>=UE~Ij`DVjc)#!f
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: ed 68 c9 37 7f 86 11 a3 5a b1 4e 85 50 2f e2 53 8c 6f dc e2 3a 30 03 a7 24 1d 65 a0 5e 5a 27 fd 08 35 2e 5b 81 cd 69 80 03 aa 0e 4e c8 22 97 c5 40 47 11 59 85 a5 9a 61 dc e9 88 c6 65 31 40 c2 7c 17 c9 8c 19 98 32 3f b4 b2 28 f9 5d 93 d0 60 75 3a 03 20 76 f3 31 9b cc e8 27 7e a4 ed 32 5c b8 c2 63 12 18 38 41 5a 8b 7e a1 c9 eb 80 37 78 0b 45 c3 e8 99 8d d4 05 d3 6b dc 37 1b e4 a9 10 f4 9f 2a 88 d4 21 54 1b 8c 8b cf ea 7b 1f d2 bd 96 15 84 71 5d 07 33 63 31 1f f5 a6 c8 27 20 c8 72 22 93 7c 08 e5 09 e4 9f 18 f2 f6 4a bb 96 56 a4 50 5b 5e a1 57 5e 6c 53 8e 70 21 d0 0f 3b 4e 52 39 8d 55 aa a4 80 72 75 6f 3a a4 73 82 17 a6 b1 fa 22 a5 22 e9 8c 68 ba 52 83 7d 73 06 f4 f4 c0 a1 9a c1 8c ce 05 90 56 84 63 16 c3 10 91 11 b2 84 a0 89 1b 10 ba c3 0d 17 ba 34 80 93 72 Data Ascii: h7ZNP/So:0$e^Z'5.[iN"@GYae1@\|2?(]`u: v1'~2\c8AZ~7xEk7*!T{q]3c1' r"\|JVP[^W^lSp!;NR9Uruo:s""hR}sVc4r
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 5f ca 47 4d 6b 11 47 49 53 30 7a ed 11 c6 5b 9a 07 fb db 4a 70 85 1f fa 5b aa 1f de 6f 5d 80 a9 4f 9d 7c 9f bb 49 2a cb de 80 b6 24 0e 08 3b c4 a2 bc 35 d8 4b cd c7 f4 07 71 84 5e 8e 25 7e 0d 45 7a fe 0f d9 a8 0c 47 8a 13 be a8 22 b6 b8 ae a9 84 76 13 f6 e3 f1 ad f7 eb 23 0f 39 24 f2 bb 9f da 9e 09 50 20 e6 40 35 f9 78 70 9c 54 46 88 a1 0d fd 7d 35 7f 77 ff f1 9c 4f ca 48 a8 54 a2 58 ce 70 e6 c2 f1 eb 8f 80 ad 09 7a 6c 4d 51 46 41 29 31 37 b3 b1 b0 12 22 a6 aa f9 ed af d4 ae 38 d0 1d 6a 23 24 e6 3f 2f 9e 3b 5a 5e 5c 71 b1 b8 f3 d8 7c e3 dd 80 b5 54 49 98 0e 61 79 1f b5 b3 fb 05 f6 64 f6 68 83 fd ea 30 7b 1a 29 23 21 bb 72 b8 b1 92 42 cd 4b 36 52 62 08 54 fa 36 d2 2c f2 10 7e fc e3 dc 1d 7c ee f2 f5 17 27 d6 77 bf b2 dc 7d 00 d7 fb 67 5a e9 dc eb 80 78 40 Data Ascii: _GMkGIS0z[Jp[o]O\|I*$;5Kq^%~EzG"v#9$P @5xpTF}5wOHTXpzlMQFA)17"8j#$?/;Z^\q\|TIaydh0{)#!rBK6RbT6,~\|'w}gZx@
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: e4 e6 c0 39 f5 ac da ea da 6a 3e fe ce 27 2d 90 d8 b6 a8 c4 31 d3 bd b3 f2 c7 5a 6f 8f 13 fb 00 7d 7f dc c9 2f 16 1f 13 90 1f 60 4a b7 c7 93 17 5c 12 ae ac d1 e1 1d 5f 6a c4 5c d8 bf 96 b8 34 ba 89 98 3e af 70 5c 76 89 f5 4b 33 80 71 fc 7c 79 61 e6 4e 54 39 63 5a 3f 40 81 af da 51 c5 c5 3b 92 f0 29 c4 b5 8a 3b 45 93 b6 7d eb 8e 7d e3 f9 55 77 82 b5 73 02 aa 12 19 dc 86 11 9e f1 3d 0b 01 91 5b 08 71 20 48 89 fd f6 a8 b0 7a e2 d3 63 86 a1 61 86 90 b2 82 d0 d2 86 95 19 d1 2b f5 37 2d bd c5 7e bd 97 99 be 1e 99 ad 44 03 28 f0 91 31 36 b2 70 e9 ea 81 e2 cf 29 d4 54 ed bd 02 aa 5d f3 67 87 ba 41 42 ed 83 60 2b cc 33 8c d0 17 91 b6 94 bf cf ca b2 d7 f6 4f c1 ad b7 e0 2d a3 0b c5 fe 85 b6 0a fa d1 2e 85 f7 d1 b1 2b d1 b5 ed 1c 95 02 ac 0c 25 85 0d b8 b7 03 03 a4 Data Ascii: 9j>'-1Zo}/`J\_j\4>p\vK3q\|yaNT9cZ?@Q;);E}}Uws=[q Hzca+7-~D(16p)T]gAB`+3O-.+%
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 8a 28 be 6f 85 ee 66 b1 94 65 be 44 77 5b 59 1c 73 b1 b8 bf b4 68 71 f7 b2 4b 7d e8 cc 88 93 a5 53 56 62 76 ea c5 a8 ee c4 41 9c 52 61 9a b1 8d b2 62 eb 89 8b 03 d9 45 f9 f5 65 05 5a 7e dc 76 1e 29 52 2e e7 e8 65 d1 0e c0 55 47 d1 3b 4a 73 37 91 ce 98 df a6 cb eb f6 88 b9 86 5f 9a cc bc 5a db 30 bd 4d c2 83 03 4d 42 98 cb 0f a0 e9 af 0e a5 f6 9c f5 bd 39 e9 a9 99 7a c9 f2 a0 5e db 19 c9 5e b1 46 13 62 f3 c1 c3 87 33 9b 4c 21 17 7d 15 73 6b ad c0 e2 21 85 d7 5c ad a4 56 6e c6 b3 33 21 d5 8d 61 21 95 0d a1 61 95 35 21 a1 35 35 ff 4f a9 98 9b a8 6b 98 5b a8 a8 5a d8 e0 2c cc e5 25 aa 9c 71 b5 38 4a 0f 25 bb 36 bb b9 87 93 f3 c8 b0 ce d0 ac bf c1 05 27 c5 8d 0b 32 96 ff ab 65 69 62 a9 de 8c ef ae 62 ac cf 88 0c 09 0b c3 da 0c 97 93 9c d9 ab 83 1d 2d 4c b5 e4 Data Ascii: (ofeDw[YshqK}SVbvARabEeZ~v)R.eUG;Js7_Z0MMB9z^^Fb3L!}sk!\Vn3!a!a5!55Ok[Z,%q8J%6'2eibb-L
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: ba 2f 5d 69 d3 c4 72 9e aa 74 d3 1a 80 cf a5 dc 8a b3 cd 09 cf 97 03 53 4f b5 36 b8 1b b8 5a a1 c7 3c 30 f8 a9 a1 c1 07 e5 99 93 d7 63 8d d2 f2 1d 00 df ae c1 61 77 4f 5d 5b 27 0d 9b 5e e1 86 9c fc 6d 89 f7 0a 8b 4c 18 74 03 b2 c8 a2 77 15 cc 8a fa b8 30 17 7f ce aa f0 67 aa 72 23 a5 fe a5 b3 5f ee 7d 4c 94 17 bf 93 45 17 75 03 cf ec 4b a8 6a 59 a5 de 9f 3d 91 03 96 8e e0 ab a7 cc e0 6b 94 87 c6 da ee 6b f9 78 65 65 0b dc 98 0a 0f 2b 97 ce 4d ae 21 64 28 c2 67 8a f3 e3 72 d4 a8 ea ef 1b a9 d3 94 9f 33 63 7a 8d 56 49 0a 7e b5 7d c6 22 f5 eb 6c 4d ea 8f 87 25 c9 e0 fe de bf fd b8 3b a8 9e d6 65 02 3d 25 dc 2c 8d 98 cf fe f2 96 3f b9 83 93 c0 a2 f7 3b 28 44 2e f0 23 73 7d 4d 5f 75 5f fd c9 6f 6c d1 4a 7c a7 9c 6a fa 5a 99 ff 71 c4 fc e6 60 6e 16 92 ce 7f 98 Data Ascii: /]irtSO6Z<0cawO]['^mLtw0gr#_}LEuKjY=kkxee+M!d(gr3czVI~}"lM%;e=%,?;(D.#s}M_u_olJ\|jZq`n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	62563	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1419	OUT	GET /v3/css/fonts/roboto-v20-latin_latin-ext-500.woff2 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://book.omnibees.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Length: 22732 Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:01 GMT ETag: "58cc-618df02ad77e4" Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6971 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de5cdac46d-EWR
2024-05-28 05:15:07 UTC	866	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 58 cc 00 12 00 00 00 00 da 44 00 00 58 69 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b ab 0e 1c 84 62 06 60 00 8e 68 08 5c 09 83 3c 11 0c 0a 82 ce 30 82 ac 34 0b 86 74 00 12 83 44 01 36 02 24 03 8d 64 04 20 05 83 00 07 20 0c 82 53 1b a0 c4 17 70 67 8f 89 81 da 09 50 55 ed c6 b7 e5 4f b6 4d 7a 70 1e 11 05 3e f7 c7 46 06 82 8d 03 13 ec f9 b2 c9 ff ff 27 25 95 31 b4 29 3c 69 c1 c1 04 d5 dd e8 11 e8 d0 14 61 99 d9 98 a6 64 90 3d d3 32 e1 48 eb 16 34 19 49 c9 13 7e 46 c7 50 e2 04 05 0e 10 7c b1 ab db 89 3d 8c b0 a0 6d 18 45 79 38 b4 79 5d b9 4f 68 b7 4b 7a ac b8 0b 96 3d 40 4b 39 ab 45 7d fa 6f d1 e1 c4 ed 46 81 5c b2 fa c4 c5 61 74 5f ba 37 ab 3d 2c d0 96 35 d8 e2 fa e1 38 9b 05 fe 77 e7 63 f4 Data Ascii: wOF2XDXi\|b`h\<04tD6$d SpgPUOMzp>F'%1)<iad=2H4I~FP\|=mEy8y]OhKz=@K9E}oF\at_7=,58wc
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: c9 06 cb 73 85 2d a0 70 15 72 74 95 ba a5 a3 99 1f a4 2d 00 2a 52 21 55 95 57 d5 17 a5 72 51 05 8d a8 4c 65 fc ff 37 d5 6c df 9d 21 20 89 d2 98 9a bf 21 75 ce 4d f9 07 70 20 8f 7d 7a 95 6e 4a f0 61 b0 6f 34 7f 80 5d 03 a2 bc 4b 6e 64 70 08 91 ff 7f d2 07 f3 ff 06 02 94 13 2b 1d c9 81 bb ce dd ae ab 54 d9 5d 2a 3b 57 de ca 2e 5a 57 95 6b c3 ff d4 18 ef 13 ef 06 75 68 1a ac 84 20 c3 ac ef f6 6f fd 9c 64 5b 99 16 2e 41 44 42 10 11 11 37 5b ea f7 7b fe 58 fa e6 29 ae 3f 96 a0 49 04 d3 ee 5b af 5d c6 d4 6e d3 ee bd 3e 3f 08 a8 e1 86 a7 75 5f 74 7e 2f e5 06 bd 31 a1 3f 8c 9d 34 c3 03 0f 59 96 ac 18 86 23 c0 60 e5 46 76 dd 36 97 40 0f 08 13 7c 80 48 79 aa 10 d9 2a 44 ae 0a 41 56 21 0a 09 6a 31 75 6a 3d 4d ad 56 ac 81 71 18 3b 90 34 4a 47 50 b7 a5 7b fe 8e 4c 50 Data Ascii: s-prt-R!UWrQLe7l! !uMp }znJao4]Kndp+T];W.ZWkuh od[.ADB7[{X)?I[]n>?u_t~/1?4Y#`Fv6@\|Hy*DAV!j1uj=MVq;4JGP{LP
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: fc 6b 49 ed cf 62 bd c3 a7 f4 3b d5 a7 aa e3 9e 64 e9 36 23 9b c9 e8 ab ae ee c6 80 aa 6f 72 fe 7e df f5 e9 de 30 cf a9 6e 67 4b 2f ca dd ef 87 6e 87 17 f6 bc 11 9d ee 51 5b b1 81 d2 87 7d df 6f 58 b2 72 1f b1 29 4f ce c3 ea 1c d0 ee ee 6e ae 38 6a 55 50 b7 0e 01 c4 80 d4 b1 ce 5d 0a 78 b8 1b 2e 04 01 c8 e0 9b 66 1f bd 21 aa 00 9b 38 b9 4f 89 63 2c ad 54 db b2 3c 28 91 9f b1 6c ef 2e 4e 94 06 99 9c f2 0f 1e a7 ea a8 97 23 cf a8 7c 29 1a be 87 ca 99 45 4c 8d e3 4c e8 74 87 6a d3 9f 2e d8 59 ab 56 1d 10 f4 66 8e 9a 55 3f b5 ec c1 7e 30 8b 08 7d 27 9a d7 c3 aa 3c 1f 11 09 de 83 da 67 ab b2 ab f3 6d cf 68 e7 e2 82 3e 9e a3 1d 47 45 5f 18 5d 07 31 ac c7 dd ec 9b 6e 8f 70 35 43 2f 1f fa 1c cc eb 78 8b 09 fb 50 ca 8d fe e4 9e 76 b7 e3 e1 94 fc b4 d9 5b 06 d0 c0 Data Ascii: kIb;d6#or~0ngK/nQ[}oXr)On8jUP]x.f!8Oc,T<(l.N#\|)ELLtj.YVfU?~0}'<gmh>GE_]1np5C/xPv[
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 94 a7 2a 6d a1 e4 9b fc 85 a5 5a 1a cb 7d dd 59 0f d7 ce 7a f9 43 08 fe 76 f8 b7 4c 15 fc 47 d8 08 bf 14 7e 2d fc 25 a7 7c c8 39 97 7c 9b df e6 2f f9 a7 30 5e b8 03 7d 18 c0 08 a6 70 d7 a2 2f 4b 59 fd ff 57 13 ab 00 44 22 4c 2b 6d 0c 32 c4 03 8f ac 3b f0 8d bf 50 4c 50 91 8c 74 94 e2 14 bf 84 d5 31 a1 35 c3 2b ff 6f b8 97 47 b0 ec e1 8f f2 89 e0 ef d3 3f e7 29 cb a4 37 f9 73 6d 47 17 fa 57 9e c4 9d 5b 8b 9e f6 33 d3 cc c0 e8 34 f2 b4 ec 2e b3 8c d2 4b fe 26 29 95 b3 74 4a 1b fc 1d 7c a7 b7 00 08 ba 4c e3 79 94 b8 9d b8 b0 1e f1 69 d7 44 8e 40 5b 4f da 6d 9b fd ba 1b bc 62 9d b5 d6 58 f9 13 cc 34 51 1c e0 fd f7 80 f7 9f ec be 7d f5 e6 9f ea 7e 13 f1 c4 46 a0 1a 6c ac ed 57 5c 3c 5d 2d 16 15 b1 12 75 09 79 db 67 5a 01 67 ff 85 71 5d 36 1f 9d ff 79 f1 13 90 Data Ascii: *mZ}YzCvLG~-%\|9\|/0^}p/KYWD"L+m2;PLPt15+oG?)7smGW[34.K&)tJ\|LyiD@[OmbX4Q}~FlW\<]-uygZgq]6y
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 1b 71 5c 54 55 b5 d8 4c 47 9e 8a 13 78 8a f1 86 2b 66 00 a6 29 e4 a4 58 74 9a 3a a6 ce c8 7d 74 b8 44 89 59 59 8d bf 2c 64 ef e5 47 9e a1 9e 78 42 16 24 4a 65 3a 6f 2d b6 a3 39 2e 3a 13 ca 75 5a 72 85 50 c0 92 a4 47 21 ef 7f 39 af 90 c8 0c 09 f5 b1 8d 7b 3c 0b e8 35 d2 2e 0f 49 4a 5a db b5 2c d9 21 c3 0a 81 4a a2 25 40 81 19 e8 a5 0c 10 9a 5a 20 17 c8 15 4b c9 5c 21 ec 15 68 49 18 bf 38 88 87 34 ea cd ea 6b 2e 0b a0 97 dd b3 12 0f 35 19 b7 26 6c 09 94 1d 73 ec 1e 87 2f 54 ac 6c 7d 5f ec 57 76 fc 02 db 61 79 a1 dd bb fe d7 97 4e e3 b3 60 54 c6 5b 2e ae 5d cf 5c f8 d8 ac c3 cd a4 70 d7 8d dd 44 1f af 05 fb 4e b7 f2 37 62 39 70 fb 03 ee 1d c6 7b 7d 33 e8 59 d1 a0 3c f2 15 6a 9f fb 76 33 b7 12 53 43 d2 c1 e8 70 7c 10 fe 31 4b 8e 49 58 2e 1c 2d c3 00 af 45 4a Data Ascii: q\TULGx+f)Xt:}tDYY,dGxB$Je:o-9.:uZrPG!9{<5.IJZ,!J%@Z K\!hI84k.5&ls/Tl}_WvayN`T[.]\pDN7b9p{}3Y<jv3SCp\|1KIX.-EJ
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 36 e4 c8 23 e9 af 70 f6 2b 35 b5 23 30 48 26 8c ae b9 e2 93 f6 df 26 04 47 1d 13 a2 2a 0b cf 4c b9 36 95 80 38 6b 75 e5 01 0f c5 17 4a 32 6f 7d 4e d6 2e 0a 36 82 81 e5 6f 24 50 38 12 50 42 4f b9 d6 7b 92 f9 2a 27 b7 1f fa 03 49 7d 39 20 7b e8 1d cb d7 4e 85 84 0a 40 2c 63 9a 32 f9 a6 b3 cf 0d 0a bd f8 0f f2 a7 a5 99 fe db a3 30 df d5 6d b0 5c a8 e5 d3 a5 8f 62 f4 ee f7 e5 19 38 7d cb 30 50 2b 68 8b 36 12 95 b2 17 f9 9c 46 d8 41 e4 f8 84 3c 61 7a 12 fc ce 13 88 03 13 44 b0 15 1a 74 21 57 d8 74 94 99 b7 c6 ae 5f 62 f0 b6 c5 2b 57 34 32 2f 9c 94 ad 3a 3c 2b be d4 59 05 fc af 4b 2b db 4e 24 13 a3 b2 85 ba b2 04 5f 06 8b 00 c8 8d 7d 96 f8 f5 80 7e 06 6e 07 a2 92 d6 e9 65 e3 63 77 cd 34 f6 79 fb b1 51 e2 aa f6 b2 1b 6e b3 e8 28 aa 8f 1a dc 45 be 8f c1 27 8a 21 Data Ascii: 6#p+5#0H&&GL68kuJ2o}N.6o$P8PBO{'I}9 {N@,c20m\b8}0P+h6FA<azDt!Wt_b+W42/:<+YK+N$_}~necw4yQn(E'!
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 3f 53 f7 ab 76 26 99 6e 0d c9 3e bb a2 e8 aa de 23 87 67 75 bd c1 ea 2d 1d af d6 af e6 fa 88 a1 22 fc 86 d0 08 67 65 b0 b0 ec 07 11 e2 6b e2 c8 d1 48 c6 eb 8c da 23 be 66 5c 8e b5 96 87 2c 19 54 b9 fb 02 0c 81 1e 61 1b 3c 8e f4 2c 73 2c 28 f4 df 9f e6 56 18 2d 73 0b 63 03 4b 73 bc b9 95 d8 03 e2 7d b1 2d b9 fb 68 43 d1 60 cc 27 bd 6f 47 5f d4 61 8a 67 98 4f 5a df bf 7e 52 82 29 9e a0 57 63 ef a5 26 c5 8e c1 ee 5b ac 5c 7e 94 4a 88 9d 80 cd 99 fd 3d a9 0c 4a 59 d5 58 17 c2 60 9f 75 ef 22 c3 f0 6e 8d b6 61 f8 cc c0 c4 ec f2 74 6a 5e f2 c6 5b 42 f5 c6 8f 8d 3b d1 a9 5f 8a af 04 12 3b ec b8 03 71 35 b1 20 e7 72 54 58 54 7c 5c 40 7a 9c 27 35 2e f1 d6 46 08 69 e7 bf 9d d9 00 e2 40 c0 c5 24 69 e2 70 ea 1c f3 c1 8b a7 4c 6f a6 a8 7e 59 49 d1 97 b3 93 e2 13 f2 d3 Data Ascii: ?Sv&n>#gu-"gekH#f\,Ta<,s,(V-scKs}-hC`'oG_agOZ~R)Wc&[\~J=JYX`u"natj^[B;_;q5 rTXT\|\@z'5.Fi@$ipLo~YI
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 99 57 13 4f c4 1d 63 ce 6d 46 b8 05 73 eb b9 ff 70 0b 56 d7 f3 28 65 2f 32 2e e9 74 28 b0 63 8f 56 84 5a 4d 45 e6 d7 3b 81 e7 da 79 b7 1e f8 4f eb c5 21 13 ca 37 49 84 dc 37 34 78 58 d6 00 fc a7 0d 77 bb 81 e7 da 2d c5 e7 d4 35 b2 f2 58 76 ab 5f 66 6b 55 4a 2b eb 7e ed fd 5a 7e e1 9a 27 4b 2c f2 1c e2 34 7f 98 4c 12 92 7b da 57 27 0b 07 c1 f1 af b5 38 27 ef 20 3f c7 70 07 2c d5 9d d0 b0 e4 9a 7e ef dd 3d d8 c0 61 95 b4 0b 1b 6c c8 2c c3 e4 ff 95 dc fc 7c 6f 17 53 2f 87 02 23 51 d4 d9 5b 99 f9 7b e1 05 4c f8 97 00 01 a8 f2 61 69 a3 0f df 49 d0 9f 20 28 69 c3 89 cd fa 85 f7 b0 25 2d f1 69 bd 50 7f 88 e6 a0 67 52 38 8d f5 1e 4d 10 61 68 31 98 f0 81 41 82 86 e7 5f 3a e9 dd e9 93 b7 b4 37 f7 68 bc 12 93 bc 12 33 fb c0 1e 29 4a c6 80 b5 8d f8 ff 07 f2 b3 03 e1 Data Ascii: WOcmFspV(e/2.t(cVZME;yO!7I74xXw-5Xv_fkUJ+~Z~'K,4L{W'8' ?p,~=al,\|oS/#Q[{LaiI (i%-iPgR8Mah1A_:7h3)J
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: aa fa 26 5e 9e 60 9f ef 47 a6 dd 74 51 36 34 4a 34 32 0a 32 32 4a 34 34 5a 50 ac f8 b4 11 33 79 ef 54 3f d4 86 bd b3 31 76 79 e8 de 46 73 fb 40 47 6d a3 9f a7 83 9b 57 48 7e 22 21 31 34 cf d3 dd dd 2e a0 93 d4 55 cb cf d6 d7 de 82 6c bf 26 e4 d4 20 84 ec c2 a2 7a af 08 d9 23 bb 97 a6 dc 2d 1e 66 99 3f e4 66 4d f9 85 19 b7 30 33 6d f6 e8 b6 7b 95 ef 03 a4 91 95 3d 31 31 27 35 3c a6 3b 79 30 44 25 13 6f 60 a6 ac 38 c0 12 36 94 55 50 78 b5 82 a4 e3 cf 63 e7 9b 2d ed 28 d6 53 18 61 09 9c b5 95 dc aa 74 44 12 17 e0 69 fd 46 7c 2e db 84 2f da 1e b9 cc c9 5b 3c 3b 1e f6 57 1c 78 ae f6 93 d3 09 49 7a 58 7e 95 98 76 84 51 1d f2 da 74 ab 95 81 a1 75 53 5e b9 89 97 ae ba a9 29 c6 0b 94 b6 a9 76 32 0f 37 0f f3 70 13 e6 22 ae 36 bd bc d2 10 15 dd d0 f0 b2 b1 29 22 5f Data Ascii: &^`GtQ64J4222J44ZP3yT?1vyFs@GmWH~"!14.Ul& z#-f?fM03m{=11'5<;y0D%o`86UPxc-(SatDiF\|./[<;WxIzX~vQtuS^)v27p"6)"_
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: e8 e4 71 9e d8 b8 94 e6 e2 c6 9b d3 33 14 7d 37 76 ee 89 06 e5 f6 a9 7a 95 5b 68 71 43 5f f3 c2 75 f8 9b d7 5f 57 ba eb 54 94 15 e7 59 87 71 3b 98 08 bc 79 e4 6c 9b 0e ef 50 cf b3 ba bb cf d9 ee 3c 11 9a 9c bc e7 23 6d 44 5e 5c a6 8c dd ef 30 b3 63 bd 17 60 c4 80 4a 1e 5a ea 1c eb 0c b8 39 3d 33 a2 eb c1 ce 7d db 5d bb 09 ec 0e 5d c4 db c3 ec d3 67 a5 f2 9c fe b6 75 db 30 5b e6 e4 dc ee 48 5e 4f 13 75 e9 a2 79 7d c6 f6 9f c5 d8 0a 69 08 f4 7c 90 7c 6c 24 db 88 67 1f 0a 6a de 15 d6 18 2a 84 c7 77 93 5d 47 43 c4 f5 88 50 93 40 6b ea ef fd c2 da 0f 68 39 e8 7b ae d6 d6 5d 72 e7 07 e3 63 b9 49 79 19 c5 e0 9d dd 36 be 3b b5 39 47 ef b9 12 f9 fa bb 38 90 aa 47 cb 3a da 18 95 f6 68 c3 b3 a3 cf a1 02 1c 02 6b 00 b7 84 2c 03 79 54 31 69 60 e4 d6 74 b7 69 1c eb bd Data Ascii: q3}7vz[hqC_u_WTYq;ylP<#mD^\0c`JZ9=3}]]gu0[H^Ouy}i\|\|l$gj*w]GCP@kh9{]rcIy6;9G8G:hk,yT1i`ti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	62562	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	1419	OUT	GET /v3/css/fonts/roboto-v20-latin_latin-ext-700.woff2 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://book.omnibees.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:07 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Length: 22724 Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: "58c4-618dea4b13380" Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6971 Expires: Tue, 28 May 2024 17:15:07 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de58481835-EWR
2024-05-28 05:15:07 UTC	866	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 58 c4 00 12 00 00 00 00 d8 dc 00 00 58 5e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b ab 0e 1c 84 62 06 60 00 8e 68 08 48 09 83 3c 11 0c 0a 82 cc 04 82 a9 07 0b 86 74 00 12 83 44 01 36 02 24 03 8d 64 04 20 05 82 7e 07 20 0c 82 29 1b b3 c2 17 d8 36 0d b8 67 dd 09 50 6b f5 7a 9f 9f 5e c0 6e 1d 73 3b 32 4a fb b7 39 33 a3 c2 c6 01 00 dd 7b 8e e0 ff ff 33 92 ca 21 36 65 49 6b 80 ff 07 3a 92 c9 91 85 92 2d 21 c3 de cc 24 fb 80 08 98 fd b5 b0 b4 40 4a ae 9a a0 11 1a 2e e4 f3 e6 5e 07 a6 45 e2 8d 37 3f 2e e9 92 2e 7d fa f4 3b 0c 6c 0d 03 59 9e f5 67 c9 f5 98 92 05 51 4f f9 ea b0 ec d2 fd b1 5a b2 a8 cf 0b 7b 58 10 77 0a 06 5c e1 a0 9b b0 84 cb a6 49 3e dd 56 be 1e db 6a 1c 16 fe 8d 24 81 dc 34 d5 Data Ascii: wOF2XX^\|b`hH<tD6$d ~ )6gPkz^ns;2J93{3!6eIk:-!$@J.^E7?..};lYgQOZ{Xw\I>Vj$4
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 29 b3 3b 50 d7 aa 3b e1 6e ea 2a dd cf 4b 72 fb 21 9b 25 2e 64 8f 30 5b 02 50 0c aa 9c 2d 6f 81 59 92 22 50 9d 0a 5f a1 2a 84 e9 54 dd 54 91 b0 aa 55 b5 31 96 1c 32 cb f6 22 22 91 cb d7 fd 8b 7e 8f 9d 35 b8 25 16 75 89 4b 2d 84 10 a2 ce 98 df ef 2d 63 b3 9e 01 57 d4 79 6e 9f dc 88 45 38 9d 5d a7 d4 7f 8d 69 ff 63 ee fd d6 8c c9 05 ed 11 94 b2 d0 17 34 ce bf 27 82 22 93 0b 31 51 fa d4 15 d0 03 a4 03 1e 80 2c 79 5a 20 6b 2c 90 75 16 c8 46 0b 64 8b 0b 6b 1b 55 d6 61 1a be d4 73 9e 82 f0 55 6c 81 d2 2f ed c6 3a 97 ae 5d 17 32 59 6a 66 41 fa 7a 36 20 50 70 c9 af 0a 52 a9 8d 1e d0 f6 bf 59 3a 00 c2 af 24 46 51 01 e1 37 a2 fc 43 01 e1 77 bd 63 c2 01 61 a0 00 41 f5 a8 69 7f 44 85 03 2c 60 25 8c f9 1f b6 22 35 ac 08 94 e2 a0 c0 96 50 db a9 9d 3a 26 27 65 17 57 67 Data Ascii: );P;nKr!%.d0[P-oY"P_TTU12""~5%uK--cWynE8]ic4'"1Q,yZ k,uFdkUasUl/:]2YjfAz6 PpRY:$FQ7CwcaAiD,`%"5P:&'eWg
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: ce 1d 00 90 0d cc a3 9d af 26 f0 b9 46 70 47 03 d8 38 b2 dc fc fd ac 57 d0 d2 89 0d 6a ec e3 ec a7 d7 be c5 66 9d d8 c5 fe 7d 3a 9d 4c ef 67 34 f8 e7 36 db da 1b 67 f2 9a 8a f7 d9 8e eb 78 75 73 64 6b 48 6b 41 f4 71 bd 75 bf e3 b6 2c 3f b6 bb 08 a2 77 c9 7b 42 ef 8b cb 37 f1 cc 3a 02 fc 0c 3e ab 5b 45 8f 6d 1c 8d 7e 02 b4 cd 7b b5 9a bf db fb 4c 3b ce cd ed 93 73 7c fb a1 fe 9d 3f 78 ca ee d6 fd be ec 2a f4 99 6c e1 23 71 3e 21 a1 95 cd 7a 50 8c b7 72 b1 3c a2 1b 97 fa a5 63 66 90 ef 56 a1 bc 06 df 1e cf 34 d1 d4 6f 54 42 34 99 60 01 a0 2d 10 66 41 78 bf 1b 06 69 79 a8 a2 3a ab 96 1e af 29 5e 88 48 96 88 e5 be a2 76 0e 62 64 4b 82 b2 af a4 9b 87 54 be 25 ab f6 5d 19 ec ac 4e 88 ca 3b 8e 75 d4 2e fe ff bb da be c5 95 9e 21 a5 fb 23 4e 8d bf d3 b5 fb 85 a3 Data Ascii: &FpG8Wjf}:Lg46gxusdkHkAqu,?w{B7:>[Em~{L;s\|?x*l#q>!zPr<cfV4oTB4`-fAxiy:)^HvbdKT%]N;u.!#N
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: a7 de e1 d7 dd da bb fc 8f 7e 61 e6 39 38 cf 22 58 8d aa 5c 94 57 56 69 85 bf 53 d4 fc 66 36 e3 f8 7b fc da 09 00 44 af 0d 93 b1 f7 fd fa bb 36 f7 55 cf e7 de cf a1 9f 45 d7 87 d6 af af 75 ad b5 d0 ff 5d b7 56 bd 56 b5 56 b9 56 b1 56 fa 29 7a 2d 75 2d 6e 0d 0f 00 0b 00 64 de 35 f6 35 b6 d5 b1 d5 ae 8f 93 5c 82 7a 6e 39 54 cd b7 d2 79 23 7d 8f 1c 47 c4 80 e4 bc 64 9e 22 ca 7d 56 04 f9 7b 8c f7 b9 cc b6 bf df 60 fc 0d b0 96 0c 31 88 11 2b 4e 02 d6 93 25 16 49 91 54 49 93 74 c9 60 23 39 df 6c fc 54 e5 92 27 b1 88 07 11 64 24 e4 b3 e5 0a 05 ec 28 94 5d ec 43 8a 43 1c 43 56 24 a7 38 d7 90 82 d0 6d fb 4a 1e 8a 29 91 67 bc e2 1d 9f f8 be f6 7b 4e 29 65 df 75 ec a3 9c 0a 5d 4c 52 98 ba fd f2 2f db b5 e7 54 5c 72 24 75 a9 cf d5 24 24 31 c9 b9 94 51 b7 34 62 0e 07 Data Ascii: ~a98"X\WViSf6{D6UEu]VVVVV)z-u-nd55\zn9Ty#}Gd"}V{`1+N%ITIt`#9lT'd$(]CCCV$8mJ)g{N)eu]LR/T\r$u$$1Q4b
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 03 25 ae 5c 19 11 5b 80 6d 27 04 54 39 c2 c4 27 db 90 a9 d7 89 97 a9 15 70 f8 8b 3c 2c 6e 50 94 23 5d e0 d4 91 a9 b8 ca 3f e0 8b 57 ff 72 25 0d 48 e3 c6 e8 56 b7 a0 77 d1 23 bf 96 a1 be 98 aa d1 4d d0 31 0f 63 0a fe f4 62 25 4b 6e 55 3b c9 39 f0 b2 60 c0 6e 24 77 93 ce f9 61 1c 82 eb 6f 73 5d 9d 4e 1c ac e3 59 4f 7a 41 b7 a6 2b 7d af 53 75 6b 15 5f d8 20 85 4c c4 a4 9a 04 eb 7a 71 33 73 bc a4 9c 40 09 59 cf f2 84 a2 65 37 38 bd a6 13 e6 e9 3c 13 8f f7 c0 5d 68 58 bb 1f 55 a6 62 47 1d d6 17 ee 18 6f bd 9d 88 14 31 1d 71 e0 88 33 10 74 95 0a fc 46 fe 47 d6 fa 76 f8 90 94 28 1a d0 20 b3 e4 0b 47 6c df d5 6e 97 a1 54 a9 27 44 50 c8 ef 7c 5e ce e2 9a 7f e8 36 01 9c 0f e7 92 ed b8 2f 54 92 9b a0 b1 32 eb 20 26 ef 4b 47 24 25 75 a1 00 93 69 e9 df c9 fc be 76 32 Data Ascii: %\[m'T9'p<,nP#]?Wr%HVw#M1cb%KnU;9`n$waos]NYOzA+}Suk_ Lzq3s@Ye78<]hXUbGo1q3tFGv( GlnT'DP\|^6/T2 &KG$%uiv2
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 1a fa e2 8d 55 82 5c a0 2e 3c 46 b2 86 1f e3 c9 d6 4a ee 27 fe 2a bd d7 af c6 34 f7 ff 85 e7 13 6e bc 6e 50 2c 86 ab 6d 56 58 63 c1 a2 f3 e2 43 a4 5c 77 1e 83 8e 0c 18 20 2d 5e 70 d9 6a 51 84 38 1a 45 ac 64 8c 03 c7 d1 30 2e 43 3b 30 5d 02 70 11 81 c1 76 55 60 33 d7 63 d1 86 2f 0c 35 b2 99 e0 fd 58 79 ee 65 b3 db 21 b0 6c e7 db 45 d9 c9 5c 73 d9 9c c1 12 a9 a0 fb 93 51 aa f2 68 92 7a 9f 30 d8 04 a9 cd 6c b6 3f e8 43 b2 e8 85 6a 85 83 58 a7 56 de b4 7c 57 ff d7 46 ef 77 23 95 0b 6b 1c 95 e6 69 15 23 f9 82 d7 27 02 1c 98 73 2b 63 0e ea 8b d8 62 6e d7 a6 3b 18 c2 ff d0 f2 a7 a5 62 81 3b 47 b8 2f 63 0d b6 10 6e 62 1c 5a 38 81 28 e8 0e 39 f2 2d 7e 08 97 8e 4b 21 1b b8 76 51 d2 0e fe 6e fe 2a 81 72 7a f5 d0 c7 fc ad 5f a4 5e 51 77 be 3a a0 ef a2 1a 6b 09 34 0c Data Ascii: U\.<FJ'4nnP,mVXcC\w -^pjQ8Ed0.C;0]pvU`3c/5Xye!lE\sQhz0l?CjXV\|WFw#ki#'s+cbn;b;G/cnbZ8(9-~K!vQnrz_^Qw:k4
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 51 22 98 b0 f6 0d b8 07 84 87 7d 12 6f fe 1f bd 8d e6 bd 54 68 ea e6 68 86 d7 69 4c 4d 5c 1d 08 f8 9f 70 92 0f 92 5f 21 b3 95 5e c1 8d a3 28 ca ff e9 1f 1f fc c6 42 a4 38 54 ff 68 bf ff ad 05 91 42 08 8d f9 b4 07 07 78 5d 85 74 fa 0c 7b f5 85 86 b8 77 80 d7 08 48 24 c5 39 64 97 f2 4a 1c 47 dc 58 58 f9 ee 15 ec d6 80 f7 f6 0e 77 f5 a1 65 87 4b 64 a5 bc db 4c 2e ff f4 eb d5 5d 6a c4 6a 4e 85 b9 5b 94 ab 60 b9 73 5d 78 70 98 ab 73 90 b7 1b 29 82 42 44 46 5d 1c 7d ef 9f b5 c9 f8 7e ce 2f b1 cb 47 f1 a2 42 c2 60 c2 9c f0 f6 f6 5b be af b7 91 f6 17 03 29 81 31 54 ca db a3 da 52 ed 56 a9 8e ed 0e 6d a4 b6 23 c7 98 f4 e9 b4 94 0c ba c0 08 82 30 2f 7c 48 fa 8c 3a 36 96 d4 0a d0 88 79 b6 0b 6e 15 c6 7d fc 70 b1 3a f3 53 48 fa 2c 43 92 18 0b 85 ea e7 ec 13 5c 70 39 Data Ascii: Q"}oThhiLM\p_!^(B8ThBx]t{wH$9dJGXXweKdL.]jjN[`s]xps)BDF]}~/GB`[)1TRVm#0/\|H:6yn}p:SH,C\p9
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: fd 96 fb 2a 8b 05 be 17 cb af 21 61 49 87 c5 7d 38 46 9b 7f 5d 23 2f 28 a6 bb e9 d9 44 41 df bf 89 23 20 4b cf c2 d2 85 44 b4 37 d5 45 7a 44 37 bd a0 64 de df b9 3f fe 12 a8 95 b7 e6 e1 bd 6f 10 aa d5 74 83 fa 86 b3 12 d0 b0 30 4d 34 5e 87 43 3f 48 dc a3 07 65 73 44 41 01 26 00 29 eb 1b d3 b6 b0 26 c1 82 80 b6 07 56 05 e6 a3 69 bd ea 91 57 0a 14 f2 f8 0c 03 50 cb b6 be 4e 20 81 1b 08 8b 1d 7f e4 97 bc c5 2e 03 85 ff cf 2a bf f5 f0 db 06 38 cd 0d 92 7c 83 ec fd 03 ca 3a c4 ba fc 4b ad 0c a5 fe ae 2b dc 6d 0c 88 95 93 00 7c 80 91 33 2a 34 fb da f4 86 22 e2 47 4d 70 8b 7f b6 06 ad 17 43 cb 7a ee eb 05 3f b8 20 79 2a d2 76 09 d8 c8 af f8 f8 4f 00 8c 1b e2 0c 2e 48 a5 76 b9 27 14 36 1a b8 7e 08 60 cb 48 20 87 44 73 85 96 09 80 9e be 41 71 53 01 2d cb 2d 6e e3 Data Ascii: !aI}8F]#/(DA# KD7EzD7d?ot0M4^C?HesDA&)&ViWPN .8\|:K+m\|34"GMpCz? yvO.Hv'6~`H DsAqS--n
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 2d de 70 31 5f 48 fb c5 fd 57 85 c5 47 b7 29 84 bb d3 b3 84 7b 37 5d 2a 5d 67 ea 82 2c ed 92 e3 d2 2f 06 87 77 25 f4 07 a0 53 63 0c 09 6a a8 3e ce a0 81 b4 dc 9c fa e2 2c 1d 6f 21 5b cf cb 72 24 a9 ee dc 10 0b c0 51 5b d5 99 a6 c3 13 77 1f 9a d4 6b 7c de f1 35 f8 ac ed 60 0f e5 f9 ef e2 2d c5 ae da 5e a8 ba 3f 37 85 46 d3 7d 82 0a 6f 67 32 ae 82 d5 cf 36 5b 1a 1a 59 35 64 e5 9a 7b e8 ab 9b 99 e1 dc 80 c2 32 4c 07 f3 70 d7 b0 10 f3 17 7a 54 4b 4b 78 58 63 f3 46 e3 d5 30 6a db 55 6e 16 8c 89 19 46 dd c4 22 04 6f 11 44 c0 ab 5e 20 0d 10 8e 09 d4 bf 54 9b 63 1b a7 bf bc 77 a1 5e bb 5e 86 a3 75 d4 7c 31 20 41 91 04 1c 3c d5 fa 55 9e c4 5c 6b c8 a9 68 4e 8b 37 c3 47 87 92 cb a3 3c 5d 79 f8 22 ed e3 9d 25 f3 54 2f 0c 88 3e 0e e8 be 98 51 7a 2d 2e 34 3e 5b b5 52 Data Ascii: -p1_HWG){7]*]g,/w%Scj>,o![r$Q[wk\|5`-^?7F}og26[Y5d{2LpzTKKxXcF0jUnF"oD^ Tcw^^u\|1 A<U\khN7G<]y"%T/>Qz-.4>[R
2024-05-28 05:15:07 UTC	1369	IN	Data Raw: 9f d7 78 de 9a 97 1d 85 c0 83 29 8e 99 77 fe 6c 69 dd 0e 2e a9 30 c7 28 87 ed a1 2f d3 9a fc 7b 3b b7 76 ff 4a dd 7b f1 04 32 1d 46 b7 c1 5d 6c 38 37 dd ca 46 4e fd da b9 73 6c bb 08 49 5a 96 21 24 ba 85 5e 15 dd 49 fd 1c 3d ac 18 e9 5f cc 19 ed 75 a4 c2 33 66 8f 6e bc b9 cf a2 1b 79 bc 34 32 29 a6 76 bc 68 a0 86 5b 0a c6 4c 88 ee dc 15 63 2e 0d f7 4b 21 e7 63 70 1e c0 f4 c2 b3 51 2b 03 18 e7 97 9b 1a 89 74 47 14 02 6a f3 59 54 e6 bb 68 53 c2 bf 8f 57 8a 80 d7 a7 90 9d c6 22 ee 88 f4 4b 81 05 7e 2a b7 27 a4 e4 95 21 2b 3a 71 d4 cd bc 5c 7d 82 34 63 b6 38 36 6a 4b 54 e5 6c 1d 26 0b ef c6 8a 7e 8f 2a 2d fa c9 ae 24 38 a1 24 cc fa 53 5a f5 eb 8f ac a9 36 8d a9 96 9c c7 fa e6 26 46 86 44 13 7d 59 58 c7 a6 a9 b5 65 82 b5 85 a9 89 8d 45 82 ad a5 00 73 ac 12 f9 Data Ascii: x)wli.0(/{;vJ{2F]l87FNslIZ!$^I=_u3fny42)vh[Lc.K!cpQ+tGjYThSW"K~'!+:q\}4c86jKTl&~-$8$SZ6&FD}YXeEs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	62566	104.18.124.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:07 UTC	359	OUT	GET /BEImages/5643.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:07 UTC	562	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:07 GMT Content-Type: image/jpeg Content-Length: 1932 Connection: close Cache-Control: public, max-age=2678400 Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=2360 Vary: Accept access-control-allow-origin: https://myhotel2.omnibees.com expires: Fri, 28 Jun 2024 05:15:07 GMT strict-transport-security: max-age=31536000 x-aspnet-version: 4.0.30319 CF-Cache-Status: HIT Age: 1 Last-Modified: Tue, 28 May 2024 05:15:06 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3de9f297c82-EWR
2024-05-28 05:15:07 UTC	807	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c0 00 11 08 00 64 00 89 03 01 22 00 02 11 01 03 11 01 ff c4 00 79 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 06 02 03 01 07 08 10 00 01 03 04 00 05 04 01 02 04 07 00 00 00 00 00 02 00 01 03 04 05 11 12 06 13 21 22 31 14 41 51 61 52 15 32 16 71 81 c1 23 24 63 91 a1 b1 f1 01 01 01 01 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}d"y!"1AQaR2q#$c
2024-05-28 05:15:07 UTC	1125	IN	Data Raw: 9d bd 9c b5 e9 a7 bf 4f d8 a9 ea 2e 71 3c b4 74 b6 ca 28 ab 2e 41 df ce 8b 04 0f b0 38 ee 47 81 cf 57 cf c7 da 29 32 d1 ac fc 51 23 42 6c 71 50 d1 72 8e 46 7c ec 64 6e 42 79 f7 22 67 7d 9f f3 5b e5 9f b1 5a bf 4a a5 21 39 39 b5 33 1f 36 79 7f 33 2f ed ff 00 7e 56 81 6c a7 d1 11 15 30 44 44 04 44 40 44 44 05 1a ae b2 9e 8a 9e 5a aa 99 c6 28 22 6c 99 93 ea 22 ca 4a a1 e2 8b 54 b7 bb 25 55 14 06 01 2e d1 c9 1f 31 b6 07 78 cd 8f 12 7d 16 14 d0 82 3c 6f c3 25 4c 75 2d 75 17 88 48 63 eb 14 8c 6e e5 e3 50 c6 5f fa 32 7f 1b 70 bb 47 cc 7b b4 78 db 19 d0 fc e3 6c 78 f3 f5 f3 d1 52 d4 d1 f1 65 6d 75 b2 ec 76 ba 10 9e de 72 b0 53 7a 92 2e 68 4e 1a 99 6f a7 61 74 6d 54 4a 1e 1a be 7f 10 c1 75 ac 86 90 01 eb 64 a9 90 22 3c b0 b1 53 f2 db cb 75 2c fb a9 da 97 ac b5 10 Data Ascii: O.q<t(.A8GW)2Q#BlqPrF\|dnBy"g}[ZJ!9936y3/~Vl0DDD@DDZ("l"JT%U.1x}<o%Lu-uHcnP_2pG{xlxRemuvrSz.hNoatmTJud"<Su,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	62567	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1446	OUT	GET /icons/icons_GreyDark/iconGreyDark_ArrowDown.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/v3/css/index.css?version=1.0.0.395 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"df-618df02b480a9-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 7115 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e21a160c7e-EWR
2024-05-28 05:15:08 UTC	229	IN	Data Raw: 64 66 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 37 2e 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 37 2e 34 31 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 41 72 72 6f 77 44 6f 77 6e 22 20 64 3d 22 4d 37 2e 34 31 2c 38 2e 35 39 2c 31 32 2c 31 33 2e 31 37 6c 34 2e 35 39 2d 34 2e 35 38 4c 31 38 2c 31 30 6c 2d 36 2c 36 4c 36 2c 31 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 20 2d 38 2e 35 39 29 22 20 66 69 6c 6c 3d 22 23 34 35 34 39 35 30 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: df<svg xmlns="http://www.w3.org/2000/svg" width="12" height="7.41" viewBox="0 0 12 7.41"> <path id="icon_ArrowDown" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-6 -8.59)" fill="#454950"/></svg>
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	62568	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1446	OUT	GET /icons/icons_GreyLight/iconGreyLight_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"116-618dea4b6251d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6111 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e2af3f41bb-EWR
2024-05-28 05:15:08 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	62571	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	618	OUT	GET /Images/5659/Packages/701x390/685202.jpeg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:09 UTC	502	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/jpeg Content-Length: 47328 Connection: close Cache-Control: public, max-age=2678400 expires: Fri, 28 Jun 2024 05:15:09 GMT x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET strict-transport-security: max-age=31536000 access-control-allow-origin: https://myhotel2.omnibees.com CF-Cache-Status: MISS Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3e2e82c43f9-EWR
2024-05-28 05:15:09 UTC	867	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 12 5b 94 c7 27 9a 66 c6 ea 09 15 7f 54 31 80 9e 4b 31 5c f2 58 62 b3 44 8d eb 54 ae d1 2e c9 93 21 93 a6 f3 8f ad 69 e8 77 12 59 6a b0 cb b8 60 9d ac 1b a1 07 b5 67 d9 a4 b7 53 88 e3 1c 91 93 57 2e ad ee 34 e9 61 76 23 6b 37 07 dc 51 7b 31 a5 74 7a 3d c5 d1 b9 b5 55 64 11 22 b6 55 77 67 26 b2 6f 19 42 80 a4 16 cd 64 59 ea 77 13 13 09 90 39 71 d3 70 a2 f6 49 6d 1e 21 20 01 5b a3 7a d7 35 7a 53 9b f6 87 4d 0a 90 8a e4 1d 71 6f be 33 9e 3b f0 2b 9f 37 17 96 b7 3f b9 76 c0 3d 0f 22 ba b8 ee 52 5b 7d bc 64 57 31 a8 5c 7d 9e e5 83 2f 04 f1 81 58 e1 db 72 71 91 bc d4 55 9d cb d0 5f cb a8 b8 8e 45 03 1d 71 57 67 b5 78 53 1b ba fa 56 65 8c 32 6c f3 d7 2a 6b 62 c5 5a 5c f9 87 24 77 35 95 49 46 2d a4 6f a4 96 86 6a c3 20 6d d8 e2 b7 2c 75 33 6f 0f 97 b0 1f 7a 47 89 Data Ascii: ['fT1K1\XbDT.!iwYj`gSW.4av#k7Q{1tz=Ud"Uwg&oBdYw9qpIm! [z5zSMqo3;+7?v="R[}dW1\}/XrqU_EqWgxSVe2l*kbZ\$w5IF-oj m,u3ozG
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 4a c9 f0 64 49 37 89 60 8a 4e 8e ac 07 d6 bb 8f 1f 68 e9 6f e1 6f 3a 30 1c a4 ca 49 1f c2 0f 15 93 fe 21 a4 7e 03 cf fc 3f 38 8b 58 8b cc 60 a1 c1 50 5b a0 27 a5 75 5a ec 2f 2e 97 1c 2a 03 4b e6 86 00 0e 83 07 35 c4 5b 21 33 a1 ec 0d 76 3a 54 a6 2b 39 31 20 dc 58 0c 63 35 d7 29 f2 d1 71 30 a7 0b d5 4c c4 b5 bc 7b 79 1a 19 32 18 1c 7d 2a d4 b6 b0 5c 0f 3a 42 30 a3 25 89 e2 9b aa 43 ff 00 13 07 95 9b 25 94 13 81 55 2e 2d 6e 27 8b be ce cb 9a f3 5a 8d ef b1 db 29 3b 58 d7 b1 b9 b5 92 2d 88 d9 51 df 14 f9 2f 20 b6 6e 1c 7e 75 9b a5 f8 7b 50 bb 05 a2 0c 8b 5b 76 fe 09 b8 95 ff 00 d2 03 64 7f 15 71 54 54 63 36 dc 8e 88 d4 a9 ca 95 8a df 68 69 57 72 f4 35 4c 2c f7 37 1b 15 78 ee 6b 7e 4f 0e cf 68 eb 12 9d db 8e 01 35 d9 e9 de 0a 85 6c 03 ee 26 42 3e f0 1d eb 25 Data Ascii: JdI7`Nhoo:0I!~?8X`P['uZ/.K5[!3v:T+91 Xc5)q0L{y2}\:B0%C%U.-n'Z);X-Q/ n~u{P[vdqTTc6hiWr5L,7xk~Oh5l&B>%
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: f7 90 86 8c 29 cf e7 e9 5c cd 82 7f a7 c0 ae 38 2e 01 cd 74 6e 5e 0b a3 33 0c bb 0d aa 7a 62 b1 83 a7 da f1 d1 95 ab ae 55 39 a0 8e 65 05 19 b3 b2 d5 74 ab 6f ec 3b ad 92 02 e2 32 c3 f0 e6 bc f3 61 db d2 ba cb 89 66 96 d4 c6 64 ca 95 e4 03 d6 b1 99 55 10 9d bf ad 61 4d d8 d6 6a e5 2d 3e ea e7 4d d4 21 bc 81 73 24 4d 90 0f 7a eb b5 df 11 ea da ae 8b 24 1f 63 31 c5 20 1e 66 4e 48 1d 6b 92 5b c0 b2 71 1e 79 af 54 9b 4e ff 00 8a 62 69 bc a5 cf d9 cb 1c 1e 4f 15 6d a4 ee c8 57 6a c8 f3 4b 08 5c a7 28 72 0e 6b d0 3c 0d a2 c3 7e f7 53 dc 32 90 8c 14 46 7f 9d 70 30 ea 81 5f 1e 59 00 fa 1a f4 4f 06 c9 23 5b 19 ed 64 31 b1 38 75 c6 73 4e b3 72 85 8a a0 ad 3b 95 fc 73 a2 5b 59 eb 56 82 cd 71 1b c3 ba 4e 72 37 67 fc 29 d6 56 36 d2 5a 47 bf a8 ea 2b 6b 5a 82 e2 61 21 Data Ascii: )\8.tn^3zbU9eto;2afdUaMj->M!s$Mz$c1 fNHk[qyTNbiOmWjK\(rk<~S2Fp0_YO#[d18usNr;s[YVqNr7g)V6ZG+kZa!
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: f5 35 7c ae e4 df 42 58 00 26 b5 21 4c c7 d3 8a c7 8a 50 0d 74 da 64 4b 2d bb 9e b5 8d 5b c7 53 6a 5e f6 85 45 6e 4a 81 8c 56 86 8d 6a b3 ea 71 2c 8d 84 27 07 da a8 49 88 ef a4 4e 78 e9 9a d1 d3 ae 3c 9b 94 20 67 9e 6a 1b 76 d0 b8 a5 73 7f c6 3a 47 f6 5e 94 6e e1 75 ca 10 47 70 41 f4 af 2e 32 b0 98 c8 0f 24 e6 bd 1b c5 fa a4 77 1a 2b c4 b6 c4 48 eb 82 c6 4c 85 f7 02 bc d4 d5 d0 e6 70 d4 8c 4d b9 b4 34 d7 56 62 02 94 c7 af 3c 54 b2 5c c4 f0 e3 b9 15 8e bf 78 0a 96 41 b4 02 09 e7 d6 b6 e4 47 3f 3b 4e c3 5b 02 4e 2b de 74 e8 16 5f 07 a6 4e e0 6d 31 ff 00 8e d7 81 83 cd 7d 17 e1 04 8e e3 c1 b6 2a c0 e1 ed f0 df d6 b3 ab d0 d2 99 f3 fa 46 04 99 6a ee 7c 13 ad 7d 9e 6f b2 24 11 bb 33 7d e6 93 6f 15 ca ea 96 12 d9 cd 21 2a 76 86 20 71 ef 59 f0 48 52 65 6c f2 08 Data Ascii: 5\|BX&!LPtdK-[Sj^EnJVjq,'INx< gjvs:G^nuGpA.2$w+HLpM4Vb<T\xAG?;N[N+t_Nm1}Fj\|}o$3}o!v qYHRel
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 33 4d 92 27 b4 ba 64 61 ca 9a 92 ea 66 74 19 04 0e d9 af 49 59 c6 e7 99 2b a9 24 41 12 6f 94 2f a9 af a4 bc 14 a8 be 14 b0 1c 1f dd 75 af 9b e0 38 90 13 eb 5f 42 7c 3f 96 29 fc 25 67 99 c0 62 a5 58 77 1c e2 b9 ea ee 8d e1 b1 c4 f8 86 08 27 8a 6e 06 e2 c7 f9 d7 9a ca 9e 44 e5 4f 63 5d 96 b9 a9 2c 17 97 10 c4 77 22 ca ca 1b d4 03 5c 7d d6 65 94 b7 ad 4e 19 34 b5 14 9e a7 5b 6f e2 08 86 90 62 11 47 bc ae dc 60 fe 7e 95 cf bd c0 7e 7d 2a a4 44 84 c6 68 8b 27 38 ad 7d 9a 8e c6 9e d5 bd 18 db 99 32 46 2a b5 5a 78 89 3d 2a 78 f4 c9 24 40 fd 33 56 ad 63 26 9b 65 15 24 1c 8a d7 b3 d7 ef ac a0 30 c5 20 db d8 1e 71 55 4d 93 23 10 7b 55 79 06 c6 c5 4b 51 96 8c 13 94 76 25 79 e4 9a 66 92 46 2c ec 79 26 9f 8c 8a 86 36 19 ab 1b 80 a4 d5 b6 36 83 20 d9 cd 23 64 55 8f 97 Data Ascii: 3M'daftIY+$Ao/u8_B\|?)%gbXw'nDOc],w"\}eN4[obG`~~}Dh'8}2FZx=*x$@3Vc&e$0 qUM#{UyKQv%yfF,y&66 #dU
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 6d 32 30 e8 19 08 ac fb 9b 19 a1 55 96 28 a4 eb 82 36 e7 15 ad 77 e2 0d 6a fa 43 7d 75 77 24 cf b8 28 dc 78 24 52 4d 14 92 5b 99 84 ac 8e 54 9d a1 b8 ce 2b 58 dd 75 21 ea 52 86 da e2 75 0c d6 93 67 d0 2d 69 59 69 77 82 56 f3 21 28 4f 63 c5 1a 63 6f 21 e7 8f 6f dd 39 0c 46 6a ee ab 1c 67 51 9d f7 49 b3 71 31 82 4f 4e c2 a6 4f a1 51 2e de f8 4e eb 4f b5 82 f6 ea 48 52 39 97 2b 87 07 1f 5a cb 22 5b 3b 85 04 6d 75 39 04 1a db 49 ac b5 9d 36 3b 10 82 19 e3 5e 58 0f f5 80 72 b9 f7 cf 19 aa fa a5 bf db ce f8 54 ab 28 57 2a dc 15 18 c1 cf d0 d4 49 77 d8 a8 bb bb 2d cf 51 d0 7c 77 64 34 d8 cd cd c4 51 ec 50 1b 7b 60 f4 fd 6b cf fc 4d e2 5b 5b fd 6d a6 84 7c 9b 8f 20 76 ae 4a 7b 69 6d a5 08 e4 e0 f2 29 5d 76 37 98 ca 4f 1c 53 a7 46 2e da e8 29 54 71 6f 4d 4c dd 69 Data Ascii: m20U(6wjC}uw$(x$RM[T+Xu!Rug-iYiwV!(Occo!o9FjgQIq1ONOQ.NOHR9+Z"[;mu9I6;^XrT(W*Iw-Q\|wd4QP{`kM[[m\| vJ{im)]v7OSF.)TqoMLi
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 06 69 90 c3 6e 69 b2 26 05 4a 84 77 a8 e5 6c 8a 62 5b 95 58 73 ed 4d 22 9d 9c b5 3f 6f 14 8b 20 22 81 52 32 e2 9b 4e e0 18 a0 51 45 00 48 9c d5 80 38 aa ca 71 53 07 e3 ad 43 2d 33 6e f6 df f7 3b c1 e4 75 15 16 98 a1 52 59 1b a6 71 56 ef ee 91 ad 98 01 cf 6e 2a 0b 28 99 ad e2 5e 7e 76 cd 66 d5 a2 6c ed 7b a2 4b f9 e6 9a 34 b5 43 fb 94 f9 8f 3c 1f ad 64 bc 7b 48 c9 c9 35 b9 7b 11 86 d8 94 19 24 02 c6 b1 65 20 ed f5 ef 4e 9f 91 13 5d cd 19 a5 0d e1 b4 8c 81 f2 cd c7 1e d5 8c fd 6b 50 29 93 44 0a 3f e7 b7 f4 ac e9 62 21 88 f4 aa 85 89 96 a4 40 60 d4 a9 f7 c7 15 12 e4 b6 da bb 6d 6c d2 4e a3 1d e9 ce 49 2b 84 63 72 c3 db 62 25 2a 3a 8c d4 2a 92 d7 4b 71 64 12 14 f9 7b 76 ac f6 80 75 ae 18 e2 39 91 d3 18 d9 9a 7e 1c 29 0b ab be e1 21 3b 06 3e ee 0f ad 3e 1b 69 Data Ascii: ini&Jwlb[XsM"?o "R2NQEH8qSC-3n;uRYqVn(^~vfl{K4C<d{H5{$e N]kP)D?b!@`mlNI+crb%:*Kqd{vu9~)!;>>i
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: ce 4f 5c f5 ae 23 53 d3 4c 9a 4c 97 31 86 39 3b 72 07 4a 7c b2 7d 49 73 8d b4 47 2f a3 c6 cb 67 3b e0 9c b1 39 c5 6a 68 e9 29 75 96 32 ca e8 f9 0c b5 b3 a4 e8 8f ff 00 08 f4 4c 91 92 d3 1c 2f 1d 49 e2 af a6 81 77 e1 f4 1f 68 0a f1 cb fc 49 fc 26 ad 25 6b 09 cb 5d 44 b8 88 dd 28 33 31 76 1d 8f 61 5c c6 a1 6f 24 0c 5c ab 6c ce 0d 7a 05 ac 31 4a b9 23 1c 03 9a ab ab da 45 2d b4 81 57 aa 9c 8c 75 a8 5b 94 e5 74 71 36 17 f8 57 89 9b 3d c0 3c 55 ad 02 df 4f 92 fb 50 17 ac 8a 1a 3c c6 ce 70 a1 bb fe 38 cd 66 69 d1 a5 be af 0b cd 86 89 64 52 e0 8f e1 07 9f d2 bb 5f 1c 5a e9 71 f8 82 35 d2 04 3f be b7 0f 22 c1 ca 83 ce 3a 7a 8a 7d 79 89 bd fd d3 1f c2 f1 a6 85 ab 7f 6a 08 fc c8 91 d9 94 1e a5 0e 41 c7 bd 6c eb ba b5 8f 8b 9a 16 b6 86 55 86 d4 e5 9a 4c 06 62 7b 71 Data Ascii: O\#SLL19;rJ\|}IsG/g;9jh)u2L/IwhI&%k]D(31va\o$\lz1J#E-Wu[tq6W=<UOP<p8fidR_Zq5?":z}yjAlULb{q
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: ab 97 d0 f4 ff 00 ed 1f 17 19 58 66 28 c8 07 eb 50 df 24 4e 8a 1a c8 23 b4 9d 8e 12 09 19 88 ce 02 e6 a3 d1 e1 37 7a 9b 47 73 1b 27 96 76 85 71 83 5e bf 65 62 90 9c 94 19 c7 1c 56 06 bf a3 ab 6b 51 dd c2 02 b3 45 86 c7 7c 1a 75 9e 25 61 9d b5 b9 57 a7 2a 9a 18 da 96 9f 68 96 9c 85 04 0e 98 ae 39 c4 0a 8d 16 00 c1 ae aa fb cd 2c d1 31 c9 03 9a c6 b2 d1 63 ba bf 70 58 b0 3f c3 9a f9 75 56 70 72 55 1b 46 f6 39 66 d0 a2 96 42 ea b9 24 f6 a5 d4 3c 3b a9 4b 60 df 66 88 31 c7 15 dd 4d a0 7d 85 b7 a6 76 f5 c7 a5 69 e9 b2 c2 7f 70 ea 03 76 3e b5 6b 32 9a 69 a7 7b 09 c1 1f 3e e9 fa 45 d5 a5 f6 67 8d 83 6e f9 81 15 df 22 19 2d 10 e3 9c 57 77 ae 78 6a 0b 98 da 58 a3 50 e4 70 40 ef 59 96 5e 1f b9 5b 61 e6 45 d3 b5 6f 5b 32 fa ca 52 6a cd 12 a0 a2 8c 2b 5b 25 b8 5c 32 Data Ascii: Xf(P$N#7zGs'vq^ebVkQE\|u%aW*h9,1cpX?uVprUF9fB$<;K`f1M}vipv>k2i{>Egn"-WwxjXPp@Y^[aEo[2Rj+[%\2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	62577	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1438	OUT	GET /icons/icons_White/iconWhite_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"116-618df02b15812-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5238 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e2cf151791-EWR
2024-05-28 05:15:08 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	62569	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1443	OUT	GET /icons/icons_White/iconWhite_Information.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"3ea-618df06d63729-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6941 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e2d9928c71-EWR
2024-05-28 05:15:08 UTC	825	IN	Data Raw: 33 65 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 20 64 3d 22 4d 37 2c 30 61 37 2c 37 2c 30 2c 31 2c 30 2c 37 2c 37 41 37 2c 37 2c 30 2c 30 2c 30 2c 37 2c 30 5a 4d 38 2e 34 35 37 2c 31 30 2e 38 34 39 71 2d 2e 35 34 2e 32 31 33 2d 2e 38 36 32 2e 33 32 35 61 32 2e 32 37 35 2c 32 2e 32 37 35 2c 30 2c 30 2c 31 2d 2e 37 34 38 2e 31 31 32 2c 31 2e 34 39 2c 31 2e 34 39 2c 30 2c 30 2c 31 2d 31 2e 30 31 37 2d 2e 33 31 39 2c 31 2e 30 33 31 2c 31 2e 30 33 31 2c 30 2c Data Ascii: 3ea<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14"> <path id="icon_Information" d="M7,0a7,7,0,1,0,7,7A7,7,0,0,0,7,0ZM8.457,10.849q-.54.213-.862.325a2.275,2.275,0,0,1-.748.112,1.49,1.49,0,0,1-1.017-.319,1.031,1.031,0,
2024-05-28 05:15:08 UTC	184	IN	Data Raw: 32 39 32 41 31 2e 30 38 32 2c 31 2e 30 38 32 2c 30 2c 30 2c 31 2c 36 2e 38 36 33 2c 34 2e 34 2e 39 33 31 2e 39 33 31 2c 30 2c 30 2c 31 2c 36 2e 35 34 38 2c 33 2e 37 61 2e 39 34 2e 39 34 2c 30 2c 30 2c 31 2c 2e 33 31 36 2d 2e 37 30 39 2c 31 2e 30 37 34 2c 31 2e 30 37 34 2c 30 2c 30 2c 31 2c 2e 37 35 39 2d 2e 32 39 35 2c 31 2e 30 36 32 2c 31 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 37 35 36 2e 32 39 35 2e 39 35 35 2e 39 35 35 2c 30 2c 30 2c 31 2c 30 2c 31 2e 34 31 36 5a 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 292A1.082,1.082,0,0,1,6.863,4.4.931.931,0,0,1,6.548,3.7a.94.94,0,0,1,.316-.709,1.074,1.074,0,0,1,.759-.295,1.062,1.062,0,0,1,.756.295.955.955,0,0,1,0,1.416Z" fill="#FFFFFF"/></svg>
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	62573	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	617	OUT	GET /Images/5659/Packages/701x390/922170.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:09 UTC	502	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/jpeg Content-Length: 92397 Connection: close Cache-Control: public, max-age=2678400 expires: Fri, 28 Jun 2024 05:15:09 GMT x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET strict-transport-security: max-age=31536000 access-control-allow-origin: https://myhotel2.omnibees.com CF-Cache-Status: MISS Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3e2f86b1a38-EWR
2024-05-28 05:15:09 UTC	867	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 00 8e b9 03 9f c2 b2 a2 f9 ee e3 19 65 60 f9 20 8e c2 ba 0d 36 d9 ee ee e4 95 40 31 c4 bb a5 7c 70 80 9c 73 58 4e 52 5a a3 25 b8 fd 4f c6 3f 68 be 7b 0b ad 3e d6 da da 1f 98 bd 95 ba 2b fd d1 b5 46 78 da cd cb 0f 72 47 a5 4b fd 95 61 e2 cb 73 7d 6d 0e 97 a6 2c 7b 44 de 44 be 5f 94 58 e0 39 41 93 c9 ea 06 71 ed 5c 7e ac cb 3e ab 2c 90 cd bb e6 08 c7 18 04 f4 e3 d4 0f 5a d8 f0 b2 b5 d4 9f 63 97 52 82 ca 14 8a 5b 84 69 22 c8 90 81 92 37 0c 1d dc 1c 67 3e 9c 66 ba d3 6e 37 29 4b 5b 32 3d 46 c3 51 d0 a6 95 0d d4 17 c6 13 b5 fc bf 9b a7 52 1b 1f 30 14 ba 78 b7 d4 ad a7 89 b7 3b b6 7c d8 48 1b 94 1e 87 df f0 ab f2 cb b2 39 72 e1 38 fb a5 47 ce 7d eb 98 4f 22 de f5 a1 bf f3 55 14 8f 2a e2 22 44 91 67 a7 d4 56 50 6a a2 6f 66 36 d2 2b dd 58 dc c4 f2 db c8 aa 24 b3 Data Ascii: e` 6@1\|psXNRZ%O?h{>+FxrGKas}m,{DD_X9Aq\~>,ZcR[i"7g>fn7)K[2=FQR0x;\|H9r8G}O"U*"DgVPjof6+X$
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 41 f3 dd dc a0 0a 00 65 45 5c 00 73 d2 aa c7 a5 98 a3 48 db 6f 9d 22 06 04 b7 ca a0 83 9c fe 95 b3 a4 5c 8d 1f 4e 7d 51 b0 2e 51 b6 e9 f1 11 c7 9d 80 4c 84 1e a1 14 8c 0e 9b 98 7a 53 8a 4b a8 fa ea 74 86 25 be bd fe c0 b3 b6 9a 6b e9 db 6c 90 17 0a 21 e0 33 2b 1e 99 c0 05 bd 0e 17 b1 ce 36 b9 fd a9 e1 bd 41 62 9e da d2 05 78 84 c8 55 96 4d ca 47 cb c9 ef ea 31 56 fc 3f 7f 06 94 da 5c cb e4 ea 17 93 81 f6 86 65 31 98 be 72 76 13 80 58 b7 3b 9b 27 70 20 76 e7 6f e2 66 89 1d af d8 e6 5b 98 26 68 e2 f2 9a 28 d5 4f d9 c8 cb 05 03 a9 40 a4 f2 7d 07 d2 b3 9d 9b d4 6d bb 68 70 c3 c4 37 a5 dd 61 fb 36 36 ed 0b b0 37 bf d7 3c 53 9f 57 b8 fb 2c 73 40 f0 2c fe 60 cf ee 94 ae 33 e9 eb c5 50 55 8e f1 5c e2 10 b0 72 0b 46 17 7f fd f3 8e 3b d5 8d b6 b2 5c 29 fb 42 47 1c Data Ascii: AeE\sHo"\N}Q.QLzSKt%kl!3+6AbxUMG1V?\e1rvX;'p vof[&h(O@}mhp7a667<SW,s@,`3PU\rF;\)BG
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 71 d2 b9 fd 4a 4d 02 cc a5 ac 97 b6 f3 bc b1 90 6e 63 89 f6 c1 c1 03 8c fc c4 1d bd 07 43 d4 d5 4f 10 ad 68 97 ca ad ab 39 98 4e a3 ad 16 12 b8 78 62 05 c4 2b 84 0c 72 06 d4 51 f7 9b 24 7f 3a d0 d2 f4 4d 4a f2 e5 e0 8b 4f 5b 77 41 97 69 6e 04 61 3e bc 13 4f b5 9e 09 c4 4d 64 eb 24 93 81 22 c6 dc 18 a6 42 38 fc 54 7e 9e f5 d9 68 da ce 8b 75 a3 db 59 df 18 a0 d4 64 bb 26 75 59 4c 68 cb d4 86 3d 02 f4 00 1c 81 ce 07 35 cb 29 b6 52 4b 71 8f a5 fd 9f c3 5a 89 d4 75 b8 66 d3 df 6a 4d 0d 92 e5 55 b2 ac 0b 01 c9 e4 0e 49 3d 7e b5 c4 ea 7e 26 d4 6e ad 62 b2 d2 91 74 fb 58 f0 16 18 df 32 31 ee db bb 74 ed 8a ec fc 51 ad 25 bd 85 d5 8d d6 9b e7 e9 37 93 8b c4 31 49 e5 8c b1 7d 84 38 24 1d aa 01 c1 c7 51 c0 c5 71 72 d8 68 17 33 ee d1 b5 59 2d 37 b8 57 b7 d4 10 29 40 Data Ascii: qJMncCOh9Nxb+rQ$:MJO[wAina>OMd$"B8T~huYd&uYLh=5)RKqZufjMUI=~~&nbtX21tQ%71I}8$Qqrh3Y-7W)@
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 3f d7 ad 39 a4 76 88 43 19 60 87 f2 a7 2f fa af 2d d4 15 ce ec e3 91 8f eb 4d 55 74 cb 00 57 8e 01 e8 73 d0 56 dd 48 3a 28 2e d2 eb 4f 12 c6 bc ba 60 9c e4 e4 70 41 3f 5a c7 d4 b3 3d ce fe 4a 98 c0 18 e7 b0 a9 74 49 0a 19 2d 18 32 e4 96 45 7e aa 7f 88 7b 8c 60 fe 14 5c c4 55 bc a4 c8 6c e0 13 58 25 ec ea 34 8b 7a a2 ac 37 97 70 d8 dc 58 a4 c1 21 9b 1b 81 ed 8f 7e c0 f7 a8 64 b7 65 8d 77 c4 ca 5c 6e 5c 8e bf 4f 5a 92 48 d9 62 75 7e 4e 79 6c 66 ba 7f 05 dc 43 3d c4 56 b7 f6 d1 cf 69 6f ba 49 92 77 fd db 45 c6 72 0f 42 32 70 57 9c 91 e9 5d 11 9d 95 c2 0b 9b 46 72 68 25 8e 32 e2 2e 41 00 12 38 a9 f5 49 1e e9 63 9f 66 d5 08 15 c8 3f 28 6f 4a e8 75 9b c8 35 9d 41 a7 d3 ed a3 b0 b3 95 89 b5 b6 40 17 80 31 81 db 3e fd eb 3e cf 74 77 0d 6a f0 b6 18 fc a9 d4 83 8e Data Ascii: ?9vC`/-MUtWsVH:(.O`pA?Z=JtI-2E~{`\UlX%4z7pX!~dew\n\OZHbu~NylfC=VioIwErB2pW]Frh%2.A8Icf?(oJu5A@1>>twj
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 3e 3b 19 74 d8 36 a2 cd 85 dc 58 92 8e 17 20 3a e4 10 d9 c0 5d d9 fa 73 1e 2e d3 85 b5 9c 77 8b 67 8b 9b 94 fb 44 cf 08 20 5b 64 f9 61 4a 82 46 c6 ea 09 c7 20 e3 8a cd b8 f1 3f 88 ce b6 d7 49 28 b3 99 be 57 58 50 77 1c 92 0e 72 48 eb 5b 12 f8 37 c4 d2 69 3a 7b cd a9 48 f6 da 80 10 c7 1f 9e d9 0b 9c a8 61 fd dc 9e 00 ce 3d aa 24 d2 5a 8f 95 9e 68 cd 24 5c 0f 91 88 2a 70 31 f8 57 59 a3 f8 4b 49 b8 f0 e5 fd e6 a7 ab a5 95 dd b0 d9 0d b1 1b 99 dc 67 ef 0e d9 39 e9 ff 00 eb 9f 54 f8 61 a8 e9 b7 a6 de 59 23 6c 3e d3 22 12 c8 7a 13 8e fd fb e2 b1 bf e1 17 b9 79 ee a0 8e 50 c6 09 8c 5c 9e 4d 52 92 d9 09 41 f6 29 e9 3a 4b 6b 5a f4 1a 7a 4b 15 be f6 08 1a 57 01 17 eb cf af 38 f7 af 44 bd 7d 33 55 f1 19 d3 3c 47 75 6d 05 8e 93 01 82 29 6c 02 82 e4 77 07 a1 c9 c9 c6 Data Ascii: >;t6X :]s.wgD [daJF ?I(WXPwrH[7i:{Ha=$Zh$\*p1WYKIg9TaY#l>"zyP\MRA):KkZzKW8D}3U<Gum)lw
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 16 96 9a 9a 2c af 79 69 76 c0 6d dd 1a b4 2e de c4 e3 69 35 cc 40 f6 b6 f1 b2 a1 4b 87 07 91 82 13 3e c3 a9 c7 a9 e3 da a7 59 e6 9e 29 4b 4b f3 9d a1 36 8d a1 00 24 f0 07 00 53 94 5a ea 25 25 d8 d6 3a 16 9a f7 4f 6f 36 ac 2d 3c b9 36 cb 1c e0 80 ac 46 47 cc 32 a7 3e b4 fb af 06 38 51 26 93 7b 1d fa 1e 19 60 98 33 75 f4 1c e2 a3 b9 69 b5 dd 02 55 0a af a8 d9 34 7e 63 ab 63 cd 88 06 c1 fa ae 71 f4 22 b9 d6 dc f2 6d 3f 26 c0 14 0e 9c d5 26 ec 12 b7 63 7e 0f 0a 6b 0f 72 e2 68 24 81 42 e4 c8 d0 f5 3e 99 1f ce ac 2e a1 e2 0d 3a d8 c7 24 82 68 94 f1 05 d8 f3 95 80 f6 7e 47 e1 55 74 9d 46 e2 ca 69 61 dc f2 5b c9 80 55 e7 28 ea 47 f1 24 83 95 3f a1 ee 0d 69 5c 6b 1a 95 9d c4 6b 1e a8 f7 d0 b1 c7 97 71 12 99 73 fd d3 b8 60 f3 dc 1e 7d 29 5d 6c 0a c6 1d c5 c6 97 7f Data Ascii: ,yivm.i5@K>Y)KK6$SZ%%:Oo6-<6FG2>8Q&{`3uiU4~ccq"m?&&c~krh$B>.:$h~GUtFia[U(G$?i\kkqs`})]l
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: ed 9b c3 22 df 52 8d 5e 59 ee 04 66 21 22 ae 76 e1 cf 0a 58 0e bc 0d d8 f7 aa 13 78 36 d6 5d 17 ed f0 ea d6 8d 2a 23 27 94 f9 12 4f b7 95 19 3c 06 2b 9e 33 d4 71 d6 a2 76 72 bf 53 57 16 e2 79 b4 8f bd 76 8c 05 1d 3d 6a f6 81 75 25 b6 a8 16 29 a1 87 ed 08 60 2f 3a 6e 41 bb 80 5b d8 1c 55 59 21 d8 59 18 80 d8 c8 2d e9 4e d3 55 24 bd 8c 38 f9 47 ce 7d b1 5a de d1 39 d6 8c ea bc 79 63 16 9d 79 6d 6a b0 69 d6 ed 1c 2a 0c 5a 6c 9b 90 93 c9 62 4f a9 24 80 3b 60 76 ac 1b 1b a5 bb 11 8b b9 fc 8b a1 c4 37 5d 03 91 d9 bf f8 af ce ab cb 2a dc 61 e4 66 6c 0f c4 fa 0f 6a ab 2c 2d e5 f9 ac 7e 65 3e 58 5e bb 78 c8 fe b4 45 df 72 d3 7d 0b f7 56 72 de 6a 04 4a 9b 5d 97 2e c3 f8 9b a0 23 eb 5d 46 a5 a3 45 7b 68 c6 12 89 22 22 8d d8 f9 b0 bd bd f8 ae 6a c3 55 5f 29 22 ba 57 Data Ascii: "R^Yf!"vXx6]#'O<+3qvrSWyv=ju%)`/:nA[UY!Y-NU$8G}Z9ycymjiZlbO$;`v7]*aflj,-~e>X^xEr}VrjJ].#]FE{h""jU_)"W
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 73 8c 9c 66 b9 ad 07 5d 9a e7 54 b6 b4 ba be 36 56 4c 41 92 48 c6 36 02 79 c0 e6 ba 5d 67 51 49 7c 37 7f 16 9f 05 b5 dd 9d bd f0 c6 a4 d1 81 3f 3f 74 6d ee 38 c1 23 db 8e 6a 5a 7b 32 b9 d5 8b be 16 f1 d3 e9 3e 7b ca 8a e9 2e e6 45 da d2 15 93 a6 4f a6 ec e3 f0 aa 56 97 7a 96 a3 e2 08 75 5b 5b 05 9e 35 9b 61 8d 17 6a 31 39 21 49 ce 33 8c 90 3e b5 4a d7 5a d1 2f b4 e1 15 bb 5c e9 d7 d2 46 62 ba fd f1 11 49 1a 28 6c 31 c7 de 77 07 18 e0 74 3d ab 7e cf 54 bb 51 a8 48 34 ab 68 f4 a9 ae 85 b2 5a de ca 23 8f cd 4c 28 63 c8 65 03 68 25 bd 4e 33 cd 3f 66 ee 2e 74 f5 2d 6a 3a ce 83 aa 69 da 8d d6 a2 17 4e d6 e4 6c 23 84 de 17 1c 0c a8 3c 1e 30 73 df 1c 56 3f 87 fc 49 63 e1 b4 20 46 97 c5 1f 31 cb 24 67 95 71 f3 1f 43 82 4f 5e d5 c4 5e c3 3e a7 e5 4a a9 e5 a5 bc 24 Data Ascii: sf]T6VLAH6y]gQI\|7??tm8#jZ{2>{.EOVzu[[5aj19!I3>JZ/\FbI(l1wt=~TQH4hZ#L(ceh%N3?f.t-j:iNl#<0sV?Ic F1$gqCO^^>J$
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 1a 85 c3 1b 78 ee 1c 09 0c c8 81 c1 38 c9 c7 27 8f 75 20 d5 18 e0 56 cc b0 9c a0 e1 d6 53 cf b8 c8 e3 f9 7d 2a c2 59 1b a4 8e 07 04 c6 a7 08 57 3f bb 63 c9 ce 3f 87 d7 d2 a5 da e8 12 66 6c d1 3e 04 90 80 10 8e 8b 26 e2 0f f3 ae 9a ce 27 d2 59 26 48 56 55 78 f6 17 2c 76 b9 e8 c9 83 c1 0d cf 1e dc 56 0c 70 1b 4d c1 94 19 81 c1 ee 17 ff 00 af fa 57 47 a0 20 ba d4 9a c2 64 f3 4d cc 4e 52 23 21 01 e5 55 2c 80 81 ef bb f1 22 a6 a3 6f 61 a4 d1 ad e1 68 e3 b5 d4 6f 12 c9 8a db b4 4b 22 86 e4 c6 78 dd 1b 1e f8 cf 1e a0 54 f7 0b 1d e6 b4 8f 6c c6 45 8c 16 2d cf cc c3 b9 fd 2b 9c d3 2f 96 cb 5a 5b f8 1d 9e 19 23 d9 34 3b b7 48 14 8e 4e 38 c9 53 fc ab 76 69 9e c2 e1 25 24 ba cd 90 d8 f9 19 87 5f eb 5b 50 95 a4 ae 5e f1 33 f5 b8 02 5e 46 f7 2b 24 90 ca 9b 1f ca e5 94 Data Ascii: x8'u VS}*YW?c?fl>&'Y&HVUx,vVpMWG dMNR#!U,"oahoK"xTlE-+/Z[#4;HN8Svi%$_[P^3^F+$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	62574	104.17.24.14	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	568	OUT	GET /ajax/libs/oidc-client/1.11.3/oidc-client.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:08 UTC	947	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6015c105-5d135" Last-Modified: Sat, 30 Jan 2021 20:26:45 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 18 May 2025 05:15:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=305d9F7ibsKKR3Mk27eoIgB9FTZtub1knuM2YAvsQttMe3xgmLtTFc0cDhwUmmJf8FULgX0ETIRHd0DcxMg%2FKRiFZxgJ6ZZ1zfhFY45mSKChJJOh3uEvN%2BmPLqIEH3NEM%2BN4Ml1p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 88abc3e31bb380d3-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:15:08 UTC	422	IN	Data Raw: 37 62 66 36 0d 0a 76 61 72 20 4f 69 64 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c Data Ascii: 7bf6var Oidc=function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerabl
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 72 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 Data Ascii: sModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 74 28 65 2c 6e 29 2c 65 7d 7d 28 29 3b 76 61 72 20 69 3d 7b 64 Data Ascii: r n=function(){function t(t,e){for(var r=0;r<e.length;r++){var n=e[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}return function(e,r,n){return r&&t(e.prototype,r),n&&t(e,n),e}}();var i={d
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 29 3b 73 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 67 67 65 72 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 21 65 2e 64 65 62 75 67 26 26 65 2e 69 6e 66 6f 26 26 28 65 2e 64 65 62 75 67 3d 65 2e 69 6e 66 6f 29 2c 21 28 65 2e 64 65 62 75 67 26 26 65 2e 69 6e 66 6f 26 26 65 2e 77 61 72 6e 26 26 65 2e 65 72 72 6f 72 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 6c 6f 67 67 65 72 22 29 3b 6f 3d 65 7d 7d 5d 29 2c 74 7d 28 29 29 2e 72 65 73 65 74 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 29 7d 63 61 74 63 68 Data Ascii: );s=e}},{key:"logger",get:function t(){return o},set:function t(e){if(!e.debug&&e.info&&(e.debug=e.info),!(e.debug&&e.info&&e.warn&&e.error))throw new Error("Invalid logger");o=e}}]),t}()).reset()},function(t,e){t.exports=function(t){try{return!!t()}catch
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 72 28 31 35 29 2c 73 3d 72 28 33 35 29 28 22 73 72 63 22 29 2c 61 3d 72 28 31 35 36 29 2c 75 3d 22 74 6f 53 74 72 69 6e 67 22 2c 63 3d 28 22 22 2b 61 29 2e 73 70 6c 69 74 28 75 29 3b 72 28 31 39 29 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 74 29 7d 2c 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 61 29 7b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3b 75 26 26 28 6f 28 72 2c 22 6e 61 6d 65 22 29 7c 7c 69 28 72 2c 22 6e 61 6d 65 22 2c 65 29 29 2c 74 5b 65 5d 21 3d 3d 72 26 26 28 75 26 26 28 6f 28 72 2c 73 29 7c 7c 69 28 72 2c 73 2c 74 5b 65 5d 3f 22 22 2b 74 5b 65 5d 3a 63 2e 6a 6f 69 6e 28 53 74 72 69 6e 67 28 Data Ascii: r(15),s=r(35)("src"),a=r(156),u="toString",c=(""+a).split(u);r(19).inspectSource=function(t){return a.call(t)},(t.exports=function(t,e,r,a){var u="function"==typeof r;u&&(o(r,"name")\|\|i(r,"name",e)),t[e]!==r&&(u&&(o(r,s)\|\|i(r,s,t[e]?""+t[e]:c.join(String(
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 20 4f 62 6a 65 63 74 3f 73 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 32 2e 36 2e 31 31 22 7d 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 26 26 28 5f 5f 65 3d 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 6e 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: Object?s:null}},function(t,e){var r=t.exports={version:"2.6.11"};"number"==typeof __e&&(__e=r)},function(t,e,r){var n=r(11);t.exports=function(t,e,r){if(n(t),void 0===e)return t;switch(r){case 1:return function(r){return t.call(e,r)};case 2:return functi
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 31 3d 3d 74 2c 75 3d 32 3d 3d 74 2c 63 3d 33 3d 3d 74 2c 66 3d 34 3d 3d 74 2c 68 3d 36 3d 3d 74 2c 6c 3d 35 3d 3d 74 7c 7c 68 2c 70 3d 65 7c 7c 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 67 29 7b 66 6f 72 28 76 61 72 20 64 2c 76 2c 79 3d 6f 28 65 29 2c 6d 3d 69 28 79 29 2c 5f 3d 6e 28 61 2c 67 2c 33 29 2c 53 3d 73 28 6d 2e 6c 65 6e 67 74 68 29 2c 62 3d 30 2c 77 3d 72 3f 70 28 65 2c 53 29 3a 75 3f 70 28 65 2c 30 29 3a 76 6f 69 64 20 30 3b 53 3e 62 3b 62 2b 2b 29 69 66 28 28 6c 7c 7c 62 20 69 6e 20 6d 29 26 26 28 76 3d 5f 28 64 3d 6d 5b 62 5d 2c 62 2c 79 29 2c 74 29 29 69 66 28 72 29 77 5b 62 5d 3d 76 3b 65 6c 73 65 20 69 66 28 76 29 73 77 69 74 63 68 28 Data Ascii: xports=function(t,e){var r=1==t,u=2==t,c=3==t,f=4==t,h=6==t,l=5==t\|\|h,p=e\|\|a;return function(e,a,g){for(var d,v,y=o(e),m=i(y),_=n(a,g,3),S=s(m.length),b=0,w=r?p(e,S):u?p(e,0):void 0;S>b;b++)if((l\|\|b in m)&&(v=_(d=m[b],b,y),t))if(r)w[b]=v;else if(v)switch(
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 57 28 31 29 2e 73 65 74 28 7b 7d 29 7d 29 29 2c 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 67 28 74 29 3b 69 66 28 72 3c 30 7c 7c 72 25 65 29 74 68 72 6f 77 20 4b 28 22 57 72 6f 6e 67 20 6f 66 66 73 65 74 21 22 29 3b 72 65 74 75 72 6e 20 72 7d 2c 54 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 62 28 74 29 26 26 77 74 20 69 6e 20 74 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 71 28 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 74 79 70 65 64 20 61 72 72 61 79 21 22 29 7d 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 62 28 74 29 7c 7c 21 28 5f 74 20 69 6e 20 74 29 29 74 68 72 6f 77 20 71 28 22 49 74 20 69 73 20 6e 6f 74 20 61 20 74 79 70 65 64 20 61 72 72 61 79 20 Data Ascii: function(){new W(1).set({})})),kt=function(t,e){var r=g(t);if(r<0\|\|r%e)throw K("Wrong offset!");return r},Tt=function(t){if(b(t)&&wt in t)return t;throw q(t+" is not a typed array!")},Ct=function(t,e){if(!b(t)\|\|!(_t in t))throw q("It is not a typed array
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 66 69 6e 64 49 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 74 28 54 74 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 51 28 54 74 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 69 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 6f 74 28 54 74 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d Data Ascii: uments[1]:void 0)},findIndex:function t(e){return nt(Tt(this),e,arguments.length>1?arguments[1]:void 0)},forEach:function t(e){Q(Tt(this),e,arguments.length>1?arguments[1]:void 0)},indexOf:function t(e){return ot(Tt(this),e,arguments.length>1?arguments[1]
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 65 73 3a 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 73 74 2e 63 61 6c 6c 28 54 74 28 74 68 69 73 29 29 7d 7d 2c 56 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 62 28 74 29 26 26 74 5b 77 74 5d 26 26 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 65 26 26 65 20 69 6e 20 74 26 26 53 74 72 69 6e 67 28 2b 65 29 3d 3d 53 74 72 69 6e 67 28 65 29 7d 2c 4b 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 56 74 28 65 2c 72 3d 6d 28 72 2c 21 30 29 29 3f 68 28 32 2c 65 5b 72 5d 29 3a 56 28 65 2c 72 29 7d 2c 71 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 21 28 56 74 28 65 2c 72 3d 6d 28 72 2c 21 30 29 29 26 26 62 28 6e 29 26 26 5f 28 6e 2c 22 76 61 6c 75 65 22 29 Data Ascii: es:function t(){return st.call(Tt(this))}},Vt=function(t,e){return b(t)&&t[wt]&&"symbol"!=typeof e&&e in t&&String(+e)==String(e)},Kt=function t(e,r){return Vt(e,r=m(r,!0))?h(2,e[r]):V(e,r)},qt=function t(e,r,n){return!(Vt(e,r=m(r,!0))&&b(n)&&_(n,"value")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	62576	104.16.79.73	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	622	OUT	GET /beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://book.omnibees.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:08 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19306 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.5.0" Last-Modified: Mon, 06 May 2024 19:01:13 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 88abc3e2fa55430a-EWR
2024-05-28 05:15:08 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 7c 7c 30 2c 72 3d 74 3b 72 65 74 75 72 6e 5b 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i+
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 72 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|r(a)}},168:function(e,t,n){"use strict";var i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arg
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d Data Ascii: .getAttribute("src");if(g&&"function"==typeof URLSearchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 5f 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 5f 28 Data Ascii: &&Array.isArray(m)&&m.length>0&&(d.timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=_("first-paint"),d.firstContentfulPaint=_(
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 2e 67 65 74 54 69 6d 65 28 29 2c 74 72 69 67 67 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 41 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 41 29 7d 29 29 3b 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e Data Ascii: .getTime(),triggered:!0}};"complete"===window.document.readyState?A():window.addEventListener("load",(function(){window.setTimeout(A)}));var R=function(){return L&&0===v.filter((function(e){return e.id===l})).length},x=function(e){v.push({id:l,url:e,ts:(n
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 2e 6c 63 70 2e 72 6c 74 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 Data Ascii: .lcp.rlt=c.resourceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(r=c.lcpResourceEntry)\|\|void 0===r?void 0:r.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"))
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 74 72 79 7b 76 61 72 20 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 63 26 26 63 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 26 26 70 61 72 73 65 49 6e 74 28 63 5b 31 5d 29 3c 38 31 26 26 28 61 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 61 26 26 69 29 7b 74 2e 73 74 3d 31 3b 76 Data Ascii: f(navigator&&"string"==typeof navigator.userAgent)try{var c=navigator.userAgent.match(/Chrome\/([0-9]+)/);c&&c[0].toLowerCase().indexOf("chrome")>-1&&parseInt(c[1])<81&&(a=!1)}catch(e){}if(navigator&&"function"==typeof navigator.sendBeacon&&a&&i){t.st=1;v
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 22 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 3b 74 72 79 7b 66 6f 72 28 3b 65 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 7b 76 61 72 20 69 3d 65 2c 72 3d 69 2e 69 64 3f 22 23 22 2b 69 2e 69 64 3a 75 28 69 29 2b 28 69 2e 63 6c 61 73 73 4c 69 73 74 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 69 2e 63 6c 61 73 73 Data Ascii: "},u=function(e){var t=e.nodeName;return 1===e.nodeType?t.toLowerCase():t.toUpperCase().replace(/^#/,"")},s=function(e,t){var n="";try{for(;e&&9!==e.nodeType;){var i=e,r=i.id?"#"+i.id:u(i)+(i.classList&&i.classList.value&&i.classList.value.trim()&&i.class
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a 65 3e 74 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 29 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e Data Ascii: unction(e,t){return e>t[1]?"poor":e>t[0]?"needs-improvement":"good"}(t.value,n),e(t))}},y=function(e){requestAnimationFrame((function(){return requestAnimationFrame((function(){return e()}))}))},h=function(e){var t=function(t){"pagehide"!==t.type&&"hidden
2024-05-28 05:15:08 UTC	1369	IN	Data Raw: 65 73 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 3d 70 28 22 46 43 50 22 29 2c 6e 3d 67 28 65 2c 72 2c 42 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 69 2e 74 69 6d 65 53 74 61 6d 70 2c 6e 28 21 30 29 7d 29 29 7d 29 29 29 7d 29 29 7d 2c 52 3d 5b 2e 31 2c 2e 32 35 5d 2c 78 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 7c 7c 28 74 3d 72 2c 6e 3d 65 2c 69 3d 6e 65 77 20 44 61 74 65 2c 4d 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 4f 28 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e Data Ascii: es),l((function(i){r=p("FCP"),n=g(e,r,B,t.reportAllChanges),y((function(){r.value=performance.now()-i.timeStamp,n(!0)}))})))}))},R=[.1,.25],x={passive:!0,capture:!0},F=new Date,I=function(e,r){t\|\|(t=r,n=e,i=new Date,M(removeEventListener),O())},O=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	62570	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1437	OUT	GET /icons/hamburger_menu_desktop_icon.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"256-618df06d8bbaf-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6112 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e47c3b72a7-EWR
2024-05-28 05:15:08 UTC	605	IN	Data Raw: 32 35 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 37 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 35 33 36 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 35 33 36 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 36 33 2e 35 20 2d 31 37 37 29 22 3e 0a 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 35 39 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 35 39 31 22 20 78 32 3d 22 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 36 33 2e 35 20 Data Ascii: 256<svg xmlns="http://www.w3.org/2000/svg" width="22" height="17" viewBox="0 0 22 17"> <g id="Group_15367" data-name="Group 15367" transform="translate(-1263.5 -177)"> <line id="Line_2591" data-name="Line 2591" x2="22" transform="translate(1263.5
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	62572	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	617	OUT	GET /Images/5659/Packages/701x390/926105.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:10 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: image/jpeg Content-Length: 71306 Connection: close Cache-Control: public, max-age=2678400 expires: Fri, 28 Jun 2024 05:15:09 GMT x-aspnet-version: 4.0.30319 strict-transport-security: max-age=31536000 access-control-allow-origin: https://myhotel2.omnibees.com CF-Cache-Status: MISS Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3e47ff343ff-EWR
2024-05-28 05:15:10 UTC	890	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: a7 1f 95 35 48 23 ad 3f 8f 5a 77 61 61 31 9c 8e 29 c3 70 eb 8c 53 36 26 ec 98 c1 3e b8 a7 f1 db 1f 95 3d 46 29 cb 20 52 c4 63 a6 28 51 8c 67 05 87 42 45 26 0e 70 29 4a 95 7c 36 78 ea 28 72 8a d1 b0 1d b8 fa 8f ca 93 78 f5 19 fa 52 2c 8a c7 6a 95 2d 8e 80 82 69 d9 3f fe aa 77 40 37 78 07 a7 3f ee d2 99 84 64 33 e0 28 3c 93 c0 15 57 52 be 16 31 2b a8 f3 7f bc 43 60 28 f7 ae 56 e3 c6 32 cc 0c 70 44 88 4e 41 ce 78 1e b5 70 e7 9f c1 a9 32 9a 8e e7 4d 24 d3 ac ab 34 93 a2 47 93 90 0e 41 f4 15 4a e3 c4 d6 d0 9d c4 02 a0 9e 57 9c f1 d0 56 28 d3 6e af 2c ae ae 6e e5 01 23 93 11 2b 20 cb 71 c9 27 8a c8 4b 58 89 10 45 6f 71 2c 9d 25 dc 7e e8 3d c0 14 e1 4e 2e 4d 4a 5b 6f 63 09 55 92 3a 1b 8f 19 24 eb b2 d9 5e 12 dc 02 d8 34 e4 f1 0e a1 a7 cd fe 9a 12 68 18 82 48 03 Data Ascii: 5H#?Zwaa1)pS6&>=F) Rc(QgBE&p)J\|6x(rxR,j-i?w@7x?d3(<WR1+C`(V2pDNAxp2M$4GAJWV(n,n#+ q'KXEoq,%~=N.MJ[ocU:$^4hH
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: c5 37 8b 69 7c b2 9b 95 b8 51 f2 9f 2a 63 c6 46 33 83 d7 eb 5a 42 7b 6b 91 e5 07 f2 62 62 a5 58 b0 60 aa 3b 13 9c 82 4d 66 e9 34 f9 ae 52 92 68 d1 53 0b c8 2d 6e 30 d9 5c c8 c4 60 b2 fa fe 35 1b c8 24 ba 76 48 d4 21 4c 16 c0 18 c1 aa 4d 25 a5 cd f6 e6 92 44 89 3e f7 96 87 6b 81 d3 93 4c be 5b 32 65 99 84 bb 5f 2c 85 26 18 1f 87 a5 4c 34 6a f7 1b bb 5a 13 c7 6f 12 a2 88 49 2f b8 b3 67 19 20 77 c7 61 ed 56 b4 e6 95 6e 5d e3 2c b1 b7 b0 19 ef 59 36 b6 d1 c3 61 b9 ef 37 48 30 4b 29 ce 33 d0 71 56 74 99 5d 66 6c 5e 99 22 66 e3 3f e0 6b aa 2d b9 de e4 d8 ed 6d e7 d9 2c 73 70 46 41 e4 57 48 8d 15 ca 6d f2 16 41 fc 58 38 22 b9 1b 67 0f 19 5e 4a a9 e0 fa d7 47 60 53 cb 59 60 95 b2 a3 04 8e a3 da bd 9a 2e e9 a3 3a ab 54 c0 e9 71 c9 30 8c 6f 04 f7 7c 00 2b 36 6b 35 Data Ascii: 7i\|Q*cF3ZB{kbbX`;Mf4RhS-n0\`5$vH!LM%D>kL[2e_,&L4jZoI/g waVn],Y6a7H0K)3qVt]fl^"f?k-m,spFAWHmAX8"g^JG`SY`.:Tq0o\|+6k5
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 2d 1e f8 c6 13 24 70 d9 1d 45 62 cb a8 ea 51 3a 5c 5d c6 50 28 c2 48 d1 ed 07 fa 74 ac 79 2f 58 bf ce 17 23 04 10 31 83 eb c7 53 53 c9 ae 49 76 a7 ed 69 1c c1 88 0d 9c 82 30 3a d7 a1 0c 34 94 56 97 25 cd 32 ec 32 dd ea a1 fc 9c 05 50 49 0a 48 32 63 91 c7 6a cd 93 50 b9 10 14 fd ea e1 f0 14 f6 ff 00 eb d5 ad 2f 55 36 d0 7d 9e d6 07 79 4b 12 36 8d d9 cf 4e 3b 0a b7 75 0e ab f6 b2 21 91 72 ab e6 48 24 60 76 70 0e 48 c7 07 e9 59 a9 fb 39 b8 d9 7c c4 b5 44 d6 be 6d 82 40 93 79 4f 34 99 12 c5 82 cc 13 8e 84 f6 c7 f2 ab d6 e6 d0 5d c3 f6 71 6e b0 ba 10 00 f9 9b 93 9c f3 d2 b2 6d 3f b5 b5 19 24 3e 72 79 71 0c 79 bc 7c b9 1d 3d ab 32 fe ca f7 4b ba 7d ca 5b 8c 96 4e 87 9c 8c 8f af 35 0a 2a 6e d2 92 4c 69 db 73 ac b8 d1 a1 9e f7 cc b6 71 6e 90 0f de be c1 bb 93 93 Data Ascii: -$pEbQ:\]P(Hty/X#1SSIvi0:4V%22PIH2cjP/U6}yK6N;u!rH$`vpHY9\|Dm@yO4]qnm?$>ryqy\|=2K}[N5*nLisqn
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: b3 d8 35 6a 35 a8 87 4c 78 a5 02 49 1d 83 06 3f 31 41 ec 47 5a cb bd b3 68 b6 ed 8f e5 65 dd 9e b5 bc 67 a9 93 8d 8a 52 34 40 e0 1c fe 03 15 03 3a 6e 00 1c 63 db 8a 56 00 1d bb 73 eb c7 4a 88 a8 1d 3b fa 1e b5 5b 99 ec 87 85 52 39 60 31 de 9d e5 e4 65 5c 11 fe f5 57 e0 02 14 e2 86 56 db 85 fc 6a 9b 12 43 df 83 cb 7f e3 d4 2b b1 1f 2b 12 07 e3 51 ae dc ed 1f 7b d2 94 ab f6 51 4d 68 2b 5c 79 60 b9 1d fd c5 34 f4 3c d3 44 84 71 8c 9f 41 4a 1c 11 f3 21 1e f5 44 0e e3 ae 38 fa d2 7c bc 11 b8 91 f8 53 49 1c e0 8c f6 ed 4f 5c 63 9c 67 da 9a 77 07 a0 a1 b3 91 91 9f 42 29 c3 71 39 ce 07 a6 6a 36 55 1c 9c 1f af 14 de 14 60 1c e7 f2 a2 e2 b1 2e 1b 3d 33 48 58 8e ac 73 ed 46 c2 3a 31 e9 d7 34 d2 a4 f2 0b fb e4 8a 62 32 44 83 d6 9d e6 a8 3d 33 55 f2 31 d6 97 70 cd 78 Data Ascii: 5j5LxI?1AGZhegR4@:ncVsJ;[R9`1e\WVjC++Q{QMh+\y`4<DqAJ!D8\|SIO\cgwB)q9j6U`.=3HXsF:14b2D=3U1px
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 1a bf da 2d 24 11 b4 ea 7c d5 fb c8 72 a7 db 9e 95 c5 cb ce d2 4c be 5b 21 f0 6a 0d a7 dd 3c 93 23 24 57 19 20 46 03 02 dd 06 40 a8 ee 75 7b c9 dd 27 dd 09 ca e4 8d a0 b0 23 a6 73 58 c6 ee ee db 7b 45 96 56 e2 42 46 e5 fd 78 15 50 ce 59 78 e0 fa 57 75 3c 1a 72 e7 66 2e 76 36 d3 5a 7f b4 23 4d 33 13 d0 90 b8 23 35 5a f6 ee 19 a6 67 62 0c 85 47 41 9e 73 c9 cf d2 b2 e3 02 59 7e 79 76 a9 eb c7 a5 5d b4 d3 3c ff 00 96 79 23 85 77 00 ae c7 82 47 6a ea f6 70 a6 bc 8a bc a4 69 69 37 f3 c5 ba da 3b a4 4b 49 03 64 31 04 f2 30 4f 3f 4f ad 74 da 36 8d e7 cd 15 e4 71 0b f8 1d b1 10 18 e4 e3 1f c5 c8 03 d2 b2 2d 92 c2 c7 cc 30 c5 1c be 58 e8 d0 0c 93 eb 93 f8 d5 88 b5 0b cb a8 e4 ba 58 a4 81 9a 3d b1 48 a9 b0 00 0e 70 31 f9 d7 0c eb 41 bb c5 1b d3 7c ba bd 59 bb 2c b3 Data Ascii: -$\|rL[!j<#$W F@u{'#sX{EVBFxPYxWu<rf.v6Z#M3#5ZgbGAsY~yv]<y#wGjpii7;KId10O?Ot6q-0XX=Hp1A\|Y,
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 55 cd 5a fe d3 95 07 09 0a 03 d8 44 33 5a 4b c8 ce 37 65 3c f1 8e 01 fd 69 ac 58 0e 33 8f 5a b4 d7 72 4b 9f dd 47 d7 ae d0 2a 26 97 3c 15 1f f0 1a 34 1b 22 49 40 6c 1f 4f ad 48 08 60 72 39 f7 a6 f1 83 b7 23 eb 4c 0a 73 d3 3f 4a a8 90 d7 51 ed 80 77 15 e9 d3 34 80 92 3b 63 db b5 05 88 e3 21 7e a6 90 48 c1 b0 14 9f 7e 80 52 bd 98 35 74 38 29 07 23 70 fc 3f c6 93 e6 e8 79 a5 57 56 ef f5 ef 4b 93 8e 31 93 ef 54 40 8a fd 8b 10 6a 4d e7 b2 ab 7d 6a 22 41 1c 8c 7b d2 12 a3 fb c7 e8 33 49 37 61 b5 a9 81 b9 b3 4a 18 91 51 e6 9d b8 fa 62 bc 34 d1 e9 0f 2d 40 7c d3 37 fa 9a 56 61 90 73 8e 3d 28 bf 51 0e 01 89 c0 19 a5 16 d3 39 fb a7 f1 a4 49 3b 28 66 6e d8 a9 c3 5c a3 63 c9 73 c6 79 ec 3d 6a 25 52 0b 76 3b 0d 16 12 95 dc c4 81 f4 a8 9e 05 8f 39 73 9e d5 3c b3 5d 70 Data Ascii: UZD3ZK7e<iX3ZrKG*&<4"I@lOH`r9#Ls?JQw4;c!~H~R5t8)#p?yWVK1T@jM}j"A{3I7aJQb4-@\|7Vas=(Q9I;(fn\csy=j%Rv;9s<]p
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 9d a5 59 55 b7 28 2d e5 8d a1 7d b1 ed 57 fc 36 d0 ac b2 5c 48 54 dc ae 04 01 fb 67 39 23 d4 f4 c5 6b 47 e1 bd 32 70 25 68 be f0 c9 db 31 e7 d7 03 bd 28 d2 f4 ad 36 ea 2b 8b 3b bf 9e dc 17 c3 be e1 81 db 3e bc d7 16 22 a4 23 07 49 6e c6 e8 b8 eb 72 8e b3 a8 98 1e 14 b6 0d 1a 38 df 21 75 e4 be 7f c9 14 c8 f6 ea 56 13 5d dd 46 e0 16 23 87 ec 00 e7 f3 f4 a4 d5 b5 e8 b5 28 25 51 6d e5 26 77 85 00 1c 56 22 ea 37 1b 36 47 28 48 ce 01 51 da 95 0a 13 74 d7 bb ca cc f9 b5 d4 d2 8e fa d3 fb 22 5b 66 57 2e cc 70 37 71 8a c6 8d 25 69 1a 38 e3 69 1b d1 41 6a 59 1c 02 76 8c 92 78 c7 ad 77 5e 1d d3 22 b0 d2 c4 37 70 22 4f 30 f3 67 0e dd 40 3f 28 3e 95 d3 56 aa c3 c6 eb 56 c1 45 cd d9 99 be 1a d1 63 89 da 7b fb 29 1e 60 3f 76 8d 82 98 f5 3e 95 5f 5b 74 97 56 6b 44 8d 15 Data Ascii: YU(-}W6\HTg9#kG2p%h1(6+;>"#Inr8!uV]F#(%Qm&wV"76G(HQt"[fW.p7q%i8iAjYvxw^"7p"O0g@?(>VVEc{)`?v>_[tVkD
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 55 23 e8 b4 82 41 d9 b0 3d 0d 00 ab 83 fb df c0 f3 4d 23 9c 89 03 7b 0a 5c 96 d8 7c f7 24 dc cc 71 ce 3d 00 a0 c9 1a f0 40 1e d9 a8 0b 12 48 25 97 8e 08 cf 14 02 e1 78 c4 9e a5 8d 3e 47 dc 5c e8 b4 ad bc 65 58 63 d8 51 c6 08 e7 ea c3 15 58 5c 63 ef 12 3d 94 d4 8b 22 3a 6e 4e 79 e8 45 36 ae 25 2b 0f da ad 9e 87 1e bc d2 04 3b b2 0f e4 69 33 21 fe 15 1f 4a 14 8e fb b3 dc f6 a5 67 71 dd 3d 87 90 41 fe f1 a0 49 81 ce 41 f6 34 7e e8 ff 00 10 cf 61 46 d9 4f 41 c7 6a 41 73 0c 5b f9 f3 a8 88 37 ca 78 e7 8c 7b d4 af 6b 22 31 dc f1 a8 03 24 e6 ad 14 36 36 c5 56 44 32 48 32 cc c7 01 78 ac 5b 22 d7 01 85 c2 be 5b 39 90 74 e3 fa 57 c8 ac 5b 94 9b 8e c8 f4 cb f6 d6 f1 cb 72 c9 33 61 10 65 88 3d 7e 94 97 71 3a db 2a 42 de 58 0f 92 73 9d d9 ac 59 35 39 21 66 4d ca 72 71 Data Ascii: U#A=M#{\\|$q=@H%x>G\eXcQX\c=":nNyE6%+;i3!Jgq=AIA4~aFOAjAs[7x{k"1$66VD2H2x["[9tW[r3ae=~q:*BXsY59!fMrq
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: ce bb 16 a3 1c 29 24 77 92 bc 71 f9 48 56 30 03 63 a6 ec 75 c6 3f 4a cd d4 16 e3 54 8e 26 41 28 bb 8f e4 01 c0 09 8f f6 58 f5 15 8f ef 2a 54 e6 9b e5 5f 92 2b 41 b7 72 7d bd cf d9 ed e3 94 6e 0a a4 8c 06 23 a6 39 19 34 92 5a 4e 2d c7 fa 52 16 f3 3e 54 1c 2f 03 96 27 db a5 63 6d 96 ce e8 c3 28 59 17 a1 03 0c 01 3e 9f e3 5a 4f 72 66 55 8a 10 03 28 dc d2 86 f9 9b 1c 71 fe 15 df cb 38 db 91 e8 44 b5 45 68 75 39 e3 3b 92 49 13 78 cb 0e b9 ae 93 4e 6b b6 b7 96 6f 36 2f 9a 30 63 66 50 9f 80 c0 19 22 b9 99 f4 eb b9 2f 21 54 84 4a 64 19 0b 13 96 23 fd ef 43 56 a1 37 66 ea 38 6e e1 b8 45 18 dd e5 8f 98 01 d0 e2 b7 9d 69 72 fb b2 22 0a 31 7a ab 96 24 d6 75 05 2a b2 c9 26 d5 05 41 23 90 bd c7 15 15 f5 d3 dd da a2 c5 66 81 94 6d 0f 08 f9 9f 3d 88 1d 4d 1a cb a4 1a 83 Data Ascii: )$wqHV0cu?JT&A(XT_+Ar}n#94ZN-R>T/'cm(Y>ZOrfU(q8DEhu9;IxNko6/0cfP"/!TJd#CV7f8nEir"1z$u&A#fm=M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	62578	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	1423	OUT	GET /icons/lang_pt-br_v4.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:08 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:08 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"34e-618dea1bbef90-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 7116 Expires: Tue, 28 May 2024 17:15:08 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e48a65c338-EWR
2024-05-28 05:15:08 UTC	825	IN	Data Raw: 33 34 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 36 64 61 35 34 34 3b 7d 2e 63 7b 66 69 6c 6c 3a 23 66 66 64 61 34 34 3b 7d 2e 64 7b 66 69 6c 6c 3a 23 66 30 66 30 66 30 3b 7d 2e 65 7b 66 69 6c 6c 3a 23 30 30 35 32 62 34 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 62 Data Ascii: 34e<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><defs><style>.a{fill:none;}.b{fill:#6da544;}.c{fill:#ffda44;}.d{fill:#f0f0f0;}.e{fill:#0052b4;}</style></defs><rect class="a" width="24" height="24"/><ellipse class="b
2024-05-28 05:15:08 UTC	28	IN	Data Raw: 38 33 38 20 2d 31 36 36 2e 39 35 37 29 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 838 -166.957)"/></g></svg>
2024-05-28 05:15:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	62580	18.66.102.51	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:08 UTC	542	OUT	GET /c/hotjar-1863763.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:09 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 28 May 2024 05:15:09 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/7c149fedbe8ae045d361b43bf0da88d9 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 80a51c83bb9479e2a3aa1ea59b366458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: tJ-VgU9dw_JuFFO3p3oL6okxyMsTQnhSucpB-9yyZTtZ3n1lqDxOlQ==
2024-05-28 05:15:09 UTC	8956	IN	Data Raw: 32 32 66 34 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 38 36 33 37 36 33 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 Data Ascii: 22f4window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1863763,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	62582	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1454	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_ArrowRight.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"ec-618df02b20bc2-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 1369 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e77f1ac32f-EWR
2024-05-28 05:15:09 UTC	242	IN	Data Raw: 65 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 2e 34 31 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 34 31 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 41 72 72 6f 77 52 69 67 68 74 22 20 64 3d 22 4d 37 2e 34 31 2c 38 2e 35 39 2c 31 32 2c 31 33 2e 31 37 6c 34 2e 35 39 2d 34 2e 35 38 4c 31 38 2c 31 30 6c 2d 36 2c 36 4c 36 2c 31 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 38 2e 35 39 20 31 38 29 20 72 6f 74 61 74 65 28 2d 39 30 29 22 20 66 69 6c 6c 3d 22 23 32 43 32 46 33 33 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: ec<svg xmlns="http://www.w3.org/2000/svg" width="7.41" height="12" viewBox="0 0 7.41 12"> <path id="icon_ArrowRight" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-8.59 18) rotate(-90)" fill="#2C2F33"/></svg>
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	62585	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1174	OUT	GET /icons/icons_GreyDark/iconGreyDark_ArrowDown.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"df-618df02b480a9-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 7116 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e7ac08c34e-EWR
2024-05-28 05:15:09 UTC	229	IN	Data Raw: 64 66 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 37 2e 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 37 2e 34 31 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 41 72 72 6f 77 44 6f 77 6e 22 20 64 3d 22 4d 37 2e 34 31 2c 38 2e 35 39 2c 31 32 2c 31 33 2e 31 37 6c 34 2e 35 39 2d 34 2e 35 38 4c 31 38 2c 31 30 6c 2d 36 2c 36 4c 36 2c 31 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 20 2d 38 2e 35 39 29 22 20 66 69 6c 6c 3d 22 23 34 35 34 39 35 30 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: df<svg xmlns="http://www.w3.org/2000/svg" width="12" height="7.41" viewBox="0 0 12 7.41"> <path id="icon_ArrowDown" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-6 -8.59)" fill="#454950"/></svg>
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	62581	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1402	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Wed, 22 May 2024 09:02:47 GMT ETag: "664db4b7-4d7" Server: cloudflare CF-RAY: 88abc3e7b9010f75-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 30 May 2024 05:15:09 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-05-28 05:15:09 UTC	944	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-05-28 05:15:09 UTC	295	IN	Data Raw: 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 5b 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 Data Ascii: h(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),function(){var e=document.currentScript\|\|document.scripts[document.scripts.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	62583	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1363	OUT	GET /js/vendor/jquery.min.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"15e40-618dea1bed1d7-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e7c87fc35a-EWR
2024-05-28 05:15:10 UTC	806	IN	Data Raw: 37 64 36 64 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7d6d/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 Data Ascii: tion b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"funct
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 Data Ascii: fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 76 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 53 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: eturn r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:v}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.itera
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4d 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d Data Ascii: ew RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+M+"(even\|odd\|(([+-
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 Data Ascii: u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e\|\|C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d Data Ascii: &1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeNam
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 Data Ascii: fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 79 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 Data Ascii: sName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],y=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="<a id='"+S+"'></a><select id='"+S+"-\r\\' msallowca
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 63 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 63 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 73 2e 70 75 73 68 28 22 21 3d 22 2c 46 29 7d 29 2c 79 3d 79 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 79 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 Data Ascii: ector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),y=y.length&&new RegExp(y.join("\|")),s=s.length&&new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	62586	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1165	OUT	GET /icons/icons_White/iconWhite_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"116-618df02b15812-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5239 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e7dc705e65-EWR
2024-05-28 05:15:09 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	62587	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1170	OUT	GET /icons/icons_White/iconWhite_Information.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"3ea-618df06d63729-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6942 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e7cdf2439c-EWR
2024-05-28 05:15:09 UTC	825	IN	Data Raw: 33 65 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 20 64 3d 22 4d 37 2c 30 61 37 2c 37 2c 30 2c 31 2c 30 2c 37 2c 37 41 37 2c 37 2c 30 2c 30 2c 30 2c 37 2c 30 5a 4d 38 2e 34 35 37 2c 31 30 2e 38 34 39 71 2d 2e 35 34 2e 32 31 33 2d 2e 38 36 32 2e 33 32 35 61 32 2e 32 37 35 2c 32 2e 32 37 35 2c 30 2c 30 2c 31 2d 2e 37 34 38 2e 31 31 32 2c 31 2e 34 39 2c 31 2e 34 39 2c 30 2c 30 2c 31 2d 31 2e 30 31 37 2d 2e 33 31 39 2c 31 2e 30 33 31 2c 31 2e 30 33 31 2c 30 2c Data Ascii: 3ea<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14"> <path id="icon_Information" d="M7,0a7,7,0,1,0,7,7A7,7,0,0,0,7,0ZM8.457,10.849q-.54.213-.862.325a2.275,2.275,0,0,1-.748.112,1.49,1.49,0,0,1-1.017-.319,1.031,1.031,0,
2024-05-28 05:15:09 UTC	184	IN	Data Raw: 32 39 32 41 31 2e 30 38 32 2c 31 2e 30 38 32 2c 30 2c 30 2c 31 2c 36 2e 38 36 33 2c 34 2e 34 2e 39 33 31 2e 39 33 31 2c 30 2c 30 2c 31 2c 36 2e 35 34 38 2c 33 2e 37 61 2e 39 34 2e 39 34 2c 30 2c 30 2c 31 2c 2e 33 31 36 2d 2e 37 30 39 2c 31 2e 30 37 34 2c 31 2e 30 37 34 2c 30 2c 30 2c 31 2c 2e 37 35 39 2d 2e 32 39 35 2c 31 2e 30 36 32 2c 31 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 37 35 36 2e 32 39 35 2e 39 35 35 2e 39 35 35 2c 30 2c 30 2c 31 2c 30 2c 31 2e 34 31 36 5a 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 292A1.082,1.082,0,0,1,6.863,4.4.931.931,0,0,1,6.548,3.7a.94.94,0,0,1,.316-.709,1.074,1.074,0,0,1,.759-.295,1.062,1.062,0,0,1,.756.295.955.955,0,0,1,0,1.416Z" fill="#FFFFFF"/></svg>
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	62588	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1173	OUT	GET /icons/icons_GreyLight/iconGreyLight_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"116-618dea4b6251d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6112 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e7eeff7d00-EWR
2024-05-28 05:15:09 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	62584	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1386	OUT	GET /v3/js/vendor/bootstrap/bootstrap.bundle.min.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"1332b-618df02ae1424-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e84d959e17-EWR
2024-05-28 05:15:10 UTC	806	IN	Data Raw: 37 64 36 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7d6d/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 79 73 28 72 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 72 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 69 3b 65 3d 6f 2c 69 3d 72 5b 6e 3d 74 5d 2c 6e 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c Data Ascii: ys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable}))),e.forEach(function(t){var e,n,i;e=o,i=r[n=t],n in e?Object.defineProperty(e,n,
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 29 7b 76 61 72 20 6f 3d 6e 5b 69 5d 2c 72 3d 65 5b 69 5d 2c 73 3d 72 26 26 6d 2e 69 73 45 6c 65 6d 65 6e 74 28 72 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 61 3d 72 2c 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 2e 6d 61 74 63 68 28 2f 5c 73 28 5b 61 2d 7a 5d 2b 29 2f 69 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 6e 65 77 20 52 65 67 45 78 70 28 6f 29 2e 74 65 73 74 28 73 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 27 3a 20 4f 70 74 69 6f 6e 20 22 27 2b 69 2b 27 22 20 70 72 6f 76 69 64 65 64 20 74 79 70 65 20 22 27 2b 73 2b 27 22 20 62 75 74 20 65 78 70 65 Data Ascii: .prototype.hasOwnProperty.call(n,i)){var o=n[i],r=e[i],s=r&&m.isElement(r)?"element":(a=r,{}.toString.call(a).match(/\s([a-z]+)/i)[1].toLowerCase());if(!new RegExp(o).test(s))throw new Error(t.toUpperCase()+': Option "'+i+'" provided type "'+s+'" but expe
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 74 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 70 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 29 2c 70 28 65 29 2e 68 61 73 43 6c 61 73 73 28 66 29 29 7b 76 61 72 20 74 3d 6d 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 29 3b 70 28 65 29 2e 6f 6e 65 28 6d 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 65 2c 74 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 Data Ascii: rigger(e),e},t._removeElement=function(e){var n=this;if(p(e).removeClass(d),p(e).hasClass(f)){var t=m.getTransitionDurationFromElement(e);p(e).one(m.TRANSITION_END,function(t){return n._destroyElement(e,t)}).emulateTransitionEnd(t)}else this._destroyEleme
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 41 29 3b 6f 26 26 70 28 6f 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 77 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 77 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 Data Ascii: querySelector(A);o&&p(o).removeClass(w)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!this._element.classList.contains(w),p(i).trigger("change")}i.focu
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 73 6c 69 64 65 22 2b 50 2c 53 4c 49 44 3a 22 73 6c 69 64 22 2b 50 2c 4b 45 59 44 4f 57 4e 3a 22 6b 65 79 64 6f 77 6e 22 2b 50 2c 4d 4f 55 53 45 45 4e 54 45 52 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 50 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 50 2c 54 4f 55 43 48 53 54 41 52 54 3a 22 74 6f 75 63 68 73 74 61 72 74 22 2b 50 2c 54 4f 55 43 48 4d 4f 56 45 3a 22 74 6f 75 63 68 6d 6f 76 65 22 2b 50 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 50 2c 50 4f 49 4e 54 45 52 44 4f 57 4e 3a 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2b 50 2c 50 4f 49 4e 54 45 52 55 50 3a 22 70 6f 69 6e 74 65 72 75 70 22 2b 50 2c 44 52 41 47 5f 53 54 41 52 54 3a 22 64 72 61 67 73 74 61 72 74 22 2b 50 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 Data Ascii: slide"+P,SLID:"slid"+P,KEYDOWN:"keydown"+P,MOUSEENTER:"mouseenter"+P,MOUSELEAVE:"mouseleave"+P,TOUCHSTART:"touchstart"+P,TOUCHMOVE:"touchmove"+P,TOUCHEND:"touchend"+P,POINTERDOWN:"pointerdown"+P,POINTERUP:"pointerup"+P,DRAG_START:"dragstart"+P,LOAD_DATA_A
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 72 65 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 57 29 7d 2c 74 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 26 26 28 6d 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 Data Ascii: ")&&this.next()},t.prev=function(){this._isSliding\|\|this._slide(W)},t.pause=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(nt)&&(m.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cyc
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 71 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 71 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 75 73 65 28 74 29 7d 29 2e 6f 6e 28 71 2e 4d 4f 55 53 45 4c 45 41 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 6f 75 63 68 26 26 74 68 69 73 2e 5f 61 64 64 54 6f 75 63 68 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: &&p(this._element).on(q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&p(this._element).on(q.MOUSEENTER,function(t){return e.pause(t)}).on(q.MOUSELEAVE,function(t){return e.cycle(t)}),this._config.touch&&this._addTouchEventListen
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 74 29 2e 6f 6e 28 71 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 29 7d 7d 2c 74 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 74 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: t).on(q.TOUCHEND,function(t){return i(t)}))}},t._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},t._getItemIndex=function(t){return this
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 30 2c 68 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 28 6c 29 3b 76 61 72 20 75 3d 70 2e 45 76 65 6e 74 28 71 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6c 2c 64 69 72 65 63 74 69 6f 6e 3a 6f 2c 66 72 6f 6d 3a 61 2c 74 6f 3a 63 7d 29 3b 69 66 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 7b 70 28 6c 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 6d 2e 72 65 66 6c 6f 77 28 6c 29 2c 70 28 73 29 2e 61 64 64 43 6c 61 73 73 28 6e 29 2c 70 28 6c 29 2e 61 64 64 43 6c 61 73 73 28 6e 29 3b Data Ascii: efaultPrevented()&&s&&l){this._isSliding=!0,h&&this.pause(),this._setActiveIndicatorElement(l);var u=p.Event(q.SLID,{relatedTarget:l,direction:o,from:a,to:c});if(p(this._element).hasClass(V)){p(l).addClass(i),m.reflow(l),p(s).addClass(n),p(l).addClass(n);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	62590	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1363	OUT	GET /js/vendor/moment.min.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	570	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"5a17b-618df02b4e251-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2516 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e87a667d08-EWR
2024-05-28 05:15:09 UTC	799	IN	Data Raw: 37 64 36 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 61 29 3a 65 2e 6d 6f 6d 65 6e 74 3d 61 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 45 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 72 65 74 75 72 6e 20 45 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: 7d67!function(e,a){"object"==typeof exports&&"undefined"!=typeof module?module.exports=a():"function"==typeof define&&define.amd?define(a):e.moment=a()}(this,function(){"use strict";var E;function M(){return E.apply(null,arguments)}function F(e){return
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 61 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 73 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 30 3b 6e 3c 73 3b 2b 2b 6e 29 74 2e 70 75 73 68 28 61 28 65 5b 6e 5d 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 61 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 61 29 6c 28 61 2c 74 29 26 26 28 65 5b 74 5d 3d 61 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6c 28 61 2c 22 74 6f 53 74 72 69 6e 67 22 29 26 26 28 65 2e 74 6f 53 74 72 69 6e 67 3d 61 2e 74 6f 53 74 72 69 6e 67 29 2c 6c 28 61 2c 22 76 61 6c 75 65 4f 66 22 29 26 26 28 65 2e 76 61 6c 75 65 4f 66 3d 61 2e 76 61 6c 75 65 4f 66 29 2c 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: t.prototype.toString.call(e)}function C(e,a){for(var t=[],s=e.length,n=0;n<s;++n)t.push(a(e[n],n));return t}function I(e,a){for(var t in a)l(a,t)&&(e[t]=a[t]);return l(a,"toString")&&(e.toString=a.toString),l(a,"valueOf")&&(e.valueOf=a.valueOf),e}function
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 61 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 29 2c 64 28 61 2e 5f 69 29 7c 7c 28 65 2e 5f 69 3d 61 2e 5f 69 29 2c 64 28 61 2e 5f 66 29 7c 7c 28 65 2e 5f 66 3d 61 2e 5f 66 29 2c 64 28 61 2e 5f 6c 29 7c 7c 28 65 2e 5f 6c 3d 61 2e 5f 6c 29 2c 64 28 61 2e 5f 73 74 72 69 63 74 29 7c 7c 28 65 2e 5f 73 74 72 69 63 74 3d 61 2e 5f 73 74 72 69 63 74 29 2c 64 28 61 2e 5f 74 7a 6d 29 7c 7c 28 65 2e 5f 74 7a 6d 3d 61 2e 5f 74 7a 6d 29 2c 64 28 61 2e 5f 69 73 55 54 43 29 7c 7c 28 65 2e 5f 69 73 55 54 43 3d 61 2e 5f 69 73 55 54 43 29 2c 64 28 61 2e 5f 6f 66 66 73 65 74 29 7c 7c 28 65 2e 5f 6f 66 66 73 65 74 3d 61 2e 5f 6f 66 66 73 65 74 29 2c 64 28 61 2e 5f 70 66 29 7c 7c 28 65 2e 5f 70 66 3d 68 28 61 29 29 2c 64 28 61 2e 5f Data Ascii: omentObject=a._isAMomentObject),d(a._i)\|\|(e._i=a._i),d(a._f)\|\|(e._f=a._f),d(a._l)\|\|(e._l=a._l),d(a._strict)\|\|(e._strict=a._strict),d(a._tzm)\|\|(e._tzm=a._tzm),d(a._isUTC)\|\|(e._isUTC=a._isUTC),d(a._offset)\|\|(e._offset=a._offset),d(a._pf)\|\|(e._pf=h(a)),d(a._
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 2c 61 29 7b 76 61 72 20 74 2c 73 3d 49 28 7b 7d 2c 65 29 3b 66 6f 72 28 74 20 69 6e 20 61 29 6c 28 61 2c 74 29 26 26 28 7a 28 65 5b 74 5d 29 26 26 7a 28 61 5b 74 5d 29 3f 28 73 5b 74 5d 3d 7b 7d 2c 49 28 73 5b 74 5d 2c 65 5b 74 5d 29 2c 49 28 73 5b 74 5d 2c 61 5b 74 5d 29 29 3a 6e 75 6c 6c 21 3d 61 5b 74 5d 3f 73 5b 74 5d 3d 61 5b 74 5d 3a 64 65 6c 65 74 65 20 73 5b 74 5d 29 3b 66 6f 72 28 74 20 69 6e 20 65 29 6c 28 65 2c 74 29 26 26 21 6c 28 61 2c 74 29 26 26 7a 28 65 5b 74 5d 29 26 26 28 73 5b 74 5d 3d 49 28 7b 7d 2c 73 5b 74 5d 29 29 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 29 7b 6e 75 6c 6c 21 3d 65 26 26 74 68 69 73 2e 73 65 74 28 65 Data Ascii: toString.call(e)}function se(e,a){var t,s=I({},e);for(t in a)l(a,t)&&(z(e[t])&&z(a[t])?(s[t]={},I(s[t],e[t]),I(s[t],a[t])):null!=a[t]?s[t]=a[t]:delete s[t]);for(t in e)l(e,t)&&!l(a,t)&&z(e[t])&&(s[t]=I({},s[t]));return s}function ne(e){null!=e&&this.set(e
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 2c 61 29 7b 76 61 72 20 74 3d 35 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 28 65 29 7c 7c 65 7d 66 6f 72 28 5f 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 30 3c 3d 74 26 26 5f 65 2e 74 65 73 74 28 65 29 3b 29 65 3d 65 2e 72 65 70 6c 61 63 65 28 5f 65 2c 73 29 2c 5f 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 2d 2d 74 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 4d 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 61 29 7b 76 61 72 20 74 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 4d 65 5b 74 5d 3d 4d 65 5b 74 2b 22 73 22 5d 3d 4d 65 5b 61 5d 3d 65 7d 66 75 6e 63 74 Data Ascii: ocaleData().invalidDate()}function le(e,a){var t=5;function s(e){return a.longDateFormat(e)\|\|e}for(_e.lastIndex=0;0<=t&&_e.test(e);)e=e.replace(_e,s),_e.lastIndex=0,--t;return e}var Me={};function a(e,a){var t=e.toLowerCase();Me[t]=Me[t+"s"]=Me[a]=e}funct
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 70 28 65 2c 74 2c 73 29 7b 48 65 5b 65 5d 3d 74 65 28 74 29 3f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 65 26 26 73 3f 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 6c 28 48 65 2c 65 29 3f 48 65 5b 65 5d 28 61 2e 5f 73 74 72 69 63 74 2c 61 2e 5f 6c 6f 63 61 6c 65 29 3a 6e 65 77 20 52 65 67 45 78 70 28 6b 28 65 2e 72 65 70 6c 61 63 65 28 22 5c 5c 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 28 5c 5b 29 7c 5c 5c 28 5c 5d 29 7c 5c 5b 28 5b 5e 5c 5d 5c 5b 5d 2a 29 5c 5d 7c 5c 5c 28 2e 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 7c 7c 74 7c 7c 73 7c 7c 6e 7d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 Data Ascii: ction p(e,t,s){He[e]=te(t)?t:function(e,a){return e&&s?s:t}}function Se(e,a){return l(He,e)?He[e](a._strict,a._locale):new RegExp(k(e.replace("\\","").replace(/\\(\[)\|\\(\])\|\[([^\]\[]*)\]\|\\(.)/g,function(e,a,t,s,n){return a\|\|t\|\|s\|\|n})))}function k(e){re
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 65 63 65 6d 62 65 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 4a 65 3d 22 4a 61 6e 5f 46 65 62 5f 4d 61 72 5f 41 70 72 5f 4d 61 79 5f 4a 75 6e 5f 4a 75 6c 5f 41 75 67 5f 53 65 70 5f 4f 63 74 5f 4e 6f 76 5f 44 65 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 52 65 3d 2f 44 5b 6f 44 5d 3f 28 5c 5b 5b 5e 5c 5b 5c 5d 5d 2a 5c 5d 7c 5c 73 29 2b 4d 4d 4d 4d 3f 2f 2c 43 65 3d 66 2c 49 65 3d 66 3b 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 61 29 7b 76 61 72 20 74 3b 69 66 28 65 2e 69 73 56 61 6c 69 64 28 29 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 29 69 66 28 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 29 61 3d 6d 28 61 29 3b 65 6c 73 65 20 69 66 28 21 4a 28 61 3d 65 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6d 6f 6e 74 68 73 50 61 72 73 65 Data Ascii: ecember".split("_"),Je="Jan_Feb_Mar_Apr_May_Jun_Jul_Aug_Sep_Oct_Nov_Dec".split("_"),Re=/D[oD]?(\[[^\[\]]*\]\|\s)+MMMM?/,Ce=f,Ie=f;function Ue(e,a){var t;if(e.isValid()){if("string"==typeof a)if(/^\d+$/.test(a))a=m(a);else if(!J(a=e.localeData().monthsParse
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 4d 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 28 65 29 3a 6d 28 65 29 7d 29 2c 44 28 22 59 59 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 67 5d 3d 4d 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 28 65 29 7d 29 2c 44 28 22 59 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 67 5d 3d 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 29 2c 4d 2e 70 61 72 73 65 54 77 6f 44 69 67 69 74 59 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 28 65 29 2b 28 36 38 3c 6d 28 65 29 3f 31 39 30 30 3a 32 65 33 29 7d 3b 76 61 72 20 4b 65 3d 59 65 28 22 46 75 6c 6c 59 65 61 72 22 2c 21 30 29 3b 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 2c 61 2c 74 2c 73 2c 6e 2c 72 2c 64 29 7b 76 61 72 20 Data Ascii: ===e.length?M.parseTwoDigitYear(e):m(e)}),D("YY",function(e,a){a[g]=M.parseTwoDigitYear(e)}),D("Y",function(e,a){a[g]=parseInt(e,10)}),M.parseTwoDigitYear=function(e){return m(e)+(68<m(e)?1900:2e3)};var Ke=Ye("FullYear",!0);function qe(e,a,t,s,n,r,d){var
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 73 28 22 64 22 2c 30 2c 22 64 6f 22 2c 22 64 61 79 22 29 2c 73 28 22 64 64 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 77 65 65 6b 64 61 79 73 4d 69 6e 28 74 68 69 73 2c 65 29 7d 29 2c 73 28 22 64 64 64 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 77 65 65 6b 64 61 79 73 53 68 6f 72 74 28 74 68 69 73 2c 65 29 7d 29 2c 73 28 22 64 64 64 64 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 77 65 65 6b 64 61 79 73 28 74 68 69 73 2c 65 29 7d 29 2c 73 28 22 65 22 2c 30 2c 30 2c 22 77 65 65 6b 64 61 79 22 29 2c 73 28 Data Ascii: s("d",0,"do","day"),s("dd",0,0,function(e){return this.localeData().weekdaysMin(this,e)}),s("ddd",0,0,function(e){return this.localeData().weekdaysShort(this,e)}),s("dddd",0,0,function(e){return this.localeData().weekdays(this,e)}),s("e",0,0,"weekday"),s(
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 64 2e 6a 6f 69 6e 28 22 7c 22 29 2b 22 29 22 2c 22 69 22 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 53 68 6f 72 74 53 74 72 69 63 74 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 72 2e 6a 6f 69 6e 28 22 7c 22 29 2b 22 29 22 2c 22 69 22 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 6e 2e 6a 6f 69 6e 28 22 7c 22 29 2b 22 29 22 2c 22 69 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 6f 75 72 73 28 29 25 31 32 7c 7c 31 32 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 65 2c 61 29 7b 73 28 65 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: egex=new RegExp("^("+d.join("\|")+")","i"),this._weekdaysShortStrictRegex=new RegExp("^("+r.join("\|")+")","i"),this._weekdaysMinStrictRegex=new RegExp("^("+n.join("\|")+")","i")}function oa(){return this.hours()%12\|\|12}function ma(e,a){s(e,0,0,function(){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	62592	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1164	OUT	GET /icons/hamburger_menu_desktop_icon.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"256-618df06d8bbaf-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6113 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e88f797d06-EWR
2024-05-28 05:15:09 UTC	605	IN	Data Raw: 32 35 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 37 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 35 33 36 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 35 33 36 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 36 33 2e 35 20 2d 31 37 37 29 22 3e 0a 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 35 39 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 35 39 31 22 20 78 32 3d 22 32 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 36 33 2e 35 20 Data Ascii: 256<svg xmlns="http://www.w3.org/2000/svg" width="22" height="17" viewBox="0 0 22 17"> <g id="Group_15367" data-name="Group 15367" transform="translate(-1263.5 -177)"> <line id="Line_2591" data-name="Line 2591" x2="22" transform="translate(1263.5
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	62591	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1150	OUT	GET /icons/lang_pt-br_v4.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"34e-618dea1bbef90-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 7117 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3e88cfe41e9-EWR
2024-05-28 05:15:09 UTC	825	IN	Data Raw: 33 34 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 36 64 61 35 34 34 3b 7d 2e 63 7b 66 69 6c 6c 3a 23 66 66 64 61 34 34 3b 7d 2e 64 7b 66 69 6c 6c 3a 23 66 30 66 30 66 30 3b 7d 2e 65 7b 66 69 6c 6c 3a 23 30 30 35 32 62 34 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 2f 3e 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 62 Data Ascii: 34e<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><defs><style>.a{fill:none;}.b{fill:#6da544;}.c{fill:#ffda44;}.d{fill:#f0f0f0;}.e{fill:#0052b4;}</style></defs><rect class="a" width="24" height="24"/><ellipse class="b
2024-05-28 05:15:09 UTC	28	IN	Data Raw: 38 33 38 20 2d 31 36 36 2e 39 35 37 29 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 838 -166.957)"/></g></svg>
2024-05-28 05:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	62593	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1362	OUT	GET /js/vendor/moment.tz.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:09 UTC	602	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:09 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 130604 Connection: close Cf-Bgj: minify Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "1fe2c-618df02b4ee09-gzip" Last-Modified: Mon, 20 May 2024 09:06:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5238 Expires: Tue, 28 May 2024 17:15:09 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3e928797cfc-EWR
2024-05-28 05:15:09 UTC	767	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 4d 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 4d 28 72 65 71 75 69 72 65 28 22 6d 6f 6d 65 6e 74 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6d 6f 6d 65 6e 74 22 5d 2c 4d 29 3a 4d 28 63 2e 6d 6f 6d 65 6e 74 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4d 2c 70 3d 7b 7d 2c 61 3d 7b 7d 2c 69 3d 7b 7d 2c 65 3d 7b 7d 3b 7a 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 7a 2e 76 Data Ascii: !function(c,M){"use strict";"object"==typeof module&&module.exports?module.exports=M(require("moment")):"function"==typeof define&&define.amd?define(["moment"],M):M(c.moment)}(this,function(z){"use strict";var M,p={},a={},i={},e={};z&&"string"==typeof z.v
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 3d 63 5b 4d 5b 41 5d 5d 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 72 28 63 29 7b 76 61 72 20 4d 3d 63 2e 73 70 6c 69 74 28 22 7c 22 29 2c 41 3d 4d 5b 32 5d 2e 73 70 6c 69 74 28 22 20 22 29 2c 62 3d 4d 5b 33 5d 2e 73 70 6c 69 74 28 22 22 29 2c 6f 3d 4d 5b 34 5d 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 71 28 41 29 2c 71 28 62 29 2c 71 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 4d 29 7b 66 6f 72 28 76 61 72 20 41 3d 30 3b 41 3c 4d 3b 41 2b 2b 29 63 5b 41 5d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 63 5b 41 2d 31 5d 7c 7c 30 29 2b 36 65 34 2a 63 5b 41 5d 29 3b 63 5b 4d 2d 31 5d 3d 31 2f 30 7d 28 6f 2c 62 2e 6c 65 6e 67 74 68 29 2c 7b 6e 61 6d 65 3a 4d 5b 30 5d 2c 61 62 62 72 73 3a 4f 28 4d 5b 31 5d 2e 73 70 6c 69 74 28 22 20 22 Data Ascii: =c[M[A]];return b}function r(c){var M=c.split("\|"),A=M[2].split(" "),b=M[3].split(""),o=M[4].split(" ");return q(A),q(b),q(o),function(c,M){for(var A=0;A<M;A++)c[A]=Math.round((c[A-1]\|\|0)+6e4*c[A]);c[M-1]=1/0}(o,b.length),{name:M[0],abbrs:O(M[1].split(" "
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 73 65 74 26 26 28 63 3d 66 28 6f 2c 4d 29 2c 7a 2e 70 75 73 68 28 63 29 2c 7a 2e 70 75 73 68 28 6e 65 77 20 4e 28 6e 65 77 20 44 61 74 65 28 63 2e 61 74 2b 36 65 34 29 29 29 29 2c 6f 3d 4d 3b 66 6f 72 28 41 3d 30 3b 41 3c 34 3b 41 2b 2b 29 7a 2e 70 75 73 68 28 6e 65 77 20 4e 28 6e 65 77 20 44 61 74 65 28 62 2b 41 2c 30 2c 31 29 29 29 2c 7a 2e 70 75 73 68 28 6e 65 77 20 4e 28 6e 65 77 20 44 61 74 65 28 62 2b 41 2c 36 2c 31 29 29 29 3b 72 65 74 75 72 6e 20 7a 7d 28 29 2c 70 3d 7a 2e 6c 65 6e 67 74 68 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 4d 2c 41 2c 62 2c 6f 3d 63 2e 6c 65 6e 67 74 68 2c 7a 3d 7b 7d 2c 70 3d 5b 5d 3b 66 6f 72 28 4d 3d 30 3b 4d 3c 6f 3b 4d 2b 2b 29 66 6f 72 28 41 20 69 6e 20 62 3d 65 5b 63 5b 4d 5d 2e 6f 66 66 73 65 74 5d Data Ascii: set&&(c=f(o,M),z.push(c),z.push(new N(new Date(c.at+6e4)))),o=M;for(A=0;A<4;A++)z.push(new N(new Date(b+A,0,1))),z.push(new N(new Date(b+A,6,1)));return z}(),p=z.length,a=function(c){var M,A,b,o=c.length,z={},p=[];for(M=0;M<o;M++)for(A in b=e[c[M].offset]
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 75 6c 6c 2c 4d 29 3b 72 65 74 75 72 6e 20 62 26 26 21 7a 2e 69 73 4d 6f 6d 65 6e 74 28 63 29 26 26 6d 28 6f 29 26 26 6f 2e 61 64 64 28 62 2e 70 61 72 73 65 28 6f 29 2c 22 6d 69 6e 75 74 65 73 22 29 2c 6f 2e 74 7a 28 41 29 2c 6f 7d 28 41 3c 32 7c 7c 32 3d 3d 41 26 26 62 3c 36 29 26 26 45 28 22 4d 6f 6d 65 6e 74 20 54 69 6d 65 7a 6f 6e 65 20 72 65 71 75 69 72 65 73 20 4d 6f 6d 65 6e 74 2e 6a 73 20 3e 3d 20 32 2e 36 2e 30 2e 20 59 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4d 6f 6d 65 6e 74 2e 6a 73 20 22 2b 7a 2e 76 65 72 73 69 6f 6e 2b 22 2e 20 53 65 65 20 6d 6f 6d 65 6e 74 6a 73 2e 63 6f 6d 22 29 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 63 2e 6e 61 6d 65 2c 74 68 69 73 2e 61 62 Data Ascii: ull,M);return b&&!z.isMoment(c)&&m(o)&&o.add(b.parse(o),"minutes"),o.tz(A),o}(A<2\|\|2==A&&b<6)&&E("Moment Timezone requires Moment.js >= 2.6.0. You are using Moment.js "+z.version+". See momentjs.com"),d.prototype={_set:function(c){this.name=c.name,this.ab
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 4d 3d 42 28 29 29 2c 4d 7d 2c 52 2e 6e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 2c 4d 3d 5b 5d 3b 66 6f 72 28 63 20 69 6e 20 69 29 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 28 70 5b 63 5d 7c 7c 70 5b 61 5b 63 5d 5d 29 26 26 69 5b 63 5d 26 26 4d 2e 70 75 73 68 28 69 5b 63 5d 29 3b 72 65 74 75 72 6e 20 4d 2e 73 6f 72 74 28 29 7d 2c 52 2e 5a 6f 6e 65 3d 64 2c 52 2e 75 6e 70 61 63 6b 3d 72 2c 52 2e 75 6e 70 61 63 6b 42 61 73 65 36 30 3d 6f 2c 52 2e 6e 65 65 64 73 4f 66 66 73 65 74 3d 6d 2c 52 2e 6d 6f 76 65 49 6e 76 61 6c 69 64 46 6f 72 77 61 72 64 3d 21 30 2c 52 2e 6d 6f 76 65 41 6d 62 69 67 75 6f 75 73 46 6f 72 77 61 72 64 3d 21 31 3b 76 61 72 20 53 2c 43 3d 7a 2e 66 6e 3b 66 75 6e 63 74 69 6f 6e 20 68 28 63 29 7b Data Ascii: M=B()),M},R.names=function(){var c,M=[];for(c in i)i.hasOwnProperty(c)&&(p[c]\|\|p[a[c]])&&i[c]&&M.push(i[c]);return M.sort()},R.Zone=d,R.unpack=r,R.unpackBase60=o,R.needsOffset=m,R.moveInvalidForward=!0,R.moveAmbiguousForward=!1;var S,C=z.fn;function h(c){
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 74 5a 6f 6e 65 3d 63 3f 75 28 63 29 3a 6e 75 6c 6c 2c 7a 7d 3b 76 61 72 20 67 3d 7a 2e 6d 6f 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 67 29 3f 28 67 2e 70 75 73 68 28 22 5f 7a 22 29 2c 67 2e 70 75 73 68 28 22 5f 61 22 29 29 3a 67 26 26 28 67 2e 5f 7a 3d 6e 75 6c 6c 29 2c 54 28 7b 76 65 72 73 69 6f 6e 3a 22 32 30 31 39 61 22 2c 7a 6f 6e 65 73 3a 5b 22 41 66 72 69 63 61 2f 41 62 69 64 6a 61 6e 7c 47 4d 54 7c 30 7c 30 7c 7c 34 38 65 35 22 2c 22 41 66 72 69 63 61 2f 4e 61 69 72 6f 62 69 7c 45 41 54 7c 2d 33 30 7c 30 7c 7c 34 37 65 35 22 2c 22 41 66 72 69 63 61 2f 41 6c 67 69 65 72 73 7c 57 Data Ascii: tZone=c?u(c):null,z};var g=z.momentProperties;return"[object Array]"===Object.prototype.toString.call(g)?(g.push("_z"),g.push("_a")):g&&(g._z=null),T({version:"2019a",zones:["Africa/Abidjan\|GMT\|0\|0\|\|48e5","Africa/Nairobi\|EAT\|-30\|0\|\|47e5","Africa/Algiers\|W
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 30 20 67 4d 30 20 32 36 30 30 20 65 30 30 20 32 38 4d 30 20 65 30 30 20 32 36 30 30 20 65 30 30 20 32 38 4d 30 20 65 30 30 20 32 36 30 30 20 67 4d 30 20 32 36 30 30 7c 33 32 65 35 22 2c 22 41 66 72 69 63 61 2f 43 65 75 74 61 7c 57 45 54 20 57 45 53 54 20 43 45 54 20 43 45 53 54 7c 30 20 2d 31 30 20 2d 31 30 20 2d 32 30 7c 30 31 30 31 30 31 30 31 30 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 7c 61 53 30 30 20 72 7a 30 20 34 33 64 30 20 41 4c 30 20 31 4e 64 30 20 58 58 30 20 31 43 70 30 20 70 7a 30 20 64 45 70 30 20 34 56 42 30 20 Data Ascii: 0 gM0 2600 e00 28M0 e00 2600 e00 28M0 e00 2600 gM0 2600\|32e5","Africa/Ceuta\|WET WEST CET CEST\|0 -10 -10 -20\|0101010102323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232\|aS00 rz0 43d0 AL0 1Nd0 XX0 1Cp0 pz0 dEp0 4VB0
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 30 20 79 47 64 30 22 2c 22 41 66 72 69 63 61 2f 4b 68 61 72 74 6f 75 6d 7c 43 41 54 20 43 41 53 54 20 45 41 54 7c 2d 32 30 20 2d 33 30 20 2d 33 30 7c 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 32 30 7c 4c 57 30 20 31 36 4c 30 20 31 69 4e 30 20 31 37 62 30 20 31 6a 64 30 20 31 37 62 30 20 31 69 70 30 20 31 37 7a 30 20 31 69 31 30 20 31 37 58 30 20 31 68 42 30 20 31 38 6e 30 20 31 68 64 30 20 31 39 62 30 20 31 67 70 30 20 31 39 7a 30 20 31 69 4e 30 20 31 37 62 30 20 31 69 70 30 20 31 37 7a 30 20 31 69 31 30 20 31 38 6e 30 20 31 68 64 30 20 31 38 4c 30 20 31 67 4e 30 20 31 39 62 30 20 31 67 70 30 20 31 39 7a 30 20 31 69 4e 30 20 31 37 7a 30 20 31 69 31 30 20 31 37 58 30 20 79 47 64 30 20 48 6a 4c 30 7c Data Ascii: 0 yGd0","Africa/Khartoum\|CAT CAST EAT\|-20 -30 -30\|01010101010101010101010101010101020\|LW0 16L0 1iN0 17b0 1jd0 17b0 1ip0 17z0 1i10 17X0 1hB0 18n0 1hd0 19b0 1gp0 19z0 1iN0 17b0 1ip0 17z0 1i10 18n0 1hd0 18L0 1gN0 19b0 1gp0 19z0 1iN0 17z0 1i10 17X0 yGd0 HjL0\|
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 30 20 31 63 4c 30 20 31 63 4e 30 20 31 66 7a 30 20 31 61 31 30 20 31 66 7a 30 20 63 6d 30 20 31 30 71 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 Data Ascii: 0 1cL0 1cN0 1fz0 1a10 1fz0 cm0 10q0 1cL0 1cN0 1cL0 1cN0 1cL0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0 1nX0 14p0 1lb0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0 1nX0 14p0 1lb0 14p0 1lb0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0 1nX0 14p0 1lb0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0
2024-05-28 05:15:09 UTC	1369	IN	Data Raw: 42 30 20 49 4c 30 20 31 46 64 30 20 46 58 30 20 31 45 4e 30 20 46 58 30 20 31 48 42 30 20 4c 7a 30 20 64 4d 4e 30 20 4c 7a 30 20 31 7a 64 30 20 52 62 30 20 31 77 4e 30 20 57 6e 30 20 31 74 42 30 20 52 62 30 20 31 74 42 30 20 57 4c 30 20 31 74 42 30 20 52 62 30 20 31 7a 64 30 20 4f 6e 30 20 31 48 42 30 20 46 58 30 20 6e 79 31 30 20 4c 7a 30 7c 31 34 65 34 22 2c 22 41 6d 65 72 69 63 61 2f 41 72 67 65 6e 74 69 6e 61 2f 42 75 65 6e 6f 73 5f 41 69 72 65 73 7c 2d 30 33 20 2d 30 32 7c 33 30 20 32 30 7c 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 7c 39 52 66 30 20 44 62 30 20 7a 76 64 30 20 42 7a 30 20 31 74 42 30 20 54 58 30 20 31 77 70 30 20 52 62 30 20 31 77 70 30 20 52 62 30 20 31 77 70 30 20 54 58 30 20 41 34 70 30 20 75 4c 30 20 31 71 4e 30 20 57 4c Data Ascii: B0 IL0 1Fd0 FX0 1EN0 FX0 1HB0 Lz0 dMN0 Lz0 1zd0 Rb0 1wN0 Wn0 1tB0 Rb0 1tB0 WL0 1tB0 Rb0 1zd0 On0 1HB0 FX0 ny10 Lz0\|14e4","America/Argentina/Buenos_Aires\|-03 -02\|30 20\|01010101010101010\|9Rf0 Db0 zvd0 Bz0 1tB0 TX0 1wp0 Rb0 1wp0 Rb0 1wp0 TX0 A4p0 uL0 1qN0 WL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	62595	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1361	OUT	GET /js/vendor/fotorama.js HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	629	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 38908 Connection: close Cf-Bgj: minify Cf-Polished: origSize=38912 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "9800-618dea4b945e3-gzip" Last-Modified: Mon, 20 May 2024 08:39:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5750 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3ebad6b439f-EWR
2024-05-28 05:15:10 UTC	740	IN	Data Raw: 2f 2a 21 0a 2a 20 46 6f 74 6f 72 61 6d 61 20 34 2e 36 2e 34 20 7c 20 68 74 74 70 3a 2f 2f 66 6f 74 6f 72 61 6d 61 2e 69 6f 2f 6c 69 63 65 6e 73 65 2f 0a 2a 2f 66 6f 74 6f 72 61 6d 61 56 65 72 73 69 6f 6e 3d 22 34 2e 36 2e 34 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 62 3d 22 62 65 7a 5f 22 2b 64 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 2e 6a 6f 69 6e 28 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 70 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 65 61 73 69 6e 67 5b 62 5d 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 6e 75 6c 6c 2c 6e Data Ascii: /! Fotorama 4.6.4 \| http://fotorama.io/license/*/fotoramaVersion="4.6.4",function(a,b,c,d,e){"use strict";function f(a){var b="bez_"+d.makeArray(arguments).join("_").replace(".","p");if("function"!=typeof d.easing[b]){var c=function(a,b){var c=[null,n
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 63 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6d 61 74 63 68 28 2f 6d 61 2f 29 26 26 61 2e 6d 61 74 63 68 28 2f 2d 3f 5c 64 2b 28 3f 21 64 29 2f 67 29 5b 61 2e 6d 61 74 63 68 28 2f 33 64 2f 29 3f 31 32 3a 34 5d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 49 63 3f 2b 69 28 61 2e 63 73 73 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 29 3a 2b 61 2e 63 73 73 28 22 6c 65 66 74 22 29 2e 72 65 70 6c 61 63 65 28 22 70 78 22 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 72 65 74 75 72 6e 20 49 63 3f 62 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 33 64 28 22 2b 61 2b 22 70 78 2c 30 2c 30 29 22 3a 62 2e 6c 65 66 74 3d 61 2c 62 7d 66 75 6e 63 74 69 6f 6e Data Ascii: c,a))}function i(a){return a.match(/ma/)&&a.match(/-?\d+(?!d)/g)[a.match(/3d/)?12:4]}function j(a){return Ic?+i(a.css("transform")):+a.css("left").replace("px","")}function k(a){var b={};return Ic?b.transform="translate3d("+a+"px,0,0)":b.left=a,b}function
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 62 5d 28 29 3a 61 72 67 75 6d 65 6e 74 73 5b 62 5d 2c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 61 29 3b 62 2b 2b 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2b 28 62 2d 61 29 2f 31 2e 35 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 79 2e 70 3d 79 2e 70 7c 7c 28 22 68 74 74 70 73 3a 22 3d 3d 3d 63 2e 70 72 6f 74 6f 63 6f 6c 3f 22 68 74 74 70 73 3a 2f 2f 22 3a 22 68 74 74 70 3a 2f 2f 22 29 2c 79 2e 70 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 63 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 63 2e 68 72 65 66 3d 61 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: arguments[b]():arguments[b],"number"!=typeof a);b++);return a}function x(a,b){return Math.round(a+(b-a)/1.5)}function y(){return y.p=y.p\|\|("https:"===c.protocol?"https://":"http://"),y.p}function z(a){var c=b.createElement("a");return c.href=a,c}function
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 72 20 66 3d 61 2e 63 68 69 6c 64 72 65 6e 28 22 69 6d 67 22 29 2e 65 71 28 30 29 2c 67 3d 61 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 68 3d 61 2e 61 74 74 72 28 22 73 72 63 22 29 2c 69 3d 66 2e 61 74 74 72 28 22 73 72 63 22 29 2c 6a 3d 62 2e 76 69 64 65 6f 2c 6b 3d 65 3f 41 28 67 2c 6a 3d 3d 3d 21 30 29 3a 21 31 3b 6b 3f 67 3d 21 31 3a 6b 3d 6a 2c 63 28 61 2c 66 2c 64 2e 65 78 74 65 6e 64 28 62 2c 7b 76 69 64 65 6f 3a 6b 2c 69 6d 67 3a 62 2e 69 6d 67 7c 7c 67 7c 7c 68 7c 7c 69 2c 74 68 75 6d 62 3a 62 2e 74 68 75 6d 62 7c 7c 69 7c 7c 68 7c 7c 67 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 2c 63 29 7b 76 61 72 20 65 3d 63 2e 74 68 75 6d 62 26 26 63 2e 69 6d 67 21 3d 3d 63 2e 74 68 75 6d 62 2c 66 3d 6e 28 63 2e 77 69 64 74 68 7c 7c 61 2e 61 74 74 Data Ascii: r f=a.children("img").eq(0),g=a.attr("href"),h=a.attr("src"),i=f.attr("src"),j=b.video,k=e?A(g,j===!0):!1;k?g=!1:k=j,c(a,f,d.extend(b,{video:k,img:b.img\|\|g\|\|h\|\|i,thumb:b.thumb\|\|i\|\|h\|\|g}))}function c(a,b,c){var e=c.thumb&&c.img!==c.thumb,f=n(c.width\|\|a.att
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 21 6b 26 26 28 6c 7c 7c 6d 29 29 26 26 28 69 3d 68 28 62 2e 68 2c 30 2c 6c 3f 69 3a 31 2f 30 29 2c 67 3d 69 2a 66 2e 72 61 74 69 6f 29 2c 61 2e 63 73 73 28 7b 77 69 64 74 68 3a 67 2c 68 65 69 67 68 74 3a 69 2c 6c 65 66 74 3a 70 28 6f 2e 78 2c 62 2e 77 2d 67 29 2c 74 6f 70 3a 70 28 6f 2e 79 2c 62 2e 68 2d 69 29 7d 29 2c 65 2e 6c 3d 7b 57 3a 66 2e 77 69 64 74 68 2c 48 3a 66 2e 68 65 69 67 68 74 2c 72 3a 66 2e 72 61 74 69 6f 2c 77 3a 62 2e 77 2c 68 3a 62 2e 68 2c 6d 3a 63 2c 70 3a 64 7d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 5b 30 5d 3b 63 2e 73 74 79 6c 65 53 68 65 65 74 3f 63 2e 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 62 3a 61 2e 68 74 6d 6c 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: !k&&(l\|\|m))&&(i=h(b.h,0,l?i:1/0),g=i*f.ratio),a.css({width:g,height:i,left:p(o.x,b.w-g),top:p(o.y,b.h-i)}),e.l={W:f.width,H:f.height,r:f.ratio,w:b.w,h:b.h,m:c,p:d}}return!0}function J(a,b){var c=a[0];c.styleSheet?c.styleSheet.cssText=b:a.html(b)}function
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 69 73 61 62 6c 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 61 29 7b 72 65 74 75 72 6e 7b 74 61 62 69 6e 64 65 78 3a 2d 31 2a 61 2b 22 22 2c 64 69 73 61 62 6c 65 64 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 28 61 2c 62 29 7b 54 28 61 2c 22 6b 65 79 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 55 28 61 29 7c 7c 31 33 3d 3d 63 2e 6b 65 79 43 6f 64 65 26 26 62 2e 63 61 6c 6c 28 61 2c 63 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 61 2c 62 29 7b 54 28 61 2c 22 66 6f 63 75 73 22 2c 61 2e 6f 6e 66 6f 63 75 73 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 61 6c 6c 28 61 2c 63 29 7d 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 Data Ascii: isabled")}function V(a){return{tabindex:-1*a+"",disabled:a}}function W(a,b){T(a,"keyup",function(c){U(a)\|\|13==c.keyCode&&b.call(a,c)})}function X(a,b){T(a,"focus",a.onfocusin=function(c){b.call(a,c)},!0)}function Y(a,b){a.preventDefault?a.preventDefault()
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 20 6d 3d 64 28 61 2e 74 61 72 67 65 74 29 2c 75 2e 63 68 65 63 6b 65 64 3d 70 3d 71 3d 73 3d 21 31 2c 6b 7c 7c 75 2e 66 6c 6f 77 7c 7c 61 2e 74 6f 75 63 68 65 73 26 26 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3e 31 7c 7c 61 2e 77 68 69 63 68 3e 31 7c 7c 65 64 26 26 65 64 2e 74 79 70 65 21 3d 3d 61 2e 74 79 70 65 26 26 67 64 7c 7c 28 70 3d 63 2e 73 65 6c 65 63 74 26 26 6d 2e 69 73 28 63 2e 73 65 6c 65 63 74 2c 74 29 29 3f 70 3a 28 6f 3d 22 74 6f 75 63 68 73 74 61 72 74 22 3d 3d 3d 61 2e 74 79 70 65 2c 71 3d 6d 2e 69 73 28 22 61 2c 20 61 20 2a 22 2c 74 29 2c 6e 3d 75 2e 63 6f 6e 74 72 6f 6c 2c 72 3d 75 2e 6e 6f 4d 6f 76 65 7c 7c 75 Data Ascii: ()}function cb(a,c){function e(a){return m=d(a.target),u.checked=p=q=s=!1,k\|\|u.flow\|\|a.touches&&a.touches.length>1\|\|a.which>1\|\|ed&&ed.type!==a.type&&gd\|\|(p=c.select&&m.is(c.select,t))?p:(o="touchstart"===a.type,q=m.is("a, a *",t),n=u.control,r=u.noMove\|\|u
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 54 28 74 2c 22 74 6f 75 63 68 65 6e 64 22 2c 68 29 2c 54 28 62 2c 22 74 6f 75 63 68 73 74 61 72 74 22 2c 69 29 2c 54 28 62 2c 22 74 6f 75 63 68 65 6e 64 22 2c 6a 29 2c 54 28 62 2c 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 2c 6a 29 2c 45 63 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 6a 29 2c 61 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 65 29 2c 46 63 2e 6f 6e 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 66 29 2e 6f 6e 28 22 6d 6f 75 73 65 75 70 22 2c 68 29 29 2c 61 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 75 2e 63 68 65 63 6b 65 64 26 26 59 28 61 29 7d 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 64 62 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 63 2c 64 29 7b 41 3d 21 30 2c 6a 3d 6c 3d 63 2e 5f 78 2c 71 3d 63 2e 5f 6e Data Ascii: T(t,"touchend",h),T(b,"touchstart",i),T(b,"touchend",j),T(b,"touchcancel",j),Ec.on("scroll",j),a.on("mousedown",e),Fc.on("mousemove",f).on("mouseup",h)),a.on("click","a",function(a){u.checked&&Y(a)}),u}function db(a,b){function c(c,d){A=!0,j=l=c._x,q=c._n
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 44 3d 64 2e 65 78 74 65 6e 64 28 63 62 28 62 2e 24 77 72 61 70 2c 64 2e 65 78 74 65 6e 64 28 7b 7d 2c 62 2c 7b 6f 6e 53 74 61 72 74 3a 65 2c 6f 6e 4d 6f 76 65 3a 66 2c 6f 6e 45 6e 64 3a 69 7d 29 29 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 65 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 2c 66 2c 68 3d 61 5b 30 5d 2c 69 3d 7b 70 72 65 76 65 6e 74 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 54 28 68 2c 4f 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 68 3d 61 2e 77 68 65 65 6c 44 65 6c 74 61 59 7c 7c 2d 31 2a 61 2e 64 65 6c 74 61 59 7c 7c 30 2c 6a 3d 61 2e 77 68 65 65 6c 44 65 6c 74 61 58 7c 7c 2d 31 2a 61 2e 64 65 6c 74 61 58 7c 7c 30 2c 6b 3d 4d 61 74 68 2e 61 62 73 28 6a 29 26 26 21 4d 61 74 68 2e 61 62 73 28 68 29 2c 6c 3d 5a 28 30 3e 6a Data Ascii: return D=d.extend(cb(b.$wrap,d.extend({},b,{onStart:e,onMove:f,onEnd:i})),D)}function eb(a,b){var c,e,f,h=a[0],i={prevent:{}};return T(h,Oc,function(a){var h=a.wheelDeltaY\|\|-1a.deltaY\|\|0,j=a.wheelDeltaX\|\|-1a.deltaX\|\|0,k=Math.abs(j)&&!Math.abs(h),l=Z(0>j
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 5f 62 3d 69 62 2b 22 5f 5f 65 72 72 6f 72 22 2c 61 63 3d 69 62 2b 22 5f 5f 6c 6f 61 64 69 6e 67 22 2c 62 63 3d 69 62 2b 22 5f 5f 6c 6f 61 64 65 64 22 2c 63 63 3d 62 63 2b 22 2d 2d 66 75 6c 6c 22 2c 64 63 3d 62 63 2b 22 2d 2d 69 6d 67 22 2c 65 63 3d 69 62 2b 22 5f 5f 67 72 61 62 62 69 6e 67 22 2c 66 63 3d 69 62 2b 22 5f 5f 69 6d 67 22 2c 67 63 3d 66 63 2b 22 2d 2d 66 75 6c 6c 22 2c 68 63 3d 69 62 2b 22 5f 5f 64 6f 74 22 2c 69 63 3d 69 62 2b 22 5f 5f 74 68 75 6d 62 22 2c 6a 63 3d 69 63 2b 22 2d 62 6f 72 64 65 72 22 2c 6b 63 3d 69 62 2b 22 5f 5f 68 74 6d 6c 22 2c 6c 63 3d 69 62 2b 22 5f 5f 76 69 64 65 6f 22 2c 6d 63 3d 6c 63 2b 22 2d 70 6c 61 79 22 2c 6e 63 3d 6c 63 2b 22 2d 63 6c 6f 73 65 22 2c 6f 63 3d 69 62 2b 22 5f 5f 63 61 70 74 69 6f 6e 22 2c 70 63 3d Data Ascii: _b=ib+"__error",ac=ib+"__loading",bc=ib+"__loaded",cc=bc+"--full",dc=bc+"--img",ec=ib+"__grabbing",fc=ib+"__img",gc=fc+"--full",hc=ib+"__dot",ic=ib+"__thumb",jc=ic+"-border",kc=ib+"__html",lc=ib+"__video",mc=lc+"-play",nc=lc+"-close",oc=ib+"__caption",pc=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	62594	13.32.27.107	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	549	OUT	GET /modules.3b9efc26f753310c2bd8.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:10 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 227565 Connection: close Date: Mon, 27 May 2024 07:54:09 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "b0063255c2bdae4548747b85c55538cc" Last-Modified: Mon, 27 May 2024 07:53:39 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d58896f901dbeed449603f5d2b4d9f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: 0h9OIJyW7gKhTTUs_5NtduH3CE2RKEM8jDJWJ47Yn9kqMKMO2RhLGQ== Age: 76861
2024-05-28 05:15:10 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 33 62 39 65 66 63 32 36 66 37 35 33 33 31 30 63 32 62 64 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.3b9efc26f753310c2bd8.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 3c 3d 65 7d 29 2c 22 69 64 65 6e 74 69 66 69 65 72 2e 63 6f 6d 70 61 72 65 52 61 74 69 6f 22 29 7d 2c 61 3d 6e 28 34 38 30 38 29 2c 73 3d 5b 22 61 66 22 2c 22 61 72 22 2c 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 63 79 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 65 73 22 2c 22 65 74 22 2c 22 66 61 22 2c 22 66 69 22 2c 22 66 72 22 2c 22 68 65 22 2c 22 68 72 22 2c 22 68 75 22 2c 22 69 64 22 2c 22 69 74 22 2c 22 6a 61 22 2c 22 6b 6f 22 2c 22 6c 74 22 2c 22 6c 76 22 2c 22 6d 69 73 22 2c 22 6e 62 22 2c 22 6e 6c 22 2c 22 70 6c 22 2c 22 70 74 5f 42 52 22 2c 22 70 74 22 2c 22 72 6f 22 2c 22 72 75 22 2c 22 73 6b 22 2c 22 73 6c 22 2c 22 73 71 22 2c 22 73 72 22 2c 22 73 76 22 2c 22 73 77 22 2c 22 74 68 22 2c 22 74 6c 22 2c 22 74 72 22 Data Ascii: <=e}),"identifier.compareRatio")},a=n(4808),s=["af","ar","bg","ca","cs","cy","da","de","el","en","es","et","fa","fi","fr","he","hr","hu","id","it","ja","ko","lt","lv","mis","nb","nl","pl","pt_BR","pt","ro","ru","sk","sl","sq","sr","sv","sw","th","tl","tr"
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 74 74 69 6e 67 73 2e 73 69 74 65 5f 69 64 2c 22 2f 70 6f 6c 6c 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 72 65 73 70 6f 6e 73 65 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 2c 6e 2c 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 5f 6e 65 77 5f 72 65 73 70 6f 6e 73 65 26 26 68 6a 2e 65 76 65 6e 74 2e 73 69 67 6e 61 6c 28 22 70 6f 6c 6c 2e 73 65 6e 64 22 2c 7b 69 64 3a 74 2c 72 65 73 70 6f 6e 73 65 5f 69 64 3a 65 2e 70 6f 6c 6c 5f 72 65 73 70 6f 6e 73 65 5f 69 64 7d 29 2c 6e 75 6c 6c 3d 3d 69 7c 7c 69 28 65 29 7d 29 29 7d 29 2c 22 64 61 74 61 22 29 2c 74 2e 63 6f 6d 70 6c 65 74 65 50 6f 6c 6c 52 65 73 70 6f 6e 73 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 68 6a 2e 77 69 64 67 65 74 2e 70 Data Ascii: ttings.site_id,"/poll/").concat(t,"/response/").concat(a),n,o,(function(e){e.is_new_response&&hj.event.signal("poll.send",{id:t,response_id:e.poll_response_id}),null==i\|\|i(e)}))}),"data"),t.completePollResponse=hj.tryCatch((function(t,n){var r=hj.widget.p
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 7c 7c 77 28 65 29 29 26 26 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 72 2c 22 5c 5c 24 31 22 29 2c 65 3d 62 28 65 29 2c 67 28 65 29 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 65 2e 63 68 61 72 41 74 28 30 29 3b 72 65 74 75 72 6e 2f 5c 64 2f 2e 74 65 73 74 28 74 29 3f 22 5c 5c 33 22 2b 74 2b 22 20 22 2b 65 2e 73 6c 69 63 65 28 31 29 3a 65 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 22 2d 22 21 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 65 2e 63 68 61 72 41 74 28 Data Ascii: .replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1\|\|w(e))&&(e=e.replace(r,"\\$1"),e=b(e),g(e))},g=function(e){if(!e)return e;var t=e.charAt(0);return/\d/.test(t)?"\\3"+t+" "+e.slice(1):e},b=function(e){if(!e\|\|"-"!==e.charAt(0))return e;var t=e.charAt(
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 6a 2e 75 69 2e 67 65 74 57 69 6e 64 6f 77 53 69 7a 65 28 29 2c 74 3d 68 6a 2e 74 69 6d 65 2e 67 65 74 4e 6f 77 28 29 2c 6e 3d 75 2e 66 5f 2e 6e 6f 77 28 29 2c 72 3d 42 2e 79 2e 67 65 74 28 22 70 61 67 65 56 69 73 69 74 4b 65 79 22 29 3b 59 28 72 2c 72 2c 65 2c 74 2c 6e 2c 74 68 69 73 2e 69 73 54 72 65 65 4d 69 72 72 6f 72 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 29 3b 76 61 72 20 6f 3d 42 2e 79 2e 67 65 74 28 22 74 61 67 73 54 6f 50 72 6f 63 65 73 73 22 29 3b 6f 2e 6c 65 6e 67 74 68 26 26 28 28 30 2c 63 2e 4e 29 28 69 2e 73 2e 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 2c 6f 2c 21 30 29 2e 66 6c 75 73 68 28 29 2c 42 2e 79 2e 73 65 74 28 22 74 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 3b 76 61 72 20 6c 3d 42 2e 79 2e 67 65 74 28 22 61 75 74 6f 54 61 Data Ascii: j.ui.getWindowSize(),t=hj.time.getNow(),n=u.f_.now(),r=B.y.get("pageVisitKey");Y(r,r,e,t,n,this.isTreeMirrorInitialized());var o=B.y.get("tagsToProcess");o.length&&((0,c.N)(i.s.TAG_RECORDING,o,!0).flush(),B.y.set("tagsToProcess",[]));var l=B.y.get("autoTa
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 29 65 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4d 75 74 61 74 65 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 61 74 74 72 69 62 75 74 65 73 3d 21 30 2c 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 3d 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 7b 7d 2c 65 20 69 6e 20 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 28 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 5b 65 5d 3d 74 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 61 Data Ascii: buteOldValues)e.push(t);return e}),"NodeChange.getAttributeNamesMutated"),this.attributeMutated=hj.tryCatch((function(e,t){n.attributes=!0,n.attributeOldValues=n.attributeOldValues\|\|{},e in n.attributeOldValues\|\|(n.attributeOldValues[e]=t)}),"NodeChange.a
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 69 2e 67 65 74 28 74 29 3b 6e 7c 7c 28 6e 3d 6e 65 77 20 65 65 2c 69 2e 73 65 74 28 74 2c 6e 29 29 2c 6e 2e 73 65 74 28 65 2c 21 30 29 7d 7d 29 29 3b 76 61 72 20 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 69 2e 67 65 74 56 61 6c 75 65 73 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 65 2e 6b 65 79 73 28 29 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 5b 30 5d 3b 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 65 2e 68 61 73 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 72 26 26 65 2e 68 61 73 28 72 29 3b 29 7b 76 61 72 20 69 3d 6f 2e 73 65 Data Ascii: ;if(t){var n=i.get(t);n\|\|(n=new ee,i.set(t,n)),n.set(e,!0)}}));var a=[];return i.getValues().forEach((function(e){for(var t,n=e.keys();n.length;){for(var r=n[0];r.previousSibling&&e.has(r.previousSibling);)r=r.previousSibling;for(;r&&e.has(r);){var i=o.se
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 65 26 26 28 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 3d 65 2c 65 3d 6e 75 6c 6c 2c 6e 3d 21 31 29 2c 6f 3d 5b 5d 7d 2c 74 7d 28 29 7d 29 2c 22 68 6a 2e 64 65 6c 65 74 65 64 52 75 6c 65 73 22 29 28 29 7d 2c 33 32 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 35 34 32 29 2c 6e 28 32 31 39 29 2c 6e 28 32 38 39 29 2c 6e 28 36 33 32 36 29 7d 2c 35 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 37 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 69 6e 73 65 72 74 65 64 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: function(){e&&(CSSStyleSheet.prototype.deleteRule=e,e=null,n=!1),o=[]},t}()}),"hj.deletedRules")()},3251:function(e,t,n){n(542),n(219),n(289),n(6326)},542:function(e,t,n){"use strict";n.r(t);var r=n(5547);hj.tryCatch((function(){hj.insertedRules=function(
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 74 65 4e 65 77 46 72 61 6d 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 28 6e 29 2c 53 2e 77 72 69 74 65 28 65 29 2c 74 28 29 2c 53 7d 29 29 2c 77 72 69 74 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3b 69 66 28 68 6a 2e 69 73 50 72 65 76 69 65 77 29 72 65 74 75 72 6e 20 53 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 62 28 65 29 29 72 65 74 75 72 6e 20 68 6a 2e 68 71 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 53 2e 77 72 69 74 65 28 65 2c 74 2c 21 30 2c 72 29 7d 29 29 2c 53 3b 76 61 72 20 69 3d 65 3b 69 66 28 21 72 26 26 21 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 29 7b 69 66 28 21 53 2e 5f Data Ascii: teNewFrame:hj.tryCatch((function(e,n){return t(n),S.write(e),t(),S})),write:hj.tryCatch((function(e,t,n,r){var o;if(hj.isPreview)return S;if("object"===b(e))return hj.hq.each(e,(function(e,t){S.write(e,t,!0,r)})),S;var i=e;if(!r&&!S._ws.connect()){if(!S._
2024-05-28 05:15:10 UTC	16384	IN	Data Raw: 6f 72 65 2e 73 65 73 73 69 6f 6e 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 63 72 65 61 74 65 64 22 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 2b 61 3e 6e 2b 69 29 7b 76 61 72 20 6f 3d 69 2d 28 72 2e 66 5f 2e 6e 6f 77 28 29 2d 6e 29 3b 6f 3c 30 26 26 28 6f 3d 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 65 28 29 2c 68 6a 2e 73 74 6f 72 65 2e 73 65 73 73 69 6f 6e 2e 73 65 74 28 22 73 65 73 73 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 6f 73 65 28 29 2c 68 6a 2e 6d 65 74 72 69 63 73 2e 63 6f 75 6e 74 28 22 73 65 73 73 69 6f 6e 2d 69 6e 74 65 72 72 75 70 74 69 6f 6e 22 2c 7b 74 61 67 3a 7b 72 65 61 73 6f 6e 3a 22 Data Ascii: ore.session.get("session.created");if("number"==typeof n&&r.f_.now()+a>n+i){var o=i-(r.f_.now()-n);o<0&&(o=0),setTimeout((function(){try{e(),hj.store.session.set("session",null),hj.eventStream.close(),hj.metrics.count("session-interruption",{tag:{reason:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	62596	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:09 UTC	1371	OUT	GET /v3/js/main.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	630	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 58602 Connection: close Cf-Bgj: minify Cf-Polished: origSize=81091 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "13cc3-618df06d36484-gzip" Last-Modified: Mon, 20 May 2024 09:07:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1369 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3ebd86f0f6b-EWR
2024-05-28 05:15:10 UTC	739	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 50 61 72 61 6d 28 70 61 72 61 6d 29 7b 76 61 72 20 73 50 61 67 65 55 52 4c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 76 61 72 20 73 55 52 4c 56 61 72 69 61 62 6c 65 73 3d 73 50 61 67 65 55 52 4c 2e 73 70 6c 69 74 28 27 26 27 29 3b 76 61 72 20 73 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 73 55 52 4c 56 61 72 69 61 62 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 73 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 3d 73 55 52 4c 56 61 72 69 61 62 6c 65 73 5b 69 5d 2e 73 70 6c 69 74 28 27 3d 27 29 3b 69 66 28 73 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 5b 30 5d 3d 3d 3d 70 61 72 61 6d 29 7b 72 65 74 75 72 6e 20 73 Data Ascii: function getUrlParam(param){var sPageURL=window.location.search.substring(1);var sURLVariables=sPageURL.split('&');var sParameterName;for(var i=0;i<sURLVariables.length;i++){sParameterName=sURLVariables[i].split('=');if(sParameterName[0]===param){return s
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 29 7b 6c 65 74 20 70 72 69 63 65 45 6c 65 6d 65 6e 74 3d 24 28 27 2e 70 72 69 63 65 2d 73 74 65 70 32 27 29 3b 70 72 69 63 65 45 6c 65 6d 65 6e 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 70 72 69 63 65 3d 24 28 74 68 69 73 29 3b 6c 65 74 20 70 72 69 63 65 54 6f 6f 6c 74 69 70 3d 70 72 69 63 65 2e 6e 65 78 74 28 29 3b 6c 65 74 20 70 72 69 63 65 54 6f 6f 6c 74 69 70 54 65 78 74 3d 70 72 69 63 65 54 6f 6f 6c 74 69 70 2e 66 69 6e 64 28 27 2e 74 2d 74 69 70 5f 5f 74 65 78 74 27 29 0a 6c 65 74 20 64 69 73 74 61 6e 63 65 46 72 6f 6d 50 72 69 63 65 45 6c 65 6d 65 6e 74 54 6f 42 6f 74 74 6f 6d 3d 70 72 69 63 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2b 70 72 69 63 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 70 72 69 63 65 54 6f 6f 6c 74 Data Ascii: ){let priceElement=$('.price-step2');priceElement.each(function(){let price=$(this);let priceTooltip=price.next();let priceTooltipText=priceTooltip.find('.t-tip__text')let distanceFromPriceElementToBottom=price.offset().top+price.outerHeight();priceToolt
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 7b 69 66 28 74 79 70 65 6f 66 20 76 61 6c 75 65 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 76 61 6c 75 65 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 73 65 70 61 72 61 74 6f 72 3d 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 21 3d 3d 2d 31 3f 27 26 27 3a 27 3f 27 3b 68 61 73 68 3d 75 72 6c 2e 73 70 6c 69 74 28 27 23 27 29 3b 75 72 6c 3d 68 61 73 68 5b 30 5d 2b 73 65 70 61 72 61 74 6f 72 2b 6b 65 79 2b 27 3d 27 2b 76 61 6c 75 65 3b 69 66 28 74 79 70 65 6f 66 20 68 61 73 68 5b 31 5d 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 68 61 73 68 5b 31 5d 21 3d 3d 6e 75 6c 6c 29 7b 75 72 6c 2b 3d 27 23 27 2b 68 61 73 68 5b 31 5d 3b 7d 0a 72 65 74 75 72 6e 20 75 72 6c 3b 7d 0a 65 6c 73 65 7b 72 65 74 75 72 6e 20 75 72 6c 3b 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: {if(typeof value!=='undefined'&&value!==null){var separator=url.indexOf('?')!==-1?'&':'?';hash=url.split('#');url=hash[0]+separator+key+'='+value;if(typeof hash[1]!=='undefined'&&hash[1]!==null){url+='#'+hash[1];}return url;}else{return url;}}}function
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 79 6d 62 6f 6c 3b 7d 0a 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 6f 6e 65 79 56 34 28 76 61 6c 29 7b 76 61 72 20 73 79 6d 62 6f 6c 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 79 6d 62 6f 6c 22 29 3b 76 61 72 20 63 6f 64 65 3d 4e 75 6d 62 65 72 28 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 75 72 72 22 29 29 3b 76 61 72 20 6c 61 6e 67 3d 4e 75 6d 62 65 72 28 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6c 61 6e 67 22 29 29 3b 76 61 6c 3d 4e 75 6d 62 65 72 28 76 61 6c 29 3b 76 61 6c 75 65 3d 76 61 6c 2e 74 6f 46 69 78 65 64 28 32 29 3b 70 61 72 74 73 3d 76 61 6c 75 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b Data Ascii: ymbol;}return result;}function moneyV4(val){var symbol=$("#lang_curr").attr("data-symbol");var code=Number($("#lang_curr").attr("data-curr"));var lang=Number($("#lang_curr").attr("data-lang"));val=Number(val);value=val.toFixed(2);parts=value.split(".");
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 68 61 73 2d 6c 6f 79 61 6c 74 79 22 29 3d 3d 27 74 72 75 65 27 29 7b 69 66 28 72 65 73 6f 6c 75 74 69 6f 6e 3e 31 29 7b 24 28 74 68 69 73 29 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 29 7d 0a 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 22 67 72 69 64 22 7d 29 7d 7d 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 29 7d 7d 7d 29 3b 7d 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 62 75 74 74 6f 6e 2d 72 6f 74 61 74 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 6f 74 65 6c 2d 62 75 74 74 6f 6e 2d 72 6f 74 61 74 65 22 29 3b Data Ascii: art:function(){if($(this).attr("data-has-loyalty")=='true'){if(resolution>1){$(this).css({display:"flex"})}else{$(this).css({display:"grid"})}}else{$(this).css({display:"flex"})}}});}else{$(this).find(".button-rotate").removeClass("hotel-button-rotate");
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 72 28 27 63 6c 69 63 6b 27 29 3b 7d 0a 76 61 72 20 68 6f 74 65 6c 69 64 3d 24 28 27 2e 6c 6f 67 69 6e 2d 62 74 6e 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 68 6f 74 65 6c 69 64 27 29 3b 76 61 72 20 6c 61 6e 67 3d 24 28 27 2e 6c 6f 67 69 6e 2d 62 74 6e 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 6c 61 6e 67 27 29 3b 69 66 28 24 28 27 2e 6c 6f 67 69 6e 2d 62 74 6e 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 68 6f 74 65 6c 2d 6e 75 6d 62 65 72 27 29 3d 3d 31 29 7b 24 28 27 2e 6c 6f 67 69 6e 2d 6c 69 6e 6b 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 68 72 65 66 27 2c 27 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6f 6d 6e 69 62 65 65 73 2e 63 6f 6d 2f 68 6f 74 65 6c 2f 27 2b 68 6f 74 65 6c 69 64 2b 27 3f 6c 61 6e 67 3d 27 2b 6c 61 6e 67 29 3b 7d 7d 29 Data Ascii: er('click');}var hotelid=$('.login-btn').attr('data-hotelid');var lang=$('.login-btn').attr('data-lang');if($('.login-btn').attr('data-hotel-number')==1){$('.login-link').attr('data-href','https://myaccount.omnibees.com/hotel/'+hotelid+'?lang='+lang);}})
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 71 27 2c 71 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 6c 61 6e 67 75 61 67 65 49 64 27 2c 6c 61 6e 67 75 61 67 65 49 64 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 63 75 72 72 65 6e 63 79 49 64 27 2c 63 75 72 72 65 6e 63 79 49 64 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 6c 61 6e 67 75 61 67 65 4c 6f 63 61 6c 65 27 2c 6c 61 6e 67 75 61 67 65 4c 6f 63 61 6c 65 2c 75 72 6c 29 3b 76 61 72 20 77 3d 34 30 30 3b 76 61 72 20 68 3d 31 3b 76 61 72 20 70 61 72 61 6d 73 3d 27 73 63 72 6f 6c 6c 62 61 72 73 3d 6e 6f 2c 72 65 73 69 7a 61 62 6c 65 3d 6e 6f 2c 73 74 61 74 75 73 3d 6e 6f 2c 6c 6f 63 61 74 69 Data Ascii: url=updateUrlParam('q',q,url);url=updateUrlParam('languageId',languageId,url);url=updateUrlParam('currencyId',currencyId,url);url=updateUrlParam('languageLocale',languageLocale,url);var w=400;var h=1;var params='scrollbars=no,resizable=no,status=no,locati
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 2b 27 26 6c 61 6e 67 75 61 67 65 49 64 3d 27 2b 6c 61 6e 67 75 61 67 65 49 64 2b 27 26 63 75 72 72 65 6e 63 79 49 64 3d 27 2b 63 75 72 72 65 6e 63 79 49 64 3b 7d 2c 33 30 30 30 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4c 6f 67 6f 75 74 4f 6e 4f 74 68 65 72 43 68 61 69 6e 52 65 67 69 73 74 65 72 28 63 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 71 3d 67 65 74 55 72 6c 50 61 72 61 6d 28 22 71 22 29 3b 76 61 72 20 63 3d 24 28 22 23 63 68 61 69 6e 5f 68 6f 6d 65 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 68 61 69 6e 22 29 3b 3b 76 61 72 20 6c 61 6e 67 75 61 67 65 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6c 61 6e 67 22 29 3b 76 61 72 20 63 75 72 72 65 6e 63 79 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 Data Ascii: +'&languageId='+languageId+'&currencyId='+currencyId;},3000);}function openLogoutOnOtherChainRegister(callback){var q=getUrlParam("q");var c=$("#chain_home").attr("data-chain");;var languageId=$("#lang_curr").attr("data-lang");var currencyId=$("#lang_cur
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 73 61 76 65 5f 6c 61 6e 67 5f 63 75 72 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 6c 69 63 6b 22 29 3b 7d 7d 29 3b 24 28 22 23 63 75 72 72 65 6e 63 69 65 73 22 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 65 73 6f 6c 75 74 69 6f 6e 3e 31 29 7b 24 28 22 23 73 61 76 65 5f 6c 61 6e 67 5f 63 75 72 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 6c 69 63 6b 22 29 3b 7d 7d 29 3b 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 22 2e 64 72 6f 70 5f 6c 61 6e 67 22 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 29 3d 3d 27 6e 6f 6e 65 27 29 7b 24 28 22 2e 64 72 6f 70 5f 6c 61 6e 67 22 29 2e 66 61 64 65 49 6e 28 29 3b 24 28 22 2e 64 72 6f 70 5f 6c 61 6e 67 22 29 2e 63 73 73 28 22 70 Data Ascii: save_lang_curr").trigger("click");}});$("#currencies").change(function(){if(resolution>1){$("#save_lang_curr").trigger("click");}});$("#lang_curr").click(function(){if($(".drop_lang").css('display')=='none'){$(".drop_lang").fadeIn();$(".drop_lang").css("p
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 70 6c 61 63 65 28 66 72 65 73 68 55 72 6c 29 3b 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 63 73 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 22 2c 22 75 72 6c 28 2f 69 63 6f 6e 73 2f 69 63 6f 6e 73 5f 47 72 65 79 44 61 72 6b 65 73 74 2f 69 63 6f 6e 47 72 65 79 44 61 72 6b 65 73 74 5f 44 72 6f 70 64 6f 77 6e 2e 73 76 67 29 22 29 0a 69 66 28 72 65 73 6f 6c 75 74 69 6f 6e 3e 31 29 7b 24 28 22 2e 64 72 6f 70 5f 6c 61 6e 67 2c 20 2e 6d 6f 62 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2c 20 2e 62 6f 64 79 2d 6f 76 65 72 6c 61 79 2d 6d 6f 62 69 6c 65 22 29 2e 66 61 64 65 4f 75 74 28 29 3b 7d 0a 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 29 3b 24 28 22 23 6c 6f 67 69 6e 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 22 2e 64 Data Ascii: place(freshUrl);$("#lang_curr").css("background-image","url(/icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg)")if(resolution>1){$(".drop_lang, .mob-menu-toggle, .body-overlay-mobile").fadeOut();}return false;});$("#login").click(function(){if($(".d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	62598	104.18.124.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	382	OUT	GET /Images/5659/Packages/701x390/685202.jpeg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:10 UTC	581	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: image/jpeg Content-Length: 45280 Connection: close Cache-Control: public, max-age=2678400 Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=47328, status=webp_bigger access-control-allow-origin: https://myhotel2.omnibees.com expires: Fri, 28 Jun 2024 05:15:10 GMT strict-transport-security: max-age=31536000 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 1 Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3ed5c040ca0-EWR
2024-05-28 05:15:10 UTC	788	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e1 f9 f7 a6 fe f6 7d b6 37 f6 db 4a 44 3b Data Ascii: JFIF`` $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"4}7JD;
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 57 fd 37 92 72 6d 75 e8 e5 97 da 60 a9 9a 43 be 12 fa 3c 15 d2 71 b6 4a 6d 6a a9 e0 35 be a5 9f 65 d7 6d 72 57 6d 73 e7 d9 92 59 d1 a1 70 8e 65 a4 8a 24 82 89 24 d0 12 0b f5 6d 12 f0 77 89 1e b8 f4 bc cc fb 5f 61 be bb 63 36 b8 ce c4 38 12 09 e1 d1 bc 84 4d 1e ad 12 3d 50 e2 39 e1 9a bc 39 df 53 36 20 e9 db 70 f5 d4 54 5e 69 5d 5c d2 ef ae 5d 65 68 9e cd 1b 08 c0 06 28 ef f9 77 46 e6 ae 8c e5 4f 2d b9 f5 ef 3c 0f e8 b9 d3 e7 fb cd 55 79 3f 41 71 4e a5 c9 f9 7a 80 01 98 5d dc 4f ee d4 3e ab e2 fa 4a 65 0a a5 0d 15 b3 9c 4f ee f0 76 fb 3f ce d7 df 3f d4 ea dc 36 61 27 cf 4c d7 78 bd 8e 12 75 87 5c 7d d2 f9 7d b7 cf ec ec 7c 82 f7 cd bc 4f 41 06 08 d3 eb 3c 11 b5 de 37 5d b1 8f 61 2e d1 4a ad 8f 49 1e 1a 67 1e c3 7f 63 20 e7 1e 93 68 b7 d2 43 b4 d4 bf 06 87 Data Ascii: W7rmu`C<qJmj5emrWmsYpe$$mw_ac68M=P99S6 pT^i]\]eh(wFO-<Uy?AqNz]O>JeOv??6a'Lxu\}}\|OA<7]a.JIgc hC
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 5c 50 fe 6e bf a2 9d fc d2 a9 1b e8 b5 1f 38 16 93 fa 3f 1c 5f b1 78 ac 7e 99 35 97 74 4d 53 1c 33 70 66 f7 52 73 15 a0 a8 bc 89 52 31 f4 3c fb a2 d9 d3 73 0b e8 93 0c bf d7 28 ec b5 a6 20 d9 f6 ac 85 7c 52 75 1a e6 c7 03 6b 3a 71 01 ac c3 3b 9e de 64 7e 70 22 b5 70 8d b6 46 5b 55 b9 8e af 52 2a c4 e2 7a 9a 9f b0 62 92 e4 c4 38 4e d4 8a 70 63 39 9e ab 77 56 63 b0 93 e0 3e 36 98 6a 6f b6 f2 0c c9 ae eb 5c 69 26 31 be da 34 0f c6 e8 5b 06 f0 d1 21 83 4d fa 20 54 30 38 96 b7 b1 49 59 a1 7b 53 da 0a 07 cd 54 d9 93 a0 5a 57 4f a1 52 4a 5b c9 6e 09 ca 2c 12 07 52 e9 d2 3b 48 6e 71 83 0b 79 18 bc 3b 04 3a 6a 35 5e b5 ce ed c8 a3 d3 8e f9 8e 15 67 19 e5 62 ad 75 97 a3 e3 b0 72 52 86 ca e8 88 8e 63 a5 9c ee 7a 22 1a c0 a6 eb 6b 7d 52 6b 44 e5 75 4e cf ca 99 91 f4 Data Ascii: \Pn8?_x~5tMS3pfRsR1<s( \|Ruk:q;d~p"pF[UR*zb8Npc9wVc>6jo\i&14[!M T08IY{STZWORJ[n,R;Hnqy;:j5^gburRcz"k}RkDuN
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 32 4a 44 bc f6 b5 41 5a c9 5b 34 69 4a c5 ac 80 6e 33 ca fb 24 38 cd 00 b1 ba 32 71 54 b0 36 2e 02 08 d5 a9 01 b4 3c 87 7c 43 96 c4 6c 3b 3c 02 6e 91 b2 3f 5c a1 58 eb 70 b2 09 85 d9 e2 d8 d4 de 9e b3 b5 a7 5d e6 e7 2d 33 35 c9 49 02 13 9f 96 bb 53 a9 73 29 66 d2 86 37 85 01 58 9a e6 79 14 d2 fa 06 f3 3c fb 7e 8a 63 6e 74 bf af 68 1e 86 6d ea 4c d5 b2 ec 61 14 59 23 62 d9 56 95 a9 8f b7 8a 5f 53 4b a0 c3 30 38 70 92 4d ec a9 54 60 66 f0 d7 c1 57 b6 6b 43 58 77 51 0b 9a ef 54 2a aa f7 29 4a b8 77 0a b2 97 ed 69 fd 6d a2 80 5b d4 bd 9c f4 58 7a 24 8c 39 c6 3a 6a 34 68 44 08 ea 29 92 ab 73 59 f3 9a bf 77 a3 c2 dc fa 5b 34 12 a5 70 7b 34 3b 20 7b a0 9b 39 01 64 40 bc 95 2d bc 86 15 9b 55 76 d2 7a 19 80 46 f5 a1 36 cf 15 44 9f 10 d0 7a 6d 27 29 16 c3 e7 6e 98 Data Ascii: 2JDAZ[4iJn3$82qT6.<\|Cl;<n?\Xp]-35ISs)f7Xy<~cnthmLaY#bV_SK08pMT`fWkCXwQT*)Jwim[Xz$9:j4hD)sYw[4p{4; {9d@-UvzF6Dzm')n
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 74 f5 fb 02 e3 a9 5a b1 8f 2d 93 78 2c 0f a4 10 1b 01 5e 23 11 04 20 59 b5 8d 95 16 9e e5 f6 58 02 c2 62 28 90 cd b6 28 90 27 b0 e8 8f 4e 5d 7e 03 8b a7 9a 58 34 b6 f2 51 f2 37 fc b3 ce 7e 8c c2 9b 60 fa 3e 26 42 f8 a1 96 11 b8 1c f4 9b d8 97 29 9b 06 db 68 8e 88 b2 24 27 32 9c 5c 38 94 8c 94 29 3b 1b 1e 9b 06 30 90 e5 d8 a9 c6 6a e2 1c 4b a1 1a cb 04 87 49 19 10 ec 1a 96 74 f0 69 29 19 92 ce b3 cd e0 4c a3 62 e0 7c ee 57 2e e2 68 c3 75 4c a8 e3 9e ec 11 ed c6 c6 ed 03 6d c9 ec d6 3d ed 3a cd b4 d5 e5 1e 56 e8 34 75 47 f5 c9 c4 a6 d6 c3 71 ea 0b 55 2d b6 d1 1f 1a 6f a8 30 c7 36 b8 06 23 5d 31 aa 2b bd c6 77 3d bc d6 ec 85 8c 47 3a dd b9 b9 1e f5 a4 69 3e f1 59 e5 f7 b6 96 4f 79 b4 92 7b ce 9e c7 bc a4 41 fd ee 6b af 51 ef 71 5d 42 6f 7a d3 c5 cb de e8 8d Data Ascii: tZ-x,^# YXb(('N]~X4Q7~`>&B)h$'2\8);0jKIti)Lb\|W.huLm=:V4uGqU-o06#]1+w=G:i>YOy{AkQq]Boz
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 1e 1c 35 07 0a c1 34 ac 7b 61 d0 ee e1 34 72 57 16 db b0 31 ad 36 86 0e d2 cd 73 04 bb 48 8c d5 5d b1 22 24 3a e0 48 88 3e ae c0 78 21 e0 43 8e 23 00 75 8a d9 e2 90 94 12 2e bb 52 4e 9a c1 f9 e8 dc eb ad 02 8b 5f 5e d2 25 44 09 c5 57 95 3e 07 35 1f 9f d9 af 23 38 e3 23 f9 8c 8c 8c 29 ce 26 3c c6 72 e5 d6 87 9c 89 94 f8 8c 95 c4 6b b0 17 7a 20 71 35 8f 5c 80 4a 9e 16 2b 2f 58 9f cf bb 56 fa e1 10 20 a3 af ad 15 e2 a2 e1 dc 8a f5 ac 57 e3 a1 f9 a6 35 f2 13 15 98 a4 2a d4 52 82 0a b5 a8 8d 8b 96 b2 98 d3 86 0d 85 a1 f4 17 ab 1b d6 ef 27 d7 a8 dc 6d ea fa 16 8f 95 91 3f c7 1c 46 76 ed 25 0b 84 cc 4f f2 f6 a4 5c 25 9c 10 c6 2d 6c 4c 82 4a cc 36 3d 6a 94 ee 9b b7 02 f6 58 98 b0 43 7b 29 dc d8 ad 50 b5 2e b8 a2 ba c4 45 f7 d8 68 49 da 14 8c d5 b1 50 d5 d7 55 55 Data Ascii: 54{a4rW16sH]"$:H>x!C#u.RN_^%DW>5#8#)&<rkz q5\J+/XV W5*R'm?Fv%O\%-lLJ6=jXC{)P.EhIPUU
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: af d7 3e 1d 21 7c 36 4d a1 a7 0d c5 7d 2a f7 36 0a 4c 68 ec 50 df d0 d7 d9 e8 f2 63 8c d6 d3 b7 f9 d5 2a b6 ca c2 a0 fe 19 cb 3b 22 af 5d 85 b0 ab fa 04 bf 37 6b 09 66 75 db 11 30 cd 73 4a 27 3a 36 6a 58 bc 8a e5 33 ed 63 56 f6 5c 66 c4 b6 9f e9 b7 65 63 7c 7b a5 95 5b 57 2c 22 d8 14 2a 28 d1 1d a5 51 d6 0e 9b 6f ae f3 f9 ec d9 97 fa 3b 52 cb 3e 13 95 e2 5c 9a de df f7 2b 61 b6 c0 0b 51 7a c3 45 3f 9f ad 5b 2d 55 88 eb a7 4f ea ee dd dc c4 ce 71 ca 5c c7 01 ab 67 5c 1e ff 00 f7 87 f4 6e 73 1c db 1a fd c9 d4 8c ab b0 d9 da 66 53 2b cc d9 c1 af aa d6 51 55 5c c5 9a a7 7e dc 6c d2 e1 ce de c6 5e ff 00 41 e6 e8 0b 8e a3 fe 53 69 56 91 a5 6a 9d 74 3a a9 33 5d b0 d8 b3 e7 8a ec 1b 09 f1 46 f5 c9 85 5b c1 99 b1 01 95 a3 e3 75 e3 b7 5f 35 f1 37 75 85 b2 d5 fc d5 Data Ascii: >!\|6M}6LhPc;"]7kfu0sJ':6jX3cV\fec\|{[W,"*(Qo;R>\+aQzE?[-UOq\g\nsfS+QU\~l^ASiVjt:3]F[u_57u
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 96 4c e3 17 c4 e0 e3 06 67 12 ad 99 f6 06 d4 bd 3b 03 ba b9 b9 ba fc f3 af 96 52 3d bc 7d 8b db 06 f2 37 51 b8 1d a0 ec 62 ec 3a 0b 98 8e 3d c6 c9 29 18 9c 6e d5 97 46 3b b4 89 9d a2 90 6a 8b 53 15 aa 97 af d5 2a 85 40 ec ae 1c eb 69 2e af ac a4 8e 48 b0 80 a7 b4 5a 8d 89 ed 0e f9 da f7 c3 89 fe e3 78 5b a7 3b 0d 8b 18 9c aa 2d 03 8b d2 db 22 77 e9 04 37 c4 66 b6 de ce 3a cc 56 c0 5b 2d ba d6 6a cb a9 b1 2d bc 56 9b 16 e2 e0 5b fa 86 cc 3e 19 05 06 9b 0b 7c 4c 94 e0 e5 9b 87 b4 22 eb 9c f2 71 d6 32 96 44 70 e5 82 a0 60 7d 52 2f 8f 85 3a e4 ba 6e 95 c2 b4 76 8a e1 5b 9b 33 63 dc 2c e2 72 72 73 89 c9 8e 12 88 ac cb 4d 6b 5b 56 2b c5 83 71 58 3e 63 36 9b 0c 18 2f 14 4a ea a0 8c 96 d5 bc 9b 33 03 58 66 d5 a3 08 b2 fd 9c f3 df d9 0c 13 86 41 fb 7e aa ac 49 0c Data Ascii: Lg;R=}7Qb:=)nF;jS*@i.HZx[;-"w7f:V[-j-V[>\|L"q2Dp`}R/:nv[3c,rrsMk[V+qX>c6/J3XfA~I
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: b6 3b 0b 36 52 37 dd 55 5a bd 57 89 fe 27 c4 cc cf 25 37 66 81 6c 27 57 1f ff c4 00 45 10 00 02 01 02 04 04 03 06 03 04 09 02 05 05 00 00 01 02 00 03 11 04 12 21 31 13 22 41 51 10 32 61 05 14 23 42 71 81 20 52 91 30 33 62 a1 06 15 24 40 43 53 72 b1 c1 25 d1 26 34 63 82 92 54 73 a2 e1 f1 ff da 00 08 01 01 00 03 3f 01 fd 96 9f 8d 73 eb 29 1a 1c b9 2f d4 18 a2 b0 08 45 fd 25 4b d8 9d 21 be f2 d0 c6 ef 1a 8e 29 1a fe 86 f3 89 48 02 32 80 74 17 82 da 6f 2e b2 b5 2a 9c 84 c6 c4 1c ac 21 41 bc 6b de 70 d3 2d a1 1d 61 ad a1 d6 20 ab 98 58 d8 cc b8 72 a8 ba 81 2a d6 c6 39 ac 75 e8 3b 78 6b fd d7 98 40 40 bc 5c b2 d5 26 93 ac ed e0 55 81 1d 25 26 19 89 b1 ed 68 73 a2 0f 30 da 25 64 be a0 f6 85 8e 76 d8 6c 25 11 4c 9a 8f 6f 48 2b d6 e4 1c bf de 34 f0 6e df 83 9a 69 Data Ascii: ;6R7UZW'%7fl'WE!1"AQ2a#Bq R03b$@CSr%&4cTs?s)/E%K!)H2to.!Akp-a Xr9u;xk@@\&U%&hs0%dvl%LoH+4ni
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 4f ee 36 f0 bf f7 4b 19 ac 02 08 3a c5 30 78 92 74 8c 84 47 8c 74 fc 3f 0c cb d7 26 73 a9 88 d8 53 95 4d e1 51 79 ac 20 6a 25 da d0 0f 65 50 ff 00 4c 47 57 ef 79 91 ed 17 dd 32 e5 5b da d2 ff 00 82 bd 14 c8 ad a4 67 72 cc 6e 4f e3 06 96 5e be 24 f4 87 b7 80 84 0b 66 32 b5 53 f0 e9 3b ff 00 a5 6f 31 0a 39 a8 55 1f 54 32 b3 6c 8d fa 4a ca 79 91 87 d4 46 bd a3 5a f1 ed 1e f6 b4 73 0b 53 bd e7 b3 1f d9 81 eb a5 56 ac f7 e6 0d e5 9c d6 58 d4 77 fc 01 96 0b 4b 4e 61 78 20 bf 80 3e 16 fd b6 be 16 87 c6 fe 22 fa c5 b0 96 1b c0 c7 58 a5 4c b4 b9 02 28 e9 00 04 4f 8d 16 a6 26 9a b6 82 f3 0f 53 0e 69 f0 c5 ad 38 58 87 a7 6d 21 a5 54 83 d2 12 27 34 57 f6 4d 1e 7d 6d 63 02 56 a8 8b a8 0c 45 e6 66 bc d3 c5 98 5e 10 65 8f 88 f1 d6 69 33 b4 00 40 0c 5c b9 b4 b4 05 7a 4a Data Ascii: O6K:0xtGt?&sSMQy j%ePLGWy2[grnO^$f2S;o19UT2lJyFZsSVXwKNax >"XL(O&Si8Xm!T'4WM}mcVEf^ei3@\zJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	62599	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	1181	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_ArrowRight.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"ec-618df02b20bc2-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 1370 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3ed5a9b1869-EWR
2024-05-28 05:15:10 UTC	242	IN	Data Raw: 65 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 2e 34 31 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 34 31 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 41 72 72 6f 77 52 69 67 68 74 22 20 64 3d 22 4d 37 2e 34 31 2c 38 2e 35 39 2c 31 32 2c 31 33 2e 31 37 6c 34 2e 35 39 2d 34 2e 35 38 4c 31 38 2c 31 30 6c 2d 36 2c 36 4c 36 2c 31 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 38 2e 35 39 20 31 38 29 20 72 6f 74 61 74 65 28 2d 39 30 29 22 20 66 69 6c 6c 3d 22 23 32 43 32 46 33 33 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: ec<svg xmlns="http://www.w3.org/2000/svg" width="7.41" height="12" viewBox="0 0 7.41 12"> <path id="icon_ArrowRight" d="M7.41,8.59,12,13.17l4.59-4.58L18,10l-6,6L6,10Z" transform="translate(-8.59 18) rotate(-90)" fill="#2C2F33"/></svg>
2024-05-28 05:15:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	62600	104.18.124.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	381	OUT	GET /Images/5659/Packages/701x390/922170.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:10 UTC	581	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: image/jpeg Content-Length: 86582 Connection: close Cache-Control: public, max-age=2678400 Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=92397, status=webp_bigger access-control-allow-origin: https://myhotel2.omnibees.com expires: Fri, 28 Jun 2024 05:15:10 GMT strict-transport-security: max-age=31536000 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET CF-Cache-Status: HIT Age: 1 Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3eea8171977-EWR
2024-05-28 05:15:10 UTC	788	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 01 02 07 00 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 cc 2a c4 3c 7e 9b 64 8b 03 b3 ab 97 14 c1 Data Ascii: JFIF`` $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"3*<~d
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 5f 1b a1 55 60 a6 28 d8 5c 35 98 0b 1a 92 d3 ae 1d b3 8f 5e 70 5f 69 d1 be 46 4e 47 ab 77 c0 17 7b d4 2c 51 2a 44 53 14 c3 3d ae ea a7 bd 47 a4 2d ca 90 45 6d 93 f3 60 cd 6a ad 3c cf 8b d8 bb d9 54 37 1b 6a 91 d0 36 a2 73 8a cd e3 a9 20 d7 4a 42 4d cd 89 d0 2c 17 5b e2 dd 4f c3 2b 4a ee 77 4d c6 ba 95 ab f3 95 7c 3a ae de c2 16 94 66 89 32 ac a5 9a f2 24 bf 5b dc 50 38 2f 24 38 e8 c9 d1 05 32 bb 7c 45 fc ba 5b a5 29 3a b7 40 41 e9 bd 0d 19 24 c3 4e 10 89 1b 97 d0 3c d1 79 a7 4d 7a 06 20 67 dc 2d 64 e7 5e e9 2e 7b 41 6c b7 29 08 1f 4d e7 a4 61 9b 15 c6 b1 a6 fe da d6 93 e1 1a b4 73 6c da c9 83 db ce b5 2d 92 16 ac c4 ad 11 80 63 a3 ad 72 2d c7 a4 bd a8 41 72 ad af 3c 8e cd ea 24 0a 84 e6 85 04 46 c7 57 2d 5c d1 9a ed ee 80 80 d7 3a 3c 40 9a ef 3a 73 ea 0d Data Ascii: _U`(\5^p_iFNGw{,Q*DS=G-Em`j<T7j6s JBM,[O+JwM\|:f2$[P8/$82\|E[):@A$N<yMz g-d^.{Al)Masl-cr-Ar<$FW-\:<@:s
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 a8 f5 87 14 da c6 cb 06 6f 66 bd 4e 6d a4 fb 7a c8 7c 45 b4 d1 0d b1 05 80 50 5e 36 e4 8a d8 4a 90 e9 97 de cf b0 c6 46 f4 ee 9a 0f 30 df 5c 15 b1 9d 7c 9a 59 aa c8 9a 6d ab ca 4c 12 55 c9 0e 24 39 e6 c1 fa 8a b2 e4 c1 ad d2 d2 11 29 cb 04 bb 8e f1 41 8c 2c e7 d3 21 ae ca bd 7d 0b 6d 35 da d1 18 1f b4 1e 86 b3 9a 99 5d d4 42 56 69 87 50 43 99 b0 8c 81 09 10 b7 e6 37 66 95 22 dd 55 6f 50 3c f6 d0 8b 0f 35 aa f4 ab 60 4e d1 56 26 97 45 36 77 59 c2 6e 86 04 4d 95 c7 4c f3 a0 f4 5e a6 ab ce e7 2b 9a d1 e2 b2 b0 c6 a9 92 7a 15 ee 64 dc 1b 4a e6 a9 21 01 d1 79 51 d2 83 8b c2 30 12 4e bc c7 a6 ad 2e 81 33 0a bc 52 09 d9 81 3a d6 f4 5d 5a a2 f0 3a ce 5a b9 c5 67 8c 6d 8c 71 be 99 db 6f 4f a0 d1 e7 4d 8e cf 7c e0 ff 00 40 6d f3 d6 31 ed a7 cc 53 ae c4 53 c5 b7 Data Ascii: eofNmz\|EP^6JF0\\|YmLU$9)A,!}m5]BViPC7f"UoP<5`NV&E6wYnML^+zdJ!yQ0N.3R:]Z:ZgmqoOM\|@m1SS
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: d3 4d 58 5d f5 23 0f 4a 9b 56 90 76 1b 16 ec 98 9d a6 07 97 32 1b 9b d4 bb ee ae 19 c9 06 35 09 0b 64 a0 c3 cc c3 cc 10 2a 98 24 e5 0c db cc 53 ae d3 0f 95 31 25 6c cb cf 2a 20 1c 7d d1 d1 cf 25 e9 20 3d 2e b5 2b 9a 81 77 62 32 85 68 b3 0e f3 13 a6 19 39 60 d8 db bc 91 4d 7a 7a 24 42 ee f3 51 64 92 ed c6 90 b3 43 d9 40 36 3d ca 87 35 f9 68 2e cb 15 97 e7 eb 2e 29 9d dc 40 22 97 dd 5c bd 5b c5 20 f1 fd 58 22 21 6e d3 12 5d 51 c8 ac 35 0a da 5c 8e 7e 76 bd b5 d4 b2 c8 55 fb fc 95 a6 9d fd 3e 8b 62 4a f9 f5 89 e0 20 04 56 cf d3 0a 36 ff 00 a0 28 6a d2 74 6e 1a 26 aa d9 4d cf c6 b3 83 95 15 69 b1 53 d3 0f 61 ed 8e b3 e3 bb 74 e4 ed 94 ab 5f ad 8d 78 a6 c3 8d 09 55 87 1f 6f 55 9e 87 cb 4d e3 5b a4 01 a3 71 87 a8 31 b1 1a 72 3b a8 fb 6f 32 b6 2a 55 14 39 75 77 Data Ascii: MX]#JVv25d$S1%l }% =.+wb2h9`Mzz$BQdC@6=5h..)@"\[ X"!n]Q5\~vU>bJ V6(jtn&MiSat_xUoUM[q1r;o2*U9uw
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 13 99 d4 da cf a3 a9 b5 76 9d b9 be 99 ce 00 eb 3c 7f bb 71 de 67 5f df 49 3a 27 8c e3 cd b7 8e 49 18 39 f5 9e 37 d5 22 c4 36 a4 55 01 24 ae 8e a0 10 7e f6 e9 c6 bb e9 bc 2b af c7 16 96 48 b9 2f 66 e3 f6 21 20 9e 1e c3 27 b1 8c 65 8b 3a 1d 9f 6f 13 0d e3 92 3d b1 b6 70 06 71 98 ce b1 9f 68 34 9d 6f 92 75 55 dd 9f 1b 61 b8 36 f7 bc db de f7 b6 f6 33 ed 85 50 25 c8 21 6e d9 24 13 da 58 f9 cb e8 ef 9a 52 eb 7b d4 dd 3a a6 d3 da 6d 62 2d 70 44 fa 7a 2c 6c c9 14 60 49 66 84 db 58 d6 bc a4 e2 39 34 d9 b0 b5 16 4e 4d 5f b3 f3 1d 69 cf d1 07 26 c2 73 65 21 37 f3 47 01 1d c6 e3 28 8c 8a d4 6b 32 c1 30 d6 2d 41 66 74 d3 1a 13 c1 d5 27 de 39 7a 5f 78 2e bb 7b cd b7 93 de 6c 6f a9 7b d2 61 f6 fd e8 be 59 bd e3 2d 6c 7b c1 6b 8f f7 90 84 37 ef 49 ee 72 3f 7b be 6b 71 Data Ascii: v<qg_I:'I97"6U$~+H/f! 'e:o=pqh4ouUa63P%!n$XR{:mb-pDz,l`IfX94NM_i&se!7G(k20-Aft'9z_x.{lo{aY-l{k7Ir?{kq
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: c1 5e 67 13 49 98 d3 a6 d6 9b 55 6a c1 07 b2 3d b8 a3 da d2 f8 35 9e b2 72 36 14 9f 76 68 8c f6 53 c8 6a 4c ee 82 a1 5f 57 ac 74 ea 63 7d 6a d1 80 6d 24 f7 14 a3 af 80 7c fc d4 6d d5 34 49 0e a6 34 b1 96 58 d9 c0 ce d8 a8 f4 8d 37 77 b9 2e fb 0b 59 e5 b7 8c 14 6b 9b 8e 6d a8 d9 dc 98 a3 cc bf 0c 92 37 d4 fa 56 cb 00 b6 cd b7 46 d8 e1 5a b8 f5 6c 53 2e 64 d0 ba ff 00 1c ce 62 e2 a8 65 8d 75 d9 6f a2 e1 93 68 6e 92 dc f2 2b 5e db e8 4a 47 22 af 96 f8 8a cc c3 94 0e 59 09 a7 e8 00 0a 47 ae 12 38 cf 71 d1 11 c2 95 35 d3 63 0a 49 af 6e b5 f7 c5 b5 1e a3 d0 0d 54 56 49 06 9b 33 c0 6b f3 51 48 c8 48 a6 9a 44 61 83 30 cf bd e2 85 aa d1 11 5c e9 27 fa 81 57 31 b4 92 e4 1b 77 51 df 19 0d ee e2 8f 5d 88 8e 3f c6 b4 7a a0 f2 60 51 99 81 c5 19 88 7f 77 22 fe 4c 91 d6 Data Ascii: ^gIUj=5r6vhSjL_Wtc}jm$\|m4I4X7w.Ykm7VFZlS.dbeuohn+^JG"YG8q5cInTVI3kQHHDa0\'W1wQ]?z`Qw"L
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 79 6a 66 e8 60 c8 71 8a 3e 06 56 36 62 42 da c3 2a 6d 1b 47 68 ba 85 39 82 19 37 8a 7b b8 05 c6 60 b7 11 48 24 2e b2 5b 5a 98 d9 16 e3 e9 b4 94 8c ba 8d e2 cf 1f 72 49 f4 c2 9c 97 f3 08 e4 73 43 b9 35 a9 23 68 db 0c a0 30 ec a0 5f 2b 0e c3 b9 20 d0 66 b5 38 e9 20 66 19 a0 1a ac 5d 04 72 2c d2 c7 1d bc a8 ca fe a6 dc ea 25 2e 17 62 27 20 77 cc fd d0 94 eb ef b7 ba 74 1a 46 e8 83 ec ca 19 55 2e 34 3c ac 94 f2 29 8b 41 1b c2 91 d3 ce 59 71 57 3a af 1e 25 8e 33 3e 63 68 a6 92 63 c6 d1 cb 0c ab 04 98 5c ea 6e 17 1d 02 cd 42 41 fe e0 b9 31 a3 04 d9 65 61 ab a0 91 15 21 06 24 05 43 f1 3c 5a 37 08 4b a6 13 2c fe 8e 55 52 bf 52 62 c6 e0 43 9c 43 b8 00 6a 6f 79 09 a6 39 a5 ed 31 5d f7 9c 76 29 f1 d2 d0 6c 52 86 7c 2d 20 11 10 29 71 1e e5 a5 56 ba 95 a5 58 c0 8c 07 Data Ascii: yjf`q>V6bB*mGh97{`H$.[ZrIsC5#h0_+ f8 f]r,%.b' wtFU.4<)AYqW:%3>chc\nBA1ea!$C<Z7K,URRbCCjoy91]v)lR\|- )qVX
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: da 68 c5 c4 a4 bc 84 2f c3 65 e1 2d b7 1b a9 72 ed 22 0c ad 42 a7 ef 32 81 a8 a8 94 9e 95 e3 96 29 35 1b 39 ed d9 65 99 4d 70 b9 8f 7a 0b ed 35 db 1a ce 3a f9 11 26 1a 8a 82 42 a7 24 91 1c 88 e7 32 cc 03 33 f2 95 55 4f 7d bb a9 8e 63 68 8c 1a 3e 29 8c 68 d7 50 70 ce 63 ab 68 a1 93 61 24 2b 6b 14 1c d4 f7 4b 3c 6a 69 e0 8d 35 46 86 26 2d b0 63 34 01 a2 3c 6e fa e1 23 58 c5 1c c9 86 2a 32 42 bd c3 6d 8e 19 9e 47 0c 45 28 ee a2 3b 3e b4 b2 3a 81 41 56 68 ce 4a b5 bc a3 5b 6b 92 92 36 d1 ba 4a df 5a 34 61 2b 42 24 89 a1 e4 4a f2 68 43 c8 d8 5f 4f fc 08 0f 92 60 18 ca a4 08 e7 0b 17 c2 83 c2 8c 1e d0 c2 d8 69 f8 62 58 d6 b7 82 1b 46 52 f7 59 03 26 77 d4 12 92 f2 6c 5e 07 8e e1 da b9 90 7c 37 02 e0 c5 33 c5 2d 5b 7f 6d 72 cc ab cc 39 26 8c 5d c5 21 26 48 54 7f Data Ascii: h/e-r"B2)59eMpz5:&B$23UO}ch>)hPpcha$+kK<ji5F&-c4<n#X*2BmGE(;>:AVhJ[k6JZ4a+B$JhC_O`ibXFRY&wl^\|73-[mr9&]!&HT
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: f4 f2 7b 88 78 99 6a 03 a4 6d 52 05 1a 9a 26 90 7e 6b b4 7e d6 3f 7f 61 35 6e 8d bf 5c 95 37 1a b2 67 f3 9a 3d 52 b5 01 41 d3 20 03 aa 8c 8f 31 e6 a3 6b 55 b6 72 20 88 19 90 dd ca 4b 28 48 a0 2a 60 90 c9 06 0e cc 4a c9 b9 35 2f 3c ae ba db c7 28 70 6a 79 2d 86 e4 3f a8 5b 5c 4d b3 b2 14 8b d3 6a 12 41 1c 6f 0b 45 35 3c 0b c8 12 4e 02 dc cf 59 32 33 51 b8 96 4b 80 8c 1b 94 bf 22 b7 a6 88 1a b1 89 7e a4 33 5c c2 dc cc 45 a2 99 36 4a 90 87 91 56 a0 58 e3 52 c6 f2 d8 ab 17 52 3b ab 44 22 4e 3a 96 cc 33 98 c4 96 ef 0a 25 5a 47 f4 b6 13 7c 49 63 4e 24 66 cf ca 37 31 38 21 1d 0c 7d be c6 03 5c 45 d8 f2 f9 9c 6c d9 33 f5 73 93 29 ac 1e c5 71 67 ba f0 6a dd 04 92 80 f0 c0 da a9 4b a5 5e 6d 93 e9 7a 8a 93 b7 e4 a0 d5 8c 52 db 30 ea 87 da 65 1a aa 61 68 c7 1c 92 15 Data Ascii: {xjmR&~k~?a5n\7g=RA 1kUr K(H*`J5/<(pjy-?[\MjAoE5<NY23QK"~3\E6JVXRR;D"N:3%ZG\|IcN$f718!}\El3s)qgjK^mzR0eah
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: c8 9b 5e 6e 25 64 6d 1f 13 3d 33 7b 71 59 ee be 10 47 ad 61 59 3b 1d 99 c4 88 01 59 34 6d ab db 2c 9e f1 13 4f 33 c6 78 99 83 f1 2c 7b 76 20 94 83 c6 81 ba d6 b2 be 95 85 2a eb 08 12 4b 3f a7 8c c4 8e ec ef b3 7f ea 8c 7f f5 ed cf c8 7c cd 0f 34 e0 86 19 fd 3b 51 f3 fa bf 34 96 fc 91 e4 1e db b2 c0 78 d8 51 66 fc 69 f3 15 13 24 9a 46 b7 12 49 1c ab 52 c2 44 26 75 0c bc 41 a3 96 36 31 f3 52 be a5 69 6f 0a ce cf 51 30 15 2d c7 34 22 a3 d0 49 ef 20 5b 5a a9 a3 f7 35 5a 3b 7f 4c b8 15 35 d2 ac fb 53 4a 3a 4a 92 4d 9f 6a 66 a0 fe 2b d5 3d c2 8d e5 9b 90 25 3c 8d 21 cb 72 fb 8e 68 79 1f a4 54 12 a1 83 49 11 5e 25 6a bd 26 66 12 af e6 ad 27 e2 bc 8e 4a be 4d 2e df 19 f6 d0 35 02 ca f1 45 a4 6a 13 24 c7 ac 91 ed 27 38 d7 14 98 c4 92 3a ba b8 c5 5c 08 a3 39 a9 26 Data Ascii: ^n%dm=3{qYGaY;Y4m,O3x,{v *K?\|4;Q4xQfi$FIRD&uA61RioQ0-4"I [Z5Z;L5SJ:JMjf+=%<!rhyTI^%j&f'JM.5Ej$'8:\9&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	62601	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	1386	OUT	GET /v3/js/autocomplete-hotels.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	628	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 7507 Connection: close Cf-Bgj: minify Cf-Polished: origSize=12612 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "3144-618df02adc9ec-gzip" Last-Modified: Mon, 20 May 2024 09:06:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5750 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3eeea9578d9-EWR
2024-05-28 05:15:10 UTC	741	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 42 79 53 65 71 75 65 6e 63 65 28 29 7b 76 61 72 20 73 77 61 70 70 3b 76 61 72 20 6e 3d 68 6f 74 65 6c 5f 66 6f 6c 64 65 72 73 2e 6c 65 6e 67 74 68 2d 31 3b 76 61 72 20 78 3d 68 6f 74 65 6c 5f 66 6f 6c 64 65 72 73 3b 64 6f 7b 73 77 61 70 70 3d 66 61 6c 73 65 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 69 66 28 78 5b 69 5d 2e 49 73 50 72 6f 70 65 72 74 79 46 6f 6c 64 65 72 29 7b 63 6f 6d 70 61 72 65 69 3d 78 5b 69 5d 2e 53 65 71 75 65 6e 63 65 3b 7d 65 6c 73 65 7b 63 6f 6d 70 61 72 65 69 3d 78 5b 69 5d 2e 50 72 6f 70 65 72 74 79 53 65 71 75 65 6e 63 65 3b 7d 0a 69 66 28 78 5b 69 2b 31 5d 2e 49 73 50 72 6f 70 65 72 74 79 46 6f 6c 64 65 72 29 7b 63 6f 6d 70 61 72 65 6a 3d 78 5b 69 2b 31 5d 2e 53 65 Data Ascii: function sortBySequence(){var swapp;var n=hotel_folders.length-1;var x=hotel_folders;do{swapp=false;for(var i=0;i<n;i++){if(x[i].IsPropertyFolder){comparei=x[i].Sequence;}else{comparei=x[i].PropertySequence;}if(x[i+1].IsPropertyFolder){comparej=x[i+1].Se
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 64 65 72 55 49 44 3d 3d 55 49 44 29 7b 68 6f 74 65 6c 73 2e 70 75 73 68 28 6f 6e 6c 79 48 6f 74 65 6c 73 5b 69 5d 29 3b 7d 7d 0a 72 65 74 75 72 6e 20 68 6f 74 65 6c 73 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 6f 6c 64 65 72 73 46 6f 72 46 6f 6c 64 65 72 28 55 49 44 29 7b 76 61 72 20 66 6f 6c 64 65 72 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6f 6e 6c 79 46 6f 6c 64 65 72 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 6f 6e 6c 79 46 6f 6c 64 65 72 73 5b 69 5d 2e 50 61 72 65 6e 74 46 6f 6c 64 65 72 55 49 44 21 3d 6e 75 6c 6c 26 26 6f 6e 6c 79 46 6f 6c 64 65 72 73 5b 69 5d 2e 50 61 72 65 6e 74 46 6f 6c 64 65 72 55 49 44 3d 3d 55 49 44 29 7b 66 6f 6c 64 65 72 73 2e 70 75 73 68 28 6f 6e 6c 79 46 6f 6c 64 65 72 73 5b 69 5d 29 3b 7d 7d Data Ascii: derUID==UID){hotels.push(onlyHotels[i]);}}return hotels;}function getFoldersForFolder(UID){var folders=[];for(var i=0;i<onlyFolders.length;i++){if(onlyFolders[i].ParentFolderUID!=null&&onlyFolders[i].ParentFolderUID==UID){folders.push(onlyFolders[i]);}}
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 64 2e 74 65 78 74 28 66 6f 6c 64 65 72 4e 61 6d 65 29 3b 63 6c 6f 6e 65 64 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 2c 28 28 6c 65 76 65 6c 2b 31 29 2a 31 30 2b 31 30 29 2b 22 70 78 22 29 3b 68 6f 74 65 6c 73 5f 64 69 76 2e 61 70 70 65 6e 64 28 63 6c 6f 6e 65 64 29 3b 67 65 74 46 6f 6c 64 65 72 43 68 69 6c 64 72 65 6e 28 66 6f 6c 64 65 72 73 5b 69 5d 2e 50 72 6f 70 65 72 74 79 46 6f 6c 64 65 72 55 49 44 2c 28 6c 65 76 65 6c 2b 31 29 29 3b 7d 0a 66 6f 72 28 76 61 72 20 6a 3d 30 3b 6a 3c 68 6f 74 65 6c 73 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 7b 76 61 72 20 68 6f 74 65 6c 4e 61 6d 65 3d 68 6f 74 65 6c 73 5b 6a 5d 2e 50 72 6f 70 65 72 74 79 5f 4e 61 6d 65 3b 76 61 72 20 63 6c 6f 6e 65 64 3d 68 6f 74 65 6c 73 5f 68 6f 74 65 6c 5f 64 69 76 2e Data Ascii: ed.text(folderName);cloned.css("padding-left",((level+1)*10+10)+"px");hotels_div.append(cloned);getFolderChildren(folders[i].PropertyFolderUID,(level+1));}for(var j=0;j<hotels.length;j++){var hotelName=hotels[j].Property_Name;var cloned=hotels_hotel_div.
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 61 74 74 72 28 27 69 64 27 29 3d 3d 22 61 73 2d 64 65 73 74 69 6e 61 74 69 6f 6e 22 29 7b 24 28 22 23 73 65 6c 65 63 74 2d 68 6f 74 65 6c 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 72 65 74 75 72 6e 3b 7d 0a 24 28 22 2e 68 6f 74 65 6c 73 5f 64 72 6f 70 64 6f 77 6e 22 29 2e 73 6c 69 64 65 55 70 28 29 3b 68 6f 74 65 6c 5f 63 6f 64 65 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 69 64 22 29 3b 68 6f 74 65 6c 5f 66 6f 6c 64 65 72 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 66 6f 6c 64 65 72 2d 69 64 22 29 3b 68 6f 74 65 6c 5f 6e 61 6d 65 3d 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 3b 24 28 22 23 68 6f 74 65 6c 73 22 29 2e 76 61 6c 28 68 6f 74 65 Data Ascii: (this).parent().parent().attr('id')=="as-destination"){$("#select-hotel").modal("show");return;}$(".hotels_dropdown").slideUp();hotel_code=$(this).attr("data-id");hotel_folder=$(this).attr("data-folder-id");hotel_name=$(this).text();$("#hotels").val(hote
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 2d 61 67 65 22 2c 64 61 74 61 29 3b 69 66 28 72 65 73 6f 6c 75 74 69 6f 6e 3d 3d 31 7c 7c 70 61 74 68 5f 73 70 6c 69 74 5b 31 5d 3d 3d 22 63 68 61 69 6e 22 29 7b 76 61 72 20 63 68 69 6c 64 72 65 6e 5f 6e 75 6d 62 65 72 3d 24 28 22 2e 73 65 6c 65 63 74 2d 63 68 69 6c 64 2d 76 61 6c 75 65 22 29 2e 74 65 78 74 28 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 63 68 69 6c 64 72 65 6e 5f 6e 75 6d 62 65 72 3b 69 2b 2b 29 7b 24 28 22 2e 73 65 6c 65 63 74 2d 63 68 69 6c 64 2d 6d 69 6e 75 73 22 29 2e 63 6c 69 63 6b 28 29 3b 7d 0a 24 28 22 2e 73 65 6c 65 63 74 2d 6f 63 63 75 70 61 6e 63 79 2d 61 70 70 6c 79 22 29 2e 63 6c 69 63 6b 28 29 3b 24 28 22 2e 73 65 6c 65 63 74 2d 63 68 69 6c 64 2d 61 67 65 73 2d 69 6e 70 75 74 2d 63 6c 6f 6e 65 20 6f 70 74 69 6f 6e 22 29 2e 72 65 6d Data Ascii: -age",data);if(resolution==1\|\|path_split[1]=="chain"){var children_number=$(".select-child-value").text();for(i=0;i<children_number;i++){$(".select-child-minus").click();}$(".select-occupancy-apply").click();$(".select-child-ages-input-clone option").rem
2024-05-28 05:15:10 UTC	1290	IN	Data Raw: 29 2e 6d 6f 75 73 65 75 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 62 6f 78 3d 24 28 22 2e 68 6f 74 65 6c 73 5f 64 72 6f 70 64 6f 77 6e 22 29 3b 69 66 28 21 62 6f 78 2e 69 73 28 65 2e 74 61 72 67 65 74 29 26 26 62 6f 78 2e 68 61 73 28 65 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 62 6f 78 2e 73 6c 69 64 65 55 70 28 32 30 30 29 3b 7d 0a 69 66 28 21 24 28 22 23 68 6f 74 65 6c 73 22 29 2e 69 73 28 65 2e 74 61 72 67 65 74 29 26 26 24 28 22 2e 68 6f 74 65 6c 73 5f 64 72 6f 70 64 6f 77 6e 22 29 2e 68 61 73 28 65 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 21 24 28 22 23 63 61 6c 65 6e 64 61 72 5f 64 61 74 65 73 22 29 2e 69 73 28 65 2e 74 61 72 67 65 74 29 26 26 24 28 22 2e 7a 63 61 6c 65 6e 64 61 72 22 29 2e 68 Data Ascii: ).mouseup(function(e){var box=$(".hotels_dropdown");if(!box.is(e.target)&&box.has(e.target).length===0){box.slideUp(200);}if(!$("#hotels").is(e.target)&&$(".hotels_dropdown").has(e.target).length===0&&!$("#calendar_dates").is(e.target)&&$(".zcalendar").h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	62602	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	1376	OUT	GET /v3/js/zcalendar.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	630	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 40165 Connection: close Cf-Bgj: minify Cf-Polished: origSize=66095 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "1022f-618df06d3609c-gzip" Last-Modified: Mon, 20 May 2024 09:07:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5749 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3ef5b307c88-EWR
2024-05-28 05:15:10 UTC	739	IN	Data Raw: 6d 6f 6d 65 6e 74 2e 74 7a 2e 73 65 74 44 65 66 61 75 6c 74 28 22 55 54 43 22 29 3b 76 61 72 20 73 65 6c 65 63 74 65 64 5f 61 72 72 69 76 61 6c 3d 5b 34 38 32 30 2c 31 33 31 31 31 5d 3b 76 61 72 20 6c 61 6e 67 3d 4e 75 6d 62 65 72 28 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6c 61 6e 67 22 29 29 3b 76 61 72 20 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 3d 24 28 22 23 63 75 72 72 65 6e 63 79 2d 73 79 6d 62 6f 6c 22 29 2e 74 65 78 74 28 29 3b 76 61 72 20 6f 66 66 73 65 74 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 36 30 3b 76 61 72 20 43 68 61 69 6e 4f 72 48 6f 74 65 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 22 2f 22 29 5b Data Ascii: moment.tz.setDefault("UTC");var selected_arrival=[4820,13111];var lang=Number($("#lang_curr").attr("data-lang"));var currencySymbol=$("#currency-symbol").text();var offset=new Date().getTimezoneOffset()/60;var ChainOrHotel=window.location.href.split("/")[
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 22 2f 22 29 5b 35 5d 3d 3d 22 72 6f 6f 6d 22 29 7b 69 66 28 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 3d 3d 3d 69 29 7b 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 74 69 6d 65 7a 6f 6e 65 22 2c 76 61 6c 29 3b 7d 7d 7d 29 3b 69 66 28 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 21 3d 22 30 22 26 26 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 21 3d 22 22 29 7b 76 61 72 20 68 6f 74 65 6c 5f 63 6f 64 65 3d 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 3b 76 61 72 20 55 54 43 64 61 79 3d 6d 6f 6d 65 6e 74 2e 74 7a 28 24 28 22 2e 68 6f 74 65 6c 73 5f 68 6f 74 65 6c 5b 64 61 74 61 2d 69 64 3d 22 2b 68 6f 74 65 6c 5f 63 6f 64 65 2b 22 5d Data Ascii: "/")[5]=="room"){if($("#hotel_code").val()===i){$("#hotel_code").attr("data-timezone",val);}}});if($("#hotel_code").val()!="0"&&$("#hotel_code").val()!=""){var hotel_code=$("#hotel_code").val();var UTCday=moment.tz($(".hotels_hotel[data-id="+hotel_code+"]
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 28 29 2c 27 44 44 4d 4d 59 59 59 59 27 29 2e 61 64 64 28 31 32 2c 27 68 6f 75 72 73 27 29 3b 74 68 69 73 2e 74 6f 64 61 79 3d 74 68 69 73 2e 73 74 61 72 74 44 61 74 65 3b 74 68 69 73 2e 6d 6f 6e 74 68 3d 74 68 69 73 2e 74 6f 64 61 79 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 28 27 6d 6f 6e 74 68 27 29 2e 75 74 63 28 29 2e 66 6f 72 6d 61 74 28 22 58 22 29 3b 74 68 69 73 2e 72 65 61 6c 54 6f 64 61 79 3d 6d 6f 6d 65 6e 74 28 29 2e 73 74 61 72 74 4f 66 28 27 64 61 79 27 29 2e 61 64 64 28 31 32 2c 27 68 6f 75 72 73 27 29 3b 74 68 69 73 2e 66 69 72 73 74 3d 74 68 69 73 2e 74 6f 64 61 79 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 28 27 64 61 79 27 29 2e 61 64 64 28 31 32 2c 27 68 6f 75 72 73 27 29 3b 74 68 69 73 2e 73 65 63 6f 6e 64 3d 74 68 69 73 2e Data Ascii: (),'DDMMYYYY').add(12,'hours');this.today=this.startDate;this.month=this.today.clone().startOf('month').utc().format("X");this.realToday=moment().startOf('day').add(12,'hours');this.first=this.today.clone().startOf('day').add(12,'hours');this.second=this.
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 22 3a 22 4d 5a 4e 22 2c 22 31 31 39 22 3a 22 56 45 46 22 2c 22 31 32 30 22 3a 22 53 2f 2e 22 2c 22 31 32 31 22 3a 22 3f 2e 3f 22 2c 22 31 32 32 22 3a 22 e2 82 ab 22 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 5a 79 72 67 6f 6e 43 61 6c 65 6e 64 61 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 61 74 65 73 3d 74 68 69 73 2e 66 69 65 6c 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 7a 63 2d 64 61 74 65 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 61 74 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 61 74 65 73 5b 69 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: ":"MZN","119":"VEF","120":"S/.","121":"?.?","122":""};return this;};ZyrgonCalendar.prototype.createListeners=function(){var dates=this.field.querySelectorAll(".zc-date");for(var i=0;i<dates.length;i++){dates[i].addEventListener("click",function(e){this
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 6c 73 65 7b 69 66 28 24 28 74 68 69 73 2e 77 69 64 67 65 74 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 74 68 69 73 2e 6f 70 65 6e 57 69 74 68 29 2e 6c 65 6e 67 74 68 29 7b 75 73 65 3d 24 28 74 68 69 73 2e 77 69 64 67 65 74 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 3b 7d 7d 0a 75 73 65 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 74 68 69 73 2e 6f 70 65 6e 57 69 74 68 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 74 68 69 73 2e 77 69 64 67 65 74 29 2e 64 61 74 61 28 22 69 6e 64 65 78 22 29 21 3d 74 72 75 65 7c 7c 72 65 73 6f 6c 75 74 69 6f 6e 21 3d 31 29 7b 69 66 28 24 28 74 68 69 73 2e 77 69 64 67 65 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 7b 74 68 69 73 2e 68 69 64 65 28 29 3b 7d 65 6c 73 65 7b 74 Data Ascii: lse{if($(this.widget).parent().parent().find(this.openWith).length){use=$(this.widget).parent().parent();}}use.on('click',this.openWith,function(){if($(this.widget).data("index")!=true\|\|resolution!=1){if($(this.widget).is(":visible")){this.hide();}else{t
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 65 7b 73 61 6d 65 44 61 79 41 73 55 54 43 3d 74 72 75 65 3b 7d 0a 74 68 69 73 2e 6e 65 77 52 65 71 75 65 73 74 3d 74 72 75 65 3b 74 68 69 73 2e 75 6e 73 65 6c 65 63 74 28 29 3b 74 68 69 73 2e 66 69 6c 6c 28 29 3b 69 66 28 24 28 22 2e 73 65 63 74 69 6f 6e 32 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 68 61 73 43 6c 61 73 73 28 22 73 69 6e 67 6c 65 5f 68 6f 74 65 6c 5f 73 65 61 72 63 68 5f 62 61 72 22 29 3d 3d 66 61 6c 73 65 29 7b 6e 65 77 43 72 69 74 65 72 69 61 28 29 3b 7d 0a 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 5a 79 72 67 6f 6e 43 61 6c 65 6e 64 61 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 72 61 77 43 61 6c 65 6e 64 61 72 3d 66 75 6e 63 74 69 6f 6e 28 61 64 76 61 6e 63 65 64 29 7b 69 66 28 61 64 76 61 6e 63 65 64 3d 3d 22 61 64 76 61 6e 63 65 64 Data Ascii: e{sameDayAsUTC=true;}this.newRequest=true;this.unselect();this.fill();if($(".section2 > .container").hasClass("single_hotel_search_bar")==false){newCriteria();}return this;};ZyrgonCalendar.prototype.drawCalendar=function(advanced){if(advanced=="advanced
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 43 68 69 6c 64 28 6d 6f 6e 74 68 59 65 61 72 29 3b 76 61 72 20 77 65 65 6b 44 61 79 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 77 65 65 6b 44 61 79 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 7a 63 2d 77 65 65 6b 64 61 79 73 27 29 3b 6d 6f 6e 74 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 77 65 65 6b 44 61 79 73 29 3b 76 61 72 20 77 65 65 6b 44 61 79 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 77 65 65 6b 44 61 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 7a 63 2d 77 65 65 6b 64 61 79 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 37 3b 69 2b 2b 29 7b 77 65 65 6b 44 61 79 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 77 65 65 6b 44 61 79 2e 63 Data Ascii: Child(monthYear);var weekDays=document.createElement('div');weekDays.classList.add('zc-weekdays');month.appendChild(weekDays);var weekDay=document.createElement('div');weekDay.classList.add('zc-weekday');for(var i=0;i<7;i++){weekDays.appendChild(weekDay.c
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 61 69 6c 73 50 72 69 63 65 73 3d 69 6e 66 6f 44 65 74 61 69 6c 73 50 72 69 63 65 73 2e 73 6c 69 63 65 28 30 2c 2d 31 29 3b 7d 0a 76 61 72 20 69 6e 66 6f 44 65 74 61 69 6c 73 50 72 6f 6d 6f 3d 74 68 69 73 2e 66 69 65 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 72 65 73 74 72 69 63 74 69 6f 6e 73 27 29 3b 69 66 28 6c 61 6e 67 3d 3d 31 29 7b 76 61 72 20 53 74 72 69 6e 67 49 6e 3d 22 20 69 6e 22 3b 7d 65 6c 73 65 20 69 66 28 6c 61 6e 67 3d 3d 32 7c 7c 6c 61 6e 67 3d 3d 33 29 7b 76 61 72 20 53 74 72 69 6e 67 49 6e 3d 22 20 65 6e 22 3b 7d 65 6c 73 65 7b 76 61 72 20 53 74 72 69 6e 67 49 6e 3d 22 20 65 6d 22 3b 7d 0a 76 61 72 20 69 6e 66 6f 49 6e 43 75 72 72 65 6e 63 79 53 74 72 69 6e 67 3d 27 20 27 2b 6c 61 6e 67 2b 63 75 72 72 65 6e 63 79 Data Ascii: ailsPrices=infoDetailsPrices.slice(0,-1);}var infoDetailsPromo=this.field.getAttribute('data-restrictions');if(lang==1){var StringIn=" in";}else if(lang==2\|\|lang==3){var StringIn=" en";}else{var StringIn=" em";}var infoInCurrencyString=' '+lang+currency
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 22 58 22 29 3b 7d 0a 69 66 28 6d 6f 6d 65 6e 74 28 29 2e 69 73 53 61 6d 65 28 70 72 65 76 4d 6f 6e 74 68 2e 75 74 63 28 29 2e 66 6f 72 6d 61 74 28 22 59 59 59 59 2d 4d 4d 2d 44 44 22 29 2c 27 6d 6f 6e 74 68 27 29 29 7b 24 28 22 2e 7a 63 2d 62 74 6e 2d 70 72 65 76 20 22 29 2e 61 64 64 43 6c 61 73 73 28 27 6f 70 61 63 69 74 79 27 29 3b 7d 0a 74 68 69 73 2e 6e 65 77 52 65 71 75 65 73 74 3d 74 72 75 65 3b 74 68 69 73 2e 66 69 6c 6c 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 5a 79 72 67 6f 6e 43 61 6c 65 6e 64 61 72 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 76 4d 6f 6e 74 68 41 64 76 3d 66 75 6e 63 74 69 6f 6e 28 62 65 67 67 69 6e 69 6e 67 55 6e 69 78 29 7b 74 68 69 73 2e 6d 6f 6e 74 68 3d 62 65 67 67 69 6e 69 6e 67 55 6e 69 78 3b 74 68 69 73 2e 66 69 Data Ascii: "X");}if(moment().isSame(prevMonth.utc().format("YYYY-MM-DD"),'month')){$(".zc-btn-prev ").addClass('opacity');}this.newRequest=true;this.fill();return this;};ZyrgonCalendar.prototype.prevMonthAdv=function(begginingUnix){this.month=begginingUnix;this.fi
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 61 72 74 22 29 3d 3d 22 74 72 75 65 22 29 7b 69 66 28 74 68 69 73 2e 70 72 6f 6d 6f 21 3d 74 72 75 65 29 7b 72 65 74 75 72 6e 3b 7d 7d 7d 65 6c 73 65 7b 69 66 28 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 21 3d 22 22 26 26 24 28 22 23 68 6f 74 65 6c 5f 63 6f 64 65 22 29 2e 76 61 6c 28 29 21 3d 22 30 22 26 26 74 68 69 73 2e 69 73 52 61 6e 67 65 53 65 6c 65 63 74 65 64 3d 3d 66 61 6c 73 65 26 26 24 28 74 61 72 67 65 74 29 2e 66 69 6e 64 28 22 2e 7a 63 2d 64 61 74 65 2d 70 72 69 63 65 22 29 2e 74 65 78 74 28 29 3d 3d 22 22 26 26 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 61 72 74 22 29 3d 3d 22 74 72 75 65 22 26 26 70 61 72 73 65 49 6e 74 28 74 61 Data Ascii: tribute("data-start")=="true"){if(this.promo!=true){return;}}}else{if($("#hotel_code").val()!=""&&$("#hotel_code").val()!="0"&&this.isRangeSelected==false&&$(target).find(".zc-date-price").text()==""&&target.getAttribute("data-start")=="true"&&parseInt(ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	62603	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	1383	OUT	GET /v3/js/occupancy-select.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	629	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 31775 Connection: close Cf-Bgj: minify Cf-Polished: origSize=45712 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "b290-618df06d3686c-gzip" Last-Modified: Mon, 20 May 2024 09:07:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5749 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3f02c554309-EWR
2024-05-28 05:15:10 UTC	740	IN	Data Raw: 76 61 72 20 70 61 74 68 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 3b 76 61 72 20 70 61 74 68 5f 73 70 6c 69 74 3d 70 61 74 68 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 70 61 74 68 5f 73 70 6c 69 74 5b 33 5d 3d 3d 27 70 61 63 6b 61 67 65 27 29 7b 76 61 72 20 70 61 63 6b 61 67 65 32 70 61 67 65 3d 74 72 75 65 3b 7d 65 6c 73 65 7b 76 61 72 20 70 61 63 6b 61 67 65 32 70 61 67 65 3d 66 61 6c 73 65 3b 7d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 64 75 6c 74 73 49 6e 70 75 74 3d 24 28 27 23 61 64 27 29 3b 76 61 72 20 63 68 69 6c 64 72 65 6e 49 6e 70 75 74 3d 24 28 27 23 63 68 27 29 3b 76 61 72 20 63 68 69 6c 64 72 65 6e 41 67 65 73 49 6e 70 75 74 3d 24 28 27 23 61 Data Ascii: var path=window.location.pathname;var path_split=path.split("/");if(path_split[3]=='package'){var package2page=true;}else{var package2page=false;}$(document).ready(function(){var adultsInput=$('#ad');var childrenInput=$('#ch');var childrenAgesInput=$('#a
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 61 67 65 5f 69 6e 70 75 74 22 29 3b 76 61 72 20 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 3d 70 61 72 73 65 49 6e 74 28 67 65 74 55 72 6c 50 61 72 61 6d 28 22 4e 52 6f 6f 6d 73 22 29 29 3b 76 61 72 20 63 68 69 6c 64 72 65 6e 5f 6d 61 78 5f 61 67 65 3d 4e 75 6d 62 65 72 28 24 28 22 23 67 75 65 73 74 73 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6d 61 78 2d 63 68 69 6c 64 72 65 6e 2d 61 67 65 22 29 29 3b 69 66 28 69 73 4e 61 4e 28 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 29 29 7b 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 3d 31 3b 69 66 28 74 79 70 65 6f 66 20 67 65 74 55 72 6c 50 61 72 61 6d 28 22 61 64 22 29 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 3d 67 65 74 55 Data Ascii: age_input");var numberOfRoomsParam=parseInt(getUrlParam("NRooms"));var children_max_age=Number($("#guests").attr("data-max-children-age"));if(isNaN(numberOfRoomsParam)){numberOfRoomsParam=1;if(typeof getUrlParam("ad")!='undefined'){numberOfRoomsParam=getU
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 6e 74 65 72 27 29 2e 74 65 78 74 28 70 61 72 73 65 49 6e 74 28 63 6c 6f 6e 65 64 52 6f 6f 6d 2e 61 74 74 72 28 27 64 61 74 61 2d 72 6f 6f 6d 2d 63 6f 75 6e 74 65 72 27 29 29 2b 31 29 3b 63 6c 6f 6e 65 64 52 6f 6f 6d 2e 66 69 6e 64 28 27 2e 73 65 6c 65 63 74 2d 61 64 75 6c 74 73 2d 76 61 6c 75 65 27 29 2e 74 65 78 74 28 64 65 66 61 75 6c 74 47 75 65 73 74 56 61 6c 75 65 73 2e 61 64 75 6c 74 29 3b 63 6c 6f 6e 65 64 52 6f 6f 6d 2e 66 69 6e 64 28 27 2e 73 65 6c 65 63 74 2d 63 68 69 6c 64 2d 76 61 6c 75 65 27 29 2e 74 65 78 74 28 64 65 66 61 75 6c 74 47 75 65 73 74 56 61 6c 75 65 73 2e 63 68 69 6c 64 72 65 6e 29 3b 63 6c 6f 6e 65 64 52 6f 6f 6d 2e 66 69 6e 64 28 27 2e 73 65 6c 65 63 74 2d 62 75 74 74 6f 6e 2d 70 6c 75 73 27 29 2e 70 72 6f 70 28 27 64 69 73 61 Data Ascii: nter').text(parseInt(clonedRoom.attr('data-room-counter'))+1);clonedRoom.find('.select-adults-value').text(defaultGuestValues.adult);clonedRoom.find('.select-child-value').text(defaultGuestValues.children);clonedRoom.find('.select-button-plus').prop('disa
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 75 6c 74 73 2d 76 61 6c 75 65 27 29 2e 65 71 28 69 29 2e 74 65 78 74 28 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 29 3b 69 66 28 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 3e 31 29 7b 24 28 22 2e 73 65 6c 65 63 74 2d 61 64 75 6c 74 2d 6d 69 6e 75 73 22 29 2e 65 71 28 69 29 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 66 61 6c 73 65 29 3b 7d 0a 69 66 28 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 3d 3d 31 29 7b 24 28 27 2e 73 65 6c 65 63 74 2d 61 64 75 6c 74 2d 6d 69 6e 75 73 27 29 2e 65 71 28 69 29 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 74 72 75 65 29 3b 7d 0a 69 66 28 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 3d 3d 31 30 29 7b 24 28 27 2e 73 65 6c 65 63 74 2d 61 64 75 6c 74 2d 70 6c 75 73 27 29 2e 65 71 28 69 29 2e 70 72 6f 70 Data Ascii: ults-value').eq(i).text(guests[i].adult);if(guests[i].adult>1){$(".select-adult-minus").eq(i).prop('disabled',false);}if(guests[i].adult==1){$('.select-adult-minus').eq(i).prop('disabled',true);}if(guests[i].adult==10){$('.select-adult-plus').eq(i).prop
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 72 61 6d 3e 30 29 26 26 28 74 79 70 65 6f 66 20 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 3d 6e 75 6c 6c 7c 7c 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 3d 27 27 29 29 7b 76 61 72 20 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 22 22 3b 66 6f 72 28 69 3d 30 3b 69 3c 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 75 6d 62 65 72 4f 66 4b 69 64 73 50 65 72 52 6f 6f 6d 3d 4e 75 6d 62 65 72 28 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 41 72 72 61 79 5b 69 5d 29 3b 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 75 6d 62 65 72 4f 66 4b 69 64 73 50 65 72 52 6f 6f 6d 3b 6b 2b 2b 29 7b 63 68 69 Data Ascii: ram>0)&&(typeof childrenAgesParam=='undefined'\|\|childrenAgesParam==null\|\|childrenAgesParam=='')){var childrenAgesParam="";for(i=0;i<childrenParamArray.length;i++){var numberOfKidsPerRoom=Number(childrenParamArray[i]);for(k=0;k<numberOfKidsPerRoom;k++){chi
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 73 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 67 75 65 73 74 4e 75 6d 62 65 72 3d 67 75 65 73 74 4e 75 6d 62 65 72 2b 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 2b 67 75 65 73 74 73 5b 69 5d 2e 63 68 69 6c 64 72 65 6e 3b 7d 0a 76 61 72 20 72 6f 6f 6d 53 74 72 69 6e 67 3d 27 27 3b 69 66 28 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 3e 31 29 7b 72 6f 6f 6d 53 74 72 69 6e 67 3d 24 28 27 23 67 75 65 73 74 73 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 72 6f 6f 6d 73 27 29 3b 7d 65 6c 73 65 7b 72 6f 6f 6d 53 74 72 69 6e 67 3d 24 28 27 23 67 75 65 73 74 73 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 72 6f 6f 6d 27 29 3b 7d 0a 76 61 72 20 67 75 65 73 74 53 74 72 69 6e 67 3d 27 27 3b 69 66 28 67 75 65 73 74 4e 75 6d 62 65 72 3e 31 29 7b 67 75 65 73 74 Data Ascii: sts.length;i++){guestNumber=guestNumber+guests[i].adult+guests[i].children;}var roomString='';if(numberOfRoomsParam>1){roomString=$('#guests').attr('data-rooms');}else{roomString=$('#guests').attr('data-room');}var guestString='';if(guestNumber>1){guest
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 66 28 74 79 70 65 6f 66 20 61 64 75 6c 74 73 50 61 72 61 6d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 61 64 75 6c 74 73 50 61 72 61 6d 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 61 64 75 6c 74 73 50 61 72 61 6d 41 72 72 61 79 3d 61 64 75 6c 74 73 50 61 72 61 6d 2e 73 70 6c 69 74 28 27 2c 27 29 3b 76 61 72 20 61 72 72 61 79 50 61 72 61 6d 41 72 72 61 79 4e 75 6d 62 65 72 73 3d 61 64 75 6c 74 73 50 61 72 61 6d 41 72 72 61 79 2e 6d 61 70 28 4e 75 6d 62 65 72 29 3b 61 72 72 61 79 50 61 72 61 6d 41 72 72 61 79 4e 75 6d 62 65 72 73 2e 6c 65 6e 67 74 68 3d 31 3b 69 66 28 61 72 72 61 79 50 61 72 61 6d 41 72 72 61 79 4e 75 6d 62 65 72 73 5b 30 5d 3e 31 30 29 7b 61 72 72 61 79 50 61 72 61 6d 41 72 72 61 79 4e 75 6d 62 65 72 73 5b 30 5d 3d 31 3b 7d 0a 67 75 65 73 74 73 Data Ascii: f(typeof adultsParam!='undefined'\|\|adultsParam!=null){var adultsParamArray=adultsParam.split(',');var arrayParamArrayNumbers=adultsParamArray.map(Number);arrayParamArrayNumbers.length=1;if(arrayParamArrayNumbers[0]>10){arrayParamArrayNumbers[0]=1;}guests
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 61 74 74 72 28 27 76 61 6c 75 65 27 2c 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 29 3b 7d 0a 76 61 72 20 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 67 65 74 55 72 6c 50 61 72 61 6d 28 22 61 67 22 29 3b 69 66 28 28 74 79 70 65 6f 66 20 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 21 3d 6e 75 6c 6c 29 26 26 28 74 79 70 65 6f 66 20 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 3d 6e 75 6c 6c 29 29 7b 76 61 72 20 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 3d 22 22 3b 66 6f 72 28 69 3d 30 3b 69 3c 63 68 69 6c 64 72 65 6e 50 61 72 61 6d 41 72 72 61 79 2e 6c 65 6e 67 Data Ascii: attr('value',childrenParam);}var childrenAgesParam=getUrlParam("ag");if((typeof childrenParam!='undefined'\|\|childrenParam!=null)&&(typeof childrenAgesParam=='undefined'\|\|childrenAgesParam==null)){var childrenAgesParam="";for(i=0;i<childrenParamArray.leng
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 3b 7d 7d 0a 24 28 27 23 61 67 27 29 2e 61 74 74 72 28 27 76 61 6c 75 65 27 2c 63 68 69 6c 64 72 65 6e 41 67 65 73 50 61 72 61 6d 29 3b 7d 0a 76 61 72 20 67 75 65 73 74 4e 75 6d 62 65 72 3d 30 3b 66 6f 72 28 69 3d 30 3b 69 3c 67 75 65 73 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 67 75 65 73 74 4e 75 6d 62 65 72 3d 67 75 65 73 74 4e 75 6d 62 65 72 2b 67 75 65 73 74 73 5b 69 5d 2e 61 64 75 6c 74 2b 67 75 65 73 74 73 5b 69 5d 2e 63 68 69 6c 64 72 65 6e 3b 7d 0a 76 61 72 20 72 6f 6f 6d 53 74 72 69 6e 67 3d 27 27 3b 69 66 28 6e 75 6d 62 65 72 4f 66 52 6f 6f 6d 73 50 61 72 61 6d 3e 31 29 7b 72 6f 6f 6d 53 74 72 69 6e 67 3d 24 28 27 23 67 75 65 73 74 73 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 72 6f 6f 6d 73 27 29 3b 7d 65 6c 73 65 7b 72 6f 6f 6d 53 74 72 69 Data Ascii: ;}}$('#ag').attr('value',childrenAgesParam);}var guestNumber=0;for(i=0;i<guests.length;i++){guestNumber=guestNumber+guests[i].adult+guests[i].children;}var roomString='';if(numberOfRoomsParam>1){roomString=$('#guests').attr('data-rooms');}else{roomStri
2024-05-28 05:15:10 UTC	1369	IN	Data Raw: 24 28 27 23 67 75 65 73 74 73 27 29 3b 69 66 28 73 65 61 72 63 68 42 75 74 74 6f 6e 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 73 65 61 72 63 68 42 75 74 74 6f 6e 3d 24 28 27 23 62 74 6e 2d 73 65 61 72 63 68 27 29 3b 7d 0a 69 66 28 21 6f 63 63 75 70 61 6e 63 79 44 72 6f 70 64 6f 77 6e 2e 69 73 28 65 2e 74 61 72 67 65 74 29 26 26 21 73 65 61 72 63 68 42 75 74 74 6f 6e 2e 69 73 28 65 2e 74 61 72 67 65 74 29 26 26 6f 63 63 75 70 61 6e 63 79 44 72 6f 70 64 6f 77 6e 2e 68 61 73 28 65 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 72 65 73 6f 6c 75 74 69 6f 6e 3d 3d 31 29 7b 6f 63 63 75 70 61 6e 63 79 44 72 6f 70 64 6f 77 6e 2e 73 6c 69 64 65 55 70 28 32 30 30 29 3b 67 75 65 73 74 73 49 6e 70 75 74 2e 63 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: $('#guests');if(searchButton.length==0){searchButton=$('#btn-search');}if(!occupancyDropdown.is(e.target)&&!searchButton.is(e.target)&&occupancyDropdown.has(e.target).length===0&&resolution==1){occupancyDropdown.slideUp(200);guestsInput.css('background-i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	62604	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	1380	OUT	GET /v3/js/myreservation.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:10 UTC	627	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:10 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2050 Connection: close Cf-Bgj: minify Cf-Polished: origSize=6589 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "19bd-618dea4b25877-gzip" Last-Modified: Mon, 20 May 2024 08:39:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6111 Expires: Tue, 28 May 2024 17:15:10 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3f138b0421d-EWR
2024-05-28 05:15:10 UTC	742	IN	Data Raw: 76 61 72 20 71 3d 24 28 22 2e 6c 6f 67 69 6e 2d 62 74 6e 22 29 2e 61 74 74 72 28 27 64 61 74 61 2d 68 6f 74 65 6c 69 64 27 29 3b 76 61 72 20 63 3d 24 28 22 23 63 68 61 69 6e 5f 68 6f 6d 65 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 68 61 69 6e 22 29 3b 76 61 72 20 6c 61 6e 67 75 61 67 65 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6c 61 6e 67 22 29 3b 76 61 72 20 63 75 72 72 65 6e 63 79 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 75 72 72 22 29 3b 76 61 72 20 63 68 61 69 6e 4f 72 48 6f 74 65 6c 3d 27 27 3b 76 61 72 20 71 52 65 67 69 73 74 65 72 3d 27 27 3b 76 61 72 20 73 74 61 74 75 73 3d 24 28 22 23 6c 6f 67 69 6e 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 Data Ascii: var q=$(".login-btn").attr('data-hotelid');var c=$("#chain_home").attr("data-chain");var languageId=$("#lang_curr").attr("data-lang");var currencyId=$("#lang_curr").attr("data-curr");var chainOrHotel='';var qRegister='';var status=$("#login").attr("data-s
2024-05-28 05:15:10 UTC	1308	IN	Data Raw: 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2b 27 2f 73 69 6c 65 6e 74 72 65 64 69 72 65 63 74 27 2c 66 69 6c 74 65 72 50 72 6f 74 6f 63 6f 6c 43 6c 61 69 6d 73 3a 74 72 75 65 2c 6c 6f 61 64 55 73 65 72 49 6e 66 6f 3a 74 72 75 65 7d 3b 76 61 72 20 6d 67 72 3d 6e 65 77 20 4f 69 64 63 2e 55 73 65 72 4d 61 6e 61 67 65 72 28 73 65 74 74 69 6e 67 73 29 3b 66 75 6e 63 74 69 6f 6e 20 69 66 72 61 6d 65 53 69 67 6e 69 6e 28 29 7b 6d 67 72 2e 73 69 67 6e 69 6e 53 69 6c 65 6e 74 28 7b 61 63 72 5f 76 61 6c 75 65 73 3a 27 61 63 72 5f 63 75 72 72 65 6e 63 79 5f 75 69 64 3a 27 2b 63 75 72 72 65 6e 63 79 49 64 2b 27 20 61 63 72 5f 6f 62 5f 63 6c 69 65 6e 74 5f 75 69 64 3a 27 2b 63 2b 71 52 65 67 69 73 74 65 72 2b 27 20 61 63 72 5f 6c 61 6e 67 75 61 Data Ascii: '+window.location.host+'/silentredirect',filterProtocolClaims:true,loadUserInfo:true};var mgr=new Oidc.UserManager(settings);function iframeSignin(){mgr.signinSilent({acr_values:'acr_currency_uid:'+currencyId+' acr_ob_client_uid:'+c+qRegister+' acr_langua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	62605	104.18.124.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:10 UTC	381	OUT	GET /Images/5659/Packages/701x390/926105.jpg HTTP/1.1 Host: media.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:11 UTC	558	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: image/jpeg Content-Length: 67363 Connection: close Cache-Control: public, max-age=2678400 Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=71306, status=webp_bigger access-control-allow-origin: https://myhotel2.omnibees.com expires: Fri, 28 Jun 2024 05:15:11 GMT strict-transport-security: max-age=31536000 x-aspnet-version: 4.0.30319 CF-Cache-Status: HIT Age: 2 Last-Modified: Tue, 28 May 2024 05:15:09 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3f20ddb32e2-EWR
2024-05-28 05:15:11 UTC	811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 01 86 02 bd 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 00 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d1 46 32 5e 57 c9 57 9d 18 f6 a1 eb 7d 5c Data Ascii: JFIF`` $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"4F2^WW}\
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: e2 87 72 b2 24 3a 14 84 3b 38 76 57 46 02 8a d9 2a 2e 1e a0 ae f4 52 6b 10 4a 51 0a db 39 35 e6 9a a5 d4 cc ca 60 c4 bb 40 32 3b 9d 9f 18 01 d6 4f e5 7a 3b 87 90 8b c7 7b d7 03 65 2e 95 1e ad 3d dd 55 92 13 db 76 2d 06 1c 49 8b 64 9b bb aa 79 68 ee 13 4c 75 92 93 8d 5b 43 f2 3d 77 3a 5c 31 67 8d b4 59 7d 7f 94 ec 75 f7 39 a0 42 b9 86 50 31 8c d4 94 6a 28 9f 7a 42 32 85 d3 ee 36 93 73 44 fd 92 71 d6 99 b4 db e1 f6 d6 24 b6 8a d8 de 0c 55 ba ce 55 38 91 84 34 6f e4 78 61 2e 7a 39 b6 7a 8f 6e 15 e1 ac dc 9f 39 ec d9 fb de ce 47 69 49 7e 47 d3 3f 89 61 50 ea 33 c2 a6 93 a6 f3 3d da c0 d2 8a 16 62 62 b0 85 dd cf 55 a8 eb 46 a8 78 9b 46 c8 6c f2 51 31 83 e1 f3 53 33 d0 57 cf 46 67 55 1a fa 26 ac 5e 62 6e d2 17 69 46 6e 59 46 8b 35 37 06 16 98 b7 f0 f2 92 d4 94 Data Ascii: r$:;8vWF*.RkJQ95`@2;Oz;{e.=Uv-IdyhLu[C=w:\1gY}u9BP1j(zB26sDq$UU84oxa.z9zn9GiI~G?aP3=bbUFxFlQ1S3WFgU&^bniFnYF57
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: ae ec de ca 13 12 4a 01 68 3e 4e d3 17 d6 0d ab 63 5a 8b e8 1b 06 26 0d c1 6d aa 0e 2b 6a be 3b d1 61 66 9b 1c 87 ba 73 d1 47 cd 2f d4 e5 59 27 a9 20 9c ce ef 8b 47 f3 d4 8c 42 11 28 51 ea 43 bf d0 59 f4 0d 5e 93 31 06 3f 16 60 cb 2f e7 ce 8e c1 cb b0 a5 45 90 9a 2d 51 56 31 25 35 6c d7 2b c7 bc 02 e9 8d 52 f4 ba af 72 e6 ac a3 e9 21 dc 8f 97 fd 08 1c fc f4 eb 54 a9 a6 35 70 77 6d 95 99 37 ea 7a d2 aa f2 c1 e1 7a 25 8b a4 3a 1a 27 3a cc d1 be 5f 57 82 f1 73 7a 44 7e 8a 99 ef 3e 75 a4 81 a4 08 8b ba 37 0d 69 2c 52 bd 9e 6a 35 b3 e8 b0 14 bf 45 95 3d 48 55 b3 ec 26 1f 5a 9c 6a bd a6 2e 76 85 6d 56 d9 1c a1 ca 7b a3 eb 7d c4 95 20 f0 f9 ab 6e 5d d1 6b 54 af 17 af e8 4e 7e 3e 14 89 10 67 12 2d 80 3d 93 7c e1 30 93 91 13 54 6b 68 94 f2 28 04 6d ae 0c 81 d2 c5 Data Ascii: Jh>NcZ&m+j;afsG/Y' GB(QCY^1?`/E-QV1%5l+Rr!T5pwm7zz%:':_WszD~>u7i,Rj5E=HU&Zj.vmV{} n]kTN~>g-=\|0Tkh(m
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: a1 f9 bd c1 da 2e 28 3a b4 20 d3 f2 e7 76 36 11 87 95 86 00 d8 69 39 65 8c 3b bc 3c ad 38 49 dc 6e 1e 2a 8f 6d 4c fd 17 c9 09 19 38 15 b9 bf e7 4e 18 44 2e e2 d1 c1 6b 7a f1 ea c9 6f 52 db 1b ac 8c 52 ac 68 a3 40 b6 b4 07 65 95 92 e3 6f 62 3b ae 77 83 d6 5b 63 d1 af 81 e8 37 54 1d 23 bc 07 37 a4 aa 6f 8b 56 18 1e 79 1f c5 fe 11 62 d5 13 b0 2d 50 cb 04 43 59 e7 a1 49 8b 19 0a dd a3 f4 05 00 67 fc 67 bd a7 2d 2a 57 a2 f2 3e d9 94 02 66 c7 d0 5e 44 4d f3 c2 e3 75 78 7b 96 dd c6 2f 8b 5a 3d b2 bf 50 92 56 97 90 5e c3 34 1b 59 58 ae c7 1d 9b 17 1d 2d 46 29 47 d3 10 67 1e c0 d6 87 da 5a 57 84 e6 e1 d6 81 76 13 56 09 2c 51 88 23 32 a8 91 04 76 77 25 58 76 3b 5f 78 ac cd 4b 53 8f 7e d9 e2 0b 4e 26 f1 e2 99 3d 6f 9b d1 35 e7 86 32 4f 29 9a 28 03 36 bb 3e e5 fe 08 Data Ascii: .(: v6i9e;<8InmL8ND.kzoRRh@eob;w[c7T#7oVyb-PCYIgg-W>f^DMux{/Z=PV^4YX-F)GgZWvV,Q#2vw%Xv;_xKS~N&=o52O)(6>
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 63 f2 bd 0d 0c c7 33 cd b0 20 30 51 68 3c f3 c4 1a 12 27 2b 47 1e 16 76 aa 2b ad 3e aa be 50 36 74 48 97 33 92 db 83 8e fa a7 cf 37 fb c9 94 2c 1e 26 fd be 38 77 97 98 c4 08 ca c9 c9 66 bf 92 bd 6a f7 d9 fa a7 18 54 4e a1 d4 49 4c a5 7b 38 d7 0c c6 3f 7b f9 2f d7 b6 92 f3 15 5a de f0 67 03 42 93 92 15 d6 ca 51 01 c9 0f 74 9a db 83 56 a8 70 83 d1 81 02 b3 ea f2 68 1a e1 ca 93 4e 12 da 26 cf 12 19 1c 25 c6 33 53 41 1d 98 34 09 44 a6 68 3c c8 b4 d3 51 be a6 8a 47 7b 5a f8 70 bc 66 8a de 6b de ac a1 4f 75 9f 6e 29 10 08 4a 35 b1 aa 1d e2 77 f4 4d 32 e4 95 8d 56 1f 19 45 11 cb db cc e2 ba 8e e6 c1 8d d7 62 b9 7b de 86 6c 33 fe f6 bf a3 7b db 95 91 ef 2f 22 37 bc 61 4b 1f 7b 01 1d fe f3 32 2e 3d e7 76 e9 47 bc 1b 9a 03 de 94 89 d6 7b d5 0e 73 e9 de f5 b3 77 33 Data Ascii: c3 0Qh<'+Gv+>P6tH37,&8wfjTNIL{8?{/ZgBQtVphN&%3SA4Dh<QG{ZpfkOun)J5wM2VEb{l3{/"7aK{2.=vG{sw3
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: a5 97 28 7a dd aa b1 d2 2b 31 f9 a5 0a 26 d2 19 68 30 7c de e7 33 a1 f7 5c b9 d4 10 aa 25 9f 34 d5 f8 2d 6b 37 cd 90 20 82 c9 5e 10 c7 28 d4 85 fc d6 2d 6d 2d 63 2a 25 5a ad 01 e6 d7 b6 51 65 c8 ea f7 76 a8 31 e8 3f a3 a2 ce 88 e9 2b 19 7f a9 a5 21 ca b5 8a 67 a4 2d b5 a9 16 2c 10 d8 cf 60 f9 b2 a2 75 35 ad 4d cd cf 2f 05 1d b5 69 5f 97 8b d9 d1 9e fe ce eb 04 d5 6e ed 65 c6 50 1c b5 a9 11 5e d2 d5 dc d2 cb 37 e8 0f a5 ac 8b 6a 2c 72 b0 47 b6 fb 92 a3 8c 03 17 95 87 7e 8b ac a8 6f bb 6c 4b 46 5b 96 9b 0d 35 8e c0 eb 92 bc b2 c6 48 21 f9 af e7 4a a4 76 ef a5 a2 b6 77 7b 3a 24 fd 5f 81 ab a0 d5 e1 e4 f5 0a 20 8e 41 df 7d 06 d1 1a d6 c4 d2 c3 6b c2 a4 47 8a b5 4b a5 62 bc 61 19 ac 20 68 a4 4b 25 a5 61 83 e2 52 cf df a6 d3 e0 64 b0 d4 f5 f1 af a4 6e 6f e1 95 Data Ascii: (z+1&h0\|3\%4-k7 ^(-m-c*%ZQev1?+!g-,`u5M/i_neP^7j,rG~olKF[5H!Jvw{:$_ A}kGKba hK%aRdno
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: b5 a1 fc ab 57 93 35 f7 aa 9a 6c 91 09 44 ae 59 7b d9 a4 a8 55 57 f9 ea a7 33 22 ef b7 bf 09 36 89 57 f9 14 ff 00 98 25 99 2c fa 21 ac 48 c5 15 c5 76 de 02 b5 53 fc e2 c7 e7 36 db fa 92 25 ee d7 c0 0c d9 81 b6 90 54 94 37 c3 f3 97 ad a8 b2 8e 4c 04 28 c3 b6 bd 08 20 fa 96 ec fd a5 b9 d6 fe 25 68 b6 dc 31 3c aa 44 95 47 bf e1 9d 13 65 a0 34 59 56 2a de d6 07 ed d8 7d 28 d4 59 5d 57 5b 64 a4 d8 a5 e2 d3 46 4d bf e9 be 62 ff 00 a3 65 61 9f 2c 44 96 90 da d4 03 4a b8 a8 43 5b b6 8d 91 55 be 8e 2c 85 a0 a5 02 d8 6c fe a9 35 7d 25 1b a6 8a 9e 0b 5f 76 58 aa 2b 2c f3 1e 02 ca ab d1 66 39 4f 37 74 51 8d 95 f7 af ea dc 92 ff 00 31 df 26 9d 68 cd 15 54 e1 72 19 c3 87 f6 78 10 02 02 eb e5 45 90 2c 21 ea 58 b3 87 34 d6 d8 be aa 35 60 51 c1 13 99 54 ad 81 8c 22 b2 dc Data Ascii: W5lDY{UW3"6W%,!HvS6%T7L( %h1<DGe4YV*}(Y]W[dFMbea,DJC[U,l5}%_vX+,f9O7tQ1&hTrxE,!X45`QT"
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: b9 d5 91 9e cb 0d ae 3e 6f a4 14 63 f3 e6 53 9e a0 1a 68 60 51 2a aa b1 92 c6 13 e8 eb e6 96 5a 72 6e 19 79 4e 21 84 f5 11 70 c8 58 03 21 f8 25 f2 ac 9b 42 e6 7b 2c be 63 c7 71 ff 00 2d 56 08 85 35 3b 10 ce 16 c7 67 54 b2 cb a8 82 70 06 ec 56 81 ac 60 9a ff c4 00 40 10 00 01 03 03 02 04 04 05 02 04 03 07 04 03 00 00 01 00 02 11 03 12 21 31 41 10 22 51 61 13 32 71 81 04 20 42 52 91 23 a1 30 62 b1 c1 14 33 43 24 40 53 72 92 e1 f1 05 82 d1 f0 34 50 63 ff da 00 08 01 01 00 03 3f 02 fe 38 4d 43 fd c2 11 99 27 09 a1 4f 97 0a a5 33 cf 90 ae d3 01 3d d3 a4 2b 9d e6 80 99 7d c6 23 a0 40 3b 10 30 ba 3e 0f 74 07 43 ed a2 b8 62 3d c2 14 f3 b7 60 9b 01 d3 dd 33 9a dd 4a 38 8d 3b 95 6e 3c e7 ba 0e 11 25 8b c3 97 0e 60 56 9d 10 3f e9 c4 e9 28 87 49 88 f5 40 9d a1 36 eb Data Ascii: >ocSh`Q*ZrnyN!pX!%B{,cq-V5;gTpV`@!1A"Qa2q BR#0b3C$@Sr4Pc?8MC'O3=+}#@;0>tCb=`3J8;n<%`V?(I@6
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 6c 94 e2 cd 53 ea 9b 8e 01 dd 37 bb bd 53 9c d9 2d d3 45 51 b5 7f cc 3e aa a5 f1 32 aa fd a5 35 86 ea 90 47 42 b1 8f c2 73 b4 bb 0a 9b 5b cc 79 8e 84 28 24 83 85 3b 26 35 86 46 76 44 99 9f c2 12 5c 7c db 28 8b 71 d5 78 8c 2e 70 4d f0 8b 51 98 02 50 19 7b 0c ec a6 ad b0 80 19 fd 91 68 86 8c 20 4c b9 ba 20 e6 cb 75 45 e2 0f 01 7e 1b 92 aa c1 73 48 f6 4e d1 c2 50 9d 7f 75 b1 6c a7 3e 98 a7 ba b4 d8 e3 73 14 ba d6 01 6a 68 1c ad f7 41 8c 22 62 7a 2b 9c 09 76 3a 26 93 e6 68 08 35 bc ae cf 40 8b 86 62 34 50 2d 12 bb 27 b2 31 8e ea 78 63 05 72 80 87 7f e0 0f e2 3b a2 72 26 7b 29 5c d8 d0 2b 4e 34 57 f6 4d 0d 1e ba a1 aa 6b b0 53 01 8d 50 d4 83 09 90 2d 06 55 c6 e3 b7 54 e2 71 f9 46 e9 3f ba 76 97 22 dd 0d c7 d1 3f ed 32 8d 56 f8 8f 70 6f 65 04 02 f1 e8 81 a8 e3 Data Ascii: lS7S-EQ>25GBs[y($;&5FvD\\|(qx.pMQP{h L uE~sHNPul>sjhA"bz+v:&h5@b4P-'1xcr;r&{)\+N4WMkSP-UTqF?v"?2Vpoe
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 9b 18 3d 91 14 79 e7 d7 75 a5 47 3c c8 d1 10 64 8d b6 57 e6 63 d5 1b a4 b8 41 dd 31 87 3a f6 55 1c ee 42 01 4e 69 87 1f c2 3d 70 a9 f8 64 97 3a 7a 05 1e 9c 40 39 12 81 12 34 e2 51 d1 ca c3 aa eb c3 ba 3f c2 a3 4d be 44 d9 c5 34 5d 11 ca 11 c6 fd 25 48 d1 01 c1 c1 39 f4 f0 20 6e b1 27 4d 95 36 0d 26 50 9d 0f 06 44 5b 09 bf 4f ee ae 70 bb fe c1 34 53 74 44 9e 89 cc 80 fd 0e 61 44 8e 58 52 c1 22 53 a2 3f a2 31 c7 72 9e fa 96 b3 54 5a 24 ba f2 80 cb b0 0e aa 9d c6 df 2a b5 fa e1 07 18 35 39 77 2a 99 03 04 c0 89 5c b0 1b 94 fa 96 98 cf 59 4e 9b 8d b9 3a 70 32 04 2a 94 da 1f d5 3e 00 7b 73 d5 36 c1 13 77 07 02 32 53 9d ae 78 7f f7 a7 0c 68 84 cd c9 be 27 36 5b d4 15 4a 7f 4f fa a2 e3 3a 04 64 8d b7 28 65 d4 ce bb 77 4f ec 5d fb 04 eb ee aa fb 8f 64 e0 e6 81 08 Data Ascii: =yuG<dWcA1:UBNi=pd:z@94Q?MD4]%H9 n'M6&PD[Op4StDaDXR"S?1rTZ$59w\YN:p2*>{s6w2Sxh'6[JO:d(ewO]d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	62606	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1378	OUT	GET /v3/js/ajax-search.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	628	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9016 Connection: close Cf-Bgj: minify Cf-Polished: origSize=15539 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "3cb3-618dea4b23937-gzip" Last-Modified: Mon, 20 May 2024 08:39:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 3139 Expires: Tue, 28 May 2024 17:15:11 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3f319c07271-EWR
2024-05-28 05:15:11 UTC	741	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 23 64 61 74 65 5f 74 6f 2c 23 67 75 65 73 74 73 27 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 43 72 69 74 65 72 69 61 28 29 3b 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 72 6f 6f 6d 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 22 2c 67 65 74 52 6f 6f 6d 49 6e 66 6f 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 63 68 61 69 6e 2d 73 65 72 76 69 63 65 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 22 2c 67 65 74 43 68 61 69 6e 45 78 74 72 61 49 6e 66 6f 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 70 72 6f 70 65 72 74 79 2d 73 65 72 Data Ascii: $(document).ready(function(){$('#date_to,#guests').on("change",function(){newCriteria();});$(document).on("click",".room-popup-modal",getRoomInfo);$(document).on("click",".chain-service-popup-modal",getChainExtraInfo);$(document).on("click",".property-ser
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 61 74 65 2d 69 64 27 29 3b 76 61 72 20 63 3d 24 28 22 23 63 68 61 69 6e 5f 68 6f 6d 65 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 68 61 69 6e 22 29 3b 76 61 72 20 70 72 6f 70 65 72 74 79 3d 24 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 27 2e 72 6f 6f 6d 72 61 74 65 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 68 6f 74 65 6c 2d 69 64 27 29 3b 76 61 72 20 68 6f 74 65 6c 5f 69 64 3d 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 68 6f 74 65 6c 69 64 27 29 3b 76 61 72 20 6c 61 6e 67 75 61 67 65 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6c 61 6e 67 22 29 3b 76 61 72 20 63 75 72 72 65 6e 63 79 49 64 3d 24 28 22 23 6c 61 6e 67 5f 63 75 72 72 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 75 72 72 22 29 3b 76 61 72 20 6c Data Ascii: ate-id');var c=$("#chain_home").attr("data-chain");var property=$(this).closest('.roomrate').attr('data-hotel-id');var hotel_id=$(this).data('hotelid');var languageId=$("#lang_curr").attr("data-lang");var currencyId=$("#lang_curr").attr("data-curr");var l
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 65 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 68 61 69 6e 22 29 3b 75 72 6c 3d 22 2f 70 72 6f 70 65 72 74 79 65 78 74 72 61 73 2f 22 2b 68 6f 74 65 6c 5f 69 64 2b 22 2f 22 2b 73 65 72 76 69 63 65 5f 69 64 2b 22 2f 22 2b 72 61 74 65 70 6c 61 6e 5f 69 64 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 6c 61 6e 67 75 61 67 65 49 64 27 2c 6c 61 6e 67 75 61 67 65 49 64 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 63 75 72 72 65 6e 63 79 49 64 27 2c 63 75 72 72 65 6e 63 79 49 64 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 6d 28 27 6c 61 6e 67 75 61 67 65 4c 6f 63 61 6c 65 27 2c 6c 61 6e 67 75 61 67 65 4c 6f 63 61 6c 65 2c 75 72 6c 29 3b 75 72 6c 3d 75 70 64 61 74 65 55 72 6c 50 61 72 61 Data Ascii: e").attr("data-chain");url="/propertyextras/"+hotel_id+"/"+service_id+"/"+rateplan_id;url=updateUrlParam('languageId',languageId,url);url=updateUrlParam('currencyId',currencyId,url);url=updateUrlParam('languageLocale',languageLocale,url);url=updateUrlPara
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 70 65 72 74 79 2d 73 65 72 76 69 63 65 2d 6d 6f 64 61 6c 22 29 2e 66 69 6e 64 28 22 2e 69 63 6f 6e 2d 73 68 61 72 65 5f 5f 6c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 73 68 61 72 65 4c 69 73 74 65 6e 65 72 29 3b 69 66 28 74 79 70 65 6f 66 20 6d 65 74 61 49 73 45 6e 61 62 6c 65 64 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 6d 65 74 61 49 73 45 6e 61 62 6c 65 64 26 26 74 79 70 65 6f 66 20 6d 65 74 61 45 76 65 6e 74 44 61 74 61 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 74 79 70 65 6f 66 20 6d 65 74 61 52 65 71 75 65 73 74 50 61 72 61 6d 73 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 6c 65 74 20 6d 65 74 61 52 65 71 75 65 73 74 44 61 74 61 3d 70 72 65 70 61 72 65 52 65 71 75 65 73 74 44 61 74 61 28 6d 65 74 61 52 65 71 75 65 73 74 50 61 72 61 6d 73 Data Ascii: perty-service-modal").find(".icon-share__link").click(shareListener);if(typeof metaIsEnabled!=='undefined'&&metaIsEnabled&&typeof metaEventData!=='undefined'&&typeof metaRequestParams!=='undefined'){let metaRequestData=prepareRequestData(metaRequestParams
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 24 28 22 23 72 6f 6f 6d 2d 6d 6f 64 61 6c 22 29 2e 66 69 6e 64 28 22 2e 69 63 6f 6e 2d 73 68 61 72 65 5f 5f 6c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 73 68 61 72 65 4c 69 73 74 65 6e 65 72 29 3b 76 61 72 20 6e 75 6d 62 65 72 4f 66 49 6d 61 67 65 73 3d 24 28 27 23 72 6f 6f 6d 2d 6d 6f 64 61 6c 27 29 2e 66 69 6e 64 28 27 2e 69 6d 67 2d 64 69 76 27 29 0a 69 66 28 6e 75 6d 62 65 72 4f 66 49 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3c 33 29 7b 69 66 28 77 69 64 74 68 3c 39 39 32 29 7b 24 28 27 23 72 6f 6f 6d 2d 6d 6f 64 61 6c 27 29 2e 66 69 6e 64 28 27 2e 69 6d 67 2d 64 69 76 27 29 2e 61 64 64 43 6c 61 73 73 28 27 72 65 73 70 6f 6e 73 69 76 65 2d 69 6d 67 2d 64 69 76 27 29 0a 24 28 27 23 72 6f 6f 6d 2d 6d 6f 64 61 6c 27 29 2e 66 69 6e 64 28 27 2e 67 61 6c 6c 65 72 79 Data Ascii: $("#room-modal").find(".icon-share__link").click(shareListener);var numberOfImages=$('#room-modal').find('.img-div')if(numberOfImages.length<3){if(width<992){$('#room-modal').find('.img-div').addClass('responsive-img-div')$('#room-modal').find('.gallery
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 65 74 6f 22 29 2c 22 44 44 4d 4d 59 59 59 59 22 29 2e 66 6f 72 6d 61 74 28 22 59 59 59 59 2d 4d 4d 2d 44 44 22 29 3b 76 61 72 20 64 61 74 65 5f 66 72 6f 6d 5f 76 61 6c 3d 24 28 22 23 64 61 74 65 5f 66 72 6f 6d 22 29 2e 76 61 6c 28 29 3b 76 61 72 20 64 61 74 65 5f 74 6f 5f 76 61 6c 3d 24 28 22 23 64 61 74 65 5f 74 6f 22 29 2e 76 61 6c 28 29 3b 69 66 28 21 6d 6f 6d 65 6e 74 28 64 61 74 65 5f 66 72 6f 6d 2c 22 44 44 4d 4d 59 59 59 59 22 29 2e 69 73 56 61 6c 69 64 28 29 7c 7c 21 6d 6f 6d 65 6e 74 28 64 61 74 65 5f 74 6f 2c 22 44 44 4d 4d 59 59 59 59 22 29 2e 69 73 56 61 6c 69 64 28 29 29 7b 69 66 28 21 6d 6f 6d 65 6e 74 28 64 61 74 65 5f 66 72 6f 6d 5f 76 61 6c 2c 22 44 44 4d 4d 59 59 59 59 22 29 2e 69 73 56 61 6c 69 64 28 29 7c 7c 21 6d 6f 6d 65 6e 74 28 64 Data Ascii: eto"),"DDMMYYYY").format("YYYY-MM-DD");var date_from_val=$("#date_from").val();var date_to_val=$("#date_to").val();if(!moment(date_from,"DDMMYYYY").isValid()\|\|!moment(date_to,"DDMMYYYY").isValid()){if(!moment(date_from_val,"DDMMYYYY").isValid()\|\|!moment(d
2024-05-28 05:15:11 UTC	1369	IN	Data Raw: 65 72 22 29 2e 6d 6f 64 61 6c 28 22 68 69 64 65 22 29 3b 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 47 61 6c 6c 65 72 79 53 69 6e 67 6c 65 48 6f 74 65 6c 28 29 7b 24 28 22 23 6d 6f 64 61 6c 2d 6c 6f 61 64 65 72 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 76 61 72 20 68 6f 74 65 6c 5f 69 64 3d 24 28 74 68 69 73 29 2e 64 61 74 61 28 22 70 72 6f 70 65 72 74 79 22 29 3b 76 61 72 20 75 72 6c 3d 22 2f 67 61 6c 6c 65 72 79 2f 22 2b 68 6f 74 65 6c 5f 69 64 2b 22 2f 61 6a 61 78 22 3b 24 2e 67 65 74 28 75 72 6c 2c 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 24 28 22 23 6d 6f 64 61 6c 2d 6c 6f 61 64 65 72 22 29 2e 6d 6f 64 61 6c 28 22 68 69 64 65 22 29 3b 24 28 22 23 6d 6f 64 61 6c 2d 67 61 6c 6c 65 72 79 22 29 Data Ascii: er").modal("hide");});return false;}function getGallerySingleHotel(){$("#modal-loader").modal("show");var hotel_id=$(this).data("property");var url="/gallery/"+hotel_id+"/ajax";$.get(url,function(data){$("#modal-loader").modal("hide");$("#modal-gallery")
2024-05-28 05:15:11 UTC	61	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 23 6d 6f 64 61 6c 2d 6c 6f 61 64 65 72 22 29 2e 6d 6f 64 61 6c 28 22 68 69 64 65 22 29 3b 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d Data Ascii: function(){$("#modal-loader").modal("hide");});return false;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	62607	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1373	OUT	GET /v3/js/cookie.js?version=1.0.0.395 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	626	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1839 Connection: close Cf-Bgj: minify Cf-Polished: origSize=2307 Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net ETag: "903-618dea1b83672-gzip" Last-Modified: Mon, 20 May 2024 08:38:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 5749 Expires: Tue, 28 May 2024 17:15:11 GMT Cache-Control: public, max-age=43200 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88abc3f3f8b65e74-EWR
2024-05-28 05:15:11 UTC	743	IN	Data Raw: 24 28 27 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 62 75 74 74 6f 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 23 6d 6f 64 61 6c 2d 63 6f 6f 6b 69 65 27 29 2e 6d 6f 64 61 6c 28 27 68 69 64 65 27 29 3b 24 28 27 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2d 68 6f 6c 64 65 72 27 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 27 6e 6f 6e 65 27 29 3b 3b 69 66 28 24 28 27 2e 63 6f 6f 6b 69 65 2d 73 65 6c 65 63 74 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 63 6f 6f 6b 69 65 2d 73 65 6c 65 63 74 65 64 27 29 3d 3d 22 74 72 75 65 22 29 7b 24 2e 67 65 74 28 22 2f 61 63 63 65 70 74 61 6c 6c 63 6f 6f 6b 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 27 63 6f 6f 6b 69 65 43 Data Ascii: $('.cookie-popup-button').on('click',function(){$('#modal-cookie').modal('hide');$('.cookie-consent-holder').css('display','none');;if($('.cookie-select').attr('data-cookie-selected')=="true"){$.get("/acceptallcookies",function(data){createCookie('cookieC
2024-05-28 05:15:11 UTC	1096	IN	Data Raw: 70 75 70 2d 73 65 63 74 69 6f 6e 27 29 2e 66 69 6e 64 28 27 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6f 6f 6b 69 65 73 27 29 2e 73 6c 69 64 65 55 70 28 29 3b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 69 6d 67 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 72 72 6f 77 2d 66 6c 69 70 2d 75 70 27 29 3b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 69 6d 67 27 29 2e 61 64 64 43 6c 61 73 73 28 27 61 72 72 6f 77 2d 66 6c 69 70 2d 64 6f 77 6e 27 29 3b 7d 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 27 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 73 65 63 74 69 6f 6e 27 29 2e 66 69 6e 64 28 27 2e 63 6f 6f 6b 69 65 2d 70 6f 70 75 70 2d 63 6f 6f 6b 69 65 73 27 29 2e 73 6c 69 64 65 44 6f 77 6e 28 29 3b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 69 Data Ascii: pup-section').find('.cookie-popup-cookies').slideUp();$(this).find('img').removeClass('arrow-flip-up');$(this).find('img').addClass('arrow-flip-down');}else{$(this).closest('.cookie-popup-section').find('.cookie-popup-cookies').slideDown();$(this).find('i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	62608	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1452	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/v3/css/header.css?version=1.0.0.395 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"104-618df02b2271a-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 4744 Expires: Tue, 28 May 2024 17:15:11 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f3ed794211-EWR
2024-05-28 05:15:11 UTC	267	IN	Data Raw: 31 30 34 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 2e 34 38 36 22 20 68 65 69 67 68 74 3d 22 34 2e 32 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 2e 34 38 36 20 34 2e 32 34 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 44 72 6f 70 64 6f 77 6e 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 69 63 6f 6e 20 44 72 6f 70 64 6f 77 6e 22 20 64 3d 22 4d 35 30 37 2e 36 34 36 2c 35 30 38 2e 36 34 33 6c 2d 34 2e 32 34 33 2c 34 2e 32 34 32 2d 34 2e 32 34 33 2d 34 2e 32 34 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 39 39 2e 31 36 20 2d 35 30 38 2e 36 34 33 29 22 20 66 69 6c 6c 3d 22 23 32 43 32 46 33 33 22 Data Ascii: 104<svg xmlns="http://www.w3.org/2000/svg" width="8.486" height="4.242" viewBox="0 0 8.486 4.242"> <path id="icon_Dropdown" data-name="icon Dropdown" d="M507.646,508.643l-4.243,4.242-4.243-4.242Z" transform="translate(-499.16 -508.643)" fill="#2C2F33"
2024-05-28 05:15:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	62609	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1385	OUT	GET /timezone/3090/8 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	1336	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.4 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:11 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:11 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc3f47f008c53-EWR
2024-05-28 05:15:11 UTC	27	IN	Data Raw: 31 35 0d 0a 7b 22 35 36 35 39 22 3a 22 45 74 63 5c 2f 47 4d 54 2b 33 22 7d 0d 0a Data Ascii: 15{"5659":"Etc\/GMT+3"}
2024-05-28 05:15:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	62610	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1431	OUT	GET /icons/indexIcons/iconPerson.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"1fb-618dea4b4ec9d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2961 Expires: Tue, 28 May 2024 17:15:11 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f478034297-EWR
2024-05-28 05:15:11 UTC	514	IN	Data Raw: 31 66 62 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 30 38 36 22 20 68 65 69 67 68 74 3d 22 31 37 2e 36 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 30 38 36 20 31 37 2e 36 34 38 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 55 6e 69 6f 6e 5f 31 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 55 6e 69 6f 6e 20 31 32 22 20 64 3d 22 4d 31 34 2e 31 32 35 2c 31 36 2e 36 34 38 56 31 36 2e 34 61 36 2e 30 38 38 2c 36 2e 30 38 38 2c 30 2c 30 2c 30 2d 31 32 2e 31 37 36 2c 30 76 2e 32 35 48 30 4c 30 2c 31 36 2e 34 61 38 2e 30 33 34 2c 38 2e 30 33 34 2c 30 2c 30 2c 31 2c 31 36 2e 30 36 37 2c 30 6c 30 2c 2e 32 35 33 5a 4d 34 2e 30 37 31 2c 33 2e 39 Data Ascii: 1fb<svg xmlns="http://www.w3.org/2000/svg" width="17.086" height="17.648" viewBox="0 0 17.086 17.648"> <path id="Union_12" data-name="Union 12" d="M14.125,16.648V16.4a6.088,6.088,0,0,0-12.176,0v.25H0L0,16.4a8.034,8.034,0,0,1,16.067,0l0,.253ZM4.071,3.9
2024-05-28 05:15:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	62611	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1430	OUT	GET /icons/indexIcons/iconPromo.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:11 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:11 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"3d6-618df06d5ba2a-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5241 Expires: Tue, 28 May 2024 17:15:11 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f4fab98cc6-EWR
2024-05-28 05:15:11 UTC	825	IN	Data Raw: 33 64 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 32 22 20 68 65 69 67 68 74 3d 22 31 33 2e 32 39 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 32 20 31 33 2e 32 39 38 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 30 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 35 30 32 22 20 64 3d 22 4d 38 33 2e 38 34 35 2c 31 35 33 2e 32 33 35 6c 2d 33 2e 30 38 32 2c 38 2e 32 31 38 2d 31 2e 31 35 33 2d 2e 34 33 32 2c 33 2e 30 38 33 2d 38 2e 32 31 38 5a 4d 37 39 2e 33 36 31 2c 31 35 37 2e 33 61 31 2e 35 2c 31 2e 35 2c 30 2c 31 2c 30 2d 31 2e 35 2d 31 2e 35 2c 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 31 2e 35 2c Data Ascii: 3d6<svg xmlns="http://www.w3.org/2000/svg" width="16.2" height="13.298" viewBox="0 0 16.2 13.298"> <path id="Path_2502" data-name="Path 2502" d="M83.845,153.235l-3.082,8.218-1.153-.432,3.083-8.218ZM79.361,157.3a1.5,1.5,0,1,0-1.5-1.5,1.5,1.5,0,0,0,1.5,
2024-05-28 05:15:11 UTC	164	IN	Data Raw: 2e 35 48 37 35 2e 37 39 31 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 35 2e 35 76 32 2e 30 35 32 61 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 30 2c 34 2e 39 76 32 2e 30 35 32 61 2e 35 2e 35 2c 30 2c 30 2c 30 2c 2e 35 2e 35 48 38 37 2e 37 61 2e 35 2e 35 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 33 2e 36 34 36 20 2d 31 35 30 2e 34 38 34 29 22 20 66 69 6c 6c 3d 22 23 34 35 34 39 35 30 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: .5H75.791a.5.5,0,0,0-.5.5v2.052a2.5,2.5,0,0,1,0,4.9v2.052a.5.5,0,0,0,.5.5H87.7a.5.5,0,0,0,.5-.5Z" transform="translate(-73.646 -150.484)" fill="#454950"/></svg>
2024-05-28 05:15:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	62612	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1424	OUT	GET /icons/information_v3.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"25b-618dea1be3597-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f6d8b28c53-EWR
2024-05-28 05:15:12 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 2c 2e 63 7b 73 74 72 6f 6b 65 3a 23 32 37 33 32 34 30 3b 7d 2e 63 7b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 7d 2e 64 7b 73 74 72 6f 6b 65 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 37 30 20 2d 36 34 32 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 Data Ascii: 25b<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b,.c{fill:none;}.b,.c{stroke:#273240;}.c{stroke-linecap:round;}.d{stroke:none;}</style></defs><g transform="translate(-470 -642)"><rect class="a" widt
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	62613	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1437	OUT	GET /v4/icons/meals/breakfast_v4_green.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"2f1-618df02b00053-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f80ce341c0-EWR
2024-05-28 05:15:12 UTC	760	IN	Data Raw: 32 66 31 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 73 74 72 6f 6b 65 3a 23 30 30 38 30 30 39 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 39 20 2d 36 34 31 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 31 Data Ascii: 2f1<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:#008009;stroke-linecap:round;stroke-linejoin:round;}</style></defs><g transform="translate(-619 -641)"><rect class="a" width="1
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	62614	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1179	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_Dropdown.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"104-618df02b2271a-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 4745 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f80a60428b-EWR
2024-05-28 05:15:12 UTC	267	IN	Data Raw: 31 30 34 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 2e 34 38 36 22 20 68 65 69 67 68 74 3d 22 34 2e 32 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 2e 34 38 36 20 34 2e 32 34 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 44 72 6f 70 64 6f 77 6e 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 69 63 6f 6e 20 44 72 6f 70 64 6f 77 6e 22 20 64 3d 22 4d 35 30 37 2e 36 34 36 2c 35 30 38 2e 36 34 33 6c 2d 34 2e 32 34 33 2c 34 2e 32 34 32 2d 34 2e 32 34 33 2d 34 2e 32 34 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 39 39 2e 31 36 20 2d 35 30 38 2e 36 34 33 29 22 20 66 69 6c 6c 3d 22 23 32 43 32 46 33 33 22 Data Ascii: 104<svg xmlns="http://www.w3.org/2000/svg" width="8.486" height="4.242" viewBox="0 0 8.486 4.242"> <path id="icon_Dropdown" data-name="icon Dropdown" d="M507.646,508.643l-4.243,4.242-4.243-4.242Z" transform="translate(-499.16 -508.643)" fill="#2C2F33"
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	62615	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:11 UTC	1423	OUT	GET /icons/checked_index.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"14a-618dea4b89233-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f80d6cc339-EWR
2024-05-28 05:15:12 UTC	337	IN	Data Raw: 31 34 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 2e 39 39 38 22 20 68 65 69 67 68 74 3d 22 37 2e 39 39 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 2e 39 39 38 20 37 2e 39 39 39 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 39 38 34 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 39 38 34 30 22 20 64 3d 22 4d 37 2e 35 2c 31 34 2e 35 61 2e 35 2e 35 2c 30 2c 30 2c 31 2d 2e 33 35 34 2d 2e 31 34 36 6c 2d 33 2d 33 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 37 30 37 2d 2e 37 30 37 4c 37 2e 35 2c 31 33 2e 32 39 33 6c 36 2e 36 34 36 2d 36 2e 36 34 36 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 37 30 37 2e 37 30 37 6c 2d 37 2c 37 Data Ascii: 14a<svg xmlns="http://www.w3.org/2000/svg" width="10.998" height="7.999" viewBox="0 0 10.998 7.999"> <path id="Path_9840" data-name="Path 9840" d="M7.5,14.5a.5.5,0,0,1-.354-.146l-3-3a.5.5,0,0,1,.707-.707L7.5,13.293l6.646-6.646a.5.5,0,0,1,.707.707l-7,7
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	62617	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1158	OUT	GET /icons/indexIcons/iconPerson.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"1fb-618dea4b4ec9d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2962 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f88d3fc3f3-EWR
2024-05-28 05:15:12 UTC	514	IN	Data Raw: 31 66 62 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 30 38 36 22 20 68 65 69 67 68 74 3d 22 31 37 2e 36 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 30 38 36 20 31 37 2e 36 34 38 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 55 6e 69 6f 6e 5f 31 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 55 6e 69 6f 6e 20 31 32 22 20 64 3d 22 4d 31 34 2e 31 32 35 2c 31 36 2e 36 34 38 56 31 36 2e 34 61 36 2e 30 38 38 2c 36 2e 30 38 38 2c 30 2c 30 2c 30 2d 31 32 2e 31 37 36 2c 30 76 2e 32 35 48 30 4c 30 2c 31 36 2e 34 61 38 2e 30 33 34 2c 38 2e 30 33 34 2c 30 2c 30 2c 31 2c 31 36 2e 30 36 37 2c 30 6c 30 2c 2e 32 35 33 5a 4d 34 2e 30 37 31 2c 33 2e 39 Data Ascii: 1fb<svg xmlns="http://www.w3.org/2000/svg" width="17.086" height="17.648" viewBox="0 0 17.086 17.648"> <path id="Union_12" data-name="Union 12" d="M14.125,16.648V16.4a6.088,6.088,0,0,0-12.176,0v.25H0L0,16.4a8.034,8.034,0,0,1,16.067,0l0,.253ZM4.071,3.9
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	62616	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1423	OUT	GET /icons/Group%2022069.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"560-618dea1be31af-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2963 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f88eef4229-EWR
2024-05-28 05:15:12 UTC	825	IN	Data Raw: 35 36 30 0d 0a 3c 73 76 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 32 30 36 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 32 32 30 36 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 2d 70 61 74 68 22 3e 0a 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 30 30 33 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d Data Ascii: 560<svg id="Group_22069" data-name="Group 22069" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="16" height="16" viewBox="0 0 16 16"> <defs> <clipPath id="clip-path"> <rect id="Rectangle_10031" data-name=
2024-05-28 05:15:12 UTC	558	IN	Data Raw: 2e 39 31 2d 35 2e 33 38 36 2d 2e 39 31 2d 35 2e 33 38 36 73 2d 34 2e 32 38 37 2d 2e 39 33 33 2d 35 2e 32 2d 2e 39 33 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 20 66 69 6c 6c 3d 22 23 32 37 33 32 34 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 35 30 34 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 35 30 34 31 22 20 64 3d 22 4d 31 30 2e 35 2c 37 61 2e 35 2e 35 2c 30 2c 31 2c 30 2c 2e 35 2e 35 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 35 2d 2e 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 20 66 69 6c 6c 3d 22 23 32 37 33 32 34 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 35 30 34 32 22 20 64 61 74 61 2d 6e Data Ascii: .91-5.386-.91-5.386s-4.287-.933-5.2-.933" transform="translate(0 0)" fill="#273240"/> <path id="Path_15041" data-name="Path 15041" d="M10.5,7a.5.5,0,1,0,.5.5.5.5,0,0,0-.5-.5" transform="translate(0 0)" fill="#273240"/> <path id="Path_15042" data-n
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	62618	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1428	OUT	GET /icons/icon_Modal_Warning.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"2be-618dea1be3597-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 4745 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f90a9e7287-EWR
2024-05-28 05:15:12 UTC	709	IN	Data Raw: 32 62 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 4d 6f 64 61 6c 5f 57 61 72 6e 69 6e 67 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 20 2d 34 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 33 36 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 33 36 30 22 20 64 3d 22 4d 32 39 2c 34 41 32 35 2c 32 35 2c 30 2c 31 2c 30 2c 35 34 2c 32 39 2c 32 35 2c 32 35 2c 30 2c 30 2c 30 2c 32 39 2c 34 5a 6d 30 2c 34 38 2e 30 37 38 41 Data Ascii: 2be<svg xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50"> <g id="icon_Modal_Warning" transform="translate(-4 -4)"> <path id="Caminho_2360" data-name="Caminho 2360" d="M29,4A25,25,0,1,0,54,29,25,25,0,0,0,29,4Zm0,48.078A
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	62619	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1157	OUT	GET /icons/indexIcons/iconPromo.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6IkQxMjdvMVllTjBPQ1IxOFJaY0huREE9PSIsInZhbHVlIjoiSWxtTTNZcWJSNFdYM1h2WGtUNFd1Z0xHZ0daZm5QTkpqNTJleUNjZURKWWRPUlRKUkhqQ3d0bTF0VU5xbkd1T0g4NkhxeXdoWmJQVVNvVXZEb1BZTERJMVRFb1VmRm1UMTFvTlYyYnc5aWtXWFdNbTVaUmI3MGdicll5QlYxaFMiLCJtYWMiOiI5MzFlYmZiMGJlYWVmMTU2YTM0ODUxZTJkOGNlNjlhYTdiMmI0NWMyZmU4NTk0YWRmY2VhNTljMmVkZDQwNmRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldQKzF6ZSsxTlo1eWthWWhoR256SXc9PSIsInZhbHVlIjoidjRzWHhYb0MyVUlIaVRLVkdjQ3E4QmQ3STRVOVkxWUlySDFkTWJteEJJM2JBbTlnd2Z2ZWhxaGVPbmlLclJHd2t2Vnh4Njl5aG1icnRtUGo1QnBuSUVsaXExdjV0bnN2ekpkNWFZTm5Hb3F2UGR3WHBtcW5PQXgrZTFlNFRkejciLCJtYWMiOiJlOWU4YTlkMjRkYzgzMjU4YmEyODIwNjQxOGU0MzY4NjQ0NzBjZjJiNjk3N2U3ZmYxZWIwOTRhZGI4YzE1MGRmIiwidGFnIjoiIn0%3D
2024-05-28 05:15:12 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"3d6-618df06d5ba2a-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5242 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3f90a0442ef-EWR
2024-05-28 05:15:12 UTC	825	IN	Data Raw: 33 64 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 32 22 20 68 65 69 67 68 74 3d 22 31 33 2e 32 39 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 32 20 31 33 2e 32 39 38 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 30 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 35 30 32 22 20 64 3d 22 4d 38 33 2e 38 34 35 2c 31 35 33 2e 32 33 35 6c 2d 33 2e 30 38 32 2c 38 2e 32 31 38 2d 31 2e 31 35 33 2d 2e 34 33 32 2c 33 2e 30 38 33 2d 38 2e 32 31 38 5a 4d 37 39 2e 33 36 31 2c 31 35 37 2e 33 61 31 2e 35 2c 31 2e 35 2c 30 2c 31 2c 30 2d 31 2e 35 2d 31 2e 35 2c 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 31 2e 35 2c Data Ascii: 3d6<svg xmlns="http://www.w3.org/2000/svg" width="16.2" height="13.298" viewBox="0 0 16.2 13.298"> <path id="Path_2502" data-name="Path 2502" d="M83.845,153.235l-3.082,8.218-1.153-.432,3.083-8.218ZM79.361,157.3a1.5,1.5,0,1,0-1.5-1.5,1.5,1.5,0,0,0,1.5,
2024-05-28 05:15:12 UTC	164	IN	Data Raw: 2e 35 48 37 35 2e 37 39 31 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 35 2e 35 76 32 2e 30 35 32 61 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 30 2c 34 2e 39 76 32 2e 30 35 32 61 2e 35 2e 35 2c 30 2c 30 2c 30 2c 2e 35 2e 35 48 38 37 2e 37 61 2e 35 2e 35 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 33 2e 36 34 36 20 2d 31 35 30 2e 34 38 34 29 22 20 66 69 6c 6c 3d 22 23 34 35 34 39 35 30 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: .5H75.791a.5.5,0,0,0-.5.5v2.052a2.5,2.5,0,0,1,0,4.9v2.052a.5.5,0,0,0,.5.5H87.7a.5.5,0,0,0,.5-.5Z" transform="translate(-73.646 -150.484)" fill="#454950"/></svg>
2024-05-28 05:15:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	62620	173.194.76.157	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	819	OUT	POST /g/collect?v=2&tid=G-E6QPTJ9TK6&cid=748051113.1716873311&gtm=45je45m0v884784337z8832375478za200zb832375478&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://book.omnibees.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:12 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://book.omnibees.com Date: Tue, 28 May 2024 05:15:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	62621	216.239.38.181	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1337	OUT	POST /g/collect?v=2&tid=G-E6QPTJ9TK6&gtm=45je45m0v884784337z8832375478za200zb832375478&_p=1716873306676&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=748051113.1716873311&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1716873310&sct=1&seg=0&dl=https%3A%2F%2Fbook.omnibees.com%2Fhotel%2F5659%3FcurrencyId%3D16%26lang%3Dpt-BR&dt=Campo%20Bahia%20Hotel%20Villas%20Spa&en=ecommerceHomepage&_fv=1&_nsi=1&_ss=1&ep.chainName=&ep.hotelName=Campo%20Bahia%20Hotel%20Villas%20Spa&ep.chainId=3090&ep.versionBE=3&tfd=8318 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://book.omnibees.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:12 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://book.omnibees.com Date: Tue, 28 May 2024 05:15:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	62624	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1426	OUT	GET /icons/icon_Circle_Left.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
2024-05-28 05:15:13 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"19a-618df06d8f647-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5238 Expires: Tue, 28 May 2024 17:15:12 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3fdeec715a3-EWR
2024-05-28 05:15:13 UTC	417	IN	Data Raw: 31 39 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 43 69 72 63 6c 65 5f 4c 65 66 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 29 20 72 6f 74 61 74 65 28 39 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 31 32 31 22 20 64 3d 22 4d 30 2c 30 48 33 32 56 33 32 48 30 5a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 Data Ascii: 19a<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"> <g id="icon_Circle_Left" transform="translate(32) rotate(90)"> <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/> <path id="Path_212
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	62622	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1427	OUT	GET /icons/icon_Circle_Right.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
2024-05-28 05:15:13 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"19e-618dea1bc4198-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2961 Expires: Tue, 28 May 2024 17:15:13 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc3fe2e4942e1-EWR
2024-05-28 05:15:13 UTC	421	IN	Data Raw: 31 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 43 69 72 63 6c 65 5f 52 69 67 68 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 33 32 29 20 72 6f 74 61 74 65 28 2d 39 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 31 32 31 22 20 64 3d 22 4d 30 2c 30 48 33 32 56 33 32 48 30 5a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 Data Ascii: 19e<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"> <g id="icon_Circle_Right" transform="translate(0 32) rotate(-90)"> <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/> <path id="Path
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	62623	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:12 UTC	1879	OUT	GET /gethotelstyle?hotel_id=5659&currency_id=16&language_id=8 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-CSRF-TOKEN: nMF0wEmtRD7U7U5PSV5wsNpcZy5gdK2KGj0eoXV2 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:13 UTC	1337	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.12 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IkxQaVpvMWhBL1kwNGVjeTA2d0NMNVE9PSIsInZhbHVlIjoibXcwVDVqd0dNQnpZVUtmNmEzN3J5MnVoY1k2YVNMZlhIc1pYU05YekhOc2NwcVoraDhVK2pndjNjN3c3MW9IaWFtcTBqeHZWWC9GRVpBb1Z4YjJuRHYrNHdRU0x0RE9Cb2gzQWJiemVyRDdveHl6TkxNT2x6eS9UWkNuTy9KUXoiLCJtYWMiOiI1ZGRkM2IzMDEzMjU5NzYyNzg2NDI0ZmJiMDliNmRhMTIwMTgyNTZmM2RlOTkyNGQ2NjhiM2YxMzRhNTFjMmIyIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:13 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6IkkvUDJLQ29Tc2pFdlV5UE9hSkh4OFE9PSIsInZhbHVlIjoiUmUrL254YkFRS05rY2RjTEEzS0VPTGlKVVVBTUw3cmhkQ3FRVWJxRGMzbEhTa1VXSWRTM243NjRRdkFHQlVyYzlIZFRWUEd0dTlPNkVGc1g4cndTcTRnWGx5TXRjZkNCTEhUZnRMeEhIVzFOUkpRNU5MOFZEaDhvcWRlWjgrenciLCJtYWMiOiI4ZDE2MGU0YWQ3NDhmOTc3OWRlYWM4NWUyZWQwNzE5ODU5ZjllYWVkNmM1YjczMjA0MGI2YmM0MTBiZDQwZDg3IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:13 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc3fe29d14357-EWR
2024-05-28 05:15:13 UTC	6	IN	Data Raw: 31 0d 0a 39 0d 0a Data Ascii: 19
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	62626	142.250.186.130	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	955	OUT	GET /td/ga/rul?tid=G-E6QPTJ9TK6&gacid=748051113.1716873311&gtm=45je45m0v884784337z8832375478za200zb832375478&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1683724995 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:13 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 28 May 2024 05:15:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 28-May-2024 05:30:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 05:15:13 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	62627	18.66.112.79	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	589	OUT	GET /sessions/1863763?s=0.25&r=0.14067140413800816 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://book.omnibees.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:13 UTC	337	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Tue, 28 May 2024 05:15:13 GMT X-Cache: Miss from cloudfront Via: 1.1 ab985bb6f3435d42701015dfa6015878.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: rJGvAGfqzfYvbhbh9UkwChkDTtDpMvbjb6OMAeFi7NYyLivxPzgjhg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	62628	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	1835	OUT	GET /availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	1337	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.12 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9lVmdKUlV3TXREcDFEalNCd1BpWWc9PSIsInZhbHVlIjoiTlJqTzZQenhwckx2R2QvVSs5c2IwSEpBTXJGcmFpd21OaDFZNTBaUVFKbTBYdDlyQXV4MzNnWHBoYzh1eDVQd2liL2JIK2VrSExZRXk1bjJJNWJRZ2w5U1dEN3V1YVhkeVRuUUl3VXBvLzlMMjF4NStzSFlhdUMvQ2UwbnF2VysiLCJtYWMiOiIxYzZiZWRkNTg2OWM3YzFhOTE5MmVjNmVmZjlkMTQ4YTcyNWZmYTBkYzRjZDNiMWUzYTYxMWE2NjI2ZTU1ODVkIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:13 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6ImdMUFhjNUJXdWwwS1hWcy9peUdmYXc9PSIsInZhbHVlIjoiOW1SVXV4NmRRQXVEYzZnWFJTakY5QlJRTXVHOXJVekxBZWhxRlJycko5N090ZWJDOGQwR2ZOQXFTdEk3RXRKT05ZdmljL2Z0TWVpemowTk1PaXgvN0tsRTRGVDdhTjNKWStUS0taL0wxVDl0TmZZN3kzaThiNkczZEJrbHY1cFIiLCJtYWMiOiJiZjgxNzMyOWZlYmE3M2U4ODc5YjY4ZGI2OTJhM2M0ZmQ4NzFhZjZiZDdiMWZiZTBmYTAyYjRmN2NkMDE3ZmI4IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:13 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc3ffbfe67c9a-EWR
2024-05-28 05:15:14 UTC	32	IN	Data Raw: 65 65 34 0d 0a 5b 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a Data Ascii: ee4[{"status":"Close","promo":
2024-05-28 05:15:14 UTC	1369	IN	Data Raw: 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 39 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 33 30 54 30 30 3a 30 Data Ascii: false,"date":"2024-05-28T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-29T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-30T00:0
2024-05-28 05:15:14 UTC	1369	IN	Data Raw: 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 32 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 Data Ascii: T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-11T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-12T00:00:00Z","price":1253.56,"cu
2024-05-28 05:15:14 UTC	1049	IN	Data Raw: 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 32 32 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 32 33 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 Data Ascii: .56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-22T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-23T00:00:00Z","price":1253.56,"currency":16,"restrictions
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	62629	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	533	OUT	OPTIONS /report/v4?s=vKRTqH%2FymTxUFWQ42tbWW9Ca%2Fb0nAGd7O4TBn7q0IBUWwpdww9g7wXq3RmV2QPZuz%2Bgyr6kyjorY2diDClAlEEVFe%2Fe9E5U5KV1COArxA8Q%2F1r7qTHn01N2VqVPexvw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://llimages.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:13 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 28 May 2024 05:15:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	62630	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	532	OUT	OPTIONS /report/v4?s=H65Iv5WPlDcvN45X42IN6G2l4tyzMGwjNJQjgbPc1NUMs4TkwurXcUebdaYl3qCAKpstqqDNBEyBZesMMVFhqx%2FD1q4kyAdSjGZEQWBFF6OHYup2JcvoO26bESYXo8mW5vWL HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.termsfeed.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:13 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 28 May 2024 05:15:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	62632	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	1423	OUT	GET /icons/envelope-icon.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D
2024-05-28 05:15:13 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"3b6-618dea1be29df-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6116 Expires: Tue, 28 May 2024 17:15:13 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc401abf47d13-EWR
2024-05-28 05:15:13 UTC	825	IN	Data Raw: 33 62 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 35 33 37 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 35 33 37 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 36 34 20 2d 32 35 32 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 37 30 39 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 52 65 63 74 61 6e 67 6c 65 20 37 30 39 36 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 74 72 61 6e 73 66 Data Ascii: 3b6<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"> <g id="Group_15379" data-name="Group 15379" transform="translate(-464 -252)"> <rect id="Rectangle_7096" data-name="Rectangle 7096" width="16" height="16" transf
2024-05-28 05:15:13 UTC	132	IN	Data Raw: 2e 35 31 37 63 2e 38 33 37 2e 36 35 34 2c 31 2e 31 31 33 2e 38 38 36 2c 34 2e 37 34 31 2c 33 2e 35 31 39 43 35 2e 34 35 32 2c 31 30 2e 37 2c 36 2e 33 36 36 2c 31 31 2e 35 31 31 2c 37 2c 31 31 2e 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 36 35 20 32 35 30 2e 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: .517c.837.654,1.113.886,4.741,3.519C5.452,10.7,6.366,11.511,7,11.5Z" transform="translate(465 250.5)" fill="#fff"/> </g></svg>
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	62633	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	531	OUT	OPTIONS /report/v4?s=tEJ76GAUZKsDWQjctXUXdd%2FVwUqCg8oDqn79n6X%2Ffb8BzunUk5EqK4YUG%2FOhnP9tv6QczmRMgub90gf66CeVZrgAgzYk0KupQZYoGt5rXCleg0Cnn8RE%2F6Z5EAliBC8%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://llimages.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:13 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 28 May 2024 05:15:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	62631	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	1539	OUT	GET /timezone/3090/8 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	1336	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.4 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:14 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3cGRxV1QyYUJVdFVyWHhoa1lPTktzL2hQeUV6dVJGd2wiLCJtYWMiOiI0ZTlhNjNjOTZiMDgzMzNkMzJiMjI4ZjI1ZDY1MGJmZGEwN2I2MDUyMTQyMmJmOTJjNzUyYzQ1NmYwMzE2MDg4IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:14 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc401ae797c87-EWR
2024-05-28 05:15:14 UTC	27	IN	Data Raw: 31 35 0d 0a 7b 22 35 36 35 39 22 3a 22 45 74 63 5c 2f 47 4d 54 2b 33 22 7d 0d 0a Data Ascii: 15{"5659":"Etc\/GMT+3"}
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	62634	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	1843	OUT	GET /icons/icons_White/iconWhite_Footer_Contact.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:13 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"451-618dea1bb7679-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6116 Expires: Tue, 28 May 2024 17:15:13 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc401a9a71895-EWR
2024-05-28 05:15:13 UTC	825	IN	Data Raw: 34 35 31 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 30 30 32 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 30 30 32 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 46 6f 6f 74 65 72 5f 43 6f 6e 74 61 63 74 22 20 64 3d 22 4d 31 39 2e 39 39 31 2c 31 36 2e 36 33 61 2e 37 37 34 2e 37 37 34 2c 30 2c 30 2c 31 2d 2e 32 33 2e 36 38 31 4c 31 37 2e 35 2c 31 39 2e 35 34 61 31 2e 31 31 38 2c 31 2e 31 31 38 2c 30 2c 30 2c 31 2d 2e 34 2e 32 39 2c 31 2e 34 38 34 2c 31 2e 34 38 34 2c 30 2c 30 2c 31 2d 2e 34 37 39 2e 31 35 6c 2d 2e 31 2e 30 31 4c 31 36 2e 33 2c 32 30 61 38 2e 36 36 31 2c 38 2e 36 Data Ascii: 451<svg xmlns="http://www.w3.org/2000/svg" width="16.002" height="16" viewBox="0 0 16.002 16"> <path id="icon_Footer_Contact" d="M19.991,16.63a.774.774,0,0,1-.23.681L17.5,19.54a1.118,1.118,0,0,1-.4.29,1.484,1.484,0,0,1-.479.15l-.1.01L16.3,20a8.661,8.6
2024-05-28 05:15:13 UTC	287	IN	Data Raw: 2e 31 2c 31 31 2e 31 2c 30 2c 30 2c 30 2c 31 2e 33 36 2c 31 2e 32 31 2c 36 2e 34 37 32 2c 36 2e 34 37 32 2c 30 2c 30 2c 30 2c 2e 39 38 39 2e 36 33 2c 32 2e 34 38 36 2c 32 2e 34 38 36 2c 30 2c 30 2c 30 2c 2e 36 31 31 2e 32 35 6c 2e 32 30 39 2e 30 34 61 2e 38 38 2e 38 38 2c 30 2c 30 2c 30 2c 2e 31 31 2d 2e 30 32 31 2e 33 33 38 2e 33 33 38 2c 30 2c 30 2c 30 2c 2e 31 31 2d 2e 30 36 6c 2e 39 35 39 2d 2e 39 39 61 31 2e 30 36 2c 31 2e 30 36 2c 30 2c 30 2c 31 2c 2e 37 32 31 2d 2e 32 37 31 2e 38 32 37 2e 38 32 37 2c 30 2c 30 2c 31 2c 2e 34 34 39 2e 31 31 31 48 31 36 2e 33 6c 33 2e 32 37 31 2c 31 2e 39 33 41 2e 38 2e 38 2c 30 2c 30 2c 31 2c 31 39 2e 39 39 31 2c 31 36 2e 36 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 39 39 39 Data Ascii: .1,11.1,0,0,0,1.36,1.21,6.472,6.472,0,0,0,.989.63,2.486,2.486,0,0,0,.611.25l.209.04a.88.88,0,0,0,.11-.021.338.338,0,0,0,.11-.06l.959-.99a1.06,1.06,0,0,1,.721-.271.827.827,0,0,1,.449.111H16.3l3.271,1.93A.8.8,0,0,1,19.991,16.63Z" transform="translate(-3.999
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	62635	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:13 UTC	1547	OUT	GET /icons/Group%2022069.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:13 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"560-618dea1be31af-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2964 Expires: Tue, 28 May 2024 17:15:13 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc401fb8517d9-EWR
2024-05-28 05:15:13 UTC	825	IN	Data Raw: 35 36 30 0d 0a 3c 73 76 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 32 30 36 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 32 32 30 36 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 2d 70 61 74 68 22 3e 0a 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 30 30 33 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d Data Ascii: 560<svg id="Group_22069" data-name="Group 22069" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="16" height="16" viewBox="0 0 16 16"> <defs> <clipPath id="clip-path"> <rect id="Rectangle_10031" data-name=
2024-05-28 05:15:13 UTC	558	IN	Data Raw: 2e 39 31 2d 35 2e 33 38 36 2d 2e 39 31 2d 35 2e 33 38 36 73 2d 34 2e 32 38 37 2d 2e 39 33 33 2d 35 2e 32 2d 2e 39 33 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 20 66 69 6c 6c 3d 22 23 32 37 33 32 34 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 35 30 34 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 35 30 34 31 22 20 64 3d 22 4d 31 30 2e 35 2c 37 61 2e 35 2e 35 2c 30 2c 31 2c 30 2c 2e 35 2e 35 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 35 2d 2e 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 20 66 69 6c 6c 3d 22 23 32 37 33 32 34 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 35 30 34 32 22 20 64 61 74 61 2d 6e Data Ascii: .91-5.386-.91-5.386s-4.287-.933-5.2-.933" transform="translate(0 0)" fill="#273240"/> <path id="Path_15041" data-name="Path 15041" d="M10.5,7a.5.5,0,1,0,.5.5.5.5,0,0,0-.5-.5" transform="translate(0 0)" fill="#273240"/> <path id="Path_15042" data-n
2024-05-28 05:15:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	62636	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1820	OUT	GET /icons/Grupo%2015348.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	545	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"1097-618df02b10223-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6117 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc405090a558a-EWR
2024-05-28 05:15:14 UTC	824	IN	Data Raw: 31 30 39 37 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 30 2e 36 33 22 20 68 65 69 67 68 74 3d 22 31 36 2e 39 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 2e 36 33 20 31 36 2e 39 34 35 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 35 33 34 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 35 33 34 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 36 30 20 2d 31 35 36 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 35 33 34 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 35 33 34 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 36 Data Ascii: 1097<svg xmlns="http://www.w3.org/2000/svg" width="80.63" height="16.945" viewBox="0 0 80.63 16.945"> <g id="Grupo_15348" data-name="Grupo 15348" transform="translate(-760 -156)"> <g id="Grupo_15346" data-name="Grupo 15346" transform="translate(76
2024-05-28 05:15:14 UTC	1369	IN	Data Raw: 61 6d 69 6e 68 6f 20 32 30 33 39 22 20 64 3d 22 4d 2d 39 31 2e 38 2d 37 32 2e 37 34 37 76 2d 35 2e 32 33 35 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2d 2e 35 37 2d 2e 39 38 38 4c 2d 39 36 2e 39 2d 38 31 2e 35 38 38 61 31 2e 31 34 2c 31 2e 31 34 2c 30 2c 30 2c 30 2d 31 2e 31 34 31 2c 30 6c 2d 34 2e 35 33 34 2c 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2d 2e 35 37 2e 39 38 38 76 35 2e 32 33 35 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 2e 35 37 2e 39 38 38 6c 34 2e 35 33 34 2c 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 31 2e 31 34 31 2c 30 6c 34 2e 35 33 34 2d 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 2e 35 37 2d 2e 39 38 38 22 20 74 72 61 6e 73 Data Ascii: aminho 2039" d="M-91.8-72.747v-5.235a1.141,1.141,0,0,0-.57-.988L-96.9-81.588a1.14,1.14,0,0,0-1.141,0l-4.534,2.618a1.141,1.141,0,0,0-.57.988v5.235a1.141,1.141,0,0,0,.57.988l4.534,2.618a1.141,1.141,0,0,0,1.141,0l4.534-2.618a1.141,1.141,0,0,0,.57-.988" trans
2024-05-28 05:15:14 UTC	1369	IN	Data Raw: 2e 30 35 39 2c 32 2e 30 36 31 2c 32 2e 30 36 31 2c 30 2c 30 2c 31 2d 32 2e 30 35 39 2c 32 2e 30 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 37 38 37 2e 30 30 35 20 32 31 32 2e 33 30 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 35 38 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 35 38 35 22 20 64 3d 22 4d 2d 31 39 38 31 2e 32 35 34 2d 32 30 39 2e 31 30 36 61 33 2e 36 33 35 2c 33 2e 36 33 35 2c 30 2c 30 2c 31 2c 33 2e 37 38 38 2d 33 2e 37 39 2c 33 2e 36 33 38 2c 33 2e 36 33 38 2c 30 2c 30 2c 31 2c 33 2e 38 2c 33 2e 37 39 2c 33 2e 36 33 39 2c 33 2e 36 33 39 2c 30 2c 30 2c 31 2d 33 2e 38 2c 33 2e 37 37 34 2c 33 2e 36 33 37 Data Ascii: .059,2.061,2.061,0,0,1-2.059,2.06" transform="translate(1787.005 212.305)" fill="#fff"/> <path id="Caminho_2585" data-name="Caminho 2585" d="M-1981.254-209.106a3.635,3.635,0,0,1,3.788-3.79,3.638,3.638,0,0,1,3.8,3.79,3.639,3.639,0,0,1-3.8,3.774,3.637
2024-05-28 05:15:14 UTC	693	IN	Data Raw: 68 33 2e 36 34 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 38 31 30 2e 36 33 31 20 32 31 32 2e 33 30 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 35 39 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 35 39 30 22 20 64 3d 22 4d 2d 31 38 33 31 2e 33 32 38 2d 32 30 38 2e 35 36 34 76 2d 2e 31 30 37 61 31 2e 35 35 33 2c 31 2e 35 35 33 2c 30 2c 30 2c 30 2c 31 2d 31 2e 35 30 38 63 30 2d 31 2e 32 36 38 2d 2e 39 34 2d 31 2e 39 36 37 2d 32 2e 36 2d 31 2e 39 36 37 68 2d 33 2e 33 35 34 76 37 2e 32 33 37 68 33 2e 34 37 34 63 31 2e 36 34 2c 30 2c 32 2e 37 31 34 2d 2e 37 2c 32 2e 37 31 34 2d 32 2e 30 36 31 61 31 2e 36 31 38 2c 31 2e Data Ascii: h3.643Z" transform="translate(1810.631 212.305)" fill="#fff"/> <path id="Caminho_2590" data-name="Caminho 2590" d="M-1831.328-208.564v-.107a1.553,1.553,0,0,0,1-1.508c0-1.268-.94-1.967-2.6-1.967h-3.354v7.237h3.474c1.64,0,2.714-.7,2.714-2.061a1.618,1.
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	62637	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1826	OUT	GET /icons/session_modal_imgv4.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"7bd-618dea4b4ec9d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 921 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc404fa1c18d0-EWR
2024-05-28 05:15:14 UTC	826	IN	Data Raw: 37 62 64 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 32 2e 35 33 37 22 20 68 65 69 67 68 74 3d 22 31 36 32 2e 30 36 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 32 2e 35 33 37 20 31 36 32 2e 30 36 37 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 2e 30 38 38 20 2d 30 2e 32 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 Data Ascii: 7bd<svg xmlns="http://www.w3.org/2000/svg" width="302.537" height="162.067" viewBox="0 0 302.537 162.067"> <g id="Grupo_12569" data-name="Grupo 12569" transform="translate(3.088 -0.23)"> <g id="Grupo_12567" data-name="Grupo 12567" transform="trans
2024-05-28 05:15:14 UTC	1162	IN	Data Raw: 2c 30 2c 31 2c 30 2d 35 2e 31 31 39 2e 38 35 31 6c 31 2e 34 31 34 2c 38 2e 34 38 39 61 36 34 2e 38 36 35 2c 36 34 2e 38 36 35 2c 30 2c 31 2c 30 2c 32 34 2e 35 2c 35 30 2e 37 36 38 41 32 2e 35 39 34 2c 32 2e 35 39 34 2c 30 2c 30 2c 30 2c 31 33 32 2e 31 34 39 2c 36 37 2e 32 37 37 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 34 2e 39 37 35 20 31 30 2e 38 37 36 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 30 2e 37 30 38 20 33 37 2e 36 36 36 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 Data Ascii: ,0,1,0-5.119.851l1.414,8.489a64.865,64.865,0,1,0,24.5,50.768A2.594,2.594,0,0,0,132.149,67.277Z" transform="translate(134.975 10.876)" fill="#fff"/> <g id="Grupo_12565" data-name="Grupo 12565" transform="translate(120.708 37.666)"> <path id="
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	62638	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1552	OUT	GET /icons/icon_Modal_Warning.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"2be-618dea1be3597-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 4747 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc404f8ea8ccd-EWR
2024-05-28 05:15:14 UTC	709	IN	Data Raw: 32 62 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 4d 6f 64 61 6c 5f 57 61 72 6e 69 6e 67 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 20 2d 34 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 33 36 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 33 36 30 22 20 64 3d 22 4d 32 39 2c 34 41 32 35 2c 32 35 2c 30 2c 31 2c 30 2c 35 34 2c 32 39 2c 32 35 2c 32 35 2c 30 2c 30 2c 30 2c 32 39 2c 34 5a 6d 30 2c 34 38 2e 30 37 38 41 Data Ascii: 2be<svg xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50"> <g id="icon_Modal_Warning" transform="translate(-4 -4)"> <path id="Caminho_2360" data-name="Caminho 2360" d="M29,4A25,25,0,1,0,54,29,25,25,0,0,0,29,4Zm0,48.078A
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	62639	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1548	OUT	GET /icons/information_v3.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	541	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"25b-618dea1be3597-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4051d9242cf-EWR
2024-05-28 05:15:14 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 2c 2e 63 7b 73 74 72 6f 6b 65 3a 23 32 37 33 32 34 30 3b 7d 2e 63 7b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 7d 2e 64 7b 73 74 72 6f 6b 65 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 37 30 20 2d 36 34 32 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 Data Ascii: 25b<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b,.c{fill:none;}.b,.c{stroke:#273240;}.c{stroke-linecap:round;}.d{stroke:none;}</style></defs><g transform="translate(-470 -642)"><rect class="a" widt
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	62641	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1561	OUT	GET /v4/icons/meals/breakfast_v4_green.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	541	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"2f1-618df02b00053-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4052d4215c3-EWR
2024-05-28 05:15:14 UTC	760	IN	Data Raw: 32 66 31 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 73 74 72 6f 6b 65 3a 23 30 30 38 30 30 39 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 39 20 2d 36 34 31 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 31 Data Ascii: 2f1<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:#008009;stroke-linecap:round;stroke-linejoin:round;}</style></defs><g transform="translate(-619 -641)"><rect class="a" width="1
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	62643	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	472	OUT	POST /report/v4?s=H65Iv5WPlDcvN45X42IN6G2l4tyzMGwjNJQjgbPc1NUMs4TkwurXcUebdaYl3qCAKpstqqDNBEyBZesMMVFhqx%2FD1q4kyAdSjGZEQWBFF6OHYup2JcvoO26bESYXo8mW5vWL HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 957 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:14 UTC	957	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 31 31 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 35 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 37 35 2e 31 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 5f Data Ascii: [{"age":59112,"body":{"elapsed_time":957,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"http://www.campobahia.com/","sampling_fraction":1.0,"server_ip":"172.67.75.149","status_code":200,"type":"http.response.invalid.content_length_
2024-05-28 05:15:14 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 28 May 2024 05:15:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	62642	157.240.253.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1065	OUT	POST /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=2&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1 Host: api.whatsapp.com Connection: keep-alive Content-Length: 1425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydPySjwfMYVfYiBEA Accept: / Origin: https://api.whatsapp.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://api.whatsapp.com/send?phone=557331984210&text=Ol%C3%A1!%20Gostaria%20de%20consultar%20disponibilidade%20de%20datas. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:14 UTC	1425	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 50 79 53 6a 77 66 4d 59 56 66 59 69 42 45 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 38 37 33 33 31 31 38 36 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 50 79 53 6a 77 66 4d 59 56 66 59 69 42 45 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 70 6f 73 74 73 22 3a 22 72 51 71 41 57 31 73 69 5a 6d 46 73 59 32 38 36 62 32 52 7a 58 33 64 6c 59 6c 39 69 59 58 52 6a Data Ascii: ------WebKitFormBoundarydPySjwfMYVfYiBEAContent-Disposition: form-data; name="ts"1716873311863------WebKitFormBoundarydPySjwfMYVfYiBEAContent-Disposition: form-data; name="q"[{"app_id":"256281040558","posts":"rQqAW1siZmFsY286b2RzX3dlYl9iYXRj
2024-05-28 05:15:14 UTC	1635	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob:;script-src 'unsafe-eval' 'unsafe-inline' .fbcdn.net .whatsapp.com .whatsapp.net 'self' data: blob:;style-src 'self' 'unsafe-inline' data: blob: whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net .whatsapp.net;connect-src 'self' https://.whatsapp.com data: blob:;font-src https://.fbcdn.net https://static.whatsapp.net data:;img-src whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net *.whatsapp.net;frame-src whatsapp: 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top
2024-05-28 05:15:14 UTC	2015	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-28 05:15:14 UTC	21	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	62640	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1547	OUT	GET /icons/checked_index.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	541	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"14a-618dea4b89233-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4052da98c48-EWR
2024-05-28 05:15:14 UTC	337	IN	Data Raw: 31 34 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 2e 39 39 38 22 20 68 65 69 67 68 74 3d 22 37 2e 39 39 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 2e 39 39 38 20 37 2e 39 39 39 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 39 38 34 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 39 38 34 30 22 20 64 3d 22 4d 37 2e 35 2c 31 34 2e 35 61 2e 35 2e 35 2c 30 2c 30 2c 31 2d 2e 33 35 34 2d 2e 31 34 36 6c 2d 33 2d 33 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 37 30 37 2d 2e 37 30 37 4c 37 2e 35 2c 31 33 2e 32 39 33 6c 36 2e 36 34 36 2d 36 2e 36 34 36 61 2e 35 2e 35 2c 30 2c 30 2c 31 2c 2e 37 30 37 2e 37 30 37 6c 2d 37 2c 37 Data Ascii: 14a<svg xmlns="http://www.w3.org/2000/svg" width="10.998" height="7.999" viewBox="0 0 10.998 7.999"> <path id="Path_9840" data-name="Path 9840" d="M7.5,14.5a.5.5,0,0,1-.354-.146l-3-3a.5.5,0,0,1,.707-.707L7.5,13.293l6.646-6.646a.5.5,0,0,1,.707.707l-7,7
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	62644	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	478	OUT	POST /report/v4?s=vKRTqH%2FymTxUFWQ42tbWW9Ca%2Fb0nAGd7O4TBn7q0IBUWwpdww9g7wXq3RmV2QPZuz%2Bgyr6kyjorY2diDClAlEEVFe%2Fe9E5U5KV1COArxA8Q%2F1r7qTHn01N2VqVPexvw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 456 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:14 UTC	456	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 33 37 30 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 36 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 Data Ascii: [{"age":43707,"body":{"elapsed_time":860,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"http://www.campobahia.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":200,"type":"abandoned"},"type":"network-error","ur
2024-05-28 05:15:14 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 28 May 2024 05:15:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	62645	35.190.80.1	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	476	OUT	POST /report/v4?s=tEJ76GAUZKsDWQjctXUXdd%2FVwUqCg8oDqn79n6X%2Ffb8BzunUk5EqK4YUG%2FOhnP9tv6QczmRMgub90gf66CeVZrgAgzYk0KupQZYoGt5rXCleg0Cnn8RE%2F6Z5EAliBC8%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 458 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:14 UTC	458	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 30 34 36 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 Data Ascii: [{"age":30460,"body":{"elapsed_time":1138,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.campobahia.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":200,"type":"abandoned"},"type":"network-error","
2024-05-28 05:15:14 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 28 May 2024 05:15:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	62648	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1846	OUT	GET /icons/icons_White/iconWhite_Checkbox_Selected.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/v3/css/header.css?version=1.0.0.395 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6Im9lVmdKUlV3TXREcDFEalNCd1BpWWc9PSIsInZhbHVlIjoiTlJqTzZQenhwckx2R2QvVSs5c2IwSEpBTXJGcmFpd21OaDFZNTBaUVFKbTBYdDlyQXV4MzNnWHBoYzh1eDVQd2liL2JIK2VrSExZRXk1bjJJNWJRZ2w5U1dEN3V1YVhkeVRuUUl3VXBvLzlMMjF4NStzSFlhdUMvQ2UwbnF2VysiLCJtYWMiOiIxYzZiZWRkNTg2OWM3YzFhOTE5MmVjNmVmZjlkMTQ4YTcyNWZmYTBkYzRjZDNiMWUzYTYxMWE2NjI2ZTU1ODVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdMUFhjNUJXdWwwS1hWcy9peUdmYXc9PSIsInZhbHVlIjoiOW1SVXV4NmRRQXVEYzZnWFJTakY5QlJRTXVHOXJVekxBZWhxRlJycko5N090ZWJDOGQwR2ZOQXFTdEk3RXRKT05ZdmljL2Z0TWVpemowTk1PaXgvN0tsRTRGVDdhTjNKW [TRUNCATED]
2024-05-28 05:15:14 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"11a-618dea4b59c65-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5244 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4094dee0ced-EWR
2024-05-28 05:15:14 UTC	289	IN	Data Raw: 31 31 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 34 34 34 22 20 68 65 69 67 68 74 3d 22 39 2e 32 36 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 34 34 34 20 39 2e 32 36 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 43 68 65 63 6b 62 6f 78 5f 53 65 6c 65 63 74 65 64 22 20 64 3d 22 4d 35 34 34 2e 33 38 32 2c 34 39 36 2e 38 34 34 6c 2d 34 2e 34 34 34 2d 34 2e 34 34 34 2c 31 2e 32 35 33 2d 31 2e 32 35 33 2c 33 2e 31 39 31 2c 33 2e 31 38 32 2c 36 2e 37 34 37 2d 36 2e 37 34 37 2c 31 2e 32 35 33 2c 31 2e 32 36 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 33 39 2e 39 33 38 20 2d 34 38 Data Ascii: 11a<svg xmlns="http://www.w3.org/2000/svg" width="12.444" height="9.262" viewBox="0 0 12.444 9.262"> <path id="icon_Checkbox_Selected" d="M544.382,496.844l-4.444-4.444,1.253-1.253,3.191,3.182,6.747-6.747,1.253,1.262Z" transform="translate(-539.938 -48
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	62647	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1847	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6Im9lVmdKUlV3TXREcDFEalNCd1BpWWc9PSIsInZhbHVlIjoiTlJqTzZQenhwckx2R2QvVSs5c2IwSEpBTXJGcmFpd21OaDFZNTBaUVFKbTBYdDlyQXV4MzNnWHBoYzh1eDVQd2liL2JIK2VrSExZRXk1bjJJNWJRZ2w5U1dEN3V1YVhkeVRuUUl3VXBvLzlMMjF4NStzSFlhdUMvQ2UwbnF2VysiLCJtYWMiOiIxYzZiZWRkNTg2OWM3YzFhOTE5MmVjNmVmZjlkMTQ4YTcyNWZmYTBkYzRjZDNiMWUzYTYxMWE2NjI2ZTU1ODVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdMUFhjNUJXdWwwS1hWcy9peUdmYXc9PSIsInZhbHVlIjoiOW1SVXV4NmRRQXVEYzZnWFJTakY5QlJRTXVHOXJVekxBZWhxRlJycko5N090ZWJDOGQwR2ZOQXFTdEk3RXRKT05ZdmljL2Z0TWVpemowTk1PaXgvN0tsRTRGVDdhTjNKW [TRUNCATED]
2024-05-28 05:15:14 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"116-618dea4b66b6d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2963 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4095d7ec443-EWR
2024-05-28 05:15:14 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	62646	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:14 UTC	1550	OUT	GET /icons/icon_Circle_Left.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; XSRF-TOKEN=eyJpdiI6ImMrOFFtWWhDd3o3UGJmVlc0Mnk3MFE9PSIsInZhbHVlIjoiM3lUd2pMR0xHVzNjUUdlaldqUFk5cTVQay8zMHk1UkJjRUpCQmhzVzNqZnl4RWJzV284c0pPYVduT04yV0taWUttbFJheXlrOS9KTlRYWlpWb3RHN2JNS2xDK3ovWkdaSHpUc1FtaWx3RmdxbDV5UHpIQzlid2YvZEwzSEVwa2ciLCJtYWMiOiJmMTY2ZjEwMjZkMTIzYjQ4Y2QyNTA4Y2MyYjdiNzMxNjZmMjNjZGUxZTkyNmUzOTllODAzYTkwZGUxYTM5OTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpZOGZNSklHM1oxRlZ0aWlFMlVBK0E9PSIsInZhbHVlIjoibk9OYWU1dWVlRGRPUnJhOTNUUTJFVGhLdjVpYmNFQkNkNE15TWdXVFZhUVlsM24zVVEySmxkN3NWQzZSZ2R1V2FoWVNOSDB4aVQ1RkFVWC9DTi9wSy9Ma0VuNU9tZ05tZllybzREb25laFVhNzhrYWNCdE1CWjhSTmpFbE4rWWoiLCJtYWMiOiI3NmM0NDYxZmI5NGQ3NGIxMzUxNTQ5OWI1OTNiZWQ1ZDQxMDNiZWQ2ZDA4NDJjNDZmOTA1MGE2MTYyYWJmYjQ1IiwidGFnIjoiIn0%3D; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MD [TRUNCATED]
2024-05-28 05:15:14 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"19a-618df06d8f647-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5240 Expires: Tue, 28 May 2024 17:15:14 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4098b7472a4-EWR
2024-05-28 05:15:14 UTC	417	IN	Data Raw: 31 39 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 43 69 72 63 6c 65 5f 4c 65 66 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 29 20 72 6f 74 61 74 65 28 39 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 31 32 31 22 20 64 3d 22 4d 30 2c 30 48 33 32 56 33 32 48 30 5a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 Data Ascii: 19a<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"> <g id="icon_Circle_Left" transform="translate(32) rotate(90)"> <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/> <path id="Path_212
2024-05-28 05:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	62650	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1821	OUT	GET /icons/x-close.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/v3/css/zcalendar_css.css?version=1.0.0.395 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"1e9-618df06d8c767-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2957 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc40c99540f4b-EWR
2024-05-28 05:15:15 UTC	496	IN	Data Raw: 31 65 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 73 74 72 6f 6b 65 3a 72 65 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 39 34 20 2d 36 39 30 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 Data Ascii: 1e9<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:red;stroke-linecap:round;stroke-width:1.5px;}</style></defs><g transform="translate(-194 -690)"><rect class="a" width="16" heig
2024-05-28 05:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	62649	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1551	OUT	GET /icons/icon_Circle_Right.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"19e-618dea1bc4198-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2963 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc40c98dec341-EWR
2024-05-28 05:15:15 UTC	421	IN	Data Raw: 31 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 43 69 72 63 6c 65 5f 52 69 67 68 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 33 32 29 20 72 6f 74 61 74 65 28 2d 39 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 31 32 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 31 32 31 22 20 64 3d 22 4d 30 2c 30 48 33 32 56 33 32 48 30 5a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 Data Ascii: 19e<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"> <g id="icon_Circle_Right" transform="translate(0 32) rotate(-90)"> <path id="Path_2121" data-name="Path 2121" d="M0,0H32V32H0Z" fill="none"/> <path id="Path
2024-05-28 05:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	62651	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1580	OUT	GET /gethotelstyle?hotel_id=5659&currency_id=16&language_id=8 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	1336	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.4 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6InpsUjVMQzZwVVJvaUZCeTNpYzJ4MVE9PSIsInZhbHVlIjoiaDF5SC9ScS9QalFacG1CeWxGRkZBckJQc1k0bTh5U2dmZkNNanlMbnZvYXZjelNFVXlkV0w3R1Q3WGVvUlNVaFd1TGJyaDJKRVZoYkZidGVwVjhUUnpudHpVSVllK0JIREFaSkVYSEw2V3BZVTk1U2prRXhnSHViYUFRWU40WjAiLCJtYWMiOiI5ZmYxNGNlM2JhMmI4YjgxMmNkNTZiZmJhY2U5MTM4YTIwYzk3NGRkNzMyODVlZjNjZTEwZDQzMWQwY2ViYjI3IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:16 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6IlcrL3M1SlB5NVJWYkxxblkwMDFXZnc9PSIsInZhbHVlIjoiU0I5OHQwaTJWNW9qcVFmUldFVC82V2FDWit0RHN3Z295R01XMTRvR1h4YUs2QndQY2xDVXdyWnVBQkhCemd0RHpkQ21obnVxMUxYcjFhb3FZTnIwcUZYYmRudjdQcXpqblBKdEFuMC93K21PWklzbkJWUkdwWEYrdHkyMGRtbTAiLCJtYWMiOiIyMGMxY2ZlZjQ2MDg1OTkzOGIzNjQ1ZjJjMjY5MTZiMzYyYzQ2NDlkMGY4MDYwYmIwMTg5NTlmOTAwNzJjNjM0IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:16 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc40dcb8ec3ee-EWR
2024-05-28 05:15:16 UTC	6	IN	Data Raw: 31 0d 0a 39 0d 0a Data Ascii: 19
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	62653	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1553	OUT	GET /icons/session_modal_imgv4.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	543	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"7bd-618dea4b4ec9d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 922 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc40dca511a1b-EWR
2024-05-28 05:15:15 UTC	826	IN	Data Raw: 37 62 64 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 32 2e 35 33 37 22 20 68 65 69 67 68 74 3d 22 31 36 32 2e 30 36 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 32 2e 35 33 37 20 31 36 32 2e 30 36 37 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 2e 30 38 38 20 2d 30 2e 32 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 Data Ascii: 7bd<svg xmlns="http://www.w3.org/2000/svg" width="302.537" height="162.067" viewBox="0 0 302.537 162.067"> <g id="Grupo_12569" data-name="Grupo 12569" transform="translate(3.088 -0.23)"> <g id="Grupo_12567" data-name="Grupo 12567" transform="trans
2024-05-28 05:15:15 UTC	1162	IN	Data Raw: 2c 30 2c 31 2c 30 2d 35 2e 31 31 39 2e 38 35 31 6c 31 2e 34 31 34 2c 38 2e 34 38 39 61 36 34 2e 38 36 35 2c 36 34 2e 38 36 35 2c 30 2c 31 2c 30 2c 32 34 2e 35 2c 35 30 2e 37 36 38 41 32 2e 35 39 34 2c 32 2e 35 39 34 2c 30 2c 30 2c 30 2c 31 33 32 2e 31 34 39 2c 36 37 2e 32 37 37 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 34 2e 39 37 35 20 31 30 2e 38 37 36 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 32 35 36 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 32 35 36 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 30 2e 37 30 38 20 33 37 2e 36 36 36 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 Data Ascii: ,0,1,0-5.119.851l1.414,8.489a64.865,64.865,0,1,0,24.5,50.768A2.594,2.594,0,0,0,132.149,67.277Z" transform="translate(134.975 10.876)" fill="#fff"/> <g id="Grupo_12565" data-name="Grupo 12565" transform="translate(120.708 37.666)"> <path id="
2024-05-28 05:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	62654	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1547	OUT	GET /icons/Grupo%2015348.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	545	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"1097-618df02b10223-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6118 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc40dda8543da-EWR
2024-05-28 05:15:15 UTC	824	IN	Data Raw: 31 30 39 37 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 30 2e 36 33 22 20 68 65 69 67 68 74 3d 22 31 36 2e 39 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 2e 36 33 20 31 36 2e 39 34 35 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 35 33 34 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 35 33 34 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 36 30 20 2d 31 35 36 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 75 70 6f 5f 31 35 33 34 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 75 70 6f 20 31 35 33 34 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 36 Data Ascii: 1097<svg xmlns="http://www.w3.org/2000/svg" width="80.63" height="16.945" viewBox="0 0 80.63 16.945"> <g id="Grupo_15348" data-name="Grupo 15348" transform="translate(-760 -156)"> <g id="Grupo_15346" data-name="Grupo 15346" transform="translate(76
2024-05-28 05:15:15 UTC	1369	IN	Data Raw: 61 6d 69 6e 68 6f 20 32 30 33 39 22 20 64 3d 22 4d 2d 39 31 2e 38 2d 37 32 2e 37 34 37 76 2d 35 2e 32 33 35 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2d 2e 35 37 2d 2e 39 38 38 4c 2d 39 36 2e 39 2d 38 31 2e 35 38 38 61 31 2e 31 34 2c 31 2e 31 34 2c 30 2c 30 2c 30 2d 31 2e 31 34 31 2c 30 6c 2d 34 2e 35 33 34 2c 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2d 2e 35 37 2e 39 38 38 76 35 2e 32 33 35 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 2e 35 37 2e 39 38 38 6c 34 2e 35 33 34 2c 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 31 2e 31 34 31 2c 30 6c 34 2e 35 33 34 2d 32 2e 36 31 38 61 31 2e 31 34 31 2c 31 2e 31 34 31 2c 30 2c 30 2c 30 2c 2e 35 37 2d 2e 39 38 38 22 20 74 72 61 6e 73 Data Ascii: aminho 2039" d="M-91.8-72.747v-5.235a1.141,1.141,0,0,0-.57-.988L-96.9-81.588a1.14,1.14,0,0,0-1.141,0l-4.534,2.618a1.141,1.141,0,0,0-.57.988v5.235a1.141,1.141,0,0,0,.57.988l4.534,2.618a1.141,1.141,0,0,0,1.141,0l4.534-2.618a1.141,1.141,0,0,0,.57-.988" trans
2024-05-28 05:15:15 UTC	1369	IN	Data Raw: 2e 30 35 39 2c 32 2e 30 36 31 2c 32 2e 30 36 31 2c 30 2c 30 2c 31 2d 32 2e 30 35 39 2c 32 2e 30 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 37 38 37 2e 30 30 35 20 32 31 32 2e 33 30 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 35 38 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 35 38 35 22 20 64 3d 22 4d 2d 31 39 38 31 2e 32 35 34 2d 32 30 39 2e 31 30 36 61 33 2e 36 33 35 2c 33 2e 36 33 35 2c 30 2c 30 2c 31 2c 33 2e 37 38 38 2d 33 2e 37 39 2c 33 2e 36 33 38 2c 33 2e 36 33 38 2c 30 2c 30 2c 31 2c 33 2e 38 2c 33 2e 37 39 2c 33 2e 36 33 39 2c 33 2e 36 33 39 2c 30 2c 30 2c 31 2d 33 2e 38 2c 33 2e 37 37 34 2c 33 2e 36 33 37 Data Ascii: .059,2.061,2.061,0,0,1-2.059,2.06" transform="translate(1787.005 212.305)" fill="#fff"/> <path id="Caminho_2585" data-name="Caminho 2585" d="M-1981.254-209.106a3.635,3.635,0,0,1,3.788-3.79,3.638,3.638,0,0,1,3.8,3.79,3.639,3.639,0,0,1-3.8,3.774,3.637
2024-05-28 05:15:15 UTC	693	IN	Data Raw: 68 33 2e 36 34 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 38 31 30 2e 36 33 31 20 32 31 32 2e 33 30 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 35 39 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 35 39 30 22 20 64 3d 22 4d 2d 31 38 33 31 2e 33 32 38 2d 32 30 38 2e 35 36 34 76 2d 2e 31 30 37 61 31 2e 35 35 33 2c 31 2e 35 35 33 2c 30 2c 30 2c 30 2c 31 2d 31 2e 35 30 38 63 30 2d 31 2e 32 36 38 2d 2e 39 34 2d 31 2e 39 36 37 2d 32 2e 36 2d 31 2e 39 36 37 68 2d 33 2e 33 35 34 76 37 2e 32 33 37 68 33 2e 34 37 34 63 31 2e 36 34 2c 30 2c 32 2e 37 31 34 2d 2e 37 2c 32 2e 37 31 34 2d 32 2e 30 36 31 61 31 2e 36 31 38 2c 31 2e Data Ascii: h3.643Z" transform="translate(1810.631 212.305)" fill="#fff"/> <path id="Caminho_2590" data-name="Caminho 2590" d="M-1831.328-208.564v-.107a1.553,1.553,0,0,0,1-1.508c0-1.268-.94-1.967-2.6-1.967h-3.354v7.237h3.474c1.64,0,2.714-.7,2.714-2.061a1.618,1.
2024-05-28 05:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	62652	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1577	OUT	GET /availability_v4/q/5659/16/2024-05-01/2024-06-30/1/0/0 HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	1336	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net X-Powered-By: PHP/8.2.4 Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IlFacXNZckd0UkRoUmNTUElITzdpd3c9PSIsInZhbHVlIjoicEkyMnFtTUdNNDZzTTNYU2VOblZOWWZ2OHF5bHJrVWVtcUVGV2ZGRkRqU0VxaVhQNEllMmw5WXBIZGM3d016dmx1QlhxM0R2UlRnWEIyM3hYQkkzQ09xSUExRU02bWxHaCthSms5Um9aZThNN0RrMUVUZTNnQlVzbSsvbE5Bc1MiLCJtYWMiOiI2Nzk5OTI5MDU5MDE2MmUzZGQ2MGFmZGNjM2M3ZWJiZjU5NWRmZDQxY2ZiNDM2YjMzNGIzN2M3NDI0ZjBiYzhkIiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:16 GMT; Max-Age=1800; path=/; secure Set-Cookie: laravel_session=eyJpdiI6Imx2d3kvSFVnVHhlQkx1KytocUE3UXc9PSIsInZhbHVlIjoiYmJseEFoclRmQ0c0RnBrZDJOcDMvM2t1Rit4b09EaUZNS1E2b2dEWURLYlNSUVJMRjRDMEF1ZjQ1SDhZeWdoakdzY08xb2I5aW1FQjgxRWVqL3JibW1tSERSQTFFU2JER053UUxDZVJsNXFVWGJKeDdscXV5MXNQaFM3YmdObVYiLCJtYWMiOiI1NDk2M2ZiZGMwYWViNWM5NDExYzkxZmUzMTZlZjA4NmE5MTc3YTZkMTU5Yjg1YjliNTAzNmY2MDU2ZDYyNGY4IiwidGFnIjoiIn0%3D; expires=Tue, 28 May 2024 05:45:16 GMT; Max-Age=1800; path=/; secure; httponly Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88abc40dee191849-EWR
2024-05-28 05:15:16 UTC	33	IN	Data Raw: 65 65 34 0d 0a 5b 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a 66 Data Ascii: ee4[{"status":"Close","promo":f
2024-05-28 05:15:16 UTC	1369	IN	Data Raw: 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 39 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 43 6c 6f 73 65 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 33 30 54 30 30 3a 30 30 Data Ascii: alse,"date":"2024-05-28T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-29T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Close","promo":false,"date":"2024-05-30T00:00
2024-05-28 05:15:16 UTC	1369	IN	Data Raw: 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 32 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 Data Ascii: 00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-11T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-12T00:00:00Z","price":1253.56,"cur
2024-05-28 05:15:16 UTC	1048	IN	Data Raw: 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 32 32 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 73 74 61 74 75 73 22 3a 22 4f 70 65 6e 22 2c 22 70 72 6f 6d 6f 22 3a 66 61 6c 73 65 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 32 33 54 30 30 3a 30 30 3a 30 30 5a 22 2c 22 70 72 69 63 65 22 3a 31 32 35 33 2e 35 36 2c 22 63 75 72 72 65 6e 63 79 22 3a 31 36 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 Data Ascii: 56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-22T00:00:00Z","price":1253.56,"currency":16,"restrictions":null},{"status":"Open","promo":false,"date":"2024-06-23T00:00:00Z","price":1253.56,"currency":16,"restrictions"
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	62655	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1570	OUT	GET /icons/icons_White/iconWhite_Footer_Contact.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"451-618dea1bb7679-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6118 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc40e1da10cbe-EWR
2024-05-28 05:15:15 UTC	825	IN	Data Raw: 34 35 31 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 30 30 32 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 30 30 32 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 46 6f 6f 74 65 72 5f 43 6f 6e 74 61 63 74 22 20 64 3d 22 4d 31 39 2e 39 39 31 2c 31 36 2e 36 33 61 2e 37 37 34 2e 37 37 34 2c 30 2c 30 2c 31 2d 2e 32 33 2e 36 38 31 4c 31 37 2e 35 2c 31 39 2e 35 34 61 31 2e 31 31 38 2c 31 2e 31 31 38 2c 30 2c 30 2c 31 2d 2e 34 2e 32 39 2c 31 2e 34 38 34 2c 31 2e 34 38 34 2c 30 2c 30 2c 31 2d 2e 34 37 39 2e 31 35 6c 2d 2e 31 2e 30 31 4c 31 36 2e 33 2c 32 30 61 38 2e 36 36 31 2c 38 2e 36 Data Ascii: 451<svg xmlns="http://www.w3.org/2000/svg" width="16.002" height="16" viewBox="0 0 16.002 16"> <path id="icon_Footer_Contact" d="M19.991,16.63a.774.774,0,0,1-.23.681L17.5,19.54a1.118,1.118,0,0,1-.4.29,1.484,1.484,0,0,1-.479.15l-.1.01L16.3,20a8.661,8.6
2024-05-28 05:15:15 UTC	287	IN	Data Raw: 2e 31 2c 31 31 2e 31 2c 30 2c 30 2c 30 2c 31 2e 33 36 2c 31 2e 32 31 2c 36 2e 34 37 32 2c 36 2e 34 37 32 2c 30 2c 30 2c 30 2c 2e 39 38 39 2e 36 33 2c 32 2e 34 38 36 2c 32 2e 34 38 36 2c 30 2c 30 2c 30 2c 2e 36 31 31 2e 32 35 6c 2e 32 30 39 2e 30 34 61 2e 38 38 2e 38 38 2c 30 2c 30 2c 30 2c 2e 31 31 2d 2e 30 32 31 2e 33 33 38 2e 33 33 38 2c 30 2c 30 2c 30 2c 2e 31 31 2d 2e 30 36 6c 2e 39 35 39 2d 2e 39 39 61 31 2e 30 36 2c 31 2e 30 36 2c 30 2c 30 2c 31 2c 2e 37 32 31 2d 2e 32 37 31 2e 38 32 37 2e 38 32 37 2c 30 2c 30 2c 31 2c 2e 34 34 39 2e 31 31 31 48 31 36 2e 33 6c 33 2e 32 37 31 2c 31 2e 39 33 41 2e 38 2e 38 2c 30 2c 30 2c 31 2c 31 39 2e 39 39 31 2c 31 36 2e 36 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 39 39 39 Data Ascii: .1,11.1,0,0,0,1.36,1.21,6.472,6.472,0,0,0,.989.63,2.486,2.486,0,0,0,.611.25l.209.04a.88.88,0,0,0,.11-.021.338.338,0,0,0,.11-.06l.959-.99a1.06,1.06,0,0,1,.721-.271.827.827,0,0,1,.449.111H16.3l3.271,1.93A.8.8,0,0,1,19.991,16.63Z" transform="translate(-3.999
2024-05-28 05:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	62656	157.240.252.60	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	653	OUT	GET /ajax/bz?__a=1&__ccg=UNKNOWN&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G0um4o5-0me220qu0ny0RE2Jw8W1uwc-0lK3q0h-0Lo6-0uS0ue&__hs=19871.BP%3Awhatsapp_www_pkg.2.0..0.0&__hsi=7373914662615018063&__req=2&__rev=1013785789&__s=%3A%3A3zrr5g&__user=0&dpr=1&jazoest=21833&lsd=qT5Y0nefaCJlIAQ57SagWZ HTTP/1.1 Host: api.whatsapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:15 UTC	1658	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob:;script-src 'unsafe-eval' 'unsafe-inline' .fbcdn.net .whatsapp.com .whatsapp.net 'self' data: blob:;style-src 'self' 'unsafe-inline' data: blob: whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net .whatsapp.net;connect-src 'self' https://.whatsapp.com data: blob:;font-src https://.fbcdn.net https://static.whatsapp.net data:;img-src whatsapp.com .whatsapp.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com whatsapp.net *.whatsapp.net;frame-src whatsapp: 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top
2024-05-28 05:15:15 UTC	1794	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	62657	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1547	OUT	GET /icons/envelope-icon.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:38:55 GMT ETag: W/"3b6-618dea1be29df-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 6118 Expires: Tue, 28 May 2024 17:15:15 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc410990c4237-EWR
2024-05-28 05:15:16 UTC	825	IN	Data Raw: 33 62 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 35 33 37 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 35 33 37 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 36 34 20 2d 32 35 32 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 37 30 39 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 52 65 63 74 61 6e 67 6c 65 20 37 30 39 36 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 74 72 61 6e 73 66 Data Ascii: 3b6<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"> <g id="Group_15379" data-name="Group 15379" transform="translate(-464 -252)"> <rect id="Rectangle_7096" data-name="Rectangle 7096" width="16" height="16" transf
2024-05-28 05:15:16 UTC	132	IN	Data Raw: 2e 35 31 37 63 2e 38 33 37 2e 36 35 34 2c 31 2e 31 31 33 2e 38 38 36 2c 34 2e 37 34 31 2c 33 2e 35 31 39 43 35 2e 34 35 32 2c 31 30 2e 37 2c 36 2e 33 36 36 2c 31 31 2e 35 31 31 2c 37 2c 31 31 2e 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 36 35 20 32 35 30 2e 35 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: .517c.837.654,1.113.886,4.741,3.519C5.452,10.7,6.366,11.511,7,11.5Z" transform="translate(465 250.5)" fill="#fff"/> </g></svg>
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	62658	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1835	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: book.omnibees.com Connection: keep-alive Content-Length: 1562 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://book.omnibees.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:15 UTC	1562	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 33 35 35 31 34 31 31 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 37 31 36 33 36 31 35 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 34 35 30 36 2e 34 30 30 30 30 30 30 30 30 30 32 33 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 34 35 30 36 2e 34 30 30 30 30 30 30 30 30 30 32 33 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 36 38 37 33 33 30 32 32 38 34 2e 37 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 Data Ascii: {"memory":{"totalJSHeapSize":23551411,"usedJSHeapSize":17163615,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":4506.400000000023,"firstContentfulPaint":4506.400000000023,"startTime":1716873302284.7,"versions":{"fl":"
2024-05-28 05:15:16 UTC	374	IN	HTTP/1.1 204 No Content Date: Tue, 28 May 2024 05:15:15 GMT Connection: close access-control-allow-origin: https://book.omnibees.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 88abc410dda44246-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	62659	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:15 UTC	1820	OUT	GET /icons/logo_Omnibees.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"4a5-618df02b1e4b2-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: EXPIRED Expires: Tue, 28 May 2024 17:15:16 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc410ebe85e73-EWR
2024-05-28 05:15:16 UTC	832	IN	Data Raw: 34 61 35 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 32 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 32 20 32 30 22 3e 0a 20 20 3c 67 20 69 64 3d 22 6c 6f 67 6f 5f 4f 6d 6e 69 62 65 65 73 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 30 33 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 30 33 38 22 20 64 3d 22 4d 2d 31 31 32 2e 39 30 37 2d 31 30 35 2e 34 35 35 6c 2d 36 2e 39 31 31 2c 33 2e 39 39 61 32 2e 30 31 38 2c 32 2e 30 31 38 2c 30 2c 30 2c 31 2d 32 2e 30 32 Data Ascii: 4a5<svg xmlns="http://www.w3.org/2000/svg" width="17.862" height="20" viewBox="0 0 17.862 20"> <g id="logo_Omnibees" transform="translate(0)"> <path id="Caminho_2038" data-name="Caminho 2038" d="M-112.907-105.455l-6.911,3.99a2.018,2.018,0,0,1-2.02
2024-05-28 05:15:16 UTC	364	IN	Data Raw: 66 69 6c 6c 3d 22 23 33 30 31 62 34 36 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 30 34 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 30 34 30 22 20 64 3d 22 4d 2d 35 33 2e 38 35 32 2d 34 33 2e 33 33 36 56 2d 34 37 2e 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 33 33 37 2d 2e 35 38 33 6c 2d 33 2e 33 34 36 2d 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 36 37 33 2c 30 6c 2d 33 2e 33 34 36 2c 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 33 33 36 2e 35 38 33 76 33 2e 38 36 33 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2c 2e 33 33 36 2e 35 38 33 6c 33 2e 33 34 36 2c 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2c 2e 36 37 33 2c 30 Data Ascii: fill="#301b46"/> <path id="Caminho_2040" data-name="Caminho 2040" d="M-53.852-43.336V-47.2a.673.673,0,0,0-.337-.583l-3.346-1.932a.673.673,0,0,0-.673,0l-3.346,1.932a.673.673,0,0,0-.336.583v3.863a.673.673,0,0,0,.336.583l3.346,1.932a.673.673,0,0,0,.673,0
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	62661	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:16 UTC	1573	OUT	GET /icons/icons_White/iconWhite_Checkbox_Selected.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"11a-618dea4b59c65-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 5246 Expires: Tue, 28 May 2024 17:15:16 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4118c6e0fa5-EWR
2024-05-28 05:15:16 UTC	289	IN	Data Raw: 31 31 61 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 34 34 34 22 20 68 65 69 67 68 74 3d 22 39 2e 32 36 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 34 34 34 20 39 2e 32 36 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 43 68 65 63 6b 62 6f 78 5f 53 65 6c 65 63 74 65 64 22 20 64 3d 22 4d 35 34 34 2e 33 38 32 2c 34 39 36 2e 38 34 34 6c 2d 34 2e 34 34 34 2d 34 2e 34 34 34 2c 31 2e 32 35 33 2d 31 2e 32 35 33 2c 33 2e 31 39 31 2c 33 2e 31 38 32 2c 36 2e 37 34 37 2d 36 2e 37 34 37 2c 31 2e 32 35 33 2c 31 2e 32 36 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 33 39 2e 39 33 38 20 2d 34 38 Data Ascii: 11a<svg xmlns="http://www.w3.org/2000/svg" width="12.444" height="9.262" viewBox="0 0 12.444 9.262"> <path id="icon_Checkbox_Selected" d="M544.382,496.844l-4.444-4.444,1.253-1.253,3.191,3.182,6.747-6.747,1.253,1.262Z" transform="translate(-539.938 -48
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	62663	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:16 UTC	1574	OUT	GET /icons/icons_GreyDarkest/iconGreyDarkest_Xclose.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 08:39:45 GMT ETag: W/"116-618dea4b66b6d-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2965 Expires: Tue, 28 May 2024 17:15:16 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4127de4728a-EWR
2024-05-28 05:15:16 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 69 63 6f 6e 5f 58 63 6c 6f 73 65 22 20 64 3d 22 4d 31 37 2c 36 2e 32 30 39 2c 31 35 2e 37 39 31 2c 35 2c 31 31 2c 39 2e 37 39 31 2c 36 2e 32 30 39 2c 35 2c 35 2c 36 2e 32 30 39 2c 39 2e 37 39 31 2c 31 31 2c 35 2c 31 35 2e 37 39 31 2c 36 2e 32 30 39 2c 31 37 2c 31 31 2c 31 32 2e 32 30 39 2c 31 35 2e 37 39 31 2c 31 37 2c 31 37 2c 31 35 2e 37 39 31 2c 31 32 2e 32 30 39 2c 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 20 2d Data Ascii: 116<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"> <path id="icon_Xclose" d="M17,6.209,15.791,5,11,9.791,6.209,5,5,6.209,9.791,11,5,15.791,6.209,17,11,12.209,15.791,17,17,15.791,12.209,11Z" transform="translate(-5 -
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	62662	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:16 UTC	1541	OUT	GET /icons/x-close.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlVlT0JIVGNjNHN0QnpFQ0JUNHNLb2c9PSIsInZhbHVlIjoiMzE4enJScEs5N2g5dUUrME1EWGFiRUplblFjRmlIalNVWHY5bzJDQXFENWJxN0Z3VzFlWkN2RWZRRWYrL0ZzSnl6a1dpYjFMalJQdUpPeVdPOTVvTUlrcHllQmxIQitkTVJ5N1NxRXA3TVNLbEZ3Z3BMZGNyTk1RTDRSanEycGgiLCJtYWMiOiI5YzE3MTM5ZmNmNDhlMjlhZWNjYmRiN2JiMDAyYmYzMzNkMDhmN2UwOGI2N2VhNGQ1MmExZTIwM2U5MTI0NmZhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhPL3VuL0tKdkxaK251d1FBdFoycmc9PSIsInZhbHVlIjoiMVFIMkEwNnNIeE5RalJHMDRaNzJuVzNuc2h1YndEdHcvWU1UZldpQktiSDU4SllLbVhrcEJmQVo2bDR2ajJYWmdhdFp3SjVkMW1SU0NPeHJCVnpPMjVBMmIweHExUHF3c [TRUNCATED]
2024-05-28 05:15:16 UTC	544	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:07:11 GMT ETag: W/"1e9-618df06d8c767-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 2958 Expires: Tue, 28 May 2024 17:15:16 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc4127ea04259-EWR
2024-05-28 05:15:16 UTC	496	IN	Data Raw: 31 65 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 2c 2e 62 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 73 74 72 6f 6b 65 3a 72 65 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 39 34 20 2d 36 39 30 29 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 Data Ascii: 1e9<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><defs><style>.a,.b{fill:none;}.b{stroke:red;stroke-linecap:round;stroke-width:1.5px;}</style></defs><g transform="translate(-194 -690)"><rect class="a" width="16" heig
2024-05-28 05:15:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	62664	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:17 UTC	1547	OUT	GET /icons/logo_Omnibees.svg HTTP/1.1 Host: book.omnibees.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlFacXNZckd0UkRoUmNTUElITzdpd3c9PSIsInZhbHVlIjoicEkyMnFtTUdNNDZzTTNYU2VOblZOWWZ2OHF5bHJrVWVtcUVGV2ZGRkRqU0VxaVhQNEllMmw5WXBIZGM3d016dmx1QlhxM0R2UlRnWEIyM3hYQkkzQ09xSUExRU02bWxHaCthSms5Um9aZThNN0RrMUVUZTNnQlVzbSsvbE5Bc1MiLCJtYWMiOiI2Nzk5OTI5MDU5MDE2MmUzZGQ2MGFmZGNjM2M3ZWJiZjU5NWRmZDQxY2ZiNDM2YjMzNGIzN2M3NDI0ZjBiYzhkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imx2d3kvSFVnVHhlQkx1KytocUE3UXc9PSIsInZhbHVlIjoiYmJseEFoclRmQ0c0RnBrZDJOcDMvM2t1Rit4b09EaUZNS1E2b2dEWURLYlNSUVJMRjRDMEF1ZjQ1SDhZeWdoakdzY08xb2I5aW1FQjgxRWVqL3JibW1tSERSQTFFU2JER [TRUNCATED]
2024-05-28 05:15:17 UTC	541	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:17 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Security-Policy: frame-ancestors 'self' .omnibees.com .hotelextranet.net Last-Modified: Mon, 20 May 2024 09:06:02 GMT ETag: W/"4a5-618df02b1e4b2-gzip" Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains CF-Cache-Status: HIT Age: 1 Expires: Tue, 28 May 2024 17:15:17 GMT Cache-Control: public, max-age=43200 Server: cloudflare CF-RAY: 88abc419e9d71760-EWR
2024-05-28 05:15:17 UTC	828	IN	Data Raw: 34 61 35 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 32 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 32 20 32 30 22 3e 0a 20 20 3c 67 20 69 64 3d 22 6c 6f 67 6f 5f 4f 6d 6e 69 62 65 65 73 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 30 33 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 30 33 38 22 20 64 3d 22 4d 2d 31 31 32 2e 39 30 37 2d 31 30 35 2e 34 35 35 6c 2d 36 2e 39 31 31 2c 33 2e 39 39 61 32 2e 30 31 38 2c 32 2e 30 31 38 2c 30 2c 30 2c 31 2d 32 2e 30 32 Data Ascii: 4a5<svg xmlns="http://www.w3.org/2000/svg" width="17.862" height="20" viewBox="0 0 17.862 20"> <g id="logo_Omnibees" transform="translate(0)"> <path id="Caminho_2038" data-name="Caminho 2038" d="M-112.907-105.455l-6.911,3.99a2.018,2.018,0,0,1-2.02
2024-05-28 05:15:17 UTC	368	IN	Data Raw: 39 29 22 20 66 69 6c 6c 3d 22 23 33 30 31 62 34 36 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 43 61 6d 69 6e 68 6f 5f 32 30 34 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 6d 69 6e 68 6f 20 32 30 34 30 22 20 64 3d 22 4d 2d 35 33 2e 38 35 32 2d 34 33 2e 33 33 36 56 2d 34 37 2e 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 33 33 37 2d 2e 35 38 33 6c 2d 33 2e 33 34 36 2d 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 36 37 33 2c 30 6c 2d 33 2e 33 34 36 2c 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2d 2e 33 33 36 2e 35 38 33 76 33 2e 38 36 33 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2c 2e 33 33 36 2e 35 38 33 6c 33 2e 33 34 36 2c 31 2e 39 33 32 61 2e 36 37 33 2e 36 37 33 2c 30 2c 30 2c 30 2c 2e 36 Data Ascii: 9)" fill="#301b46"/> <path id="Caminho_2040" data-name="Caminho 2040" d="M-53.852-43.336V-47.2a.673.673,0,0,0-.337-.583l-3.346-1.932a.673.673,0,0,0-.673,0l-3.346,1.932a.673.673,0,0,0-.336.583v3.863a.673.673,0,0,0,.336.583l3.346,1.932a.673.673,0,0,0,.6
2024-05-28 05:15:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	62665	216.239.38.181	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:17 UTC	1391	OUT	POST /g/collect?v=2&tid=G-E6QPTJ9TK6&gtm=45je45m0v884784337z8832375478za200zb832375478&_p=1716873306676&gcd=13l3l3l3l1&npa=0&dma=0&cid=748051113.1716873311&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=2&sid=1716873310&sct=1&seg=1&dl=https%3A%2F%2Fbook.omnibees.com%2Fhotel%2F5659%3FcurrencyId%3D16%26lang%3Dpt-BR&dt=Campo%20Bahia%20Hotel%20Villas%20Spa&en=page_view&ep.chainId=3090&ep.hotelName=Campo%20Bahia%20Hotel%20Villas%20Spa&ep.chainName=&ep.versionBe=3&ep.isRemark=&_et=231&up.loyalty=&up.loyalty_category=&up.loyalty_level=&up.isLoggedIn=&tfd=13555 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://book.omnibees.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:17 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://book.omnibees.com Date: Tue, 28 May 2024 05:15:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	62666	104.18.125.82	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:19 UTC	1835	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: book.omnibees.com Connection: keep-alive Content-Length: 1038 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://book.omnibees.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://book.omnibees.com/hotel/5659?currencyId=16&lang=pt-BR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_time=1716875104; PHPSESSID=6n9enadr2j2fg18vv34d6ojffj; _ga=GA1.1.748051113.1716873311; _hjSessionUser_1863763=eyJpZCI6IjJkZDlmNmU2LTcwNGMtNTg0NC04Nzk1LTUyYTRlZmNiMWE1MyIsImNyZWF0ZWQiOjE3MTY4NzMzMTA3OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1863763=eyJpZCI6ImE2ZjExN2Y1LTg5NDItNDgyMC04ZjhkLWU3MDRjN2NiOTBjZiIsImMiOjE3MTY4NzMzMTA3OTcsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_E6QPTJ9TK6=GS1.1.1716873310.1.1.1716873310.60.0.0; XSRF-TOKEN=eyJpdiI6IlFacXNZckd0UkRoUmNTUElITzdpd3c9PSIsInZhbHVlIjoicEkyMnFtTUdNNDZzTTNYU2VOblZOWWZ2OHF5bHJrVWVtcUVGV2ZGRkRqU0VxaVhQNEllMmw5WXBIZGM3d016dmx1QlhxM0R2UlRnWEIyM3hYQkkzQ09xSUExRU02bWxHaCthSms5Um9aZThNN0RrMUVUZTNnQlVzbSsvbE5Bc1MiLCJtYWMiOiI2Nzk5OTI5MDU5MDE2MmUzZGQ2MGFmZGNjM2M3ZWJiZjU5NWRmZDQxY2ZiNDM2YjMzNGIzN2M3NDI0ZjBiYzhkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imx2d3kvSFVnVHhlQkx1KytocUE3UXc9PSIsInZhbHVlIjoiYmJseEFoclRmQ0c0RnBrZDJOcDMvM2t1Rit4b09EaUZNS1E2b2dEWURLYlNSUVJMRjRDMEF1ZjQ1SDhZeWdoakdzY08xb2I5aW1FQjgxRWVqL3JibW1tSERSQTFFU2JER [TRUNCATED]
2024-05-28 05:15:19 UTC	1038	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 35 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 31 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 66 36 30 65 33 64 34 63 2d 38 63 62 65 2d 34 62 62 62 2d 38 32 64 37 2d 32 66 34 32 62 31 36 36 65 66 66 35 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6f 6f 6b 2e 6f 6d 6e 69 62 65 65 73 2e 63 6f 6d 2f 68 6f 74 65 6c 2f 35 36 35 39 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 68 6f 74 65 6c 2f 35 36 35 39 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 36 38 37 33 33 30 32 32 38 34 2e 37 2c 22 6e 74 22 3a 22 6e 61 76 69 67 61 74 65 22 2c 22 73 69 74 65 54 6f Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.5.0","fl":"2024.4.1"},"pageloadId":"f60e3d4c-8cbe-4bbb-82d7-2f42b166eff5","location":"https://book.omnibees.com/hotel/5659","landingPath":"/hotel/5659","startTime":1716873302284.7,"nt":"navigate","siteTo
2024-05-28 05:15:19 UTC	374	IN	HTTP/1.1 204 No Content Date: Tue, 28 May 2024 05:15:19 GMT Connection: close access-control-allow-origin: https://book.omnibees.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 88abc4284e3e7c9a-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	62668	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:19 UTC	992	OUT	GET /hotel/ HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:20 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:19 GMT Server: Apache Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/", <https://www.campobahia.com/wp-json/wp/v2/pages/411>; rel="alternate"; type="application/json", <https://www.campobahia.com/?p=411>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-28 05:15:20 UTC	7765	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3a 61 64 64 74 68 69 73 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 68 65 6c 70 2f 61 70 69 2d 73 70 65 63 22 20 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 61 68 42 79 7a 64 71 6f 4f 4f 47 43 5a 6a 48 6d 47 76 73 4f 6a 4c 69 7a 56 4d 36 70 65 32 72 56 51 72 51 61 48 41 6c 66 30 77 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" ><head><meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" /><meta c
2024-05-28 05:15:20 UTC	8625	IN	Data Raw: 61 6d 65 20 76 69 73 75 61 6c 6c 79 2e 0a 09 20 2a 0a 09 20 2a 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 73 65 72 69 61 6c 69 7a 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 61 20 57 6f 72 6b 65 72 2e 20 54 68 65 72 65 66 6f 72 65 2c 20 69 74 20 63 61 6e 6e 6f 74 20 72 65 66 65 72 20 74 6f 20 76 61 72 69 61 62 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 74 61 69 6e 69 6e 67 0a 09 20 2a 20 73 63 6f 70 65 2e 20 45 76 65 72 79 74 68 69 6e 67 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 62 79 20 70 61 72 61 6d 65 74 65 72 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 73 69 6e 63 65 20 34 2e 39 2e 30 0a 09 20 2a 0a 09 20 2a 20 40 70 72 69 76 61 74 65 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 43 61 6e 76 61 73 52 65 6e 64 65 72 69 6e 67 Data Ascii: ame visually. * * This function may be serialized to run in a Worker. Therefore, it cannot refer to variables from the containing * scope. Everything must be passed by parameters. * * @since 4.9.0 * * @private * * @param {CanvasRendering
2024-05-28 05:15:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:20 UTC	8192	IN	Data Raw: 34 32 35 0d 0a 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 26 26 20 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 3b 0a 0a 09 09 09 09 69 66 20 28 20 27 66 6c 61 67 27 20 21 3d 3d 20 74 65 73 74 20 29 20 7b 0a 09 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 20 3d 0a 09 09 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 20 26 26 0a 09 09 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 Data Ascii: 425tings.supports.everything && settings.supports[ test ];if ( 'flag' !== test ) {settings.supports.everythingExceptFlag =settings.supports.everythingExceptFlag &&settings.supports[ test ];}}settings.supports.ever
2024-05-28 05:15:20 UTC	3539	IN	Data Raw: 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 Data Ascii: -wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gra
2024-05-28 05:15:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:20 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 73 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6d 70 6f 62 61 68 69 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2d 61 6e 64 2d 73 68 6f 77 63 61 73 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 70 74 65 73 74 69 6d 6f 6e 69 61 6c 2e 63 73 73 3f 76 65 72 3d 32 2e 33 2e 31 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 65 61 74 68 65 72 2d 61 74 6c 61 73 2d 70 75 62 6c 69 63 2d 63 73 73 27 20 68 72 65 66 Data Ascii: 4000<link rel='stylesheet' id='tss-css' href='https://www.campobahia.com/wp-content/plugins/testimonial-slider-and-showcase/assets/css/wptestimonial.css?ver=2.3.10' type='text/css' media='all' /><link rel='stylesheet' id='weather-atlas-public-css' href
2024-05-28 05:15:20 UTC	8198	IN	Data Raw: 69 6e 3a 30 70 78 20 31 30 70 78 20 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 6d 65 6e 75 2d 70 72 69 6d 61 72 79 20 3e 20 2e 6e 61 76 2d 75 6c 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 2d 69 74 65 6d 29 20 3e 20 61 2c 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 6d 65 6e 75 2d 70 72 69 6d 61 72 79 20 3e 20 2e 6e 61 76 2d 75 6c 20 2e 68 61 73 2d 63 61 72 65 74 20 3e 20 61 2c 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 6d 65 6e 75 2d 70 72 69 6d 61 72 79 20 3e 20 2e 6e 61 76 2d 75 6c 20 2e 6e 65 76 65 2d 6d 6d 2d Data Ascii: in:0px 10px 0px 0px; } .builder-item--primary-menu .nav-menu-primary > .nav-ul li:not(.woocommerce-mini-cart-item) > a,.builder-item--primary-menu .nav-menu-primary > .nav-ul .has-caret > a,.builder-item--primary-menu .nav-menu-primary > .nav-ul .neve-mm-
2024-05-28 05:15:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:20 UTC	8192	IN	Data Raw: 31 39 39 39 0d 0a 20 31 2e 36 65 6d 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 66 6f 6f 74 65 72 5f 63 6f 70 79 72 69 67 68 74 20 73 76 67 7b 20 77 69 64 74 68 3a 20 31 65 6d 3b 68 65 69 67 68 74 3a 20 31 65 6d 3b 20 7d 20 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 7b 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 20 7d 20 62 6f 64 79 3a 6e 6f 74 28 2e 73 69 6e 67 6c 65 29 3a 6e 6f 74 28 2e 61 72 63 68 69 76 65 29 3a 6e 6f 74 28 2e 62 6c 6f 67 29 3a 6e 6f 74 28 2e Data Ascii: 1999 1.6em; letter-spacing: 0px;padding:0px 0px 0px 0px;margin:0px 0px 0px 0px; } .builder-item--footer_copyright svg{ width: 1em;height: 1em; } }@media(min-width: 960px){ .container{ max-width: 1170px; } body:not(.single):not(.archive):not(.blog):not(.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	62667	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:20 UTC	946	OUT	GET /wp-content/uploads/elementor/css/post-411.css?ver=1694546287 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:20 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 12 Sep 2023 19:18:07 GMT Accept-Ranges: bytes Content-Length: 6423 Vary: Accept-Encoding Content-Type: text/css
2024-05-28 05:15:20 UTC	6423	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 34 31 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 66 63 33 35 62 64 39 7b 70 61 64 64 69 6e 67 3a 32 65 6d 20 30 65 6d 20 32 65 6d 20 30 65 6d 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 34 31 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 38 63 31 37 30 30 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 34 31 31 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e Data Ascii: .elementor-411 .elementor-element.elementor-element-fc35bd9{padding:2em 0em 2em 0em;}.elementor-411 .elementor-element.elementor-element-38c1700 > .elementor-element-populated{padding:20px 20px 20px 20px;}.elementor-411 .elementor-element.elementor-elemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	62670	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:20 UTC	982	OUT	GET /wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 10 Feb 2022 00:01:54 GMT Accept-Ranges: bytes Content-Length: 228733 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1d 3c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 ab 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 Data Ascii: JFIF``<ExifMM*(1!2i$``Adobe Photoshop 23.1 (Macintosh)2022:02:09 2
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 58 59 5a 20 00 00 00 00 00 00 9c 18 00 00 4f a5 00 00 04 fc 58 59 5a 20 00 00 00 00 00 00 34 8d 00 00 a0 2c 00 00 0f 95 58 59 5a 20 00 00 00 00 00 00 26 31 00 00 10 2f 00 00 be 9c ff ed 00 44 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 27 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 ff e1 11 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d Data Ascii: YZ curv3curv3curv3XYZ OXYZ 4,XYZ &1/DPhotoshop 3.08BIM'Z%GZ%GZ%GZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id=
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: a4 7b 93 80 90 db 8a b9 ce 25 3e 91 46 82 c5 55 4b 4a 3b c0 93 3d e6 ce 90 4a 81 49 b9 e8 08 ba 07 90 07 13 79 14 5e fc 30 b8 f0 52 ed a7 b2 e6 3b 4b a1 53 20 52 5d 6d aa bb 0d 97 e3 38 da 80 64 36 13 b0 55 bf 09 24 04 fb 9f 5c 23 4a 5c 94 4b b1 93 f6 6b db b5 6f 29 3c e6 49 ce 68 70 f7 15 96 5a 79 c1 a9 51 56 9d 86 b1 f8 90 9e 7b 79 79 72 9b e6 98 38 5b 0c 3d ab f6 5d 3e 3d 32 27 69 79 71 e2 ba 93 5a 64 4a 43 2a b9 71 1c d2 ea 48 e6 b0 2c 55 e7 f2 c3 c9 5b b8 f2 0d 37 1d cd 6b b2 9e d4 21 e7 bc a1 1a a5 25 d6 da 94 8b 34 f8 fc 3a fc fd 2f eb 85 52 d4 e9 72 3c 5f 93 2c ed 67 28 49 ec db 3b 45 ce 54 65 25 8a 35 46 52 54 fa ac 74 d3 e5 13 b3 db 7e 15 72 3e 85 43 ae 3b 2c 5b fe a2 e5 7e 60 92 a6 0d ce 48 8f 97 64 cb a8 c3 a6 b0 29 b3 1d 4b 8f b0 a5 78 23 54 Data Ascii: {%>FUKJ;=JIy^0R;KS R]m8d6U$\#J\Kko)<IhpZyQV{yyr8[=]>=2'iyqZdJC*qH,U[7k!%4:/Rr<_,g(I;ETe%5FRTt~r>C;,[~`Hd)Kx#T
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: dc 5c ec 70 f1 9c 61 17 a1 6d f9 0a f5 77 05 54 fb 40 cc 92 a1 a2 1c 8a a3 0e a5 b4 e9 4a 97 0d 1a d2 3c b5 14 df f3 c2 b9 29 2d 2e 36 75 b1 7a 4d 7a a1 21 3a 5f 30 df f5 53 09 07 ea 2d 8e 8e 28 76 47 59 5d 89 8e b1 1d 6e 48 a6 25 f8 c7 55 94 35 a5 29 26 c2 e0 8d af ef 8d 11 82 a3 ac e6 13 b0 e4 54 99 75 84 96 d2 da 82 90 97 08 59 16 df 98 1b 7d 31 ce 2e 8e 4f 70 ed 05 98 b5 ba a7 16 6c 49 81 89 52 4a 50 f2 12 92 52 6e 76 4a 8d 80 e6 36 56 06 99 ed 16 ad 1c f9 09 65 e4 4a 67 33 e6 aa 8d 3a 9c ec b6 a1 36 62 2a 2f 76 0e 05 26 fb 87 1b 2a 24 0f 07 34 9d 8f a6 2f 28 b4 aa 23 37 b0 a9 3a ab 4b 9f 01 e8 f1 d9 54 04 aa 58 93 a1 b5 92 80 02 6c 53 e2 f1 24 8e 63 9f 33 85 57 dd 6e 2a 77 b1 35 59 e7 12 d3 65 ab 00 a1 e3 52 94 09 03 df 96 31 63 c7 53 6a 43 b0 d7 67 Data Ascii: \pamwT@J<)-.6uzMz!:_0S-(vGY]nH%U5)&TuY}1.OplIRJPRnvJ6VeJg3:6b/v&$4/(#7:KTXlS$c3Wn*w5YeR1cSjCg
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 3a b4 ad bd 42 ca bb 9b 00 93 72 2d ea 06 35 47 a7 c5 d3 43 fa 8c 65 6d da 08 e4 1e cb 29 55 a8 eb 9f 54 9b 25 f9 b1 e4 70 e5 d3 ca 4a 16 2c 4e a1 ab 99 3e 98 1d 47 51 25 1f 63 a4 14 93 e4 f6 5e 5e a6 41 ac 48 80 a6 50 db 51 d4 4b 4a 0a 20 a7 7b a1 5a b6 24 7e 1d 5c af 71 83 82 56 ab 27 74 2c db 5c 16 73 15 16 5d 5f 2d cb 8e f5 41 53 04 08 ea 73 ba 3c 7e f1 84 f9 a3 f6 93 ca f6 e5 8d 10 e9 e7 8e 49 c6 40 53 4c c5 e0 ce e1 53 de 60 df 67 01 4d bc cf 9d fa 6d 8d 79 21 a9 a6 3b 3f 70 a4 ad 21 e5 b3 c3 6c ed 7e 8a c2 dc 53 d3 7b 8a 1c 2b 75 aa 73 72 21 cf ef 6d 20 82 b6 8e a4 ae 32 bc ed ca c7 cc 75 c4 34 ad 5e e5 41 68 35 53 a8 57 20 86 15 57 a0 ad 6d b8 94 ba 89 0d b5 a1 6a 4f 9d c7 85 5f 4c 49 61 84 97 b5 d0 2b 71 db 23 55 32 b4 f9 25 99 af 4c a6 3f 25 49 Data Ascii: :Br-5GCem)UT%pJ,N>GQ%c^^AHPQKJ {Z$~\qV't,\s]_-ASs<~I@SLS`gMmy!;?p!l~S{+usr!m 2u4^Ah5SW WmjO_LIa+q#U2%L?%I
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 57 88 a1 40 7e 5e 63 16 5e b4 65 ab 1b bf 80 87 e0 2b 26 66 09 2b 8f 58 a7 bd 96 ea 89 5e a4 3a d8 28 08 57 32 9b 8d c1 07 cc 1d 88 c6 87 97 13 ff 00 96 34 c0 91 9f f6 86 dd 6b 35 e7 b8 99 61 8a 83 d9 81 98 a0 b7 15 e4 a4 12 b1 60 55 cb e2 22 c0 5f d3 15 a9 49 52 76 84 ef b0 e1 23 b3 e8 94 38 8c cd c8 55 37 11 50 88 80 66 d2 25 02 d3 ee ab 6b 94 a4 d8 de e3 90 f9 1c 51 e3 8c 9d 45 53 0b f8 1e 1a a4 2b b4 6c a0 d5 46 3a fb d3 ac f3 66 50 1c 78 8f 20 dc a0 a8 fc 49 b8 f8 55 d3 ae 0b 83 af 90 f2 8c 4e 15 35 ec c9 da d2 58 7d 93 0e 35 29 7c 42 c3 87 5b 4d be 6c 7e 49 52 ec 3e 78 45 25 8d 2d 4a 85 6a f8 0a f6 99 9b 87 69 39 b1 11 e1 b4 5b a7 53 d3 a3 45 ac 38 87 e3 27 e6 2d ec 30 9d 4e 7d a8 47 bb 23 ec e7 24 af 3f e6 d4 47 b2 bb 84 65 05 bc e0 e4 10 3a 0f 7e Data Ascii: W@~^c^e+&f+X^:(W24k5a`U"_IRv#8U7Pf%kQES+lF:fPx IUN5X}5)\|B[Ml~IR>xE%-Jji9[SE8'-0N}G#$?Ge:~
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 56 32 ec c8 b0 e4 c0 92 f6 5e a8 16 c3 4f 04 b7 a1 b5 3a 9d 8d d3 f0 a8 12 37 e4 71 e9 2e a3 14 9d 5d 30 50 e9 2e b6 96 63 26 36 66 80 c3 ac b9 6d 32 5b 1a d9 50 f3 50 e6 8f d3 d7 0b 97 3e 3c 6a b2 77 1e 29 be 04 4e d4 e3 33 0b 22 cc 89 40 96 b3 0e ab 2d 88 0b 64 5d 49 4e b5 0b 94 1f 6d b1 3e 9a 2a 32 f5 31 ed 0e e8 ec 8e e3 a5 f2 06 99 4e 87 98 73 7a 68 50 d2 a9 14 0a 13 69 79 e8 ed 38 40 75 d3 64 10 81 e7 e8 3d 79 5f 16 9e 48 ad fb 78 f2 4a 9b 74 10 a6 c3 7a b9 99 23 d7 1d 8a 87 e0 e5 84 88 ec b6 45 97 2d 57 bd c0 fd a4 a3 4e de 62 d8 d1 0e 14 93 dd 82 b7 df 82 af 6f 9d a0 33 24 b3 40 84 e9 5b 2d e9 76 42 53 cd c7 08 ba 1b f9 0d ce 23 9e 74 b4 a0 4d de c2 cf 63 fd 9e b7 5e ab 7d a7 57 20 c2 65 7a dc 04 7f 7c b3 c9 00 79 79 fa 5b 0b d2 c6 fd ff 00 80 b1 Data Ascii: V2^O:7q.]0P.c&6fm2[PP><jw)N3"@-d]INm>*21NszhPiy8@ud=y_HxJtz#E-WNbo3$@[-vBS#tMc^}W ez\|yy[
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: b1 f2 b8 f4 f2 c4 74 b8 ef f8 8d 7d 98 c5 4c cc 8f b7 19 a7 b4 21 52 98 2a 2c ad e1 a9 4d 6a d9 68 3e 69 3b dc 1f 7c 75 ef 40 4c b3 05 f9 93 9d 6e 0b 00 48 09 49 29 44 87 02 12 a0 0f c2 ab f2 d3 b9 b0 e7 70 77 b6 29 09 d6 fd c7 4e dd 1e 43 ca 72 4a 93 57 a2 56 20 50 a6 13 f7 dc 15 15 87 9c 0a 21 45 68 1b 69 37 e5 e5 ed 8b 4d ac 8e b2 2d 86 e3 b8 4d 75 65 66 36 69 f4 7a c4 65 43 9c dc 90 b5 25 84 ff 00 65 98 8d 57 53 cd ab 91 3b 72 56 e3 7c 49 c6 78 56 a8 cb 54 7f 30 d4 65 b7 73 41 9e b8 d0 e4 b4 ba 32 56 f4 b9 0e 36 9e 14 84 fd da d2 2e 55 aa dc 80 d3 7b 8f 3e 58 6e 93 34 66 b5 41 d7 c0 66 bf b5 95 f3 e3 b0 aa 14 3e 04 76 fb 9c 98 bf 7a b8 ba 06 ae 2e c9 6c 02 36 52 49 59 20 8d b6 e9 be 3d 27 92 52 44 25 14 30 65 7c 9f 3b 2a e5 c6 20 c0 75 3c 67 0e b9 2a Data Ascii: t}L!R,Mjh>i;\|u@LnHI)Dpw)NCrJWV P!Ehi7M-Muef6izeC%eWS;rV\|IxVT0esA2V6.U{>Xn4fAf>vz.l6RIY ='RD%0e\|; u<g*
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: c3 8f d5 eb cd f1 bb d2 e4 53 10 b4 f0 1b 42 14 e8 1b 1f 0d c2 b5 5b 72 13 7b f5 04 6f 84 94 bf a5 b7 66 52 3f 22 5a d0 29 ce aa 44 32 eb 32 1b 57 8d ae 69 58 bf 31 d4 1f 43 8a 27 ad 69 9f 0c 9b 09 44 75 ba a2 f8 a8 d2 dc 93 cd 2a e4 bf 43 eb 8c f3 8b c7 b7 61 47 5a 04 96 e1 96 1b 9c d7 16 03 e3 46 b0 37 41 ea 0f a8 ff 00 2c 43 24 14 b8 7b 8c b6 e4 78 8d 41 7a 8e c3 b5 4a 60 6a 54 45 24 25 e6 93 b9 d0 ad 81 03 a8 23 63 ea 3d f0 3a 6c da 9f a5 90 69 46 96 a8 96 e8 f4 ca 75 66 3c 98 29 56 a7 22 f8 9a 48 24 29 6c 2b 71 b7 3b 8d c7 ba 7f 7b 1b 73 61 75 aa 3f 7f f8 62 c5 a0 55 0d 6f c6 a7 f7 72 da 26 47 79 6e 3a a6 5c f8 94 d9 55 b5 27 7d 95 a7 49 bf b5 c1 c6 6c ce 2a 2d cb b5 16 5c d0 db 42 ab 4a a5 30 64 53 de 35 3a 7a 53 69 10 5c 1f 7c c2 7a f8 7f 12 7d 47 Data Ascii: SB[r{ofR?"Z)D22WiX1C'iDuCaGZF7A,C${xAzJ`jTE$%#c=:liFuf<)V"H$)l+q;{sau?bUor&Gyn:\U'}Il-\BJ0dS5:zSi\\|z}G
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 02 82 74 2d 3d 6e 92 3d 31 d1 9e af 6a 2a d6 c2 84 b6 88 94 cc bb ea 6d d1 c4 4a b9 ef f8 87 cf 9f d3 15 49 c7 7e c4 50 4e 5b 1c 6e 14 88 88 47 79 69 a2 54 ad 56 ef 4d 0b 10 12 2d ba d2 2f ee 05 b9 8c 51 da fa 0d c9 4e 97 41 6e b0 b9 3d c1 c0 d4 c0 83 21 84 2d 60 25 d0 91 75 24 1e 86 d7 23 ce c4 79 60 4d ed 61 8a bf a9 a8 08 51 fb 6c c8 6c 49 69 d6 9a cd 94 64 16 c9 be 87 5e 09 e4 0e fd 40 d8 f4 50 c4 7d 4f 4e 69 49 aa 2a a3 a9 7c 80 5c cd 93 6b 79 75 95 54 63 86 ea 0c bb dd e4 bf c9 52 0a 12 00 5a c7 45 5a c0 fa 8c 7a 38 12 8e 36 a2 66 93 6d ee 0f 44 c2 8f c4 3e 2b 1c 4b 20 51 76 2c 90 5c 46 f7 b1 e9 8c 8d 0c 1f a6 48 50 4e 8b 91 65 1e 7d 46 05 1c 5c 91 25 65 49 b0 da f6 36 c4 27 13 81 0f 4b bb cb 0a c7 44 56 7b 3b 37 d5 32 ad 0d c7 e8 ac b0 a9 d2 54 58 Data Ascii: t-=n=1jmJI~PN[nGyiTVM-/QNAn=!-`%u$#y`MaQllIid^@P}ONiI\|\kyuTcRZEZz86fmD>+K Qv,\FHPNe}F\%eI6'KDV{;72TX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	62671	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	979	OUT	GET /wp-content/uploads/2022/07/00-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:31 GMT Accept-Ranges: bytes Content-Length: 470830 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e1 14 9e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 36 3a 34 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:16:48
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 8e 6d 30 e1 60 1a 3b 43 f1 0a 9f 0b 72 ea 05 95 96 78 f0 7c fb 2c 87 b2 1c 41 10 47 65 5e 99 04 90 ea 9c 05 2d 8a 4d ad 26 50 58 86 Data Ascii: 5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?m0`;Crx\|,AGe^-M&PX
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 62 36 30 66 61 31 2d 66 63 33 39 2d 61 36 34 61 2d 38 30 66 31 2d 64 66 34 62 33 61 63 32 65 65 34 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 32 37 33 65 66 31 2d 65 62 38 66 2d 66 66 34 66 2d 61 66 38 34 2d 30 35 32 66 62 61 34 63 65 62 64 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 38 36 30 62 64 37 2d 33 38 35 64 2d 35 33 34 39 2d 38 61 33 61 2d 34 62 30 36 39 31 31 38 31 63 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 46 30 35 30 43 38 43 30 46 33 31 31 45 39 42 36 30 42 45 41 33 44 37 44 39 45 41 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: i> <rdf:li>xmp.did:76b60fa1-fc39-a64a-80f1-df4b3ac2ee4a</rdf:li> <rdf:li>xmp.did:96273ef1-eb8f-ff4f-af84-052fba4cebd8</rdf:li> <rdf:li>xmp.did:99860bd7-385d-5349-8a3a-4b0691181c81</rdf:li> <rdf:li>xmp.did:9AF050C8C0F311E9B60BEA3D7D9EA07B</rdf:li> <rdf:li>
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 3c b0 cd 84 63 f9 18 84 e1 48 48 ab 9c 46 be 51 18 92 51 e0 4c 43 ae 98 93 0a 52 4c 79 09 0c 90 94 c9 05 00 f2 0c 21 41 bc 90 4a 9c c3 25 b4 e9 4a 64 62 19 3c 45 2c 02 93 69 0a 34 a1 0c a5 07 25 b1 30 0d 83 cb 85 75 f9 08 2b 5d 8e 61 dc d3 a2 fa 6f 87 ce ee 07 40 b6 98 e7 7c d8 86 25 b4 b9 42 88 8c 67 2a 32 ce 2a ce 32 46 91 e4 23 f3 93 0e 98 74 85 01 49 f5 86 f1 c5 c1 54 c3 1c 7d 1d e7 3c c3 cd f2 15 4a 3b 8c 35 05 3b 85 6c 85 88 84 30 06 7d c8 61 e4 cb 9d 93 38 f8 f8 f4 44 18 04 05 ca 75 51 4e 3b 14 02 2f 90 c4 5b 28 c3 0a 65 aa 75 13 e7 b8 47 f7 ce 69 e2 34 da 31 65 1a 6d ea b6 e1 a8 a3 0e 72 98 72 2a 2a 2a a3 04 22 08 a8 a8 d1 a8 3d 14 1e d1 11 a6 79 0e 4d 6f c7 4c b9 31 ee 11 ed cd e3 32 e6 1e 56 19 56 fc 47 9a 72 1a 73 7c e5 0f 9c 6d cd 15 c8 2a 38 Data Ascii: <cHHFQQLCRLy!AJ%Jdb<E,i4%0u+]ao@\|%Bg22F#tIT}<J;5;l0}a8DuQN;/[(euGi41emrr**"=yMoL12VVGrs\|m8
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 28 6a 80 a2 62 cc 8d cd 49 83 54 a4 30 bf 77 dc b9 35 5c 21 64 d1 12 43 8a 4a 2d 18 0e 56 ab a1 b2 36 83 9e bb de 76 56 d9 32 1b dc 0e 8b ef 71 36 15 29 1d 1d 96 62 57 0f 5d 1a 1a 67 1d db 6f 39 8f 5b 4b 1f 52 75 67 db 65 2c b7 d6 36 6d f1 8c 6d 1e dc e9 23 57 9e ba bc 36 1e b6 de e4 0e 35 23 d1 42 e9 53 45 e5 0a 57 22 80 f9 fc e4 66 34 36 be 1d bf 5e da 6f 2d 62 52 5a bc 2d 6b 48 cd 6e ae 3c b3 d2 64 7f 22 b8 a8 d7 92 35 49 bc d2 aa 18 11 56 ef cd b6 4c dc df 40 7e 70 56 ee 3b 5a 4a 19 a2 2f 30 a8 53 b1 e9 b6 c6 82 be f7 9c 3d 2d 34 51 3e 4a 55 92 b8 d0 f2 01 eb de 97 b8 4d 07 9c 28 79 af d2 f5 17 ce 7d 4b a4 3a 7f cc eb 09 9f b4 93 3e 9a d5 47 fe 5d 12 7e d0 5b 4c 3a ee af b6 f4 f4 54 b7 1a c5 9d ea ca f2 fc a2 e8 e4 3c 99 e7 20 16 63 5b 07 5d 60 b9 e3 Data Ascii: (jbIT0w5\!dCJ-V6vV2q6)bW]go9[KRuge,6mm#W65#BSEW"f46^o-bRZ-kHn<d"5IVL@~pV;ZJ/0S=-4Q>JUM(y}K:>G]~[L:T< c[]`
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: ba 57 d0 e4 18 88 55 86 b1 dd 26 13 ba ee af 5d b6 f7 90 76 7a d1 06 24 96 3c 49 62 04 b9 0d c2 b1 5b ee 21 d7 29 11 bc cc 6e 73 4a 8b 35 cc 83 67 ec ea 67 09 35 70 3b a7 d5 cd 8c 0d 76 5e 0a ab 91 f7 48 cc 70 c8 8f 49 ef a8 76 49 80 d0 ed 77 0b 60 59 c8 8c 9d 59 ef 3b 4e be 9d 9a 8b d8 c6 a8 a4 23 b6 65 31 b7 cb 54 1b 3c 85 85 94 2e 82 ad 7a 92 44 94 e1 ae 26 94 b3 1b d5 98 77 6d bb 08 d2 c6 4f d4 6f 9d ab 1b 3e 77 e9 1b 10 d5 79 f6 ca 7d 43 c2 1d 1a 6c 73 cf 77 91 4d b9 0d 52 cd 5f 45 94 85 b7 76 d4 5c 58 f8 77 d4 4d 89 d4 25 cd 11 b7 3b 38 cb 9b 99 97 69 76 96 8e 2c 1d ac e3 f7 76 7f 45 47 65 6d 60 49 d6 11 31 54 16 4c 7d 63 55 9b c9 0c b6 17 0d 23 29 b3 cc a8 6b 11 98 62 3a ab a3 55 1c 35 16 b5 7c 43 1b b8 d9 07 aa 9a ab 29 d8 c9 62 0c 93 d1 e9 d6 d1 Data Ascii: WU&]vz$<Ib[!)nsJ5gg5p;v^HpIvIw`YY;N#e1T<.zD&wmOo>wy}ClswMR_Ev\XwM%;8iv,vEGem`I1TL}cU#)kb:U5\|C)b
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 63 84 43 69 51 be 33 c7 84 35 5c 22 5c 43 c4 5c 4e 55 45 30 57 3c f3 95 c4 c1 4c 41 4c e1 31 3e 31 17 8c 52 c4 f9 c0 c4 54 c5 34 cf b8 07 3f 24 13 3f 28 71 65 22 a1 cd 44 c5 9c b8 b3 f8 43 9c 9c ac c1 5c 59 29 87 23 0d ee 71 c1 78 b0 e2 4b 3c 5a c7 4b 16 90 57 0e 9e 13 68 15 4d 38 a1 a8 6c 12 55 be b4 bb 2c 5d 37 5f 83 8b 1f ad 62 60 ec da a4 14 73 b1 ad 80 24 6f 1b 3b e9 22 d6 4c a5 17 d9 1c 85 2f c5 06 61 2e 0c a2 5c 69 d2 2c b5 45 6f 56 81 c3 4e ed 41 ff 00 c9 aa f8 31 11 f2 0c 9d cb 9a fe f9 31 0b 6f eb b2 43 a8 bc 77 ef da b6 b7 cd da ca 75 43 7e 73 be 10 67 8a 31 4c c2 a0 c5 a9 74 52 c5 a7 90 9b b6 75 4a f2 29 20 d3 b8 6a 44 4f 2a ab e4 28 56 ce 29 b9 14 bc 64 0c f6 8b 18 b1 f9 07 40 b0 5c 45 c4 21 e1 55 15 53 1a 7c 99 c6 1c 07 43 9c e7 17 e7 0d 7c Data Ascii: cCiQ35\"\C\NUE0W<LAL1>1RT4?$?(qe"DC\Y)#qxK<ZKWhM8lU,]7_b`s$o;"L/a.\i,EoVNA11oCwuC~sg1LtRuJ) jDO*(V)d@\E!US\|C\|
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 58 90 66 0e 39 06 4b a2 70 1c 41 e2 5c 22 af bc 9d 19 d9 7b 8c b9 30 f4 39 04 fc cd 8c 96 46 c1 3f e5 8b 01 55 57 d3 e2 89 39 9c d7 c1 3c aa 92 9a 74 c9 23 9a fd 07 20 db 65 89 6e 2d 74 1e 14 1c 98 ec 67 5f b2 98 ed ec 87 96 74 b8 ad 88 d4 e9 ed c5 87 7f be dd b7 36 b7 ae a1 b7 03 65 db 49 85 aa d6 ad 2a a2 50 55 4c 85 2e 1b ee c3 18 d6 c4 9f 5b 26 4d b4 0d a2 60 f1 84 82 a3 2b e1 d0 35 47 60 bc b1 0b 47 90 45 26 72 7f de 6a df fa be 62 19 3a e1 22 9b 56 27 2a 49 fc 37 f7 92 a2 bc 58 72 9a e5 89 c2 4a 4f a3 4a 33 85 73 f2 0c b1 e7 50 1b 4f 13 49 e0 db 72 bc 55 70 e3 b9 f7 04 29 0f a3 94 c6 d0 95 6a 22 fe 27 8e 2c 6e 31 63 92 21 47 55 c4 8a 28 42 da 26 20 22 67 f4 5e 71 71 a2 f1 3b 24 f2 93 7e a2 3a 9c 72 25 8f f3 c8 ff 00 56 3f ab 7f f4 a9 70 b8 48 9c 22 Data Ascii: Xf9KpA\"{09F?UW9<t# en-tg_t6eIPUL.[&M`+5G`GE&rjb:"V'I7XrJOJ3sPOIrUp)j"',n1c!GU(B& "g^qq;$~:r%V?pH"
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 4a 61 02 42 49 84 6d 61 8f 0a 89 c6 34 1f 6b d3 99 46 da 3c 3c 01 4f 28 cc 06 04 70 54 18 c1 c2 46 05 c7 60 b6 58 cc 51 6d 5a 69 3c 5b 01 5c 16 5b 21 fc 36 57 1f a7 8c 64 fc 32 60 65 c1 b1 7d 2a e8 5c 93 67 4d 56 cd 7b 13 69 60 4c 5b 3a 89 15 c4 00 8b 90 ec 66 c2 c6 76 42 4c 87 2a 2c f6 e3 d5 37 16 4b 89 f0 49 86 9f 25 82 89 c6 94 88 0d c8 87 0e 60 6d 5a 99 c4 9a 0c a0 12 82 78 3c 72 1f c4 15 e2 aa c9 5a 07 e2 bc 35 e2 fb fe 0d 13 b3 4e 60 ab d1 2d 2c 1b 65 d6 2e 5f 13 b5 d5 6b 77 c5 da aa 62 c1 6d 5b fa ca 34 a6 c0 27 58 eb 31 a3 c0 b2 92 cc 86 fc 7c 91 78 10 52 c6 17 84 f9 53 92 d0 fe 4d 13 2d 3b 7b 21 39 c7 70 b3 8e 7f 84 5c 96 49 f8 f4 4a bc 4a ff 00 d3 64 b8 55 35 5c 5e 71 57 8c 52 c2 2c f2 c5 2c 45 e7 13 2d fe 23 d7 af 30 5b f8 5f f8 17 25 a2 a8 48 Data Ascii: JaBIma4kF<<O(pTF`XQmZi<[\[!6Wd2`e}\gMV{i`L[:fvBL,7KI%`mZx<rZ5N`-,e._kwbm[4'X1\|xRSM-;{!9p\IJJdU5\^qWR,,E-#0[_%H
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 2a b9 f8 4e 26 7e 2b 98 51 9d 44 fc 73 c5 60 d3 09 b2 1c 51 5c 5c 54 5c 5e 53 39 5c fe f5 c4 13 5c 06 5c 5c 18 e7 8d 32 49 8d 23 89 8d 91 60 3a 82 9f 98 21 85 60 a9 8b 3d d2 c4 91 28 f3 cd e5 c7 26 40 69 3f ca d7 2e 25 bb 84 ad 4c b9 94 da 05 8b c9 0a 84 64 48 6e 9e b5 9c 69 96 5a 44 21 c4 31 cf 31 cf b3 15 dc 53 e7 14 97 8f 25 54 f2 c4 71 79 42 f8 52 5c f2 ce 71 15 71 b5 e7 03 15 47 04 87 90 12 44 fb db 6c 56 e6 a1 92 7b 72 d6 23 ab bd 89 ab 35 8f 76 9d 40 23 bd aa f2 e3 fd 87 b1 3c af ed fb 0b e4 ed bd ac 85 ea 74 27 ab 35 b5 f2 bb 65 92 28 00 aa 90 dc 4e 0a f9 55 aa be ba 8e 8e c2 39 3f df b3 34 6e cb 47 3c 46 22 10 4f 7d 84 70 ee da 44 87 06 29 ac 7d 85 9f f5 a7 b2 45 48 80 4f cd 8e 40 cc 69 4e 47 8e fa d9 c5 71 4e 7b 0f 61 cf 07 40 b6 07 b2 3d d3 cf Data Ascii: *N&~+QDs`Q\\T\^S9\\\\2I#`:!`=(&@i?.%LdHniZD!11S%TqyBR\qqGDlV{r#5v@#<t'5e(NU9?4nG<F"O}pD)}EHO@iNGqN{a@=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	62672	188.114.97.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	620	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:21 UTC	1002	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: ASP.NET_SessionId=5vic4wnadalezczdgh3l1qws; path=/; HttpOnly; SameSite=Lax Set-Cookie: llbrMachine_593579=19998811=19998811; expires=Sun, 28-May-2524 05:15:22 GMT; path=/ X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W9Nwh%2FM7OwbCMWI81kq901m3DWxXCmeFQK8F9ki8MKcdLkeP3tv6Ik%2FlVL8mGMf2JGkxZsU42tIsWXlm4FN3xWmgorLkdlJiBZgzUk4k7AE7fn%2Bi37PQEVmpOXZ5ihI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc4345cdd180d-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:15:21 UTC	367	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:15:21 UTC	273	IN	Data Raw: 4e 70 4b 63 77 65 77 49 64 6f 57 48 36 5a 58 61 69 33 48 57 38 74 76 4b 45 3d 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 22 20 76 61 6c 75 65 3d 22 31 38 44 36 43 36 44 30 22 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 3c 2f Data Ascii: NpKcwewIdoWH6ZXai3HW8tvKE=" /></div><div class="aspNetHidden"><input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="18D6C6D0" /></div> <div> <span id="lbl"></span> </div> </form></
2024-05-28 05:15:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	62674	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	979	OUT	GET /wp-content/uploads/2022/07/01-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:34 GMT Accept-Ranges: bytes Content-Length: 440915 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e1 17 9b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 36 3a 30 39 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:16:09
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c Data Ascii: RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESl
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 63 64 32 61 37 65 33 38 2d 35 32 33 31 2d 39 39 34 32 2d 39 64 61 37 2d 33 64 64 30 35 36 64 32 64 63 61 35 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 31 31 2d 30 36 54 32 32 3a 30 32 3a 34 34 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 70 6e 67 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 Data Ascii: nstanceID="xmp.iid:cd2a7e38-5231-9942-9da7-3dd056d2dca5" stEvt:when="2021-11-06T22:02:44-03:00" stEvt:softwareAgent="Adobe Photoshop 22.4 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/png to image/jpeg"/> <rd
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 14 9e 9a be a1 02 72 17 23 4a 95 9c b9 0b 92 25 a3 f9 bb f4 27 c3 33 82 00 bc 88 fc ab 79 20 c2 23 40 33 7d 54 0c 8c 2d 24 45 24 87 9f 30 27 07 d7 8c 03 8f 97 20 8d f7 2b e0 dc ce 5e c0 9e 30 ca 23 01 f0 e3 53 43 72 8c 77 ac c7 9a af 0c eb 10 64 aa c3 94 78 07 32 37 19 11 3d f2 13 23 43 5f 19 63 95 63 3b d1 f8 f0 8a 27 8d f7 9d cb 14 ec 52 ae 43 96 a6 c2 74 27 18 45 2e 51 26 90 44 88 1f 64 04 45 18 6e 69 52 b0 91 80 1b 80 1b 9a 09 02 01 63 f0 ac 00 82 2e f1 fb e5 15 be 34 33 1d 8e 6f bc 85 4c 32 85 11 39 02 01 e1 f5 45 ef 93 97 08 ab e2 23 cd ac 4f 95 5e 9d 26 b0 84 aa d2 72 22 12 2c 62 e5 8c 01 63 08 c4 1d 92 04 61 7e 5f 04 e6 f2 ad 2e 58 a5 8b 1c 17 c6 05 e0 0d e3 e5 47 d2 c3 2c 68 3d 22 9a 1b 93 20 68 2b d7 cd 1f 5f e5 2f e6 ff 00 53 8a 2f a2 a2 f1 4b Data Ascii: r#J%'3y #@3}T-$E$0' +^0#SCrwdx27=#C_cc;'RCt'E.Q&DdEniRc.43oL29E#O^&r",bca~_.XG,h=" h+_/S/K
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 93 23 fe 61 f7 c6 44 fd 03 f1 06 a4 f1 1f a2 b3 6b b0 7c 9a de b6 c6 4d 35 56 bb 59 c5 ba 4e 9e d4 69 2c 0d 9b 74 07 e9 5e 3a 4f 4f 57 f9 94 c3 f5 a7 91 e0 48 fe 64 94 9e 92 92 3c 9d e8 52 20 40 f8 80 a1 56 1d 89 02 54 7f 6d 16 ab e8 a8 ff 00 40 21 91 f8 1d e3 5f a0 8d d0 db 5a a9 f8 8f dc 16 e3 e2 cb ae 7a f8 32 e8 79 5f 76 0c 38 c2 7d 15 f9 8b b5 ca 44 f7 fc de 6e a0 e9 16 fb 19 dd 72 ef ad 7c 5a 03 d9 6b b1 5d b8 9b e2 d6 2d 9f 13 2c e6 68 d7 2e fa 96 82 f4 5f 9d 1a b3 e9 2c 6d 0e d7 f6 c9 93 ae ab 52 bd 92 5b 1c eb f6 01 25 73 48 5f d1 55 45 32 3d 56 60 cf ae b4 fa 18 e3 d1 9a 31 63 4b 30 3d f1 55 dd 1d d2 9c 37 a7 67 77 96 2a 76 0d f2 30 49 d0 e4 4a b1 0d 75 68 24 57 b3 42 c8 37 d1 d7 fb fa 98 6b 4b 02 57 cf c8 d1 5e 6b 6a de 91 0d b9 78 ea 8d b0 8e Data Ascii: #aDk\|M5VYNi,t^:OOWHd<R @VTm@!_Zz2y_v8}Dnr\|Zk]-,h._,mR[%sH_UE2=V`1cK0=U7gw*v0IJuh$WB7kKW^kjx
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 58 e4 6a 0b 27 34 8f 43 b7 90 25 58 c2 ab 7b 06 d9 0a b0 3c 6b 40 0b da ce 50 d8 8a 74 bb f4 a4 af ae 88 9e 02 bf 22 4a 8c 5a 78 9a dd 60 fb 8a da 21 d2 34 33 9e 7e ac b8 d8 ff 00 88 e5 b9 52 22 4b c9 a3 7a 43 59 e4 85 e7 c8 bb 5c 9f ea f8 be f3 99 28 d8 f3 f6 5d cd 4b 22 ca 13 66 6a d8 c8 e2 99 eb 8b 09 57 1c 25 74 3d 6f 2a 40 1b ff 00 57 f8 89 39 6d a3 16 20 68 ab 47 07 af 0e 34 97 df 3e 0e e1 ad 2f d4 c3 ad 1a 06 bd 18 e9 03 3b 72 77 05 d4 e1 8d 2e 65 6e cb 28 d2 93 13 55 78 9d 84 82 a2 41 70 73 e7 a7 c0 7a c3 8e a8 9e 32 18 cb 35 ec 6f bd 34 9b 0a 4b 9b 5d 21 90 f7 e5 a7 5e 26 2e f4 8b 0d 36 e6 5a cb 07 8a d3 ec 47 2a ca b6 04 eb 21 55 06 af 6c a8 12 28 a2 c5 d7 68 c7 85 36 3d 93 12 bb 74 48 ed 19 c0 91 aa 9e c4 96 17 6e 66 cd ae c7 4c 30 af 25 6e 5f Data Ascii: Xj'4C%X{<k@Pt"JZx`!43~R"KzCY\(]K"fjW%t=o@W9m hG4>/;rw.en(UxApsz25o4K]!^&.6ZG!Ul(h6=tHnfL0%n_
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: e2 44 c0 4f 9c 06 fc 81 1b e7 d7 c0 47 3e b8 60 a1 9e a1 c3 20 3c fa 87 05 3c 14 c3 3d 78 09 e0 a6 18 29 06 7a f3 c3 9c 29 39 c2 26 19 f1 9c f1 86 30 67 b0 33 da 18 0a e0 2d ce 01 83 00 d8 53 e0 0e 14 fc 60 2f 85 5c 33 dc 19 f6 0b 80 b8 60 1b 00 d8 41 cf 2c 93 76 98 25 75 d8 07 69 2f 63 b2 3e 66 d4 44 b2 08 d2 67 db 37 6b 73 82 7a de 69 ad 79 36 24 72 e9 42 15 79 a4 80 92 2d d2 55 26 75 57 2a b6 85 93 48 8e 36 24 8a 4f 5e c2 b2 4d c1 22 75 bb 77 0f 98 51 ff 00 a9 67 25 73 8f 8b 7d 2d b2 5f a8 94 35 6d b9 94 8f a4 13 c6 42 98 ec a9 c6 d3 8a 08 44 1d 04 d6 ae 6e 86 50 51 ed 37 fc ec a1 a8 10 c1 5c 35 22 4c 5d 35 45 30 c2 13 8c 91 97 41 a2 32 1b 2a 11 a3 3b 57 66 e1 10 3a 6b f1 80 be 15 4c 2a e1 85 73 c6 15 f0 61 17 29 b0 a3 81 ce 26 a0 e2 4b 62 6b 60 28 19 Data Ascii: DOG>` <<=x)z)9&0g3-S`/\3`A,v%ui/c>fDg7ksziy6$rBy-U&uWH6$O^M"uwQg%s}-_5mBDnPQ7\5"L]5E0A2;Wf:kL*sa)&Kbk`(
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 81 ee 6e dc 04 ab a4 04 2b 74 47 84 57 20 9e 29 81 04 7f c6 72 21 93 bc 0b 3a 9a 9c 9a d6 22 2b 3c aa 3a 72 e2 df 43 5e 3c 4a ba a6 25 59 c2 c2 a3 65 3c 4c 0e 3c 84 a2 18 3e 22 1c e0 1f 25 5b 79 3a 66 c0 3d 8f 59 94 ea 81 3d 78 8b 01 50 13 87 29 01 fd 5d 25 14 91 83 03 aa 40 69 1a 9b 8b a3 3f 14 15 2a 80 dd 0f 21 51 32 89 5e 18 44 65 d1 32 a0 f6 b0 92 a5 5a 9e a2 45 b2 c6 1f 9a 5d a5 76 0a 22 e5 17 f8 85 3f c0 8c 18 9d b6 4c ba 15 c4 12 13 e0 c4 15 d1 1a c0 2a 54 e7 e1 14 70 10 d5 46 e8 67 f5 03 84 6e 9a 78 46 df 79 dd b6 25 39 19 29 aa 80 42 05 09 12 39 35 e2 58 ae 5f 43 4c 2a b9 d8 38 31 31 66 49 82 a0 c9 76 e1 20 b0 82 0f 9d 94 ad 20 98 10 d8 83 c0 49 32 c9 1d e8 04 42 ae 57 5e 29 44 04 c6 00 33 89 21 04 dd ce 28 56 af 63 1b 3a 64 84 c3 98 d1 8b b6 ba Data Ascii: n+tGW )r!:"+<:rC^<J%Ye<L<>"%[y:f=Y=xP)]%@i?!Q2^De2ZE]v"?LTpFgnxFy%9)B95X_CL*811fIv I2BW^)D3!(Vc:d
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 29 0c 55 31 cc 6a 8a 36 88 86 55 92 a6 8b 14 0b 18 90 a2 a2 29 19 55 1f b4 2a e9 a5 f0 2b ae 5c 55 52 1c 0c 41 02 9d 52 94 f2 07 c7 4f 0f c2 e9 a6 6c 4d cc 7f ad 25 ca 25 49 42 90 a4 60 9a a8 47 c0 8b 4c 95 74 44 55 67 2a 9a a6 44 a6 01 fe c5 30 32 aa 01 b3 9e 44 07 f8 a6 21 cb b2 08 cc c4 ff 00 f7 0a 61 e1 a8 e1 8f c1 bc b8 00 28 e1 c3 f8 a8 6e 71 3f 93 e4 c1 4d f5 0a d8 a3 95 b4 bc 53 c8 76 a7 f5 2c b9 11 4a 7a 59 31 49 79 13 19 20 72 e8 c1 22 c5 c3 b3 b5 88 28 a2 e0 85 6c b3 fb 2b a1 59 25 8c a9 9e c7 a8 79 98 aa 0a 8e 49 26 71 66 de 1c de e2 c4 a8 42 e2 5e b1 29 51 12 1c 0a 98 84 53 b4 d2 59 fb cf 05 58 ae 27 09 e9 83 36 6e 0e 54 54 ac 65 c1 ba f0 f2 29 28 47 0c c5 41 5a 35 3f 6b fa e3 74 9d ec 17 6e 90 18 49 06 32 6d 64 24 5f 55 de 35 59 64 d4 64 65 Data Ascii: )U1j6U)U+\URAROlM%%IB`GLtDUgD02D!a(nq?MSv,JzY1Iy r"(l+Y%yI&qfB^)QSYX'6nTTe)(GAZ5?ktnI2md$_U5Ydde
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: e0 86 0e 1b 9c 10 c5 f0 47 04 b9 ea 0c 10 e3 15 11 e5 73 87 2a a9 f0 73 f3 87 38 00 28 a0 8e 18 47 0c 3f 80 26 14 99 e1 86 0c 39 79 c3 17 0c 5c 54 30 e5 cf 58 e0 22 03 82 88 60 b7 0c 04 83 05 3c 32 78 40 31 47 4e c9 bb 91 50 fe 90 4e 35 9f 90 5e a8 ec 1f a5 b5 68 4b 0c 44 94 32 ed 14 14 80 30 52 c1 4b e4 c9 8e 0a 5c 01 83 8c 1c 04 44 70 ac f9 12 32 1c 49 88 e1 59 97 01 bf 18 46 e1 80 90 80 1c 9f 02 1c 67 90 60 9f 04 c3 9e 58 26 c5 4d 9e 5f 83 7f 9f c0 8e 73 82 7e 30 ea 62 86 cf 3c f3 1c 13 0e 79 60 8e 06 08 fe 00 70 07 3c b3 cb 00 e2 18 55 70 83 ce 14 d8 03 81 ce 00 67 1f 8e 7f 20 5c 29 70 30 30 30 a0 01 85 0c 0f c0 e1 87 0c 70 0c 39 f0 4d f8 e7 04 70 e7 0c 3a 9c e1 8d c6 09 f0 c6 c3 0e 09 be 44 73 9c e3 00 33 c0 70 4b 82 5c 31 70 e1 82 18 76 e0 6c 33 40 Data Ascii: Gs*s8(G?&9y\T0X"`<2x@1GNPN5^hKD20RK\Dp2IYFg`X&M_s~0b<y`p<Upg \)p000p9Mp:Ds3pK\1pvl3@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	62677	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	979	OUT	GET /wp-content/uploads/2022/07/03-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:39 GMT Accept-Ranges: bytes Content-Length: 366574 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e1 18 39 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 38 3a 35 33 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 9ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:58:53
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 Data Ascii: numESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenu
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 6a 70 65 67 20 74 6f 20 69 6d 61 67 65 2f 70 6e 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 64 31 35 39 37 32 34 66 2d 37 36 31 65 2d 39 35 34 61 2d 61 65 31 65 2d 35 36 62 31 36 35 30 62 64 38 64 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 32 39 3a 35 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 Data Ascii: jpeg to image/png"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:d159724f-761e-954a-ae1e-56b1650bd8d6" stEvt:when="2021-08-12T20:29:55-03:00" stEvt:softwareAgent="Adobe Photoshop 22.0 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved"
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 49 99 32 53 37 36 ba c9 cc 95 64 67 a4 f5 4c 55 fa 4f 5c f4 9e 93 35 5e 93 32 7a eb 37 59 95 b1 d7 46 8e a3 7b b2 bc 53 55 41 2c 24 5b b6 b1 53 c5 5b 95 6e f1 dd 95 d1 b5 e9 5e 29 9b 9e ba f4 99 93 25 5b 15 7a e6 64 f5 d7 a4 cd cd ae b3 73 17 3d 27 ae 70 ca 7c 33 b3 92 88 6d 0e 5c a9 ba 4f 8a cc 14 1b 52 29 f1 6f 95 d9 05 62 73 36 c3 08 ee 95 bf d3 96 f7 a1 2a 21 46 ba 4a a3 b1 51 4a 30 8f a4 19 b9 c9 32 07 10 62 b1 3b 5c b3 d4 e9 8d 68 3e 7a 27 7b 64 cf 5e 82 03 c9 c3 9c 34 fa 99 03 9b b9 e7 36 9a 6b dc f8 c9 13 1b 21 8b 2e df 45 72 19 92 0a ba 48 65 18 88 0d f2 f4 38 86 49 ab a0 70 fe d4 54 6e 1e 36 00 58 a2 d9 72 3c 3e f9 ff 00 d7 b2 e4 7a 7b 2f 1b 0e 02 a7 3e 29 87 78 98 cc 49 ab 6c 65 56 f6 1d 09 cf 33 27 95 0d 90 d7 c7 35 18 ef 95 b3 0e 93 f5 5e e3 Data Ascii: I2S76dgLUO\5^2z7YF{SUA,$[S[n^)%[zds='p\|3m\OR)obs6*!FJQJ02b;\h>z'{d^46k!.ErHe8IpTn6Xr<>z{/>)xIleV3'5^
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: f2 72 aa 3a 79 ce 5b a0 fe c9 11 ec 91 7b 04 49 b1 03 0c a7 36 a4 34 f4 af 88 2a 76 21 6e 28 e1 4d 15 d0 0d 4d 13 0c 3a c1 fa 0a 52 24 b4 6d f1 05 d8 21 66 62 e1 40 ed 98 e7 be 63 5d 20 10 58 58 6d ca 52 84 b9 7c f3 6b 3f 40 fe 7e fb b4 c7 fd 25 35 34 66 6c a0 fe bb 4e dd 35 47 ae 16 b7 cf 7a eb 19 c6 ef 10 26 39 a4 5b b4 f1 be 70 fa ef 15 15 74 88 bb 30 ce 1c 61 1d 26 92 e6 77 d2 8d 7b 9b b9 7e 86 29 9a 41 83 5b 4b 63 98 87 56 83 59 31 d6 81 e0 f3 23 17 c8 0d c3 2c b7 97 50 39 cb 6b 15 33 ac 81 9e 16 5b 94 06 af 5c 63 b0 63 f9 65 39 9a e2 99 8d 77 93 74 8e d9 37 f4 f1 84 0c a5 09 31 37 a7 2d 5b 8a ea 2a 62 85 da b1 2d 82 d9 a2 d4 8b 3a 4b 6b 6a f9 5d 16 e6 79 9e 76 0e 35 32 2e 78 07 a9 11 17 47 33 92 ed f5 24 84 c1 29 47 55 99 3a 0e 5e f2 fc e4 ee 62 e8 Data Ascii: r:y[{I64v!n(MM:R$m!fb@c] XXmR\|k?@~%54flN5Gz&9[pt0a&w{~)A[KcVY1#,P9k3[\cce9wt717-[b-:Kkj]yv52.xG3$)GU:^b
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 67 e9 51 e9 2c 74 08 86 07 27 0b 8e 62 76 06 2e 53 51 c6 27 60 bd 0c 4e a3 25 23 46 36 d5 53 46 53 29 8f ae bc ab 5c 6d 4d 6c ee 62 cf 20 eb 14 d5 a9 6e cb b7 a3 00 f7 a7 93 63 3b a2 63 14 96 bd 98 1c d9 17 db 56 19 36 b0 39 41 f5 46 e7 03 66 85 a8 02 e8 07 a1 44 0e 52 46 2d 1b 07 89 d3 43 69 b5 91 cc 0b 94 2f 4b c9 46 67 0f 13 1e b7 30 57 b4 3f 5c d4 8b 06 ce 26 7c 4a 27 29 bc 2e 91 89 ae db 0e bd 75 8b 2f 59 26 b2 4c 44 89 aa 6c 76 74 2c 14 0d 16 a7 a9 bd a0 9c e2 33 ae 77 3e a7 fe 7a ef 37 90 ef 6b 50 2d e2 45 d0 c0 5f 42 98 75 a3 9b d4 dd a1 2b a4 a8 9f 44 e8 53 cf 7f 99 cd 46 8c 87 ad 5f 02 1f a4 ff 00 21 c8 fd 9a e2 8e db 69 cf d0 f6 70 ba b1 5c 3e 81 ef 17 39 a7 0f 91 ba e9 52 ed f3 39 92 62 76 e9 6b ba 58 dd 26 a2 72 5f 21 c7 7c d5 17 66 06 d1 52 Data Ascii: gQ,t'bv.SQ'`N%#F6SFS)\mMlb nc;cV69AFfDRF-Ci/KFg0W?\&\|J').u/Y&LDlvt,3w>z7kP-E_Bu+DSF_!ip\>9R9bvkX&r_!\|fR
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 11 ec 6b 49 bb 86 cd 3d f8 74 97 61 96 bd db c6 78 0c d5 cb b0 ef 91 22 7d f2 cd 83 2d 47 61 9f e3 a3 78 35 1a d6 db d3 b5 ea 5e 55 b6 53 79 e8 e8 c9 62 37 31 8e 81 e2 3b 51 78 39 b6 5f 15 9f f1 0d 2d a9 ac 15 58 f9 64 2f 85 a7 12 b8 35 4f e2 f5 bb ab e6 74 71 57 65 a9 27 ab 54 54 f3 b9 4b 59 66 2b 32 36 57 8a dc ee c1 b3 a9 24 21 b4 76 86 78 af 6e 25 89 bb 3d d3 ec 4d a8 8c 3d 92 c8 d8 55 5b 51 b9 bb ed cf e4 cb 5b 58 cd a5 58 3e da 92 5e df fd 6a f4 af 7c da 58 5a ca db 1d b5 5a 27 67 d2 32 58 e8 53 fb 84 94 25 aa 5d 61 a1 59 b9 55 f0 f3 fb 99 22 9f 7a d7 d9 aa d8 1d 5c 89 2a b5 91 b8 43 2d 8b 53 c4 ca d1 16 aa 26 4d 7c 9a f9 1f ad b1 6f 7c fb c9 f3 07 3e 16 32 47 57 d7 1b 32 33 92 be 17 d0 f8 9c ff 00 fa dc f7 b1 cf 6f d0 4b 64 05 39 ac f0 6e 4a 74 65 Data Ascii: kI=tax"}-Gax5^USyb71;Qx9_-Xd/5OtqWe'TTKYf+26W$!vxn%=M=U[Q[XX>^j\|XZZ'g2XS%]aYU"z\*C-S&M\|o\|>2GW23oKd9nJte
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 7c 0f 74 f1 d4 78 32 3c 07 32 e1 20 89 1b 1b 77 fd 25 77 d8 b5 b0 a8 e5 25 b8 88 17 18 86 ed 82 31 b0 8b 35 2f c5 5c 6d 37 12 32 d5 5e da bd ba 9d 3e bd b4 e6 7c ad 00 cd f2 1c bc 90 78 01 ae ca c8 0b ed 38 69 0e 34 98 18 b5 f0 7d af 8a 18 e5 7f f0 22 f9 0d a9 46 07 4c f8 7c 65 78 61 6a 63 5e 03 fe 80 a2 64 24 bc c9 96 fd 99 90 34 07 47 03 84 51 b0 03 f6 e7 c5 ee 4c 3f 4b b7 35 01 22 12 57 e3 b8 09 20 fa d3 5c e2 18 d7 39 1f 87 dd 0f 85 da 1b 2d 9e b9 5d 4e d1 b4 ab ff 00 9f 94 28 fa fb 0c 6b 7b 4b 01 0e d2 75 3e fd d6 0e 8e e3 6c 35 aa c3 3c d8 c9 03 94 12 3b c6 d9 6b de d6 00 ef 00 c6 c8 c0 48 ac 3c 23 05 34 64 38 00 26 3e 2d 89 c4 b8 7c a8 a3 05 0c e2 6c b8 55 7b 9e d7 b4 e0 9c 27 34 94 1b e2 bc 49 44 16 97 ec e7 00 ed 2c 04 76 f6 53 b6 f6 17 e7 c8 e5 Data Ascii: \|tx2<2 w%w%15/\m72^>\|x8i4}"FL\|exajc^d$4GQL?K5"W \9-]N(k{Ku>l5<;kH<#4d8&>-\|lU{'4ID,vS
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 00 a5 2c 0d fc 38 93 75 ec 72 75 08 da 04 41 8b cc 94 5f 22 7b de 13 25 c8 2f 55 99 13 9b 00 69 7b ea c0 f8 a9 08 9d 1b 99 87 47 63 24 59 2d 7c 92 bb 0d 24 a6 e4 16 82 17 f2 c1 70 5f 21 02 89 58 ca 89 ed 09 cd 0e 4e 2e 6a 04 3c 17 84 72 e4 f6 f8 90 72 8f f2 2f 2e 11 42 cf 92 d4 d3 97 05 fb 95 14 9e 71 eb 8e 27 79 f9 78 f2 16 07 fd 5e 48 10 56 16 16 16 16 16 3f f8 b2 b2 56 4a c9 59 2b c8 ac 95 e4 57 91 5e 65 79 15 e4 57 91 5e 4b c9 65 12 bc b0 bc 91 72 2e 2b 25 64 fe 80 7e 98 0b c4 22 16 11 08 fc 2c ac ac 85 90 b2 16 42 ca cf fc f3 ff 00 26 8c a8 bc 42 f2 40 04 1c 86 50 4d 6e 5c 24 68 31 c5 1b 63 01 3e 1f 27 7d cc 09 f2 07 39 e4 14 73 82 0a 2e 21 17 b8 16 ca e5 f7 02 1b 39 68 a6 1b 20 9a 53 0b e9 de 63 98 d9 fc cc 73 98 96 c6 f9 8a 3a 9b 08 ae 45 5e 42 f0 Data Ascii: ,8uruA_"{%/Ui{Gc$Y-\|$p_!XN.j<rr/.Bq'yx^HV?VJY+W^eyW^Ker.+%d~",B&B@PMn\$h1c>'}9s.!9h Scs:E^B
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 56 46 d4 64 96 66 d8 8c 85 67 f8 b9 ad 6f 80 27 04 92 80 f1 6f 88 71 21 cf 7c b1 64 0f 2f 20 4a cf 8a 6b d0 78 70 f2 08 3b e5 e7 28 96 b5 4b f0 1c df 90 56 7e 4b b2 9a 32 bf 70 02 71 c3 4f ee 89 ca 04 10 f7 1c b7 25 3f e0 83 fa 95 9f d0 12 13 3e 50 04 83 f0 9a 0a f1 4e c2 7a 8d 37 f6 70 58 f9 8d c5 c9 ec c8 2d 20 20 d4 02 6e 4a 89 e0 8a 98 0c 97 2f 2e 18 64 ef f9 68 c2 25 33 f7 c6 53 c6 50 00 26 bd a0 78 fc 80 48 20 e0 2f fc 34 61 17 7c 34 a2 72 7f f3 94 e2 01 73 f2 7c ff 00 42 7c 96 4a 0e ca 07 28 00 4b 47 c9 20 09 23 2d 5e 78 2f 7e 50 39 20 26 84 d0 30 f1 83 40 a8 5d 94 c0 5c 04 3e 2a cb fe b5 34 ae 05 92 3d 86 5c e5 cd 01 4e c2 f3 13 7f 9e bd e0 b1 df 4c 51 fd ce 6b 5c 2b d8 7b 5c c0 24 b3 2b 67 33 b5 86 ef e3 4f 13 1f 18 57 64 9e 38 98 1d 8b 92 d7 89 Data Ascii: VFdfgo'oq!\|d/ Jkxp;(KV~K2pqO%?>PNz7pX- nJ/.dh%3SP&xH /4a\|4rs\|B\|J(KG #-^x/~P9 &0@]\>*4=\NLQk\+{\$+g3OWd8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	62676	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	979	OUT	GET /wp-content/uploads/2022/07/04-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:42 GMT Accept-Ranges: bytes Content-Length: 440175 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e1 20 3a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 39 3a 31 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: :ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:59:18
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: fa 1f ce 0f f5 6a f2 d4 93 f1 fc f1 f3 0b 0b ed 7d 33 fa 51 fe 6f ff 00 47 7f af ee 2d d6 7d 01 cf 6f a7 ca f9 dd 25 7b 07 f3 61 71 e8 fb 9f 5b fe 8e ef a1 f4 4f f3 9c ff 00 ea b5 c8 67 7f 3a 3f 9a f9 7f 39 ff 00 a0 eb ce d2 50 f3 3f 3c 7c 8b 5f 99 f9 63 fd e7 d4 fa 97 fc 81 7f f5 0f f3 9f 4f 87 ff 00 3f fc 8f dc ff 00 85 d8 b8 47 fd 0a b8 fc cf a3 fc e7 cf fe 0f ff 00 46 ac 74 93 fe 1b f2 4f fb df f7 2b 32 ee 3f ba f4 95 ff 00 c9 37 7d 2f e7 59 fc ff 00 f3 7f 4b 0f f9 cf f8 1f f4 9f f0 5f 67 5d 1e 5f f4 b7 ff 00 37 f9 df 43 9f e8 ff 00 f7 9f ff 00 9a af f4 4b ce 12 47 3f ce 3f ea 9f fa 8d 70 f9 43 d3 f5 ee 6b fa 3f 45 9f f1 9f 41 ff 00 cf 7f c3 7f a6 ff 00 ad ad 6e 8d f4 30 f8 fa 15 7f 43 fe 7b 83 ff 00 82 ff 00 e8 c5 c1 24 ad ff 00 93 8f 90 fc 99 a3 f2 Data Ascii: j}3QoG-}o%{aq[Og:?9P?<\|_cO?GFtO+2?7}/YK_g]_7CKG??pCk?EAn0C{$
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 3a b6 35 e2 c6 30 09 dd 58 3b 23 59 ff 00 08 f6 7a df f6 df e8 d1 9e 79 cc 6a 48 bd 38 58 46 01 0d a2 07 8f 57 a2 e9 dd 7e ea 2c 7f d8 ec 73 af bf 6b 5a e2 03 dc 0f bb db 5b 7f c1 ff 00 2f 6f bf 67 f9 ea e6 77 5a ea 58 1d 29 d8 78 01 f4 e4 bd f7 64 13 55 6c f4 c0 7b fd 27 7a d7 3d d4 fd 97 d3 c8 6f f8 2f fc 11 8b 96 c4 68 75 ac b6 8a 08 ad a4 c3 dc 0f b1 c0 b9 c5 db 37 7d 1f fa f2 d7 7f 51 63 58 ec 6c aa 5f 91 5d c1 be ab a9 79 6d 8e 73 6c 63 ac 03 7d 8d af df 55 9b bf ed af eb a1 8b 24 41 e1 94 88 34 6a d7 98 c8 80 47 70 0d 6f 4f 3b 93 5e 6e 4d 8d 6b f2 c3 7d 16 b1 ad 66 f7 93 5e d6 7b 19 0c 68 fa 2c 7b fd 2f e4 26 ce c0 36 e0 e1 5b 65 fb 9e 0e 43 6e b9 f2 7f c2 35 fd f7 bd ef dd 7f fd 35 d1 61 d1 d1 aa e9 16 66 e4 b9 bf 68 a6 bc 82 7d 47 34 bd 87 1d d5 Data Ascii: :50X;#YzyjH8XFW~,skZ[/ogwZX)xdUl{'z=o/hu7}QcXl_]ymslc}U$A4jGpoO;^nMk}f^{h,{/&6[eCn55afh}G4
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 08 00 00 00 14 62 58 59 5a 00 00 02 1c 00 00 00 14 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 31 39 39 39 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 Data Ascii: acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZbXYZtextCopyright 1999 Adobe Systems
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 0b 5b 18 bd 1d 62 e5 37 6c b6 ba 2c 3d 00 ca 00 d2 0b 9f 9d 1c 1e bb ab 71 75 6e aa 14 03 8b 6f 4f 14 8a cd 60 1f 67 b0 7c d9 8b 44 d2 f7 3f 4f 10 7d 17 a8 f6 e9 74 2b b6 a6 35 c2 5c 6b 7c 13 36 69 9a c2 c3 d7 6e a0 4a d1 d9 f3 83 4d 2c f0 64 d6 d3 a0 1d a8 e8 b3 25 2b 7d 43 51 2d bd ce 88 bd 9e 36 d2 df bd 56 b6 3e bb 4b 1b 7c cb 1f 60 b5 73 48 fb c2 b1 1c ed ca 0d 15 c2 5f ba dd 83 3c fb 26 27 3c 70 73 40 29 66 41 db 77 39 6b 45 d3 ae b3 f9 cf 76 ca e5 36 53 89 d6 1b 58 d5 9d fc 6a cd a9 82 ec cf e8 6d 78 37 1d 8a d2 4e 2b ee 27 63 de f7 e8 d5 89 f5 3e d5 8b 72 ff 00 a8 e7 19 19 6e df 9c 7d 88 eb 59 19 a0 3a ab b0 bd 72 d4 c0 5f b9 9b d0 ae 3b a8 9b ec 39 26 bd 66 b6 e2 ed 32 f1 73 87 fa 71 40 de b2 d8 fa 6e c8 b9 77 8c df e8 f1 61 ce 9a 4f 1c f0 39 0f Data Ascii: [b7l,=qunoO`g\|D?O}t+5\k\|6inJM,d%+}CQ-6V>K\|`sH_<&'<ps@)fAw9kEv6SXjmx7N+'c>rn}Y:r_;9&f2sq@nwaO9
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 4c 28 94 09 bc b4 09 92 ac a1 13 44 1e 58 34 1d 28 83 33 1e 54 f2 aa ca bc 6b a3 4f e9 d2 0d 9b ed 07 69 38 ca fb 80 ac c2 b3 9f c1 9a 58 a3 af 0e 5a 51 72 e9 b3 69 fa 0e 59 9d f7 0f 84 2f b7 f8 41 d6 b3 a3 6e 7a 23 f1 3f d8 f5 93 90 eb 6c cf 32 84 8e be 3d a4 db c8 a9 b8 3a 2a a2 4c 35 ac 28 cd af 3f 2c ef 8a ca a7 48 5e a2 f6 3f 2f 5a ae 74 29 e6 55 79 cf 1c dc 65 79 af e3 ce 81 37 4e ee 78 89 45 5f b2 fa 2d 8d ce 69 a7 7a 4b 38 89 6e ef 3b b8 33 4d 2e e4 f5 84 1f 42 f3 67 8c ec 99 58 dd 05 89 2f 32 4b a3 4a 9f 92 d6 9e 74 df ce bf 2d 99 b7 93 0e a9 62 f3 de af 98 7d 82 eb 57 3f a8 3d 97 ce 21 b3 de ab 7c c7 46 b0 cb 35 4b e7 58 b4 8e 0e cd 74 09 ac af 35 43 0d a0 4c b2 4d 2b 52 61 48 d9 c6 b9 d0 86 78 2e af 35 42 5d 96 0e 35 9b 18 7e 1c d5 8c c6 b6 8f Data Ascii: L(DX4(3TkOi8XZQriY/Anz#?l2=:*L5(?,H^?/Zt)Uyey7NxE_-izK8n;3M.BgX/2KJt-b}W?=!\|F5KXt5CLM+RaHx.5B]5~
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: b1 e2 96 11 c7 c9 5b 5f 54 ba 44 7b 0e b1 a5 36 63 36 a9 19 e2 31 90 c3 4e 0c 8a b6 5f 58 fa c2 1b 13 b5 f5 13 6e ea 6d 72 42 da 22 c9 45 5e 71 53 15 31 7f e6 0b 81 28 c5 1c 98 2e 36 f1 a9 2f fc 53 05 30 0b 1b 2c 02 cf 2c 53 c9 0f 28 05 bc e0 76 10 2a 14 5b d5 17 12 ba ca 33 2b 2e e9 c7 d6 8e 9f f2 13 62 75 1f b0 b1 9a 06 dd 57 8d 7d 7c 38 c1 14 1d 98 4d 1b 50 9e 92 b1 53 c5 18 24 e0 78 c6 7e 48 71 3f 64 fd 15 39 c7 1a 5c 97 14 dc 1b ca 86 da 42 8c d9 2b 4e 3c 09 43 30 3c 15 11 72 71 a3 8e 47 8c 8d 05 e5 df a3 00 09 f5 a6 a5 16 00 91 38 7d 71 13 85 72 0a 3d 87 3c d9 c9 13 15 f1 8f 01 38 fc 64 44 5e 30 11 3c 2c 85 1d 3d 86 3b 43 16 3b c0 db 8e cd 75 f4 8b 3d 05 e1 f2 17 16 40 8e 10 21 23 2c 20 11 7c aa 82 70 02 bf f0 91 34 18 c5 14 2c 40 44 ce 33 8c 54 ce Data Ascii: [_TD{6c61N_XnmrB"E^qS1(.6/S0,,S(v*[3+.buW}\|8MPS$x~Hq?d9\B+N<C0<rqG8}qr=<8dD^0<,=;C;u=@!#, \|p4,@D3T
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 5d 84 d4 5c fc 17 04 23 b6 a0 dc 0f 19 68 6f 90 01 3e 8d e0 3a d9 04 a2 7b da e6 42 a8 74 23 4a 01 8c ad ca 70 57 f2 7f 2c 62 23 cd b9 21 f7 a4 3b 20 8d 1b 26 f8 54 15 1c 50 52 c7 1e f1 21 61 15 57 d6 28 e3 a8 aa d1 f2 ab fa 82 fc 87 c8 2e 17 c6 0e 4c 69 1c 68 7e 14 d7 f8 81 f0 8d 9e 48 31 f5 d0 38 24 0b f1 83 f3 80 5c 60 af 38 a3 92 93 84 f2 f9 97 09 4b 2b d1 51 e4 5f 87 54 05 b5 54 74 ab de 56 94 bc 1a 55 75 a7 0a 15 5c 77 c5 bd 71 96 dd 93 56 da 8b 72 41 5d 27 97 23 88 ab 91 2b bd c6 94 ad ba ed 8d 72 ae 6e 43 e2 f4 59 2e b4 75 60 40 24 08 b9 63 05 a7 0a c6 0b 3c c5 fc ca f1 a8 d8 1a 9f fa 6c 9f fe 36 b8 1f fd a9 04 a8 17 cd 79 b5 fd 53 21 1d b8 e4 f3 95 90 86 38 8a 8a 62 2e 73 8f be 80 b5 09 ec 9e 58 ee 59 43 07 4a dd cf 53 12 1b fc d8 b6 70 d5 89 11 Data Ascii: ]\#ho>:{Bt#JpW,b#!; &TPR!aW(.Lih~H18$\`8K+Q_TTtVUu\wqVrA]'#+rnCY.u`@$c<l6yS!8b.sXYCJSp
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 1b 0a 29 2d c9 97 ad 09 23 92 62 45 87 2f 85 72 4b 88 e8 3a 20 61 32 3b 4c b2 cc 96 c5 0d b4 53 81 60 70 dc 6b 69 30 c4 db c0 4e 35 fb 6f 25 eb 8c 57 ca 7b b0 4d f8 cb 74 eb 92 1a b3 6d 07 fb b8 5c a5 dc 4f 27 2f 9a 24 07 15 f4 7d f3 75 5a 54 69 3d e4 25 c1 92 89 98 98 be 0f 83 ad 28 a0 cb 24 c8 ce fb 09 b6 93 89 24 82 29 24 1b 36 ac 41 0a 1b c8 d2 05 83 65 8f bd 25 c5 6d f3 04 76 6a 70 51 91 51 81 56 b1 b0 64 8a 45 9a b2 ac 7f f1 4c 71 7d c8 00 d2 ba e9 92 03 7c 2b 11 c1 94 ff 00 62 65 15 64 2b 85 22 e6 32 64 99 22 6e a3 e6 38 dc 84 54 92 fa 2e 70 8e 63 84 d9 67 f1 e6 31 0a 2c 98 62 d0 01 91 22 49 26 96 bd c0 35 50 f2 56 91 17 1f 04 31 9b 15 44 4a 28 1a 0f 92 8b b2 44 55 5f 16 d1 15 50 4a 3f 96 38 8d 0a 36 4d 72 fc b4 6c a3 b8 aa 6f 59 13 47 b0 3e da e3 Data Ascii: )-#bE/rK: a2;LS`pki0N5o%W{Mtm\O'/$}uZTi=%($$)$6Ae%mvjpQQVdELq}\|+bed+"2d"n8T.pcg1,b"I&5PV1DJ(DU_PJ?86MrloYG>
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 2a 63 e0 51 56 b8 ab a7 47 78 a4 69 eb 19 52 b9 47 23 0a 86 0a e2 62 62 7f ce 40 29 0c 58 ae c6 38 ee 21 28 82 2e 27 fc 54 70 c7 1c 0e 31 f6 d1 51 43 14 17 14 79 54 1f 88 e8 8a 8e a2 70 09 f1 cf 0a 83 f2 23 ce 20 f3 9f f8 32 f8 01 e3 1d 45 35 77 8c 95 10 9b 42 1c 25 4c 71 b4 c3 54 e7 94 5c 40 4e 39 f8 14 e5 07 f6 8c e3 be 55 d0 dd f4 0b 4b 93 e3 9c 87 a5 20 c6 40 94 8a 95 e4 ae 39 74 ea e7 ca e5 15 61 a2 9b 8a da 48 bd 04 56 ec 3d 98 a4 0f e5 84 23 69 5a 7c 9b 38 ef ab cd c9 86 72 01 b8 65 18 58 96 71 95 26 b6 64 ca 79 a4 f0 23 7a 04 04 8e 2d 4a f6 b8 6e 27 3e 0a b8 87 c1 34 48 85 25 51 47 f4 45 e1 4c b9 ce 71 13 17 20 3e 88 ad 58 92 b8 ed a9 21 14 e2 25 8b 60 4c 91 4a 57 5c 76 c4 dc 5f 72 ba 6e 4e f4 b5 15 7e 5b 7d 0d 5c 30 6c 59 92 a2 a0 fa ab 64 9c 63 Data Ascii: *cQVGxiRG#bb@)X8!(.'Tp1QCyTp# 2E5wB%LqT\@N9UK @9taHV=#iZ\|8reXq&dy#z-Jn'>4H%QGELq >X!%`LJW\v_rnN~[}\0lYdc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	62675	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:21 UTC	979	OUT	GET /wp-content/uploads/2022/07/12-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:21 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:46 GMT Accept-Ranges: bytes Content-Length: 417996 Content-Type: image/jpeg
2024-05-28 05:15:21 UTC	7957	IN	Data Raw: ff d8 ff e1 14 ad 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 39 3a 30 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:09:05
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d1 67 d6 5b f5 f5 71 eb b0 11 f9 87 61 ff 00 a7 eb 29 8f ac 5b 9f 07 11 a0 bb 42 e7 5d 53 04 47 e7 3e ea eb af e8 fe f5 8b 9b 37 11 e4 4e a6 1b 1f 86 e6 a9 8c Data Ascii: dEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?g[qa)[B]SG>7N
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 64 38 32 35 64 31 62 2d 33 37 32 37 2d 39 33 34 66 2d 38 62 30 39 2d 64 39 31 39 64 64 66 32 37 36 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 61 34 33 34 35 32 37 2d 31 31 66 39 2d 64 38 34 31 2d 62 32 38 33 2d 30 39 35 38 31 62 33 66 66 61 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <rdf:li>xmp.did:cd825d1b-3727-934f-8b09-d919ddf27689</rdf:li> <rdf:li>xmp.did:fa434527-11f9-d841-b283-09581b3ffa17</rdf:li> </rdf:Bag> </photoshop:DocumentAncestors> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: d6 51 f4 f6 f4 36 bc b4 b7 9a fa 1f 52 e8 52 dd a6 1a 44 c7 1e bc d6 d1 84 89 1a 97 bd 65 81 2a e3 d2 d4 b1 1c 5a 46 d2 20 ce 34 4d 5f bd 6e 7d e7 73 0c 0d 48 46 04 fa b2 f8 76 89 38 da 92 89 5a 14 2d 14 f5 86 1c 0c 1b 22 e6 44 50 03 23 78 64 4a 73 5a 3c 9b 21 71 b1 30 d8 9c 6e 87 2f 22 79 bd 61 4a 17 74 13 32 55 91 45 1a c0 d1 28 ff 00 2b ff 00 28 fb 2b ca d8 3c d6 22 74 d0 24 24 a5 22 c4 23 4d 8a c0 7a e6 b0 94 5a 23 40 84 7e b8 2c 9a 10 a5 89 f7 80 9d 64 b9 5b 6b 6e 7f 1a bc 03 4d bc d9 22 26 19 25 a6 f3 ae c8 be 95 0b c3 5a 0c 33 93 4b 2e 28 82 58 89 22 c5 88 50 86 05 52 f4 59 fc b3 37 77 0d a9 e8 1e ae 6f b1 5f 43 f9 b7 a6 6a e4 30 f5 62 2a 4a d2 c1 85 25 59 7b d1 96 a2 73 57 d7 bf d6 94 fd 44 bd 1d e9 2b c1 e3 29 53 0c 3d 99 4b d6 06 18 9b cc 21 57 Data Ascii: Q6RRDeZF 4M_n}sHFv8Z-"DP#xdJsZ<!q0n/"yaJt2UE(+(+<"t$$"#MzZ#@~,d[knM"&%Z3K.(X"PRY7wo_Cj0bJ%Y{sWD+)S=K!W
2024-05-28 05:15:21 UTC	8000	IN	Data Raw: 2f c5 5a c3 92 a6 b7 41 0c db 2b 2d b8 7c 9a ce e9 7e 3c c2 8e 2d a1 39 b3 27 9a 1c cf de 2f 4c 74 6d 5a 8b a3 43 ea 6b 9c 62 b5 e9 a7 e7 9e 8e e0 e5 74 33 87 d3 39 9c 43 f6 3e 2c 35 8b 99 07 dd ed 35 91 4f 66 9b 36 08 1a 70 21 69 7a ab d2 41 a7 3a 95 de 35 6c b9 86 dc 3b a5 bd ce ac 3e 78 f5 b7 43 cc 53 10 ff 00 af 5f 61 e5 73 67 e3 7f ac e0 05 9a d1 bd 58 95 fb 9d 07 39 d5 89 06 7b 03 78 d4 ee 4d 33 8f 26 99 6f cc 34 e0 12 5a 90 eb b2 7d 96 fa 1d 92 d6 53 58 f5 8b 3e 84 a7 78 cd 0f 04 7e 47 b2 ef 65 3a ca 2f 70 70 3a 95 b7 4e 8a 4d 51 b0 6d 04 1b 4f e6 37 9f ba 84 a5 51 35 8f 8c f3 c2 46 66 e9 f2 26 1e 58 d4 35 78 da 7f a1 de c7 9f f4 b7 ae c0 a6 75 b2 a3 62 eb 41 98 19 59 b4 ca 48 a3 46 e9 33 62 a0 c4 fa 46 ae b5 10 cf bb b9 d5 56 96 71 30 0c 77 99 a3 Data Ascii: /ZA+-\|~<-9'/LtmZCkbt39C>,55Of6p!izA:5l;>xCS_asgX9{xM3&o4Z}SX>x~Ge:/pp:NMQmO7Q5Ff&X5xubAYHF3bFVq0w
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: f2 62 a2 5c 50 75 f9 08 4a a8 e5 11 a8 ee 9d ec 95 20 63 44 4f 43 7a ad f2 a5 ea cb 88 13 de a0 83 ac 8b cd e5 96 19 5c 0d d5 fc 37 76 8e 54 58 7c d3 0a 68 98 f0 cf b3 af 6a 73 6c 53 da a4 0e 7d 38 77 aa e4 56 bb 31 48 3a 68 46 b6 19 f1 88 01 35 5e b1 96 3a fe a4 7e 53 7a 8f fa b1 8c f4 c9 79 67 e4 12 ed 6c 66 4f a2 63 e2 6d 9d ab 50 f2 f7 1f 3c db 8a 52 de e1 4e 25 a2 ad 77 be 13 a4 c3 58 eb 36 26 77 a3 34 12 63 61 56 ec da db e6 24 d3 9a 29 d6 7c 40 ed db 22 fd 01 bb 09 15 02 98 3f 78 5e dc 55 6a b7 52 c4 44 30 b1 f4 0e 21 4e 95 11 8a 8b 09 80 86 f9 77 82 d4 5e 1b d4 41 33 4d 4d 82 35 cd 5a e9 74 01 87 d2 b8 d1 cf 33 4b 0a 55 1b db 1c f5 2b f7 68 61 78 ac 1c 88 13 d1 e0 88 81 bc e6 c1 92 bd a2 cb 67 d8 6d 5f bf 3a 15 57 f5 3f 66 ce 9f 5a 3a be 8c ac 41 Data Ascii: b\PuJ cDOCz\7vTX\|hjslS}8wV1H:hF5^:~SzyglfOcmP<RN%wX6&w4caV$)\|@"?x^UjRD0!Nw^A3MM5Zt3KU+haxgm_:W?fZ:A
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 5c 02 5a b5 50 0d da 2d 45 d9 0a f1 93 09 d5 2e 0a 5f 52 1d 53 e9 2b 86 a1 9f 51 06 ae b9 bf 15 52 f9 26 7a 5a 8e e3 b7 6e b4 25 df c6 77 0d 84 75 2a 3d 34 d7 55 7d 5d 74 cb 53 52 f7 94 d8 2e aa 4a 2a 9a 5b e2 dd 6c 9a 69 61 2f 05 b6 54 84 72 3c 09 c7 e1 79 15 47 4f 13 10 1b 53 6b 69 c6 96 a2 0f 88 e4 a5 23 07 8e 2d 1f 0b 61 00 c9 6d 4d aa 0d 72 66 a6 f1 73 eb 9f a3 da bf 19 55 db a5 8b 69 96 1a 5a 23 22 4a 54 d1 23 3f 20 e2 9d 27 14 a1 89 04 27 81 c7 1f 29 2a 18 97 78 c4 ac 1c 5a 30 20 8c f3 c4 a7 0a 39 c2 df 19 c1 18 81 84 e1 58 cf b0 62 49 c4 ac e0 57 c2 5b 49 c1 18 8c 01 c1 89 7c f2 1c e7 0e 21 c0 31 09 46 2d 09 ce 08 c4 af 3c 41 c4 a1 3c 92 a0 02 95 cf db c6 2a 42 14 52 94 ab 3e 90 08 4a 93 91 da 5f 2b 3c 94 a0 e1 1c 67 29 18 02 0e 78 83 88 e4 62 16 Data Ascii: \ZP-E._RS+QR&zZn%wu=4U}]tSR.J[lia/Tr<yGOSki#-amMrfsUiZ#"JT#? '')xZ0 9XbIW[I\|!1F-<A<BR>J_+<g)xb
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 6c d6 ee 41 49 8d 6a d3 a9 6e cb c5 4b 79 2b 2d b4 87 14 a8 4c 2c a6 90 95 39 54 f3 47 f8 b4 15 39 4f f1 f6 48 4e 31 b2 a8 18 bb 02 14 10 ea 5d 52 a3 a0 89 15 a9 51 72 08 e5 4c 20 14 34 8c 6e 23 a0 28 a9 38 89 4b 18 d4 d6 c8 71 e6 d7 8a 40 4e 0f 85 29 ef f2 24 ab 04 75 f0 d9 74 16 e6 bc 9c 6a f0 a8 47 68 a1 01 38 1a 1c 1f 8c 4b 44 e2 0f c4 62 32 46 b9 58 da 5a 62 95 66 c6 15 20 16 16 3f 50 d8 da 9b 60 ec c8 31 1a 9b 5f b8 d9 a8 3b b2 4e 5b 91 2d 64 79 ce a8 fb 92 db 05 a4 cf d9 2e 1c 6d 35 76 32 d9 87 aa 5a b4 dc 6b 59 61 72 69 a1 cb 44 76 12 86 d8 8e 5b 54 19 1e 68 f2 c2 39 0e a3 93 21 b3 c3 d1 89 2d b1 89 8c 06 06 87 2a 84 a2 b4 b8 81 89 6f 14 d7 21 43 e1 c8 05 6f 88 dc 14 35 9f 86 8e 5c af 6d 58 13 8a 18 0e 25 0a 51 4d 3c d2 6c 22 3a da bf 11 1c ac 36 Data Ascii: lAIjnKy+-L,9TG9OHN1]RQrL 4n#(8Kq@N)$utjGh8KDb2FXZbf ?P`1_;N[-dy.m5v2ZkYariDv[Th9!-*o!Co5\mX%QM<l":6
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: f7 e4 58 f8 e2 23 82 52 c7 f9 54 7e 1b 2d d9 d9 3d 25 41 38 91 8a 6f 3e ac 4b 7f 0f 21 7e 4c 3e 84 84 e0 58 18 95 0c b0 b3 92 ca 59 b5 2e ba b7 40 c6 1e 49 c6 80 38 f8 c0 8c 53 59 22 5b 0c 9b 9b f9 6d e5 6d bb d5 88 d6 37 3b 29 12 27 c9 0d a2 35 82 9d 4a 32 4d ea 42 cc 94 a8 05 02 1a fd d4 d8 f1 4a 00 c5 b3 e4 1d 68 f8 af 42 5a 15 02 2b 6a 76 53 6a 88 e4 cd 8d c7 25 15 7d 45 88 fe 46 c2 5b 51 f2 33 ec ba 5a 71 00 04 82 1c 8e 40 23 24 30 16 8a fa c0 cc 9f a5 38 f1 48 2f 58 a5 ac 4c c4 38 66 c9 6d 94 6c 5b bd 6d 56 6b fb 6c 19 88 32 99 03 8c 4a 71 b8 8e 1c 6d 9f 84 27 fc 9f 4f c7 d4 ae 7e a3 88 e7 3c 14 9c 27 e2 b9 b0 94 c0 7b c7 3f d9 65 b2 1e 90 a5 a9 0b c0 70 1c 53 a9 19 2d 5c a7 f6 52 51 ce 2b c0 1b 2d c3 e8 7d 17 4c ad 22 cd 82 54 c8 21 0c 80 9f d8 04 Data Ascii: X#RT~-=%A8o>K!~L>XY.@I8SY"[mm7;)'5J2MBJhBZ+jvSj%}EF[Q3Zq@#$08H/XL8fml[mVkl2Jqm'O~<'{?epS-\RQ+-}L"T!
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: f2 31 2a 38 93 84 9c 0a e3 09 4e 10 30 71 9e 60 67 24 e1 1c e1 46 23 3c 86 05 83 9e 5f 25 59 c8 c2 c8 39 f5 71 9e 38 3e 41 6d 27 3e 82 30 21 c0 79 cf 24 f0 85 0c e4 62 ce 13 9c 27 3e a1 85 80 33 c7 8c 48 f9 59 50 c2 e9 18 5e e0 21 d0 47 c1 05 29 c5 7c 84 a7 38 38 f0 23 02 b1 b4 27 16 e6 79 1c 2b c4 ab 92 f3 68 e7 eb 04 16 c9 c2 d8 38 84 63 8b 4f 9f 8f 96 38 90 31 a5 f1 8d c8 04 a8 61 21 21 2f 02 0b 85 38 a4 79 e0 42 78 4c 64 24 fc f2 d3 47 86 99 1e 49 8a ea 95 12 95 6f a9 8d 43 93 0b 50 af 79 23 53 ae 49 97 a9 44 69 82 13 90 99 a9 4a 21 a6 10 11 ee d0 85 9d 8a 3b 89 be d8 25 24 7f 28 1b 31 65 17 0b f1 a3 a9 11 2b 7c 52 e4 6f 02 ed c4 26 10 8d d2 a9 d7 52 4e 45 90 94 b6 dc 9e 53 f5 24 89 0a 21 09 59 c4 2f 39 18 e2 c6 3c 9c b1 60 ad b9 90 1f 61 d6 c2 78 e4 Data Ascii: 1*8N0q`g$F#<_%Y9q8>Am'>0!y$b'>3HYP^!G)\|88#'y+h8cO81a!!/8yBxLd$GIoCPy#SIDiJ!;%$(1e+\|Ro&RNES$!Y/9<`ax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	62678	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:22 UTC	979	OUT	GET /wp-content/uploads/2022/07/13-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873281.31.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt
2024-05-28 05:15:22 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:53 GMT Accept-Ranges: bytes Content-Length: 464657 Content-Type: image/jpeg
2024-05-28 05:15:22 UTC	7957	IN	Data Raw: ff d8 ff e1 1c 65 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 39 3a 32 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: eExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:09:20
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 Data Ascii: PgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: d9 e9 7e fb ff 00 a9 fe 93 f4 6a 3c d8 65 97 2c bd e9 03 18 d1 81 88 e1 f6 e5 c5 e9 84 e1 fa 51 c8 b8 64 31 88 a0 6c f7 d6 fc 9f ff d4 c2 ca fe 9b 6f f5 07 f3 5f d2 b9 3f d1 ff 00 e0 3f ee 52 cc 3f f2 5f 6f a4 de 7e 87 37 fd 3f f8 6f f4 7f f0 4b 9a 49 54 c9 fc e9 fe fe 3f fa 2b a5 b0 f2 2f 7b f5 77 e9 63 7f 31 fc d8 fe 91 fc ef d0 ff 00 cf 4b 27 ac f2 df a1 cb 78 e3 f9 ba fe 97 fc 3f ef ae 61 25 5f 07 fb aa 7e 5f f7 4a c9 fc d4 7c dd bb 3f 9e 77 1c 8e 39 fa 4e fa 5f f7 d5 1a 3f c2 7d 3f a3 57 1f 1f f0 9f c8 58 c9 2b dd 3e c6 11 bb aa ff 00 a4 79 e3 bf 1c 9f fa 0a 56 ff 00 35 8f f4 7e 83 3e 87 3c 3d 64 24 8f e9 c7 f9 7e 8a fe ad e7 f2 7e 97 27 e8 ff 00 39 ff 00 aa 96 ef 41 fe 97 47 d0 fa 6e e7 e9 fd 17 7d 3f fb af fb 9f f0 be aa e5 12 50 f3 9f cc cb fb a7 Data Ascii: ~j<e,Qd1lo_??R?_o~7?oKIT?+/{wc1K'x?a%_~_J\|?w9N_?}?WX+>yV5~><=d$~~'9AGn}?P
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 90 76 f1 24 09 90 4b 91 7f 5d 24 e2 a3 3b 74 bd 71 fc 9d 24 cb 31 2e ce 82 5f 9d 31 66 49 c5 e2 27 6c f1 ee 28 24 ed 9d 06 1f 49 93 62 4d 37 89 9e 31 2c 93 51 7f ce 3d 33 f8 97 e1 2f ce b9 4b f3 17 49 bb 12 70 99 24 fd 32 f1 27 2c ed 08 1b a6 55 2f 5d 74 ed e0 a6 c4 de 26 51 14 70 8a 4e eb 83 fe 25 d3 14 7b 93 84 cc e3 9e 5e b5 e7 60 ef 64 4f 64 07 13 04 5b 30 d5 4b 50 b8 d6 f8 c2 d1 57 9e d0 ac 86 41 bb 71 37 86 58 c9 c4 9a 8c ad 80 3f 02 9f a3 23 19 99 e4 0e ee 17 5e 27 87 b0 1c 13 cc d4 98 81 91 df 47 9b 67 fa 4e 02 ba 95 fc 65 17 23 a7 46 cc a8 1c 78 13 8a d3 c1 5a 8a 22 78 89 44 45 e7 8e 1d 98 62 b4 e4 fc 96 ce fd dc c6 31 d2 82 06 51 84 96 21 89 04 46 68 93 49 36 76 64 dc ba 62 51 a2 63 eb b3 77 67 8c fd a7 0b 7a 6d c9 90 74 d9 9a 50 4d 02 15 49 2c Data Ascii: v$K]$;tq$1._1fI'l($IbM71,Q=3/KIp$2',U/]t&QpN%{^`dOd[0KPWAq7X?#^'GgNe#FxZ"xDEb1Q!FhI6vdbQcwgzmtPMI,
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 15 a3 2d a3 29 c6 41 d8 19 17 33 b7 63 11 b6 73 1c e4 ca 07 af 4c 57 65 5a 9c d4 f5 e6 e5 3a d7 56 38 bb 26 4f 08 ea 9f 38 d5 8e b1 15 57 d0 e7 49 d5 37 82 63 bd 45 9b d3 59 55 96 21 a3 b2 e1 99 ae d6 df 39 72 c0 c5 2d 67 cc 74 31 3d 59 64 ed bc ba bb 5a 86 fd ee 39 83 a7 5d 0a 82 4d 0a 9d 37 1f c9 2c cf 12 ea 45 c3 a2 1e 40 c7 c9 4d 09 3a 75 d2 40 cc f2 68 60 d9 e3 dc 7d 12 9f 26 55 0a ce f0 c2 9c 25 20 9a 15 10 e9 03 b2 77 52 45 2c ec cc 5d ba 4e 93 31 4e c1 85 b9 14 a3 0c 98 90 68 19 5c b0 af 1c ab a0 16 02 86 26 99 14 46 93 d0 9a 72 29 ad 81 9c 92 ad e5 a8 db 85 ad 26 6f a7 5f 30 53 ae 14 4d f8 a3 4a 59 2c be 73 4d d8 3d 17 d1 d3 85 b0 d3 d6 94 5d 96 86 c9 93 4a 72 d3 c5 db 29 6a 46 31 a3 5e 36 cc 42 b6 84 9f 3d ac 8c 5b da 7f 85 e8 29 9e 8b 3f 20 77 Data Ascii: -)A3csLWeZ:V8&O8WI7cEYU!9r-gt1=YdZ9]M7,E@M:u@h`}&U% wRE,]N1Nh\&Fr)&o_0SMJY,sM=]Jr)jF1^6B=[)? w
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 18 ac b7 ea 9f 72 56 8d 31 2f 4c d4 56 c6 0d e0 6d 48 11 6a f9 ab ba ce 14 dc ae 0b a4 0f 26 7d 13 e7 da 50 56 02 ae e9 a0 b5 f0 ee 6f 9f 1a e9 65 21 2c 0f eb 3c fe 67 ee 71 6d 0c fb 57 9f 23 b7 83 fd 33 99 ba 79 ad 8f a6 1e 1d d5 d7 7d 04 15 16 e6 46 4c f4 ae 76 3c 20 b1 b2 47 f5 79 1c 10 0c db 28 6d 76 b3 b9 0b e4 19 b2 dd 18 16 ac 8c 8b 06 b9 d2 b4 f4 49 7a f4 da 92 34 2c 5b b8 5a 32 62 35 ad ca f9 67 a7 e6 32 be 01 43 cc 10 ee 0d ec 0e d8 ec eb ca 5d a8 9a 4b 81 6c 9e 47 a5 b7 f3 2c 64 3d fc ac db 87 24 f7 9b 69 56 9a 30 66 0f 41 cc d9 3d d7 2f 3e d1 b5 e5 b6 25 2f c7 98 79 8b b2 59 36 4b ba ec ba 13 9e d3 b6 f5 29 d1 75 6d ca 25 4d 68 27 24 5a 67 46 9e 97 d6 8a e3 c0 dd f0 26 58 93 e8 2c 12 63 d9 d1 dc d6 bf 10 96 46 ed 39 fc 3b d2 e0 e7 ec 3b 1a 9b Data Ascii: rV1/LVmHj&}PVoe!,<gqmW#3y}FLv< Gy(mvIz4,[Z2b5g2C]KlG,d=$iV0fA=/>%/yY6K)um%Mh'$ZgF&X,cF9;;
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: d5 4d cc 0c 51 30 b8 d7 94 28 65 35 36 09 62 4c b8 b1 ea 32 2c 37 7e e7 58 75 84 57 ec 4c ca 75 51 be 43 68 42 9c ee 84 c6 ff 00 f6 13 21 8e 13 11 00 a5 d4 04 22 6a 8b ef 5f 44 4b 4a d3 e7 4d 6a c3 ab 6c 17 bb 71 fc 6a 8a b6 20 d3 c1 a8 88 7c 56 c4 fc 59 a8 d7 d2 ee 4b a9 e1 37 71 24 76 a5 ad 60 be fb b3 02 89 03 02 88 cf f7 fa 9c 50 3c 70 38 e3 39 f8 e7 08 19 c1 c3 ce 7c e1 07 3e 70 fe 9c e0 27 9f f5 fb 4e 75 18 38 20 73 ca 9d 6d 38 2c 23 97 0b bc 87 e0 4e 5a 91 ab 29 46 26 b5 5f 18 a5 94 24 7c 8c 1f 18 90 0e 04 e7 64 a7 17 2d 00 99 18 5e 70 e4 a6 67 bb 88 d7 a5 3c 63 6a f5 ed 16 a3 34 c8 07 80 79 ff 00 00 61 57 cf 23 3a 8c e1 1c fd 88 18 1d 4f 1f 78 04 c8 18 1d e7 13 f3 85 b2 73 aa b8 09 3c 84 7c f4 c2 00 1c 27 14 9c 53 29 56 3b 0d 78 a4 a9 a0 87 41 c7 Data Ascii: MQ0(e56bL2,7~XuWLuQChB!"j_DKJMjlqj \|VYK7q$v`P<p89\|>p'Nu8 sm8,#NZ)F&_$\|d-^pg<cj4yaW#:Oxs<\|'S)V;xA
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 51 c4 eb 17 24 4c d9 5b 40 43 2e 3d f8 ee ad 88 a1 57 92 02 ab 5b fb d6 c1 61 91 3a c9 96 51 f9 36 32 8c 05 25 22 5c ee 13 26 e1 6f 18 42 c6 44 8d 63 ec 80 cb 29 0b 6e 49 71 09 97 13 94 57 bc e9 78 cc 48 06 c9 af b1 1f 5a d6 b8 e8 73 15 54 10 e3 31 5d 42 d8 8f 24 3e cb 21 2a 3d b1 4e 84 19 05 0a c2 94 b8 94 a7 a2 5a 47 05 c0 42 9c 62 42 d5 5f 15 c6 99 5b 0e 2d d7 5e 48 6c a4 25 6d b8 ea 1b 48 fc 84 36 c9 e6 4b 3c a5 a8 c8 c2 79 53 d1 c0 54 fa 11 21 b7 f5 76 3e 9a 0d 65 fa e7 5e 69 e0 ab cb 6b a3 26 f2 0b 6a 5d 1c 07 0a ee 9b 42 23 ec 08 75 4f bb 26 6b d5 f5 3b 3b 95 6b 54 7b 06 57 25 f9 cd c6 81 6b 18 25 9a e8 f3 d9 5b ad c3 76 db 5b 69 6b a8 b8 bb 8e 8a bb 65 ad 12 ae 58 08 89 b1 43 5a da 28 28 76 bd 6e 08 8c 48 8e 59 79 a7 08 8e 38 8d 32 1b 42 c6 6a 0a Data Ascii: Q$L[@C.=W[a:Q62%"\&oBDc)nIqWxHZsT1]B$>!*=NZGBbB_[-^Hl%mH6K<yST!v>e^ik&j]B#uO&k;;kT{W%k%[v[ikeXCZ((vnHYy82Bj
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 8e 39 0f 84 90 20 a1 6e bf 1c 73 6f 39 b8 48 af bd 8d 2d d5 4a 61 95 49 bb 76 34 85 db 25 d8 df 5a 5c 2d b2 02 8a 15 cf 04 e2 1a 04 c2 84 1a 13 6d d6 95 2a 42 99 c6 6d 9d 01 89 ec bd 9b 43 2d 21 0d 4e 53 46 ba f1 85 86 d2 08 94 c2 99 4d 75 72 2a a3 b3 25 4e 4c a9 ef 1a 3b 6e a5 d2 ca 98 5e 4a 29 c2 49 2e b4 54 1a 8d d9 f6 d6 0e 2d d5 9c 69 90 ac 8e d8 4a a4 24 a8 b9 5a 87 cb 4d 98 c8 65 2b 26 4b 61 d6 97 aa 53 2d 4e 6b 6a 64 0b 28 6c 05 de bb 1e 7b 91 66 a2 75 05 84 89 10 d4 7f 71 7d 04 a4 76 ce e4 e0 50 39 26 1b 2f 89 34 89 52 94 80 5a 91 25 09 72 5b 2c ba 9b 46 cb 46 ae cd d0 cf e7 34 b4 cf 47 2d c4 42 4a a8 af 64 41 52 fa a4 7f 33 10 aa 3c 19 52 ec 6a a0 ca 42 a6 c8 72 33 26 d6 e5 d9 0f cd 32 13 3e cf bb 56 32 3f 90 9c d3 2d db 2c 59 21 48 ae 2f 21 88 Data Ascii: 9 nso9H-JaIv4%Z\-mBmC-!NSFMur%NL;n^J)I.T-iJ$ZMe+&KaS-Nkjd(l{fuq}vP9&/4RZ%r[,FF4G-BJdAR3<RjBr3&2>V2?-,Y!H/!
2024-05-28 05:15:22 UTC	8000	IN	Data Raw: 67 7b c8 aa 71 a2 ec 65 b6 1b 6b be 08 8e 28 94 a7 24 37 d4 c3 84 87 98 ac 8c a6 db 0c 94 35 31 28 4a c5 47 da d2 ea 07 46 a9 64 b8 1a a2 5a b0 57 24 24 b0 b0 03 6a 4b 7f 5f 50 1c 4a 73 f2 40 2f 3c da cf de ca 09 79 21 52 1f fb 43 95 cc 0c 4c 01 db f1 23 a4 9a e4 a8 88 49 e3 f1 92 90 d3 cb 48 73 f6 98 8d 87 0a 93 d1 c7 1c 6d 6d a1 08 4a 52 a5 02 56 78 50 2a c4 02 9c e0 e0 4f 39 d4 1c 00 1c e7 9c e4 72 00 e0 f2 48 3f 3c 62 93 84 01 9d 79 c2 06 1c f9 24 a7 e0 36 30 8f 8f 9c e3 8c ea 46 10 38 e0 e1 e4 1e 08 c1 f2 78 c1 c0 ce c7 0a 70 90 70 27 8c eb 9c 0c e7 8c 23 8c 4f 27 02 0f 3c 7c 14 11 8d b0 e2 cc 6a 29 0f 14 51 32 d2 8b 55 0c a5 13 6a da 3f f4 eb 49 72 f2 5a c3 af 2d cc 1c 71 d5 47 1b ab 92 e9 67 54 90 e2 5a d4 e2 e7 f0 30 d8 08 95 54 c2 65 6d 28 e5 fd Data Ascii: g{qek($751(JGFdZW$$jK_PJs@/<y!RCL#IHsmmJRVxP*O9rH?<by$60F8xpp'#O'<\|j)Q2Uj?IrZ-qGgTZ0Tem(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	62681	104.26.7.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	665	OUT	GET /public/cookie-consent/4.0.0/cookie-consent.js HTTP/1.1 Host: www.termsfeed.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5eefb438a570c1ac15e2deee89dc27ef" If-Modified-Since: Mon, 27 May 2024 21:38:15 GMT
2024-05-28 05:15:24 UTC	917	IN	HTTP/1.1 304 Not Modified Date: Tue, 28 May 2024 05:15:24 GMT Connection: close Age: 23829 Cache-Control: public, immutable, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=206910 etag: "5eefb438a570c1ac15e2deee89dc27ef" expires: Mon, 27 May 2024 23:38:15 GMT last-modified: Mon, 27 May 2024 21:38:15 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-priority: 5/n x-xss-protection: 1; mode=block x-z: 3246 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7XQHEaxq5pVmzBaVLURU%2Fge2iqXbMVkFt6ZzwrwJokP%2BhC2OT5JL8acA%2BCE63SAlSuRzrknKCOTldFHkhU3pjS0AcvGODGBmAVQ6aQwv5ux2IfNTNMw5p7fi4sYabGmikIUu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc4475b204363-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	62680	142.250.185.162	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	974	OUT	GET /td/ga/rul?tid=G-J2E85P7SPT&gacid=648733769.1716873252&gtm=45je45m0v872729742za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1353785607 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-28 05:15:25 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 28 May 2024 05:15:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnJccNsMtXjjRe_imPGaU4mF3wKZ9x7AQGVsdh-uYF_gN-hdzL8ih_01sQO; expires=Thu, 28-May-2026 05:15:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 05:15:25 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-28 05:15:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	62682	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	988	OUT	POST /?ob=open-bridge/events HTTP/1.1 Host: www.campobahia.com Connection: keep-alive Content-Length: 370 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.campobahia.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:24 UTC	370	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 36 66 39 36 38 39 34 33 66 32 32 66 62 61 61 36 64 38 39 33 33 33 36 37 38 33 61 33 65 30 33 37 39 35 61 32 34 33 33 32 64 32 61 38 62 37 66 33 33 39 65 63 36 36 64 38 36 64 61 39 31 63 34 64 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 32 31 35 30 35 39 37 31 37 33 34 39 38 30 36 22 2c 22 66 62 2e 61 64 76 61 6e 63 65 64 5f 6d 61 74 63 68 69 6e 67 22 3a 7b 7d 2c 22 77 65 62 73 69 74 65 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 Data Ascii: {"event_name":"PageView","fb.dynamic_product_ads":{},"custom_data":{},"event_id":"ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d","fb.pixel_id":"215059717349806","fb.advanced_matching":{},"website_context":{"location":"htt
2024-05-28 05:15:25 UTC	176	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	62685	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	979	OUT	GET /wp-content/uploads/2022/07/15-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:02 GMT Accept-Ranges: bytes Content-Length: 305452 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 14 1a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 31 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:11:16
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ca fd af 92 08 1e 8b 74 1e ef a5 cf 92 31 ea 56 b8 0d b5 3a bd 41 3a eb 03 f3 75 6f e7 22 b7 37 fe 0d ff 00 87 f7 a9 8c d3 fe 86 cf 8f b7 ff 00 24 b2 e5 86 5d 30 7f ce 76 63 9b 17 5c ff 00 f3 58 3b 3b 2f d4 69 65 24 01 1e d2 79 9e 77 42 25 79 b9 9c 7a 1b a3 59 27 58 fe ca 71 9b ff 00 05 67 98 d3 ff 00 24 a6 33 c0 d4 d3 67 c7 db ff 00 92 50 cb 06 5a a1 cb 83 fe 13 28 cd 83 fc ff 00 e1 ff 00 a0 a1 78 ea 97 5a db 40 75 65 a3 da 01 01 a0 f9 35 e7 f3 bf 94 a7 fb 3f a9 0a da f2 fb 1c e2 60 86 bd c4 fc e1 58 67 52 68 e6 ab 3f e8 ff 00 e4 91 99 d5 2b ef 55 83 fc df fc 9a 82 70 e7 46 Data Ascii: uFVfv'7GWgw?t1V:A:uo"7$]0vc\X;;/ie$ywB%yzY'Xqg$3gPZ(xZ@ue5?`XgRh?+UpF
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 01 d8 d6 aa 12 9d 02 03 f1 30 06 f9 81 69 bf 78 9a 57 bc 8d 38 6f 52 a2 8b 7a f9 8a 39 6b 57 84 a3 0a 13 4a c2 96 ad 48 47 2d 6d cd cb a3 70 ac 22 77 f2 35 27 ce c4 da 73 cc 86 ed 9a cd 85 fa 41 1a 98 ab 46 0a ca c3 4f ca ca f9 88 9c 01 d1 2e 34 d2 58 68 88 aa f5 4f 8a 89 2a 43 2b 4c f2 eb a2 05 54 92 19 46 4d a2 18 1b b0 2d a3 26 75 46 49 3b 8e c0 f6 a5 b4 84 11 8b ca 74 4c bd 29 ce a8 8c 60 d8 52 9f 64 64 93 29 d5 09 4a 9e ae 71 04 7a ea ed b9 20 70 d0 91 6c 83 12 a2 9d 14 ca 95 e7 13 21 26 a4 2b ac 07 2d 91 a4 4d 80 b2 d5 25 9f aa 2e a8 d5 98 48 31 30 c2 59 2c 91 1e 25 95 ab 94 b8 1e fe 10 30 32 a6 60 50 9f 30 e1 db 0a bb 4c 0d f4 72 b3 2b 55 10 91 4c ed 36 46 ab 60 aa eb 6e ad 2a 68 06 bc d3 ed 5e da 95 fa 03 73 62 2a e0 2c ba 2c 19 5e 9b e4 7a 8f 87 Data Ascii: 0ixW8oRz9kWJHG-mp"w5'sAFO.4XhOC+LTFM-&uFI;tL)`Rdd)Jqz pl!&+-M%.H10Y,%02`P0Lr+UL6F`nh^sb*,,^z
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: e0 b5 f6 0f d9 4d 73 d7 b8 b0 9e b4 ad 49 24 ea 68 0a ab 6e 27 64 a0 ac 19 c4 00 2b dc 02 9b 6a 70 a1 88 d3 41 89 9e 15 97 96 89 5d fc d9 07 a5 ca 8d d0 92 92 b8 e0 32 96 79 e7 81 b8 9b a6 2b b1 c4 d8 39 c3 92 c6 40 3f 1a 68 b2 75 2b c8 33 0f 54 aa f4 c8 2b ae 09 db 39 dc 04 6d d1 5c eb 3c 5b 76 72 98 a5 25 6f 8e 58 42 90 8f 9e c2 82 67 98 5f 69 36 9d 0c d8 b7 11 bc cc cf 5c d2 c8 c0 06 9a d2 d9 f9 dd e5 d5 ab aa 0c cd 81 d5 55 94 ed 1c a4 9a b0 ec f6 e8 89 87 13 75 98 14 75 32 a3 49 64 d6 13 0c 25 55 82 cb ee 01 bb 23 79 4b ce cf d0 74 1b ac 7b 37 a1 0a 8e ac 4e 8a ab 98 6b 14 46 55 47 da 50 b1 20 fc c9 ea f2 7e 71 e6 ec 73 13 2b d5 05 1c 4e 59 4d 09 38 ca 99 dd 46 17 3b 70 19 d4 2e bc 67 6a f2 1f 0a d7 95 20 74 3f 58 9c 83 df 85 58 7a 63 79 1f 54 8e f6 Data Ascii: MsI$hn'd+jpA]2y+9@?hu+3T+9m\<[vr%oXBg_i6\Uuu2Id%U#yKt{7NkFUGP ~qs+NYM8F;p.gj t?XXzcyT
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 44 70 89 1c 0e 11 09 c1 34 fc 92 51 61 e7 d6 41 3c f2 40 5e 25 12 8f ca 24 fe 87 9e 08 f8 3c a7 31 48 3e 1c de 51 6f 09 ec 25 3e 21 cc 91 29 df e0 4c d1 73 f6 00 51 bc 11 00 63 cc 31 34 06 b3 80 ce 1c 83 13 23 41 a9 a9 bf 28 31 34 0e 1a 10 e5 7c 2e 41 20 7c 83 c2 e1 dc 03 c2 1c 73 f1 c3 47 27 93 c0 07 92 00 24 72 b9 3c 36 42 50 00 22 bc be 41 68 40 12 b8 21 72 b8 72 69 44 05 e0 80 e3 f4 03 e3 cd 8b 92 89 5e 28 70 4f ec 82 3c 05 c9 2b 90 07 ca 3c 71 e4 13 bf 62 b9 1c 7f ec fc af 25 c2 00 12 02 20 ae 78 5f 1c 70 b8 5f 1c 96 21 c9 44 12 bf 64 0a 04 f2 50 44 fc b8 02 82 1f b7 c2 fd c3 64 05 79 14 24 45 c0 a0 bc 82 71 45 dc 2f 20 4f c1 4d 67 92 e0 2e 39 41 84 af 0e 17 c7 3c 14 00 45 a1 10 02 7b 1a e4 40 6a e0 14 5a 38 3f 28 34 20 c4 47 24 f2 57 1f 26 24 e8 fe Data Ascii: Dp4QaA<@^%$<1H>Qo%>!)LsQc14#A(14\|.A \|sG'$r<6BP"Ah@!rriD^(pO<+<qb% x_p_!DdPDdy$EqE/ OMg.9A<E{@jZ8?(4 G$W&$
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: d7 15 1a a3 31 84 f7 c4 8d b8 78 8e 46 b8 17 c6 13 a5 85 33 d4 bc f8 46 c9 5f 6f e5 c5 8f 1e b8 02 32 b5 a9 ee 80 8f b5 4d aa 6b d5 8a 83 20 4a 7d d7 34 c7 94 62 8f 23 09 47 21 5d 7d b0 44 97 88 4f ca 3c 16 65 07 11 e4 c1 33 65 da c1 1e 51 b2 99 03 dc 1b f6 18 9f 7a 28 c4 b7 e1 7a 6d c7 81 26 44 a8 25 13 99 63 63 84 75 e8 82 5f 51 06 c4 54 66 40 9d 3f 20 85 ec 73 54 99 47 04 32 51 13 f7 2b 94 cb 10 35 3b 2d 18 03 2d 1f 1f d8 b5 c3 ef 07 1f b7 f2 32 6d 69 7d d8 9c 04 be 48 5a f1 5f 71 a5 49 6c 35 3e cb ca f7 ce e4 5b 2a e5 cc 51 ce 13 26 e1 3a 69 18 5d 2f 92 63 dc e1 f5 5c e4 fc 73 41 60 29 b5 5a be 9c 25 7d 68 80 6d 38 57 d6 ae 13 64 63 53 a4 45 8f 71 73 67 4f 96 76 af 29 1c b8 93 91 2c e5 31 f6 91 33 20 25 29 ed 99 19 2d 73 c3 f8 f7 40 c3 f6 61 72 7c 91 Data Ascii: 1xF3F_o2Mk J}4b#G!]}DO<e3eQz(zm&D%ccu_QTf@? sTG2Q+5;--2mi}HZ_qIl5>[*Q&:i]/c\sA`)Z%}hm8WdcSEqsgOv),13 %)-s@ar\|
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 56 8c 26 c3 e2 8b 41 28 8e 50 6a 0d 2b d6 51 88 14 5a 02 71 70 4e 67 2b eb 38 23 5d ce 3e ae 51 61 e7 d6 b8 21 09 1e 13 6e 48 08 c8 c8 86 49 37 24 ce 59 72 27 af 38 0a 0d 80 83 14 0e 3f 5a 25 f4 e2 27 fa e8 8a fa 0c 68 34 c7 1f 5c 90 ec 63 c9 10 78 8e 26 2f 8e 39 1a 4d a2 c4 32 20 a3 23 1e ef 58 21 ac 9a 35 25 a2 17 fc a5 42 d0 f5 34 2c 61 7c 91 14 f9 18 d2 c9 a3 7a 11 46 43 6a 82 1f 58 c6 b9 3c 16 b7 98 aa 79 35 b8 c9 00 0c 6c 21 d1 c3 21 15 a0 7a 7e 26 2e 1b 5d b0 a9 6b c6 e3 15 22 d5 09 91 88 cc 50 9a d3 87 95 a8 87 dd 98 b5 d6 a6 2e f5 ca 4b a0 68 2e 86 76 b2 2a 56 5e 99 46 cc 4a 3c 5d e7 ba d5 2b 6e 55 68 4e c6 cb 52 77 9f a6 f8 4c 77 5e 99 90 96 36 9c 8d a7 19 32 d7 1a a3 ca da 2b ef 5a 70 64 e5 ed 7c 30 94 19 1b 07 f2 50 cd 22 61 71 4e 8f c9 08 78 Data Ascii: V&A(Pj+QZqpNg+8#]>Qa!nHI7$Yr'8?Z%'h4\cx&/9M2 #X!5%B4,a\|zFCjX<y5l!!z~&.]k"P.Kh.v*V^FJ<]+nUhNRwLw^62+Zpd\|0P"aqNx
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 09 73 5a 0b a3 8d 35 8e 09 ec 99 a7 99 9c a2 91 f1 16 f1 32 64 7e a2 5b c1 9a c1 80 1e 25 46 3e 53 ea 48 13 ab 38 2f ae ce 5d 13 91 8c b5 32 28 c9 f0 60 2f 62 8b c4 29 23 63 8b 9b 1b 50 00 81 1a 7c 0e e5 f5 fc 4b 58 e2 9d 13 b8 fa e5 0a 8f 0b e9 02 45 17 b9 3a b3 a3 42 2f 25 f5 9e 13 aa 3f 81 55 c0 3a 07 38 0a e0 83 04 48 43 1a 2c 81 a1 8d 81 eb d4 d0 9c 3c 43 65 20 09 e5 24 c8 f7 a0 e2 11 3c 90 f6 00 66 8b 93 31 5e c7 82 6c 38 96 4c e4 eb 0e 6a 36 4a 32 f2 9b 21 4f 9c b9 72 f4 ef 68 11 cc f4 e9 01 4e 7b 0a 2d 69 0d 87 94 60 21 08 c0 4d 60 e5 ac 89 18 1a 80 47 86 a9 07 29 81 ac 4e 30 b9 1f 4a f1 88 a1 01 71 30 72 9d 5a 30 9e d0 84 00 88 e1 88 a8 e0 60 47 c5 89 f3 07 12 d0 e4 d6 b7 90 c6 a0 d7 72 f6 39 36 39 13 24 72 6b a6 6a 73 9e e4 03 51 81 a4 32 16 b8 Data Ascii: sZ52d~[%F>SH8/]2(`/b)#cP\|KXE:B/%?U:8HC,<Ce $<f1^l8Lj6J2!OrhN{-i`!M`G)N0Jq0rZ0`Gr969$rkjsQ2
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 8f 63 b8 61 25 14 e6 8e 00 08 c9 ca 2d 77 3f cc 16 be 42 3c 1b cf fe 8b 39 5c f8 07 96 a7 b1 9c 80 ce 5a d0 d0 d2 f4 f7 58 69 fb 0f 21 92 c8 40 b1 23 13 e5 7b c3 83 ca 6d 46 14 69 b5 39 be 29 f3 c8 11 91 c5 06 4a 09 f6 90 1d c0 74 8c 2b 88 dc be a4 65 32 9b 4a 34 d8 50 ac d6 a6 39 ed 41 cf e5 cd 91 a4 c9 21 0c 0e 28 87 27 c9 c2 73 da b9 69 45 ad 27 d5 ca f5 39 3a 27 04 58 e4 01 08 38 04 24 42 42 57 91 e5 d2 05 c9 28 31 c5 78 15 e4 02 13 12 bd c5 19 dc 10 b2 57 bb 95 cf 20 96 85 f0 8b 57 ad a9 b1 80 9a 02 25 71 fa 18 9a e4 6b 84 e6 3d a5 c5 17 34 2f 21 c7 90 41 81 7a 82 f1 6a f5 82 9d 19 5c 2f 12 bc 4a 6b 4a 31 85 e0 c0 9c e0 83 1c 50 88 a2 d0 13 4b 79 73 9a 11 12 12 63 78 47 90 b9 5c 82 9c b9 e4 9f 94 41 6a e7 95 fb 2e 5a 11 20 af 26 b5 7b 87 1e e3 c9 b2 Data Ascii: ca%-w?B<9\ZXi!@#{mFi9)Jt+e2J4P9A!('siE'9:'X8$BBW(1xW W%qk=4/!Azj\/JkJ1PKyscxG\Aj.Z &{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	62683	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	979	OUT	GET /wp-content/uploads/2022/07/16-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:04 GMT Accept-Ranges: bytes Content-Length: 447628 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 0e 39 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 32 3a 31 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 9ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:12:12
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 6a a5 3d 43 a7 30 3a bc 4c 53 8c e6 82 5c e7 3d c1 ae 81 f4 0e 3d 6e 6f b9 4a ec cc 7b e9 db 76 3e 3d 4f 3f 4a 96 50 da 8b 08 ff 00 0b eb dd 5b ec bd ce ff 00 8c 4b da 14 23 2b 15 d7 d5 01 f6 7e b3 89 5c 66 f8 a3 46 ff 00 c2 ff 00 bc 6c fd 87 a7 d9 6b 9a cb 71 64 c0 dc 2b ae a6 19 1b 1d b1 d4 3b dd ee fc ed b6 fa aa 0c e9 a2 a7 5b 38 d8 ce f4 8e e2 e6 b0 ba 09 3e d6 0a b2 7d 2b bf d7 f4 48 dd 1e 8e 9b 9c f6 63 df 8a cb ab 60 2e 75 95 d1 ba c0 67 e8 e4 3a af 7f f6 d8 d5 a1 91 d0 5b b9 83 13 ec fd 36 b0 ef e7 2a b2 c6 b9 ec 3a 3b 76 3c 7b dd b7 fe e4 26 92 23 3e 03 22 74 df a5 7f 82 b8 0b 8f 10 88 f2 ff 00 d1 9c ab 5c d7 e3 57 6e 4f 4e 79 c6 78 d9 eb 50 d2 21 c2 7d 3d 8e db 45 bf 4b e9 ff 00 e0 68 dd 3d 9d 0a da 9a 5d 49 37 c9 73 69 b1 b7 bc 96 13 fe 06 da Data Ascii: j=C0:LS\==noJ{v>=O?JP[K#+~\fFlkqd+;[8>}+Hc`.ug:[6*:;v<{&#>"t\WnONyxP!}=EKh=]I7si
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 01 04 02 02 02 01 04 02 02 03 00 02 02 03 01 02 03 00 11 04 05 12 06 13 07 21 08 14 10 31 22 09 41 15 32 16 20 23 17 33 18 42 24 25 26 0a 11 00 02 01 03 03 03 03 03 02 05 02 04 04 04 00 0f 01 02 03 11 04 05 21 12 06 00 31 07 41 22 13 51 14 08 61 32 71 81 42 23 15 52 16 91 a1 33 09 b1 62 24 17 c1 d1 72 43 f0 e1 82 53 25 f1 26 18 92 63 73 34 b2 44 35 12 00 01 03 02 04 03 06 04 04 04 05 04 01 03 01 09 01 00 11 02 21 03 31 41 12 04 51 61 05 10 f0 71 81 22 13 91 a1 32 06 b1 c1 d1 14 e1 f1 42 23 20 52 62 15 07 72 82 33 24 16 92 a2 b2 63 73 25 30 d2 43 17 c2 e2 34 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 e8 4f d6 ff 00 cc 10 05 d8 d2 6f 55 33 00 30 b1 36 45 96 81 25 a1 54 08 45 c3 46 5b bb 14 0d ac 4c 81 08 c8 bb 08 59 05 8c b0 aa 09 55 26 4a 82 a1 89 21 e5 a6 Data Ascii: !1"A2 #3B$%&!1A"Qa2qB#R3b$rCS%&cs4D5!1AQaq"2B# Rbr3$cs%0C4OoU306E%TEF[LYU&J!
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 2b 54 5a 81 c0 53 85 d8 57 14 55 c9 15 79 15 c9 ae 95 25 5a 19 9a ac 2b 1d 08 d8 b5 14 d4 2e d6 82 24 08 74 38 ce 32 ab 04 e1 76 28 3a 30 19 2c 2b 28 49 b9 89 59 16 96 63 40 b2 0d 88 15 81 31 76 55 6b 64 b7 7a 50 a6 cc af 9c 6b d6 99 33 cb d5 64 65 7b 19 c0 be 5f d3 f4 66 6e b7 43 f9 d7 a2 7c 15 f8 93 d7 be 71 6f f1 b7 af 9b ef af 69 c8 db fc af 4b ec 60 e6 ed ae 69 79 c7 be c7 f9 89 f4 bf 16 8a 32 73 fd 1e bf ba bc 57 b0 fd d3 7e 83 7c d1 4d 07 21 24 4a 43 70 04 03 10 54 31 60 96 8e 86 a4 82 26 42 b8 dd da 24 a9 19 46 49 52 60 36 29 30 82 12 4c ba 4d 91 ae b4 62 f2 02 6b aa e6 f3 2e 45 a5 00 b2 46 c4 2b 51 82 03 a9 ac 95 85 91 54 bb 41 82 c0 4b 29 d6 2e 13 5c a6 04 e2 95 a1 e1 48 08 87 65 72 64 cb 10 03 15 4e d9 45 54 15 eb 2a d4 93 2d 96 43 02 61 44 d2 Data Ascii: +TZSWUy%Z+.$t82v(:0,+(IYc@1vUkdzPk3de{_fnC\|qoiK`iy2sW~\|M!$JCpT1`&B$FIR`6)0LMbk.EF+QTAK).\HerdNET*-CaD
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 7c 5e 11 ea 34 da 67 13 2b 52 64 e0 f5 17 93 76 3d 33 e6 3d 97 9b aa ce f1 ed 4c fd 8e 39 89 9b 9d d6 9e 5d 78 d7 79 8a f5 b3 66 e0 e7 61 78 f9 79 e6 a3 7b 9c 62 64 62 ed 97 9c d5 24 ad e6 45 17 d7 58 62 bf 2c 37 8e c1 eb 5e 41 6c 97 6b fc 7a 7c 48 5b 96 fe 2b 9b f8 b8 f0 4b 96 b2 e8 2a 30 d7 cb 19 03 9b 12 4d e6 1d d6 71 94 4b 24 f3 ae 2e aa 5a 01 e7 2c a5 31 7b a3 0a df 3c 1f 9f 5e d7 e6 98 8f 2b bb e4 ae 7b 6d d0 3c 67 41 9d c6 f1 f6 94 f2 1f 53 a8 e8 7c ec 5f aa 3a bd a6 99 c1 c5 f9 a7 bf c0 cc 37 ba ec f7 aa d2 6d 6f 4c e5 b6 5a d5 80 79 b7 5f bd bc d7 bc fb c9 f2 87 b1 6c 8f 37 db e9 1e b3 5d f2 b7 e9 7f 37 e6 2b 71 a3 1b 2b 69 2d 1d 45 c4 ee fe d0 fc f1 da 78 d7 d9 ce 9d d5 1e 7f 21 91 98 71 db 4b 2d 16 cb 67 6e a9 f5 38 f5 e9 7d e7 9c e4 5b ad 6e Data Ascii: \|^4g+Rdv=3=L9]xyfaxy{bdb$EXb,7^Alkz\|H[+K*0MqK$.Z,1{<^+{m<gAS\|_:7moLZy_l7]7+q+i-Ex!qK-gn8}[n
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 24 da bf c0 7e 25 9d 8d 02 6c 27 24 f9 5a 83 11 4f 2d 07 6a 59 18 57 95 a8 4e 1a bc d1 81 24 e8 c3 cd 46 53 4a e4 1f 28 05 a6 76 af 23 5c 3b 0a 12 91 4c ec d4 b2 b8 a5 9d ed f9 76 3f 94 4d 09 6e a5 e3 b8 91 6c f2 2d b9 58 79 45 33 b1 ae 6a 0f 91 6e 1f e4 cf 7a 49 b9 0f 2d 79 c0 af 34 44 19 62 25 a5 73 5e 56 a7 90 57 9e bc f7 5f 2d 79 69 64 5b 99 1e ea fc 8b 90 5d 9e c2 e4 98 cd 97 c8 80 09 4d 19 09 01 ac 4b 35 73 6a 04 16 32 81 46 42 c0 12 2b 9b 55 c9 ab d1 90 0a 32 05 02 42 5c 90 2b ca 68 cd 60 b3 86 25 d2 bc d4 66 34 5c 92 58 92 b2 3a 8f 2f c1 9d 56 bc c1 ab 9a d5 de 8b 33 55 85 87 1a 3f b8 2a 1b 9a d2 90 c6 d7 03 e1 8b 05 a5 65 23 f8 59 b8 d1 70 28 cc c4 99 3e 03 b5 73 7a 0e f4 24 71 44 9a 8d 94 03 20 a6 6e 45 18 28 63 73 e5 60 3c ae 4a 33 06 67 e2 7c Data Ascii: $~%l'$ZO-jYWN$FSJ(v#\;Lv?Mnl-XyE3jnzI-y4Db%s^VW_-yid[]MK5sj2FB+U2B\+h`%f4\X:/V3U?*e#Yp(>sz$qD nE(cs`<J3g\|
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 43 d2 7a 4b 45 91 d3 3a 91 56 f5 df 52 32 7f d2 b4 0a 26 e9 ba c7 38 9d 16 24 9b 33 d5 43 60 7f e9 3b 4c 70 dd 5b 3a 23 3f 56 d8 b8 9b af 06 39 1d 7f 0a 58 77 ba 8c 68 75 79 1d 87 69 bb c7 db cd a7 d2 e3 c5 de fa 0e bf 47 2e c7 a7 f5 fe b3 a4 3a cd 9e 7e fb 55 d7 32 db a4 e9 f2 32 e0 87 45 97 d6 97 7b 99 d2 f0 f7 3a 8d 73 6e f7 59 9a f4 c6 cc 8b 74 f9 7a bd 1e 20 97 1b b4 60 68 e4 5e 91 a8 d8 f4 6c de e5 d9 f6 3d 83 2f af 69 b2 fa 2e 4e f7 2b 45 89 ba 78 b3 b2 b4 fa e9 30 75 7b bc 9d c6 16 36 df 6d 91 da b6 d8 1b bd 8e 0b 61 e4 e7 eb b6 f9 bd 6f d9 9b 4d 76 2a eb 70 73 75 69 a1 1a 3c 08 fa e4 91 64 c9 a1 d0 8c de b5 db 36 bd 83 b3 6f bd 6b 07 75 97 a5 7a 4a 0d 7e 27 e3 f5 cd 06 07 b7 fb 56 8f 77 3e d0 74 b7 d8 f4 e4 93 b0 e0 2e b6 5d fe 4e 7f 45 ff 00 ac Data Ascii: CzKE:VR2&8$3C`;Lp[:#?V9XwhuyiG.:~U22E{:snYtz `h^l=/i.N+Ex0u{6maoMv*psui<d6okuzJ~'Vw>t.]NE
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 2c 4d 1a e3 ff 00 20 07 06 36 e1 8b 9b 1d b6 18 f1 cc 5b 0c 2b a6 1e 7a be bb c8 72 1b 0b 0f 24 9c 53 03 6d 71 24 96 a0 6c a8 e4 c3 ce e0 bb 0c a8 a4 5b 69 d6 28 f6 86 6c 7c cd 4e 34 f5 d8 36 b2 e8 30 72 7b 4e e7 21 f6 39 f9 d9 a5 25 60 49 49 44 86 52 12 56 25 cd d2 4f 87 8d 85 bc 8a 08 21 ab e6 a6 04 d6 44 12 1a 4c 07 8e a6 04 31 58 16 48 a7 88 1f ce 8d 8a 38 7a 33 82 ce ad 1d 16 42 52 c2 47 91 15 9a 4b ba b4 7c 19 ae c1 d4 22 95 68 e3 5e 2d 92 eb c3 f2 94 18 c7 2a f1 92 54 f8 56 e0 87 e4 15 c3 29 02 e7 89 af 1b ad 3b af 0b 13 4a 0d ed 56 02 89 5a 04 1a 17 b7 ef 40 0f d3 d9 9f f6 bf f7 92 ff 00 b2 f1 69 3f 37 cd a8 ff 00 65 e5 c6 3b 6b 49 f9 3e 2d cd bc 5b 4e 35 9d 6b 63 ff 00 b3 f2 f5 ff 00 fb 5d ba 33 7b 14 64 61 37 69 29 ac 3d 87 cf 91 f9 bf 87 ff 00 Data Ascii: ,M 6[+zr$Smq$l[i(l\|N460r{N!9%`IIDRV%O!DL1XH8z3BRGK\|"h^-*TV);JVZ@i?7e;kI>-[N5kc]3{da7i)=
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: bb 47 6a 08 00 e0 a6 b8 2d 08 7e 19 6c dc 7e 6d 56 a5 4b 55 bf 47 52 69 92 ca 80 dc d2 a8 27 80 35 e3 06 8c 4d 71 18 14 41 20 20 14 6b e2 c0 55 a9 d4 b5 05 02 88 2c ce bf 21 6c 38 83 42 d4 45 18 ef 46 35 a0 9f 2d 10 e3 c4 b0 11 96 06 16 21 61 75 a1 13 57 8a bc 54 63 b0 f1 50 8d 68 c4 a4 ac 0a 2b c4 69 63 a2 80 00 3e 58 12 48 bd 70 02 80 02 8d c7 fe 37 ab 1a 0a 42 05 f8 af 91 51 8e 4c 63 51 42 30 69 d7 8d 02 d7 2d ca 8c 61 e8 c4 79 08 69 a2 21 55 2d 47 e4 7f 8b 8a 4b 31 f1 ad 14 5a 6b 2a 82 49 e6 54 f4 6f 67 04 4c 1c ad 43 e1 4d d4 32 26 61 8e a4 7e 20 a3 00 34 60 04 3e 1d e8 e0 8a 38 6b 6f c1 56 23 04 2d 3e 39 56 30 05 a5 c2 06 86 2a 0a 38 e1 6b f1 c9 af 0b 90 50 aa ac 5f 2e 82 95 58 d7 0e 3f a3 29 35 c0 d0 5f 82 ab 5c 45 00 45 15 24 ac 6b 7e 1f 20 5c 71 Data Ascii: Gj-~l~mVKUGRi'5MqA kU,!l8BEF5-!auWTcPh+ic>XHp7BQLcQB0i-ayi!U-GK1ZkITogLCM2&a~ 4`>8koV#->9V08kP_.X?)5_\EE$k~ \q
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 24 da d5 41 d4 30 30 a4 93 53 a8 c3 31 1d 56 2f 8b 17 58 41 da e9 16 db 3f ff 00 a2 db 39 56 d1 6d f6 58 92 75 7e f9 3c 0f 8b df b0 72 93 57 d9 b1 27 61 b3 c3 c8 5e c1 a3 eb 79 78 db 7f 5c ec 44 ba 5d 26 ff 00 0b 21 5f 25 a3 18 d9 f3 b6 26 93 b4 a3 67 74 d9 36 82 3f 58 ec f1 e4 c3 d0 64 62 c1 3e 36 22 47 b3 ec 7b 2c 0a eb 9b 55 dc e2 cd d6 75 d9 09 b7 ea 30 40 35 91 6b 70 23 ca cf 99 06 a7 b3 e2 62 a4 9d ef 0b 32 78 3b d6 61 78 3b 06 8a 49 bf d9 f4 f9 17 b4 68 23 95 b5 fa e8 72 1f 63 d5 e6 f0 c3 b8 cd c0 95 f6 8f 2d 66 f6 1d 8a cb 93 d9 a4 99 75 3e c2 c9 c4 ad 0f 61 c2 cf 87 2b b2 cf ab 92 3f 69 45 00 c8 ec 63 66 e9 b3 8b 9e ca 6c 7c 94 9b 1f 36 29 60 ff 00 62 c9 16 34 84 08 0a 8f e0 b4 00 6f d2 c6 8a 90 54 1b fc d1 16 20 90 55 f9 18 da e1 97 90 8e 3f 95 Data Ascii: $A00S1V/XA?9VmXu~<rW'a^yx\D]&!_%&gt6?Xdb>6"G{,Uu0@5kp#b2x;ax;Ih#rc-fu>a+?iEcfl\|6)`b4oT U?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	62686	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	979	OUT	GET /wp-content/uploads/2022/07/17-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:09 GMT Accept-Ranges: bytes Content-Length: 442178 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 19 73 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 33 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: sExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:13:44
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 00 30 00 32 00 20 00 68 00 6f 00 74 00 65 00 6c 00 20 00 64 00 65 00 73 00 6b 00 74 00 6f 00 70 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 04 00 00 00 02 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 06 73 6c 69 63 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 Data Ascii: 02 hotel desktopnullboundsObjcRct1Top longLeftlongBtomlongRghtlongslicesVlLsObjc
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 43 44 69 67 65 73 74 3d 22 45 38 46 31 35 43 46 33 32 46 43 31 31 38 41 31 41 32 37 42 36 37 41 44 43 35 36 34 44 35 42 41 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 32 32 3a 35 33 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 30 37 2d 32 36 54 31 31 3a 31 33 3a 34 34 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 30 37 2d 32 36 54 31 31 3a 31 33 3a 34 34 2d 30 33 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 Data Ascii: CDigest="E8F15CF32FC118A1A27B67ADC564D5BA" photoshop:ColorMode="3" photoshop:ICCProfile="Adobe RGB (1998)" xmp:CreateDate="2021-08-12T20:22:53-03:00" xmp:ModifyDate="2022-07-26T11:13:44-03:00" xmp:MetadataDate="2022-07-26T11:13:44-03:00" xmp:CreatorTool="
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: aa 20 6d 3f 22 72 a2 8d c6 74 f2 66 d5 98 f6 73 3c 0d b8 ac 96 99 0d 4d 96 0a 32 37 ab 7a 8b 5e 38 98 8d 1c b8 19 dc 98 56 15 01 49 ec 4f 75 66 5c fd c4 63 5a b6 30 b3 59 3a 45 11 3d 48 69 79 ce 1b 84 32 2f 8d 0f 6c 47 29 1d 85 d2 80 84 1a d3 02 60 eb 8a d5 53 e8 11 0f ee 26 4f 46 92 5b 12 5c b6 65 d3 28 77 4c 12 ca b0 10 e2 e5 01 d6 f9 a4 7a 69 a6 26 0a 39 c6 64 3b 60 d0 a4 bd 87 9a a8 95 7e d3 e6 b2 f1 47 6b 83 0b 85 36 bc 43 29 f4 f3 1b b2 52 39 f1 47 26 f2 96 11 42 87 3f a0 d0 17 01 d2 c4 ee d1 2f 48 e0 47 3f d9 54 f8 f9 26 49 92 64 99 26 49 92 7b 26 d2 94 96 a4 8a 49 b4 99 25 2c 2d 73 be 1b 02 63 63 e2 2b 9a 80 04 d0 0c d5 45 6c 0b b3 b7 c2 24 13 57 16 7d 38 26 9c 6b 3b 1a 3f aa 9b 28 98 00 91 03 6e 51 a5 16 26 10 05 c3 8c e4 15 85 0f a8 fc 65 2d 17 Data Ascii: m?"rtfs<M27z^8VIOuf\cZ0Y:E=Hiy2/lG)`S&OF[\e(wLzi&9d;`~Gk6C)R9G&B?/HG?T&Id&I{&I%,-scc+El$W}8&k;?(nQ&e-
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: d5 b6 1e 6f 13 c1 91 dc f3 4a 6d 20 c6 fa 3d be 53 1a bb cb 7a 75 ea 44 75 c7 9c 6d a6 a2 f1 61 b8 56 da 32 5d 6d 7a 99 30 f2 c1 25 6a c4 3d 00 a3 38 7d 82 5e 3f 19 0f 6d f4 61 76 18 2b d1 1f 87 04 ed f3 2e 61 af 02 32 49 8e b9 b2 c4 33 84 66 8f 8a 17 5e c1 ac c8 13 42 e9 b4 f8 2e 54 11 a7 21 81 ce c0 27 b9 5d 2a 67 9f ed fe a5 f8 a6 c7 92 d7 19 7b 1f 25 36 e7 9a af 7d 2f 52 7c 6b dc 3e 7b 9c 73 59 e8 3b 13 7f 66 e8 89 6e e8 ac 00 e9 d1 de 6b 3c b7 e0 fd 34 d7 4a cb b8 e5 84 4f 43 1d b6 38 df d5 5d 3c e7 32 d8 43 5d 10 b0 6a 2e ba 95 48 1f 12 65 22 de af 9b 58 b5 df 1c 42 f2 2c 35 59 5d 89 1a 2c 59 07 0a 16 36 d6 62 b7 35 ac ad 5b d2 6a c9 5c 7d 3d ce 05 62 ca f5 13 23 ec ef 9f 7a 8f a2 3e 4b a0 17 c3 67 e3 f7 dd fc 78 67 b1 e4 3d 05 80 07 44 9c a7 a9 1e Data Ascii: oJm =SzuDumaV2]mz0%j=8}^?mav+.a2I3f^B.T!']*g{%6}/R\|k>{sY;fnk<4JOC8]<2C]j.He"XB,5Y],Y6b5[j\}=b#z>Kgxg=D
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: dc 34 5e 9a cc 95 7b 9c d1 8c c0 9c 2c 5a c5 57 cd 7a de 09 4e 18 52 1f 59 1f 16 3a 1b b0 95 09 c8 62 c6 eb ab c1 22 eb f3 4f 2f a1 f6 3b b1 c4 b2 26 a8 ce 76 ce 7a 8a cb ed 65 1a 19 89 c3 49 73 e5 f6 cc a8 82 df 17 7c db e9 17 4f 4f 95 03 c1 f4 11 20 34 a5 90 9d f4 1b 08 ec 34 3b c3 bf e7 a3 b9 5d 01 e5 0e 77 de e3 57 df a3 be 16 d0 a4 ae 5e 2c e6 30 4a b0 e0 19 dd c7 c6 aa ef a3 84 b5 18 90 a3 2c d9 3a b5 23 81 0b 32 c9 f7 3d 40 77 89 36 2b b9 38 6d 04 3e 2d e0 a1 88 78 73 d1 38 14 28 54 a2 67 d5 70 ec e7 73 f5 2e 6e 77 3e 4e b3 e9 29 31 6a 43 8e dd fb c7 e8 5b dc 5e 95 a3 c6 e9 58 7c ce a1 20 1d db 59 4f 59 4e e3 b2 09 1b 89 48 94 a4 26 93 95 a5 da 77 5a d4 81 c4 a9 e5 5c fb b6 d2 da e6 27 9b 77 74 90 f5 25 a8 8c a6 d2 b5 d4 f2 ae 3f 36 8d d4 66 77 0d Data Ascii: 4^{,ZWzNRY:b"O/;&vzeIs\|OO 44;]wW^,0J,:#2=@w6+8m>-xs8(Tgps.nw>N)1jC[^X\| YOYNH&wZ\'wt%?6fw
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 2f 13 0e 9c 8e 84 c4 06 b4 19 e4 f1 f2 b4 ea 91 23 85 29 20 3c b0 fe 29 15 97 08 d3 11 c4 b0 07 12 51 ca 53 87 e4 6a 3a 9e 40 d2 47 0b ab 4a ac 23 81 14 f2 78 ca aa 46 a3 91 29 51 1c 4f 34 f6 62 4e d3 fe f9 1d 4b 44 86 47 af 23 81 03 b3 71 e4 56 66 73 e7 31 3f 25 66 8f c2 c1 12 94 02 71 4e 73 e4 c5 14 d7 9d 11 91 7c ac 47 54 fc 86 2f 95 4a 05 e0 2f c0 d2 76 84 b2 86 fc 99 5d 78 49 eb c4 b1 20 2f 0b 33 07 25 84 92 12 01 24 46 e1 84 6b f1 b4 64 85 46 21 a4 e8 38 72 5c c8 10 c2 e4 09 00 25 08 31 27 fb 6a a3 be 2c c7 a2 cd e2 18 29 4f 26 3e 44 29 98 72 49 7c b9 e7 e2 a4 34 6d 1f 82 94 04 03 fc 12 10 c1 e2 3d 09 13 cd bc fc 0a 02 88 c5 8f 03 74 f0 c8 48 41 fc 08 f3 e3 06 51 18 54 e4 4e 01 ed 80 92 3f c5 80 1a 30 82 37 fc 29 f1 f8 e3 8f a1 c7 72 52 45 05 63 1f Data Ascii: /#) <)QSj:@GJ#xF)QO4bNKDG#qVfs1?%fqNs\|GT/J/v]xI /3%$FkdF!8r\%1'j,)O&>D)rI\|4m=tHAQTN?07)rREc
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 51 47 2c c1 05 85 ad 4e 0a c9 d0 3c 36 cf 5f bf 27 52 64 44 83 d8 74 e5 6b 49 e5 e7 5a c7 52 d3 46 ab 4a 4b 05 4c 19 56 7e 5d bb 22 34 0d 1d 8a c9 2a e3 6c 63 50 7e ca 96 32 4b 1f 94 d2 95 af 35 c8 59 39 14 61 b9 93 f1 55 c2 d8 6f dd c6 92 69 8e d9 99 50 09 eb 19 0c 15 c8 16 c7 87 15 81 08 bd 17 1d 92 58 f1 a2 20 4a fd f1 50 1e 46 a1 96 5f 30 08 2a c3 be c2 87 1e 61 48 62 c5 cf f0 43 d7 04 65 87 8f 91 0b d1 5e 94 9f 1e 4d 38 43 10 12 8b cf 1f 56 66 26 35 60 20 90 22 a5 45 2a c1 42 71 49 1c 2a 14 4f 09 75 b7 48 88 20 ab 65 39 7a 17 0d 1a 3c 31 bc 30 cf c9 d0 99 e9 aa 3d 98 25 ed e0 76 f2 92 ba a3 89 49 3f 20 42 5c b7 18 fe 15 bb 45 74 e7 8b 30 55 f0 e1 88 46 4c 6c 04 c1 98 cd d0 36 2c 25 7e 26 75 4b 7f 69 64 2b e7 1a 25 4c f2 bf 32 b6 c5 fa fa ce 59 84 51 Data Ascii: QG,N<6_'RdDtkIZRFJKLV~]"4lcP~2K5Y9aUoiPX JPF_0aHbCe^M8CVf&5` "EBqIOuH e9z<10=%vI? B\Et0UFLl6,%~&uKid+%L2YQ
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: c1 e1 1c ef f3 d3 39 31 81 c5 5e f9 e2 3c 95 01 e3 2f 44 11 c0 01 e1 e8 00 07 08 5e 0e bb 24 1e 2a 91 c6 00 09 0f 40 4e a7 88 de 3c 3f 8e 12 7f d1 15 9c b1 e8 f0 f3 ae 8f f9 e4 0b d9 e7 5f 90 a0 f0 f4 39 e2 a7 fd 3a e7 5f e9 60 f4 a8 9c eb 9e 20 f3 ae b9 e2 c7 8b 1b f3 c1 9b 86 92 96 48 02 83 10 e6 40 c9 e3 64 49 e5 21 90 41 58 c4 52 81 b9 f1 59 36 3b c6 fc 80 dd eb f6 58 cd cb cd 19 58 0a 79 51 fd 9f 1a ff 00 30 e7 72 72 6f 9b c2 ef 9f c5 8c fd bf 2b c1 bf 72 6f 2f 91 bc bc ac fc fc a7 df 8d 9f 2f 03 f1 f9 47 ff 00 68 27 e4 8c 9f 92 d1 1f 2c 9e 5d 47 e5 c9 3b e7 e7 a7 eb 91 ff 00 93 d7 4d e5 db ff 00 91 c3 df 3f 3c 3d f3 f3 fe 8d fe 3f e8 7b e8 77 df e3 8b df 1b be 7f d3 fe bf 9e 0f 2e c7 7c 4e 7e 7c 57 cb a1 cf fa 0e 2f 5c 8f c7 c8 ff 00 d8 3b f8 ae ff Data Ascii: 91^</D^$*@N<?_9:_` H@dI!AXRY6;XXyQ0rro+ro//Gh',]G;M?<=?{w.\|N~\|W/\;
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 88 7c bf c9 96 2f 85 10 20 49 43 33 49 1f 8c 32 79 09 82 79 c9 67 be 3d 98 d1 1e cb af 3e 70 cb 2d a6 e9 6d 4b dc 96 9b b9 26 91 b9 0c 92 c4 7f dc f3 45 60 20 42 ac 5e 42 05 8e 8a ce c0 3f 98 e1 0e 55 1a da 08 66 29 25 62 ea d1 92 8a d3 ca 38 b2 c8 89 62 69 59 a5 95 49 9b 21 5d 41 cb 47 f0 7f 69 08 e1 92 49 80 8e 53 19 89 e4 e3 3b 98 20 57 0c b5 cb b9 f9 52 38 92 68 4d 98 6c 96 55 96 51 72 49 49 44 92 64 5b 12 47 c1 71 f8 96 a7 52 2d 4a 1d 2e 58 84 0b 57 19 7f b0 b9 dc 96 2f 27 0e 46 ec 82 bd 8b df 1c 99 4b d5 de 1c 9d a5 96 4c 95 df 35 c9 5d 8c 2e 62 78 d5 32 d6 41 97 39 32 18 f2 97 e5 7c 61 69 1e c4 44 8a 30 83 09 fc 73 29 21 ed ae f7 c8 6c 99 1a 5b 2d d2 d8 2c bf 28 3c 32 f4 cf 93 58 da 2b ab 20 4b bd aa 64 d1 9a 4b 68 b1 ae 44 19 1a cc 5f 1f ca 07 0c Data Ascii: \|/ IC3I2yyg=>p-mK&E` B^B?Uf)%b8biYI!]AGiIS; WR8hMlUQrIIDd[GqR-J.XW/'FKL5].bx2A92\|aiD0s)!l[-,(<2X+ KdKhD_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	62684	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	979	OUT	GET /wp-content/uploads/2022/07/18-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:14 GMT Accept-Ranges: bytes Content-Length: 442402 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 21 7a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 34 3a 33 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: !zExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:14:30
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: cf 64 8b ad 3c 1b 39 fd 2b a5 66 32 ff 00 4a a6 e2 65 58 24 5e c2 e8 26 77 b7 d4 63 9e f6 bf df fb ab 94 ea 1d 45 d9 97 7d 93 28 3f 1b 2b a7 fa 86 1a 62 7d 47 35 df a2 2f 0f ff 00 ad 7f a5 62 e9 ac cb 1b 64 3b 58 d0 fc 3b 72 b0 3e b0 d6 c3 43 f3 db 05 f5 b0 d5 68 d6 4d 4f fa 23 e9 6e fd 0d c3 db ff 00 06 fb 54 fe d4 05 11 10 08 ed a2 c8 64 90 1c 37 e9 ec ff 00 ff d4 cc c5 e4 fd 0f ed 73 cb 78 fe 52 d3 67 d3 6f d2 fa 0c fa 1f cd f2 cf e7 7f d7 e8 7a 6b ca 92 54 fa b6 9f 53 eb df f2 06 77 fc 41 e7 e8 fd 21 ca c1 bf fa 6e 77 d0 fe 79 bf 43 8f a1 fe bf 6b 5c 52 49 63 ff 00 be ff 00 b9 5d d0 f9 c7 fe e9 ef 6d fe 8b 91 fd 2f fa 2e 3f f3 ff 00 47 e9 8f fd 93 ff 00 43 ff 00 76 3d 35 b9 95 f4 31 7f e4 ef e8 f5 ff 00 4e e7 8f fb 49 ff 00 03 fe 93 fe ec fa 2b c9 92 Data Ascii: d<9+f2JeX$^&wcE}(?+b}G5/bd;X;r>ChMO#nTd7sxRgozkTSwA!nwyCk\RIc]m/.?GCv=51NI+
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 7b f1 6b 6e 5f 50 a1 d4 3b 74 38 58 c2 d3 01 ad 65 61 cc b1 bf 9b 6f bb fe 16 df d2 a7 ce bb 0e cf 52 fb 19 55 8e 69 6d 56 d4 fd e1 af 7b 77 b7 18 fa bb fd 2f 4a ba 59 6d 9e b7 a3 fa 4f 49 57 84 47 be 28 19 0c 5a f8 71 fe 8b 72 26 58 f9 73 2f f3 a4 f9 f0 42 f8 8b 96 ea 41 77 ea f9 75 5d c7 e8 ea 60 dc 00 fc ff 00 4e b7 bf 6a 90 a2 a7 90 db fd 5b 0c c1 02 bb 1c 27 c3 f4 55 59 ff 00 56 ab 62 e5 dc cc cb 32 f1 48 6f a1 5b 71 cd 9a 90 4f a7 65 8e 6e f9 bb 6e fb 2b fd 0d 9f 43 d6 f4 57 5b 5d b7 1e 8e 6d c7 b7 6b 9b 5d 4e c7 6b dc e6 34 5b 2c 36 3d cd f6 dd fd 25 d6 ff 00 c0 df fe 93 f9 bb 15 cc f9 ce 31 b0 d7 b9 fd 25 b8 84 b2 09 9d 07 04 38 ff 00 b1 c4 a3 1f 06 9f 7d 6e c8 c6 f1 75 58 f9 01 df bd f4 e1 8a e6 56 7e 5b 70 dd 56 2f 51 ea 0f f5 77 54 fa f2 19 63 Data Ascii: {kn_P;t8XeaoRUimV{w/JYmOIWG(Zqr&Xs/BAwu]`Nj['UYVb2Ho[qOenn+CW[]mk]Nk4[,6=%1%8}nuXV~[pV/QwTc
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 2c 01 84 bd 97 1d 70 76 8f 91 aa 59 c1 8e 7b cb 44 63 71 17 2a ba 05 c3 5b ca af 91 e7 11 0e 4e 83 85 09 5f 22 f5 79 67 ae 57 6d 36 66 16 c0 29 cd af 9e 93 38 92 63 7c 48 d7 cd 7c 8e b7 f8 de c2 b3 dc 31 e9 99 b3 b7 d1 b1 c6 7a 5a 7e 6f c1 f4 55 9e 8a 05 32 f5 1c 7e d1 47 b0 51 0b b8 11 1c 96 77 1d af 7d e1 b5 65 a0 e2 ba 73 f3 c7 d9 f1 42 97 74 71 cf 6c 8c 69 4d 6a cb a6 9d 7c 9c c5 4a f7 32 3c 09 18 48 23 94 02 44 82 3b 41 cc 07 3c 4d d4 2e af 33 42 44 40 49 75 b8 55 bf 58 ee a8 79 ae c1 0f 2a 34 15 8c 3b 6f 96 b7 bb 36 f0 49 34 15 9c 61 28 ee 65 7c bb 04 f3 68 17 b1 c8 8c a8 9f 56 8b 11 ec 76 67 47 63 ce 38 bd 15 1d 26 f6 6f 2d 2a e6 e7 1b 86 63 c9 1a 83 63 42 f0 fa 3f 68 eb 31 26 3d 7d 04 91 2e 58 a2 45 b2 e5 30 a5 79 7b 0f 4b 03 99 e1 8e c0 9f 5f 7c Data Ascii: ,pvY{Dcq[N_"ygWm6f)8c\|H\|1zZ~oU2~GQw}esBtqliMj\|J2<H#D;A<M.3BD@IuUXy4;o6I4a(e\|hVvgGc8&o-*ccB?h1&=}.XE0y{K_\|
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 51 c2 6c 23 ac e3 8f 76 41 86 33 37 5c 80 8d a0 e8 bc 19 57 1e de 93 65 12 50 cc d7 33 37 1c 93 c8 8b a5 6a 0a 3b 17 a2 8d 5d 6a 45 af 1c 55 de 61 5f 7c 01 e8 8b 1e fe 9b a9 9f 07 35 c4 f1 53 1c e5 b6 72 e4 d3 6d 08 6a e0 e7 01 70 99 f4 17 37 b3 19 d4 ef 48 56 55 25 9d 91 c4 6d 49 ac a8 22 f5 7e 69 cf 0d b4 fb cb 47 ad 3e e6 1d a0 ab 14 8c 7c cc 65 a2 ba 88 78 a6 a9 2f 31 66 8a 5a e6 a8 86 52 fe 6f 4e bc ae 88 9e ca 18 7d 0d 9a c0 72 24 8c e8 15 5a f9 ac 90 5a 34 70 54 36 90 6a cb 6c a8 40 7b 4a 5a a9 a6 25 ef c2 1d 35 6f 16 73 8e 73 5a ed e9 88 a7 75 bb d3 3d ae 6c d1 dc aa 6d a3 1f d1 5f f3 67 db bc c6 1a ee 98 8b 9e 4c 74 05 6b 7c 3d 73 22 7d e5 cd cb 91 3b cb bb 49 1b a6 e5 d7 e4 f2 ce d4 5e d9 54 99 e5 98 63 f3 23 33 aa 6e 3d 7d 1d 5a a7 63 15 cc 60 Data Ascii: Ql#vA37\WeP37j;]jEUa_\|5Srmjp7HVU%mI"~iG>\|ex/1fZRoN}r$ZZ4pT6jl@{JZ%5ossZu=lm_gLtk\|=s"};I^Tc#3n=}Zc`
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: af 3c 9d 0a a8 e8 71 d7 a7 4b 1a b5 50 18 ad 17 5d 5a 9b 28 b4 97 9b fc f7 ac b4 a9 60 ed 2e 73 6a 47 2c 04 86 23 3c ac 80 6f b9 82 41 7c 90 0c bb 30 05 9a d7 24 0b 97 f5 3e 8d 09 6f 9f 88 ee 97 61 a5 06 ff 00 32 a0 35 5c e5 e9 ab 25 1a 8b d6 31 99 97 d3 de 9f 34 f4 6f 2a 4f 28 a2 73 a0 a8 fd 0f 13 48 b5 79 3d a5 2b 5d c7 18 68 61 f9 31 c2 95 d1 cf 02 f6 47 cd 95 44 05 94 7a ba d6 dc af 6f f2 2e 2f 53 6a 76 db df 08 d9 ae 35 99 05 cd 64 97 4a 0e b0 8d 1f 26 ce 02 35 b6 74 34 f3 c6 4a 32 11 b8 0f 1a 5a da 1d 76 5b 05 34 d0 b3 06 46 d6 18 94 40 0b db ca ed be 66 67 b9 4c 8e 39 e6 80 f2 e7 6b 96 dc 95 0a 1c f1 24 8f d0 7c 4d fe 98 f9 d1 19 e3 ea 90 e4 13 6a 3b f7 97 b1 31 27 df da ce 56 77 27 b8 ee c3 cf 87 22 47 01 72 31 c3 42 7e bb 5d ce 3d 5c 38 27 5a 39 Data Ascii: <qKP]Z(`.sjG,#<oA\|0$>oa25\%14o*O(sHy=+]ha1GDzo./Sjv5dJ&5t4J2Zv[4F@fgL9k$\|Mj;1'Vw'"Gr1B~]=\8'Z9
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 82 e3 22 dc 95 6d 4a 48 2e 23 bc e2 96 0f ce 6a 12 fc d8 5c 4c 5e 79 92 9c 84 e6 5b 26 d5 85 4c 8e ca 79 38 2d 81 2b e4 b8 2c bc 78 95 dc e3 75 ed 26 42 b2 6e 7b 6e c8 c7 24 f0 a5 62 88 84 dc 89 21 65 12 5b 25 5e ff 00 da 91 db 1f 15 6d 15 1d 87 e7 87 0d 5b c8 ca db 21 3e 33 52 15 6a da 54 61 87 db c5 9b 2c 15 bb 7c b1 b4 07 85 b8 ed 9b 4d b0 03 8c a2 22 39 f1 85 25 b0 29 8e 11 ac 28 0f cb 1b 48 72 e0 b6 0e 1b a6 4f 28 04 84 fb 0d e7 be c2 86 cf 93 f4 e2 81 21 3e 4b 63 ff 00 e0 ae 68 99 8e f3 de 66 9c e2 8e 27 38 2b f0 0a 9c b1 ff 00 23 5f 25 c5 c5 4c 44 f8 e3 38 f8 8b 80 bf 05 f2 50 53 85 bc 98 b2 ac a4 21 4a 9c 51 54 54 51 d6 b2 e6 77 da d6 8d 64 9f 71 7c e7 86 18 70 82 aa 8b 77 0c 65 33 5f 28 49 2e 61 23 32 25 36 28 e4 53 06 b3 5d 86 32 67 ab bc 62 29 Data Ascii: "mJH.#j\L^y[&Ly8-+,xu&Bn{n$b!e[%^m[!>3RjTa,\|M"9%)(HrO(!>Kchf'8+#_%LD8PS!JQTTQwdq\|pwe3_(I.a#2%6(S]2gb)
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 46 b9 c1 67 d2 b8 0d 92 67 04 98 aa 6b 8c 58 1b 08 57 86 ab fd fa ae 2b be 4b 85 e5 cf 91 2e 59 ff 00 13 69 c4 6d c1 98 ab 9f 96 b9 f9 2b 88 ea f3 f9 4a 98 92 f9 51 40 55 b4 9c 30 1a b6 b0 95 28 e9 5f 27 20 5f 22 84 51 17 df 30 8f e4 92 49 b7 5c fe d4 4c 7f bb 18 e2 d5 9b 0a c0 cf 67 c9 b7 45 16 60 b8 6d c1 17 61 ca af 9e 12 46 57 28 97 7c 94 31 67 ff 00 50 99 17 26 be 88 e0 5e b7 e6 d7 2a 27 48 fa 31 2a d1 13 1a 02 3c 69 85 20 01 46 f0 48 10 95 41 87 d3 e3 09 3e 65 c7 07 85 c0 57 a3 59 1b 8d e0 23 91 d7 c4 41 40 da 25 64 1d 68 1f 03 71 55 e0 67 27 11 bc ad c8 8e d8 9b bf 73 f7 0d 93 75 7b a1 2b d0 e3 9a 38 2e 7f 89 f9 60 0e 4b 88 a8 b3 aa bc 5b 6a a5 05 b4 88 c9 59 1d ac a5 7d d8 15 64 63 62 8b 05 89 0f 23 4d c2 6c 9c 76 b6 00 30 ca b2 da e2 36 18 ec 46 Data Ascii: FggkXW+K.Yim+JQ@U0(_' _"Q0I\LgE`maFW(\|1gP&^'H1<i FHA>eWY#A@%dhqUg'su{+8.`K[jY}dcb#Mlv06F
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: cf c4 92 8a 98 a9 f1 c7 c9 7c 12 af 96 3e 0b e3 64 2a da 45 6c 9b 72 42 a1 b5 0d 96 c1 da 92 4f a6 cc 50 5c 55 e7 01 70 7e 71 45 39 68 15 10 55 57 13 1d 15 52 14 41 c4 f8 c3 75 c4 44 32 5c bd 57 85 ba c4 43 6d 39 20 18 e8 d9 18 21 2b 43 e2 a6 d2 08 a2 91 a1 22 21 0b 6a 78 9e 44 9f 28 42 3c 22 a7 38 2a 98 62 8d 91 12 f2 e8 38 40 1e 5c b4 87 e3 21 d2 06 5d 37 0c b8 06 df fb 95 52 1c 85 71 a1 6d 44 3c 11 11 48 48 8c 84 95 95 11 56 3f 88 89 03 6b e6 3f 5f dc 20 26 62 6b 1e 38 b6 d5 d2 f8 b0 8e ba de 14 f9 29 85 69 2d 45 ab 79 cb 8d 59 cc 70 98 0f b2 41 a2 37 8e 2a 8a b0 8a 2d c8 69 de 6e 5c 70 59 92 df 93 96 a5 e0 96 89 e4 95 6d a3 b2 5b 55 fa c4 1c 45 56 95 15 47 2c cb 88 cc 36 a6 95 88 80 c2 38 88 85 e3 c7 98 26 1b 5c c9 f3 16 d6 52 29 39 35 50 9c a8 68 be Data Ascii: \|>dElrBOP\Up~qE9hUWRAuD2\WCm9 !+C"!jxD(B<"8b8@\!]7RqmD<HHV?k?_ &bk8)i-EyYpA7*-in\pYm[UEVG,68&\R)95Ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	62687	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:24 UTC	979	OUT	GET /wp-content/uploads/2022/07/19-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:18 GMT Accept-Ranges: bytes Content-Length: 345271 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 1d d7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 35 3a 30 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:15:00
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 Data Ascii: tinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: a8 a5 f6 b0 b8 fb 49 63 77 f6 dd fb ab 9c fa 83 61 65 59 c2 46 c2 ea 9c c2 1d 24 83 eb b6 48 77 d0 fe 46 e6 d7 bd 74 5d 6f 26 fa 3a 61 fb 3e d1 6d d6 d7 50 71 1b b6 c9 2f 16 06 1f 65 8e df 53 3d af fd 1a b3 f7 0c 20 f0 ea 63 b5 5d 7f d0 e1 44 20 00 e2 ab 96 f6 5a ff 00 54 ba f6 4f 57 bb 32 8c b1 8e e1 8c da ee a8 d0 0e 9e a1 75 56 36 df 50 37 7b bf 47 57 f8 35 d4 33 26 e6 08 ae c7 b0 0d 00 6b 88 11 ff 00 16 fd f5 b7 fb 0d 5c 7f d5 7c ec 67 75 57 d1 8f 7f db d8 70 dc e6 e7 d8 22 f7 b1 96 63 6c a9 ec 1b 36 55 53 ad b7 f9 c6 fd a2 dc 8f 5f 7d bf a3 62 e9 f7 b4 f0 ed 7c 0e 85 4f c0 21 51 80 e1 00 00 00 e8 be ee ef 55 db 99 73 85 ce 7e 3d d9 8f aa e7 01 fa cb d8 cf 68 6d b5 e8 2c d9 46 d6 bf e9 d8 c5 93 d5 fe aa 75 9e ad 93 f6 cc 86 9c 3a 2d 68 06 8a f3 dd 60 Data Ascii: IcwaeYF$HwFt]o&:a>mPq/eS= c]D ZTOW2uV6P7{GW53&k\\|guWp"cl6US_}b\|O!QUs~=hm,Fu:-h`
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 04 03 03 04 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c2 00 11 08 02 0d 04 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 f8 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 00 07 05 06 08 09 03 04 0a 02 01 00 0b 01 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 09 0a 10 00 00 06 02 02 02 02 01 03 03 03 04 03 00 02 03 01 02 03 04 05 06 00 07 11 08 12 13 21 09 14 10 22 15 31 23 16 32 24 0a 20 41 33 17 34 25 18 42 43 35 26 19 11 00 02 01 02 05 02 04 03 06 03 06 05 03 02 00 0f 01 02 03 11 04 00 21 Data Ascii: !"1#2$ A34%BC5&!
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 97 a0 b8 f6 11 28 23 66 5b a4 5f a3 1e 97 3b 65 b7 8c 14 a9 65 3a 89 e9 df 9b 7d ee c8 2c d0 3a d7 5e 06 dc 73 60 cd af 35 63 9b a5 97 c1 58 ba be a6 db 6b 6a 75 60 19 06 3d b6 da 6b 4c 49 42 af d8 70 99 f7 4f 9d c0 51 bb 3c 1c bc 8c b9 eb 25 7e 44 50 cc de 1b 06 b8 80 b1 b5 d8 71 b3 75 b3 56 b8 71 fa 57 2e bb 4c da e7 dc d8 af 25 46 93 ad c5 ea 3a ae 24 0a d9 2b be 44 db e3 af bd d6 93 d9 d7 a4 f3 6d c4 6f bc d3 05 12 2a 3f b2 79 88 21 ac 3c 73 0f b0 10 e4 45 01 eb df 9e f7 09 58 3f 1f 2b bb c4 44 83 7e 86 3a 8f cd 85 00 17 8b 21 6f 14 c2 36 c8 09 96 6e 0f d9 1e 98 95 a9 a2 2b 6e 2a 0a e6 b4 da 23 4c b1 ea a0 38 f1 dd 05 3c 16 d9 0f 75 df 8d 05 16 5c e5 7a 09 55 c8 15 b9 93 9a 53 a6 4c 40 44 28 de 8e 88 7e 27 dd 6c 60 53 c4 dc 10 3b 33 a8 23 57 a0 bd 1b Data Ascii: (#f[_;ee:},:^s`5cXkju`=kLIBpOQ<%~DPquVqW.L%F:$+Dmo?y!<sEX?+D~:!o6n+n#L8<u\zUSL@D(~'l`S;3#W
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 2e f5 8b d7 ca 34 a8 06 7a 76 b3 27 65 45 6a d7 bd c0 8c 79 d9 1a 17 7b 1e 22 e8 c2 13 f5 56 31 91 b7 e9 f3 f7 d2 ce 75 29 0e 53 74 5f bc 7c de 33 28 1a 6e d0 b4 e8 69 75 a1 4e fa 05 f2 e0 71 9d 94 70 51 a4 97 7a 9d d4 d7 d6 93 9b 52 f6 ed f3 49 ae a5 6a ca d4 85 d8 d3 b4 1d 42 82 1f d4 5b 7f 7a 84 77 a3 e1 ef 31 ab 89 ee 32 f2 86 6e de f2 9d e2 ce b2 4b f5 bb 7c c8 9b 10 ca 29 65 aa a8 67 25 4e 0e 3a 7f 5b 59 72 99 c0 d9 6d ca 89 ca e7 ec a7 c7 6e d1 ab df 11 df c3 3b 9c 7b fa 5c 29 00 76 2d 06 90 be d4 92 3d b0 b0 a4 d3 e4 ea ed d0 0b 6c a3 24 c9 1d 65 b5 a2 96 d3 44 d4 c5 4e f1 1f 9e 70 fb df bb dd cf 2b db 2e e6 65 59 9c 63 51 5e 50 8e ff 00 be 3d af ef 62 f7 74 b8 ad 2e 73 33 29 6e 2e 25 66 68 39 a9 3a 24 e2 00 f2 84 28 64 5d d0 65 3f a1 4c 35 40 26 Data Ascii: .4zv'eEjy{"V1u)St_\|3(niuNqpQzRIjB[zw12nK\|)eg%N:[Yrmn;{\)v-=l$eDNp+.eYcQ^P=bt.s3)n.%fh9:$(d]e?L5@&
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: e6 25 7b 55 1c f3 c6 f7 7d cd 14 ab 65 b5 22 2a 42 13 f3 22 bd 98 3e 87 5b d4 e3 2d e7 19 91 74 fd 2a e2 b1 8d 9e ca 73 1b 14 c7 ce 5f 3c 06 0e 52 a7 57 9f 54 31 ae ea 60 f5 ca f4 55 48 51 f2 44 46 01 88 fe 46 1f d1 4f cc 01 cb 73 e7 5a 4d ad 79 a9 ae 48 8f 2c 45 79 f0 0e c4 ee 09 61 75 0e b2 84 ad d4 38 b3 a5 e6 8e f1 f2 76 d2 a4 22 a1 d8 a5 85 4f 21 47 7a f9 cd b4 e5 26 bc e5 e2 55 39 d5 56 1c 5c 69 2b fe 66 89 6f 95 08 04 7e 2a 48 72 d3 26 97 76 32 ad ca e5 d5 71 7b e5 a1 9b b5 8a 6d b3 d2 92 9b c5 eb 31 dd 9e 37 81 48 49 5f 7e 29 3a ed 77 0c 75 f2 e3 6b 87 07 e3 5a 42 d6 aa f0 1c e5 54 64 44 2a a3 ad 4b 08 2f cd d1 45 a5 02 5e 62 11 67 49 f6 8a e3 65 bd 60 c8 c8 da 7c a1 19 d3 df 7e ee 56 f8 99 d6 dd 1e 4d 96 0d e4 a9 94 95 4e a6 13 44 2b 0f 8c 4a 1c Data Ascii: %{U}e"B">[-ts_<RWT1`UHQDFFOsZMyH,Eyau8v"O!Gz&U9V\i+fo~Hr&v2q{m17HI_~):wukZBTdDK/E^bgIe`\|~VMND+J
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: cf 8f fe e2 49 e0 22 de ac cb c0 a6 50 44 de 41 93 ae 8c fd d3 44 01 ba 28 2a 18 63 fc cb c8 37 4d 10 6e bb 45 a2 ce 91 9b b5 58 c0 74 c3 26 52 f3 6c cd da 8e 52 70 4c 31 00 4a a8 7c 28 60 0c 29 c0 87 6a a8 a6 50 28 28 06 68 52 e4 d4 cb 66 04 8d 92 49 d2 4e 4a 5c 7a c5 31 19 f7 1e 83 45 7a 1e 9e 30 c9 b9 6f 37 38 8c 58 fb c3 13 5f e5 c9 ca 47 10 8b 8f e4 17 fa 3a 1e 32 55 33 7b 52 5b 9c 6d 00 63 8c 3c 3a 86 72 b3 62 94 ca bd 44 e5 99 a7 ca 3e 74 d2 b8 24 49 d3 a2 20 62 39 45 4c 4e 3f d8 74 10 10 24 dc 61 94 34 e4 0a e5 5e 16 ca 56 69 02 42 f1 d3 0a e9 11 08 e5 5b 1c 50 55 05 0a 82 49 24 36 bb 31 78 1e 0c 2e 22 48 e4 d1 95 82 94 20 d6 6a 04 2c 63 74 cd 27 4e 4d f3 a4 98 2a c5 68 f6 de 20 ec 86 92 77 0a c8 88 a4 b4 43 83 9b d0 b8 b9 47 62 2e d8 90 3c 19 09 Data Ascii: I"PDAD(c7MnEXt&RlRpL1J\|(`)jP((hRfINJ\z1Ez0o78X_G:2U3{R[mc<:rbD>t$I b9ELN?t$a4^ViB[PUI$61x."H j,ct'NMh wCGb.<
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 8f 06 21 0e 20 1e f3 88 cf 2a 21 8b b8 10 24 29 fc 91 b7 48 02 79 76 57 99 7d 3c 97 ff 00 4f 2a d0 78 a7 98 4a d8 5c 35 f5 de 92 04 5c ac 63 06 7e 52 9c 11 c0 98 80 3f 0d 8e 3c c5 91 ab 66 ed 15 54 e3 2a 89 93 38 06 70 22 3c f0 1e 78 3f 39 4a 22 e2 b4 7b 29 12 1b f8 d7 47 16 30 c5 4c 6c e9 09 5d 01 78 01 c1 0f 90 c0 1c 5f 9e 64 5b b9 32 91 a8 ba 13 d5 d1 14 92 4d 93 83 9c a5 27 0b ba 44 86 52 61 63 e1 ed ce 10 1f f3 93 94 8b ee 86 09 e2 bb cd b0 61 77 e3 70 c5 fb 02 dd d1 12 db 2d f1 9d e8 4e 44 8a 8b 80 4a 14 79 51 82 a9 e2 aa 8f 8b 47 2a 80 49 b7 04 49 fc fc 61 81 65 1a 2b 88 56 d5 54 62 aa c0 90 03 43 18 a2 d3 e0 59 a8 18 a4 20 18 0b 14 50 0f e3 12 01 fc 14 47 26 d9 b7 4d 95 34 79 64 5c ff 00 b0 8e 08 e0 67 38 01 fa 7f dc 0b ce 00 65 9d c8 94 5d 3b 31 Data Ascii: ! !$)HyvW}<OxJ\5\c~R?<fT8p"<x?9J"{)G0Ll]x_d[2M'DRacawp-NDJyQGIIae+VTbCY PG&M4yd\g8e];1
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 9b 85 e4 b2 68 08 12 59 21 31 2c 09 09 4c e5 51 01 74 bf ca a6 0c 14 c0 4a bb 1e 41 58 fe 05 66 1c e3 d8 be 71 dc 67 c2 bb 19 d1 f1 0d a2 bb 7c 1d 86 ec ab 0e ce 71 e1 2d b6 01 21 91 bb 7e 51 c6 78 be 26 96 11 cb dc d0 f8 7b c0 54 6c 02 6c 6a c8 47 10 8f 11 c6 31 02 26 88 82 28 63 36 1f 09 b3 c0 6e 1c 19 b0 06 0a 00 19 e4 50 c5 9e 90 81 21 3e 42 84 c5 a7 c4 55 90 3b 82 c8 35 5c 46 06 03 f2 4f a8 b5 eb 75 52 90 84 2a 10 09 c4 94 a2 91 8e 98 12 5c 07 06 31 b2 e0 ac 52 85 2f 80 94 cd ed b2 0d f1 be cb 30 63 6d 89 1c 25 69 7a 8b 31 53 b2 24 70 2c d2 86 c4 de bb 1c f6 18 44 44 b8 51 0e 01 6f 1c 72 b2 67 05 d0 20 82 0d 53 10 3c 5b 7f 25 54 15 13 3b 62 94 7d 64 e0 c2 40 c3 90 82 0b 2a a1 01 ab b4 d5 29 d8 a0 a6 3d 31 d2 58 25 8e 18 cd 50 3a 5f a0 8f 38 42 08 8a Data Ascii: hY!1,LQtJAXfqg\|q-!~Qx&{TlljG1&(c6nP!>BU;5\FOuR\1R/0cm%iz1S$p,DDQorg S<[%T;b}d@)=1X%P:_8B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	62689	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	961	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:25 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:15:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	62688	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	1071	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.campobahia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:26 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x11c62085c565f56d","source_keys":["1","2"]},{"key_piece":"0xcd7b0d1119d7ef2e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-28 05:15:26 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-28 05:15:26 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-28 05:15:26 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	62691	188.114.96.3	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	472	OUT	GET /redirect/redirect.aspx?A=V&p=19998811&m=593579 HTTP/1.1 Host: llimages.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=gvx13hez11ptcbqksawe3h1p; llbrMachine_593579=19998811=19998811
2024-05-28 05:15:26 UTC	819	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FEssMY1pmd1SDzmQN%2BkjhoI126EXPn6QzxPPgLDscC3PAoYsuEIkucPy20tes%2FdeJrw0GZBxMAeXi%2FEXvrko3hPuIQDfWjqjgNKGbj%2ByOBqm0sQF6iuSFxKHrNRE7bQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88abc44e889f4386-EWR alt-svc: h3=":443"; ma=86400
2024-05-28 05:15:26 UTC	550	IN	Data Raw: 32 37 39 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 2e 2f 72 65 64 69 72 65 63 74 2e 61 73 70 78 3f 41 3d 56 26 61 6d 70 3b 70 3d 31 39 39 39 38 38 31 31 26 61 6d 70 3b 6d 3d 35 39 33 35 37 39 22 20 69 64 3d 22 66 6f 72 6d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: 279<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title></head><body> <form method="post" action="./redirect.aspx?A=V&p=19998811&m=593579" id="form1"><div class="aspNetHidden"><input type="hidde
2024-05-28 05:15:26 UTC	90	IN	Data Raw: 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 6c 62 6c 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: iv> <span id="lbl"></span> </div> </form></body></html>
2024-05-28 05:15:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	62690	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	737	OUT	GET /wp-content/uploads/2022/02/Capa-Hotel-1024x438.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 10 Feb 2022 00:01:54 GMT Accept-Ranges: bytes Content-Length: 228733 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1d 3c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 ab 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 Data Ascii: JFIF``<ExifMM*(1!2i$``Adobe Photoshop 23.1 (Macintosh)2022:02:09 2
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 58 59 5a 20 00 00 00 00 00 00 9c 18 00 00 4f a5 00 00 04 fc 58 59 5a 20 00 00 00 00 00 00 34 8d 00 00 a0 2c 00 00 0f 95 58 59 5a 20 00 00 00 00 00 00 26 31 00 00 10 2f 00 00 be 9c ff ed 00 44 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 27 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 ff e1 11 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d Data Ascii: YZ curv3curv3curv3XYZ OXYZ 4,XYZ &1/DPhotoshop 3.08BIM'Z%GZ%GZ%GZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id=
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: a4 7b 93 80 90 db 8a b9 ce 25 3e 91 46 82 c5 55 4b 4a 3b c0 93 3d e6 ce 90 4a 81 49 b9 e8 08 ba 07 90 07 13 79 14 5e fc 30 b8 f0 52 ed a7 b2 e6 3b 4b a1 53 20 52 5d 6d aa bb 0d 97 e3 38 da 80 64 36 13 b0 55 bf 09 24 04 fb 9f 5c 23 4a 5c 94 4b b1 93 f6 6b db b5 6f 29 3c e6 49 ce 68 70 f7 15 96 5a 79 c1 a9 51 56 9d 86 b1 f8 90 9e 7b 79 79 72 9b e6 98 38 5b 0c 3d ab f6 5d 3e 3d 32 27 69 79 71 e2 ba 93 5a 64 4a 43 2a b9 71 1c d2 ea 48 e6 b0 2c 55 e7 f2 c3 c9 5b b8 f2 0d 37 1d cd 6b b2 9e d4 21 e7 bc a1 1a a5 25 d6 da 94 8b 34 f8 fc 3a fc fd 2f eb 85 52 d4 e9 72 3c 5f 93 2c ed 67 28 49 ec db 3b 45 ce 54 65 25 8a 35 46 52 54 fa ac 74 d3 e5 13 b3 db 7e 15 72 3e 85 43 ae 3b 2c 5b fe a2 e5 7e 60 92 a6 0d ce 48 8f 97 64 cb a8 c3 a6 b0 29 b3 1d 4b 8f b0 a5 78 23 54 Data Ascii: {%>FUKJ;=JIy^0R;KS R]m8d6U$\#J\Kko)<IhpZyQV{yyr8[=]>=2'iyqZdJC*qH,U[7k!%4:/Rr<_,g(I;ETe%5FRTt~r>C;,[~`Hd)Kx#T
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: dc 5c ec 70 f1 9c 61 17 a1 6d f9 0a f5 77 05 54 fb 40 cc 92 a1 a2 1c 8a a3 0e a5 b4 e9 4a 97 0d 1a d2 3c b5 14 df f3 c2 b9 29 2d 2e 36 75 b1 7a 4d 7a a1 21 3a 5f 30 df f5 53 09 07 ea 2d 8e 8e 28 76 47 59 5d 89 8e b1 1d 6e 48 a6 25 f8 c7 55 94 35 a5 29 26 c2 e0 8d af ef 8d 11 82 a3 ac e6 13 b0 e4 54 99 75 84 96 d2 da 82 90 97 08 59 16 df 98 1b 7d 31 ce 2e 8e 4f 70 ed 05 98 b5 ba a7 16 6c 49 81 89 52 4a 50 f2 12 92 52 6e 76 4a 8d 80 e6 36 56 06 99 ed 16 ad 1c f9 09 65 e4 4a 67 33 e6 aa 8d 3a 9c ec b6 a1 36 62 2a 2f 76 0e 05 26 fb 87 1b 2a 24 0f 07 34 9d 8f a6 2f 28 b4 aa 23 37 b0 a9 3a ab 4b 9f 01 e8 f1 d9 54 04 aa 58 93 a1 b5 92 80 02 6c 53 e2 f1 24 8e 63 9f 33 85 57 dd 6e 2a 77 b1 35 59 e7 12 d3 65 ab 00 a1 e3 52 94 09 03 df 96 31 63 c7 53 6a 43 b0 d7 67 Data Ascii: \pamwT@J<)-.6uzMz!:_0S-(vGY]nH%U5)&TuY}1.OplIRJPRnvJ6VeJg3:6b/v&$4/(#7:KTXlS$c3Wn*w5YeR1cSjCg
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 3a b4 ad bd 42 ca bb 9b 00 93 72 2d ea 06 35 47 a7 c5 d3 43 fa 8c 65 6d da 08 e4 1e cb 29 55 a8 eb 9f 54 9b 25 f9 b1 e4 70 e5 d3 ca 4a 16 2c 4e a1 ab 99 3e 98 1d 47 51 25 1f 63 a4 14 93 e4 f6 5e 5e a6 41 ac 48 80 a6 50 db 51 d4 4b 4a 0a 20 a7 7b a1 5a b6 24 7e 1d 5c af 71 83 82 56 ab 27 74 2c db 5c 16 73 15 16 5d 5f 2d cb 8e f5 41 53 04 08 ea 73 ba 3c 7e f1 84 f9 a3 f6 93 ca f6 e5 8d 10 e9 e7 8e 49 c6 40 53 4c c5 e0 ce e1 53 de 60 df 67 01 4d bc cf 9d fa 6d 8d 79 21 a9 a6 3b 3f 70 a4 ad 21 e5 b3 c3 6c ed 7e 8a c2 dc 53 d3 7b 8a 1c 2b 75 aa 73 72 21 cf ef 6d 20 82 b6 8e a4 ae 32 bc ed ca c7 cc 75 c4 34 ad 5e e5 41 68 35 53 a8 57 20 86 15 57 a0 ad 6d b8 94 ba 89 0d b5 a1 6a 4f 9d c7 85 5f 4c 49 61 84 97 b5 d0 2b 71 db 23 55 32 b4 f9 25 99 af 4c a6 3f 25 49 Data Ascii: :Br-5GCem)UT%pJ,N>GQ%c^^AHPQKJ {Z$~\qV't,\s]_-ASs<~I@SLS`gMmy!;?p!l~S{+usr!m 2u4^Ah5SW WmjO_LIa+q#U2%L?%I
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 57 88 a1 40 7e 5e 63 16 5e b4 65 ab 1b bf 80 87 e0 2b 26 66 09 2b 8f 58 a7 bd 96 ea 89 5e a4 3a d8 28 08 57 32 9b 8d c1 07 cc 1d 88 c6 87 97 13 ff 00 96 34 c0 91 9f f6 86 dd 6b 35 e7 b8 99 61 8a 83 d9 81 98 a0 b7 15 e4 a4 12 b1 60 55 cb e2 22 c0 5f d3 15 a9 49 52 76 84 ef b0 e1 23 b3 e8 94 38 8c cd c8 55 37 11 50 88 80 66 d2 25 02 d3 ee ab 6b 94 a4 d8 de e3 90 f9 1c 51 e3 8c 9d 45 53 0b f8 1e 1a a4 2b b4 6c a0 d5 46 3a fb d3 ac f3 66 50 1c 78 8f 20 dc a0 a8 fc 49 b8 f8 55 d3 ae 0b 83 af 90 f2 8c 4e 15 35 ec c9 da d2 58 7d 93 0e 35 29 7c 42 c3 87 5b 4d be 6c 7e 49 52 ec 3e 78 45 25 8d 2d 4a 85 6a f8 0a f6 99 9b 87 69 39 b1 11 e1 b4 5b a7 53 d3 a3 45 ac 38 87 e3 27 e6 2d ec 30 9d 4e 7d a8 47 bb 23 ec e7 24 af 3f e6 d4 47 b2 bb 84 65 05 bc e0 e4 10 3a 0f 7e Data Ascii: W@~^c^e+&f+X^:(W24k5a`U"_IRv#8U7Pf%kQES+lF:fPx IUN5X}5)\|B[Ml~IR>xE%-Jji9[SE8'-0N}G#$?Ge:~
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 56 32 ec c8 b0 e4 c0 92 f6 5e a8 16 c3 4f 04 b7 a1 b5 3a 9d 8d d3 f0 a8 12 37 e4 71 e9 2e a3 14 9d 5d 30 50 e9 2e b6 96 63 26 36 66 80 c3 ac b9 6d 32 5b 1a d9 50 f3 50 e6 8f d3 d7 0b 97 3e 3c 6a b2 77 1e 29 be 04 4e d4 e3 33 0b 22 cc 89 40 96 b3 0e ab 2d 88 0b 64 5d 49 4e b5 0b 94 1f 6d b1 3e 9a 2a 32 f5 31 ed 0e e8 ec 8e e3 a5 f2 06 99 4e 87 98 73 7a 68 50 d2 a9 14 0a 13 69 79 e8 ed 38 40 75 d3 64 10 81 e7 e8 3d 79 5f 16 9e 48 ad fb 78 f2 4a 9b 74 10 a6 c3 7a b9 99 23 d7 1d 8a 87 e0 e5 84 88 ec b6 45 97 2d 57 bd c0 fd a4 a3 4e de 62 d8 d1 0e 14 93 dd 82 b7 df 82 af 6f 9d a0 33 24 b3 40 84 e9 5b 2d e9 76 42 53 cd c7 08 ba 1b f9 0d ce 23 9e 74 b4 a0 4d de c2 cf 63 fd 9e b7 5e ab 7d a7 57 20 c2 65 7a dc 04 7f 7c b3 c9 00 79 79 fa 5b 0b d2 c6 fd ff 00 80 b1 Data Ascii: V2^O:7q.]0P.c&6fm2[PP><jw)N3"@-d]INm>*21NszhPiy8@ud=y_HxJtz#E-WNbo3$@[-vBS#tMc^}W ez\|yy[
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: b1 f2 b8 f4 f2 c4 74 b8 ef f8 8d 7d 98 c5 4c cc 8f b7 19 a7 b4 21 52 98 2a 2c ad e1 a9 4d 6a d9 68 3e 69 3b dc 1f 7c 75 ef 40 4c b3 05 f9 93 9d 6e 0b 00 48 09 49 29 44 87 02 12 a0 0f c2 ab f2 d3 b9 b0 e7 70 77 b6 29 09 d6 fd c7 4e dd 1e 43 ca 72 4a 93 57 a2 56 20 50 a6 13 f7 dc 15 15 87 9c 0a 21 45 68 1b 69 37 e5 e5 ed 8b 4d ac 8e b2 2d 86 e3 b8 4d 75 65 66 36 69 f4 7a c4 65 43 9c dc 90 b5 25 84 ff 00 65 98 8d 57 53 cd ab 91 3b 72 56 e3 7c 49 c6 78 56 a8 cb 54 7f 30 d4 65 b7 73 41 9e b8 d0 e4 b4 ba 32 56 f4 b9 0e 36 9e 14 84 fd da d2 2e 55 aa dc 80 d3 7b 8f 3e 58 6e 93 34 66 b5 41 d7 c0 66 bf b5 95 f3 e3 b0 aa 14 3e 04 76 fb 9c 98 bf 7a b8 ba 06 ae 2e c9 6c 02 36 52 49 59 20 8d b6 e9 be 3d 27 92 52 44 25 14 30 65 7c 9f 3b 2a e5 c6 20 c0 75 3c 67 0e b9 2a Data Ascii: t}L!R,Mjh>i;\|u@LnHI)Dpw)NCrJWV P!Ehi7M-Muef6izeC%eWS;rV\|IxVT0esA2V6.U{>Xn4fAf>vz.l6RIY ='RD%0e\|; u<g*
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: c3 8f d5 eb cd f1 bb d2 e4 53 10 b4 f0 1b 42 14 e8 1b 1f 0d c2 b5 5b 72 13 7b f5 04 6f 84 94 bf a5 b7 66 52 3f 22 5a d0 29 ce aa 44 32 eb 32 1b 57 8d ae 69 58 bf 31 d4 1f 43 8a 27 ad 69 9f 0c 9b 09 44 75 ba a2 f8 a8 d2 dc 93 cd 2a e4 bf 43 eb 8c f3 8b c7 b7 61 47 5a 04 96 e1 96 1b 9c d7 16 03 e3 46 b0 37 41 ea 0f a8 ff 00 2c 43 24 14 b8 7b 8c b6 e4 78 8d 41 7a 8e c3 b5 4a 60 6a 54 45 24 25 e6 93 b9 d0 ad 81 03 a8 23 63 ea 3d f0 3a 6c da 9f a5 90 69 46 96 a8 96 e8 f4 ca 75 66 3c 98 29 56 a7 22 f8 9a 48 24 29 6c 2b 71 b7 3b 8d c7 ba 7f 7b 1b 73 61 75 aa 3f 7f f8 62 c5 a0 55 0d 6f c6 a7 f7 72 da 26 47 79 6e 3a a6 5c f8 94 d9 55 b5 27 7d 95 a7 49 bf b5 c1 c6 6c ce 2a 2d cb b5 16 5c d0 db 42 ab 4a a5 30 64 53 de 35 3a 7a 53 69 10 5c 1f 7c c2 7a f8 7f 12 7d 47 Data Ascii: SB[r{ofR?"Z)D22WiX1C'iDuCaGZF7A,C${xAzJ`jTE$%#c=:liFuf<)V"H$)l+q;{sau?bUor&Gyn:\U'}Il-\BJ0dS5:zSi\\|z}G
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 02 82 74 2d 3d 6e 92 3d 31 d1 9e af 6a 2a d6 c2 84 b6 88 94 cc bb ea 6d d1 c4 4a b9 ef f8 87 cf 9f d3 15 49 c7 7e c4 50 4e 5b 1c 6e 14 88 88 47 79 69 a2 54 ad 56 ef 4d 0b 10 12 2d ba d2 2f ee 05 b9 8c 51 da fa 0d c9 4e 97 41 6e b0 b9 3d c1 c0 d4 c0 83 21 84 2d 60 25 d0 91 75 24 1e 86 d7 23 ce c4 79 60 4d ed 61 8a bf a9 a8 08 51 fb 6c c8 6c 49 69 d6 9a cd 94 64 16 c9 be 87 5e 09 e4 0e fd 40 d8 f4 50 c4 7d 4f 4e 69 49 aa 2a a3 a9 7c 80 5c cd 93 6b 79 75 95 54 63 86 ea 0c bb dd e4 bf c9 52 0a 12 00 5a c7 45 5a c0 fa 8c 7a 38 12 8e 36 a2 66 93 6d ee 0f 44 c2 8f c4 3e 2b 1c 4b 20 51 76 2c 90 5c 46 f7 b1 e9 8c 8d 0c 1f a6 48 50 4e 8b 91 65 1e 7d 46 05 1c 5c 91 25 65 49 b0 da f6 36 c4 27 13 81 0f 4b bb cb 0a c7 44 56 7b 3b 37 d5 32 ad 0d c7 e8 ac b0 a9 d2 54 58 Data Ascii: t-=n=1jmJI~PN[nGyiTVM-/QNAn=!-`%u$#y`MaQllIid^@P}ONiI\|\kyuTcRZEZz86fmD>+K Qv,\FHPNe}F\%eI6'KDV{;72TX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	62692	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	734	OUT	GET /wp-content/uploads/2022/07/00-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:31 GMT Accept-Ranges: bytes Content-Length: 470830 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 14 9e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 36 3a 34 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:16:48
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 8e 6d 30 e1 60 1a 3b 43 f1 0a 9f 0b 72 ea 05 95 96 78 f0 7c fb 2c 87 b2 1c 41 10 47 65 5e 99 04 90 ea 9c 05 2d 8a 4d ad 26 50 58 86 Data Ascii: 5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?m0`;Crx\|,AGe^-M&PX
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 62 36 30 66 61 31 2d 66 63 33 39 2d 61 36 34 61 2d 38 30 66 31 2d 64 66 34 62 33 61 63 32 65 65 34 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 32 37 33 65 66 31 2d 65 62 38 66 2d 66 66 34 66 2d 61 66 38 34 2d 30 35 32 66 62 61 34 63 65 62 64 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 38 36 30 62 64 37 2d 33 38 35 64 2d 35 33 34 39 2d 38 61 33 61 2d 34 62 30 36 39 31 31 38 31 63 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 46 30 35 30 43 38 43 30 46 33 31 31 45 39 42 36 30 42 45 41 33 44 37 44 39 45 41 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: i> <rdf:li>xmp.did:76b60fa1-fc39-a64a-80f1-df4b3ac2ee4a</rdf:li> <rdf:li>xmp.did:96273ef1-eb8f-ff4f-af84-052fba4cebd8</rdf:li> <rdf:li>xmp.did:99860bd7-385d-5349-8a3a-4b0691181c81</rdf:li> <rdf:li>xmp.did:9AF050C8C0F311E9B60BEA3D7D9EA07B</rdf:li> <rdf:li>
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 3c b0 cd 84 63 f9 18 84 e1 48 48 ab 9c 46 be 51 18 92 51 e0 4c 43 ae 98 93 0a 52 4c 79 09 0c 90 94 c9 05 00 f2 0c 21 41 bc 90 4a 9c c3 25 b4 e9 4a 64 62 19 3c 45 2c 02 93 69 0a 34 a1 0c a5 07 25 b1 30 0d 83 cb 85 75 f9 08 2b 5d 8e 61 dc d3 a2 fa 6f 87 ce ee 07 40 b6 98 e7 7c d8 86 25 b4 b9 42 88 8c 67 2a 32 ce 2a ce 32 46 91 e4 23 f3 93 0e 98 74 85 01 49 f5 86 f1 c5 c1 54 c3 1c 7d 1d e7 3c c3 cd f2 15 4a 3b 8c 35 05 3b 85 6c 85 88 84 30 06 7d c8 61 e4 cb 9d 93 38 f8 f8 f4 44 18 04 05 ca 75 51 4e 3b 14 02 2f 90 c4 5b 28 c3 0a 65 aa 75 13 e7 b8 47 f7 ce 69 e2 34 da 31 65 1a 6d ea b6 e1 a8 a3 0e 72 98 72 2a 2a 2a a3 04 22 08 a8 a8 d1 a8 3d 14 1e d1 11 a6 79 0e 4d 6f c7 4c b9 31 ee 11 ed cd e3 32 e6 1e 56 19 56 fc 47 9a 72 1a 73 7c e5 0f 9c 6d cd 15 c8 2a 38 Data Ascii: <cHHFQQLCRLy!AJ%Jdb<E,i4%0u+]ao@\|%Bg22F#tIT}<J;5;l0}a8DuQN;/[(euGi41emrr**"=yMoL12VVGrs\|m8
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 28 6a 80 a2 62 cc 8d cd 49 83 54 a4 30 bf 77 dc b9 35 5c 21 64 d1 12 43 8a 4a 2d 18 0e 56 ab a1 b2 36 83 9e bb de 76 56 d9 32 1b dc 0e 8b ef 71 36 15 29 1d 1d 96 62 57 0f 5d 1a 1a 67 1d db 6f 39 8f 5b 4b 1f 52 75 67 db 65 2c b7 d6 36 6d f1 8c 6d 1e dc e9 23 57 9e ba bc 36 1e b6 de e4 0e 35 23 d1 42 e9 53 45 e5 0a 57 22 80 f9 fc e4 66 34 36 be 1d bf 5e da 6f 2d 62 52 5a bc 2d 6b 48 cd 6e ae 3c b3 d2 64 7f 22 b8 a8 d7 92 35 49 bc d2 aa 18 11 56 ef cd b6 4c dc df 40 7e 70 56 ee 3b 5a 4a 19 a2 2f 30 a8 53 b1 e9 b6 c6 82 be f7 9c 3d 2d 34 51 3e 4a 55 92 b8 d0 f2 01 eb de 97 b8 4d 07 9c 28 79 af d2 f5 17 ce 7d 4b a4 3a 7f cc eb 09 9f b4 93 3e 9a d5 47 fe 5d 12 7e d0 5b 4c 3a ee af b6 f4 f4 54 b7 1a c5 9d ea ca f2 fc a2 e8 e4 3c 99 e7 20 16 63 5b 07 5d 60 b9 e3 Data Ascii: (jbIT0w5\!dCJ-V6vV2q6)bW]go9[KRuge,6mm#W65#BSEW"f46^o-bRZ-kHn<d"5IVL@~pV;ZJ/0S=-4Q>JUM(y}K:>G]~[L:T< c[]`
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: ba 57 d0 e4 18 88 55 86 b1 dd 26 13 ba ee af 5d b6 f7 90 76 7a d1 06 24 96 3c 49 62 04 b9 0d c2 b1 5b ee 21 d7 29 11 bc cc 6e 73 4a 8b 35 cc 83 67 ec ea 67 09 35 70 3b a7 d5 cd 8c 0d 76 5e 0a ab 91 f7 48 cc 70 c8 8f 49 ef a8 76 49 80 d0 ed 77 0b 60 59 c8 8c 9d 59 ef 3b 4e be 9d 9a 8b d8 c6 a8 a4 23 b6 65 31 b7 cb 54 1b 3c 85 85 94 2e 82 ad 7a 92 44 94 e1 ae 26 94 b3 1b d5 98 77 6d bb 08 d2 c6 4f d4 6f 9d ab 1b 3e 77 e9 1b 10 d5 79 f6 ca 7d 43 c2 1d 1a 6c 73 cf 77 91 4d b9 0d 52 cd 5f 45 94 85 b7 76 d4 5c 58 f8 77 d4 4d 89 d4 25 cd 11 b7 3b 38 cb 9b 99 97 69 76 96 8e 2c 1d ac e3 f7 76 7f 45 47 65 6d 60 49 d6 11 31 54 16 4c 7d 63 55 9b c9 0c b6 17 0d 23 29 b3 cc a8 6b 11 98 62 3a ab a3 55 1c 35 16 b5 7c 43 1b b8 d9 07 aa 9a ab 29 d8 c9 62 0c 93 d1 e9 d6 d1 Data Ascii: WU&]vz$<Ib[!)nsJ5gg5p;v^HpIvIw`YY;N#e1T<.zD&wmOo>wy}ClswMR_Ev\XwM%;8iv,vEGem`I1TL}cU#)kb:U5\|C)b
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 63 84 43 69 51 be 33 c7 84 35 5c 22 5c 43 c4 5c 4e 55 45 30 57 3c f3 95 c4 c1 4c 41 4c e1 31 3e 31 17 8c 52 c4 f9 c0 c4 54 c5 34 cf b8 07 3f 24 13 3f 28 71 65 22 a1 cd 44 c5 9c b8 b3 f8 43 9c 9c ac c1 5c 59 29 87 23 0d ee 71 c1 78 b0 e2 4b 3c 5a c7 4b 16 90 57 0e 9e 13 68 15 4d 38 a1 a8 6c 12 55 be b4 bb 2c 5d 37 5f 83 8b 1f ad 62 60 ec da a4 14 73 b1 ad 80 24 6f 1b 3b e9 22 d6 4c a5 17 d9 1c 85 2f c5 06 61 2e 0c a2 5c 69 d2 2c b5 45 6f 56 81 c3 4e ed 41 ff 00 c9 aa f8 31 11 f2 0c 9d cb 9a fe f9 31 0b 6f eb b2 43 a8 bc 77 ef da b6 b7 cd da ca 75 43 7e 73 be 10 67 8a 31 4c c2 a0 c5 a9 74 52 c5 a7 90 9b b6 75 4a f2 29 20 d3 b8 6a 44 4f 2a ab e4 28 56 ce 29 b9 14 bc 64 0c f6 8b 18 b1 f9 07 40 b0 5c 45 c4 21 e1 55 15 53 1a 7c 99 c6 1c 07 43 9c e7 17 e7 0d 7c Data Ascii: cCiQ35\"\C\NUE0W<LAL1>1RT4?$?(qe"DC\Y)#qxK<ZKWhM8lU,]7_b`s$o;"L/a.\i,EoVNA11oCwuC~sg1LtRuJ) jDO*(V)d@\E!US\|C\|
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 58 90 66 0e 39 06 4b a2 70 1c 41 e2 5c 22 af bc 9d 19 d9 7b 8c b9 30 f4 39 04 fc cd 8c 96 46 c1 3f e5 8b 01 55 57 d3 e2 89 39 9c d7 c1 3c aa 92 9a 74 c9 23 9a fd 07 20 db 65 89 6e 2d 74 1e 14 1c 98 ec 67 5f b2 98 ed ec 87 96 74 b8 ad 88 d4 e9 ed c5 87 7f be dd b7 36 b7 ae a1 b7 03 65 db 49 85 aa d6 ad 2a a2 50 55 4c 85 2e 1b ee c3 18 d6 c4 9f 5b 26 4d b4 0d a2 60 f1 84 82 a3 2b e1 d0 35 47 60 bc b1 0b 47 90 45 26 72 7f de 6a df fa be 62 19 3a e1 22 9b 56 27 2a 49 fc 37 f7 92 a2 bc 58 72 9a e5 89 c2 4a 4f a3 4a 33 85 73 f2 0c b1 e7 50 1b 4f 13 49 e0 db 72 bc 55 70 e3 b9 f7 04 29 0f a3 94 c6 d0 95 6a 22 fe 27 8e 2c 6e 31 63 92 21 47 55 c4 8a 28 42 da 26 20 22 67 f4 5e 71 71 a2 f1 3b 24 f2 93 7e a2 3a 9c 72 25 8f f3 c8 ff 00 56 3f ab 7f f4 a9 70 b8 48 9c 22 Data Ascii: Xf9KpA\"{09F?UW9<t# en-tg_t6eIPUL.[&M`+5G`GE&rjb:"V'I7XrJOJ3sPOIrUp)j"',n1c!GU(B& "g^qq;$~:r%V?pH"
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 4a 61 02 42 49 84 6d 61 8f 0a 89 c6 34 1f 6b d3 99 46 da 3c 3c 01 4f 28 cc 06 04 70 54 18 c1 c2 46 05 c7 60 b6 58 cc 51 6d 5a 69 3c 5b 01 5c 16 5b 21 fc 36 57 1f a7 8c 64 fc 32 60 65 c1 b1 7d 2a e8 5c 93 67 4d 56 cd 7b 13 69 60 4c 5b 3a 89 15 c4 00 8b 90 ec 66 c2 c6 76 42 4c 87 2a 2c f6 e3 d5 37 16 4b 89 f0 49 86 9f 25 82 89 c6 94 88 0d c8 87 0e 60 6d 5a 99 c4 9a 0c a0 12 82 78 3c 72 1f c4 15 e2 aa c9 5a 07 e2 bc 35 e2 fb fe 0d 13 b3 4e 60 ab d1 2d 2c 1b 65 d6 2e 5f 13 b5 d5 6b 77 c5 da aa 62 c1 6d 5b fa ca 34 a6 c0 27 58 eb 31 a3 c0 b2 92 cc 86 fc 7c 91 78 10 52 c6 17 84 f9 53 92 d0 fe 4d 13 2d 3b 7b 21 39 c7 70 b3 8e 7f 84 5c 96 49 f8 f4 4a bc 4a ff 00 d3 64 b8 55 35 5c 5e 71 57 8c 52 c2 2c f2 c5 2c 45 e7 13 2d fe 23 d7 af 30 5b f8 5f f8 17 25 a2 a8 48 Data Ascii: JaBIma4kF<<O(pTF`XQmZi<[\[!6Wd2`e}\gMV{i`L[:fvBL,7KI%`mZx<rZ5N`-,e._kwbm[4'X1\|xRSM-;{!9p\IJJdU5\^qWR,,E-#0[_%H
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 2a b9 f8 4e 26 7e 2b 98 51 9d 44 fc 73 c5 60 d3 09 b2 1c 51 5c 5c 54 5c 5e 53 39 5c fe f5 c4 13 5c 06 5c 5c 18 e7 8d 32 49 8d 23 89 8d 91 60 3a 82 9f 98 21 85 60 a9 8b 3d d2 c4 91 28 f3 cd e5 c7 26 40 69 3f ca d7 2e 25 bb 84 ad 4c b9 94 da 05 8b c9 0a 84 64 48 6e 9e b5 9c 69 96 5a 44 21 c4 31 cf 31 cf b3 15 dc 53 e7 14 97 8f 25 54 f2 c4 71 79 42 f8 52 5c f2 ce 71 15 71 b5 e7 03 15 47 04 87 90 12 44 fb db 6c 56 e6 a1 92 7b 72 d6 23 ab bd 89 ab 35 8f 76 9d 40 23 bd aa f2 e3 fd 87 b1 3c af ed fb 0b e4 ed bd ac 85 ea 74 27 ab 35 b5 f2 bb 65 92 28 00 aa 90 dc 4e 0a f9 55 aa be ba 8e 8e c2 39 3f df b3 34 6e cb 47 3c 46 22 10 4f 7d 84 70 ee da 44 87 06 29 ac 7d 85 9f f5 a7 b2 45 48 80 4f cd 8e 40 cc 69 4e 47 8e fa d9 c5 71 4e 7b 0f 61 cf 07 40 b6 07 b2 3d d3 cf Data Ascii: *N&~+QDs`Q\\T\^S9\\\\2I#`:!`=(&@i?.%LdHniZD!11S%TqyBR\qqGDlV{r#5v@#<t'5e(NU9?4nG<F"O}pD)}EHO@iNGqN{a@=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	62693	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	734	OUT	GET /wp-content/uploads/2022/07/04-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:42 GMT Accept-Ranges: bytes Content-Length: 440175 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 20 3a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 39 3a 31 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: :ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:59:18
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: fa 1f ce 0f f5 6a f2 d4 93 f1 fc f1 f3 0b 0b ed 7d 33 fa 51 fe 6f ff 00 47 7f af ee 2d d6 7d 01 cf 6f a7 ca f9 dd 25 7b 07 f3 61 71 e8 fb 9f 5b fe 8e ef a1 f4 4f f3 9c ff 00 ea b5 c8 67 7f 3a 3f 9a f9 7f 39 ff 00 a0 eb ce d2 50 f3 3f 3c 7c 8b 5f 99 f9 63 fd e7 d4 fa 97 fc 81 7f f5 0f f3 9f 4f 87 ff 00 3f fc 8f dc ff 00 85 d8 b8 47 fd 0a b8 fc cf a3 fc e7 cf fe 0f ff 00 46 ac 74 93 fe 1b f2 4f fb df f7 2b 32 ee 3f ba f4 95 ff 00 c9 37 7d 2f e7 59 fc ff 00 f3 7f 4b 0f f9 cf f8 1f f4 9f f0 5f 67 5d 1e 5f f4 b7 ff 00 37 f9 df 43 9f e8 ff 00 f7 9f ff 00 9a af f4 4b ce 12 47 3f ce 3f ea 9f fa 8d 70 f9 43 d3 f5 ee 6b fa 3f 45 9f f1 9f 41 ff 00 cf 7f c3 7f a6 ff 00 ad ad 6e 8d f4 30 f8 fa 15 7f 43 fe 7b 83 ff 00 82 ff 00 e8 c5 c1 24 ad ff 00 93 8f 90 fc 99 a3 f2 Data Ascii: j}3QoG-}o%{aq[Og:?9P?<\|_cO?GFtO+2?7}/YK_g]_7CKG??pCk?EAn0C{$
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 3a b6 35 e2 c6 30 09 dd 58 3b 23 59 ff 00 08 f6 7a df f6 df e8 d1 9e 79 cc 6a 48 bd 38 58 46 01 0d a2 07 8f 57 a2 e9 dd 7e ea 2c 7f d8 ec 73 af bf 6b 5a e2 03 dc 0f bb db 5b 7f c1 ff 00 2f 6f bf 67 f9 ea e6 77 5a ea 58 1d 29 d8 78 01 f4 e4 bd f7 64 13 55 6c f4 c0 7b fd 27 7a d7 3d d4 fd 97 d3 c8 6f f8 2f fc 11 8b 96 c4 68 75 ac b6 8a 08 ad a4 c3 dc 0f b1 c0 b9 c5 db 37 7d 1f fa f2 d7 7f 51 63 58 ec 6c aa 5f 91 5d c1 be ab a9 79 6d 8e 73 6c 63 ac 03 7d 8d af df 55 9b bf ed af eb a1 8b 24 41 e1 94 88 34 6a d7 98 c8 80 47 70 0d 6f 4f 3b 93 5e 6e 4d 8d 6b f2 c3 7d 16 b1 ad 66 f7 93 5e d6 7b 19 0c 68 fa 2c 7b fd 2f e4 26 ce c0 36 e0 e1 5b 65 fb 9e 0e 43 6e b9 f2 7f c2 35 fd f7 bd ef dd 7f fd 35 d1 61 d1 d1 aa e9 16 66 e4 b9 bf 68 a6 bc 82 7d 47 34 bd 87 1d d5 Data Ascii: :50X;#YzyjH8XFW~,skZ[/ogwZX)xdUl{'z=o/hu7}QcXl_]ymslc}U$A4jGpoO;^nMk}f^{h,{/&6[eCn55afh}G4
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 08 00 00 00 14 62 58 59 5a 00 00 02 1c 00 00 00 14 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 31 39 39 39 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 Data Ascii: acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZbXYZtextCopyright 1999 Adobe Systems
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 0b 5b 18 bd 1d 62 e5 37 6c b6 ba 2c 3d 00 ca 00 d2 0b 9f 9d 1c 1e bb ab 71 75 6e aa 14 03 8b 6f 4f 14 8a cd 60 1f 67 b0 7c d9 8b 44 d2 f7 3f 4f 10 7d 17 a8 f6 e9 74 2b b6 a6 35 c2 5c 6b 7c 13 36 69 9a c2 c3 d7 6e a0 4a d1 d9 f3 83 4d 2c f0 64 d6 d3 a0 1d a8 e8 b3 25 2b 7d 43 51 2d bd ce 88 bd 9e 36 d2 df bd 56 b6 3e bb 4b 1b 7c cb 1f 60 b5 73 48 fb c2 b1 1c ed ca 0d 15 c2 5f ba dd 83 3c fb 26 27 3c 70 73 40 29 66 41 db 77 39 6b 45 d3 ae b3 f9 cf 76 ca e5 36 53 89 d6 1b 58 d5 9d fc 6a cd a9 82 ec cf e8 6d 78 37 1d 8a d2 4e 2b ee 27 63 de f7 e8 d5 89 f5 3e d5 8b 72 ff 00 a8 e7 19 19 6e df 9c 7d 88 eb 59 19 a0 3a ab b0 bd 72 d4 c0 5f b9 9b d0 ae 3b a8 9b ec 39 26 bd 66 b6 e2 ed 32 f1 73 87 fa 71 40 de b2 d8 fa 6e c8 b9 77 8c df e8 f1 61 ce 9a 4f 1c f0 39 0f Data Ascii: [b7l,=qunoO`g\|D?O}t+5\k\|6inJM,d%+}CQ-6V>K\|`sH_<&'<ps@)fAw9kEv6SXjmx7N+'c>rn}Y:r_;9&f2sq@nwaO9
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 4c 28 94 09 bc b4 09 92 ac a1 13 44 1e 58 34 1d 28 83 33 1e 54 f2 aa ca bc 6b a3 4f e9 d2 0d 9b ed 07 69 38 ca fb 80 ac c2 b3 9f c1 9a 58 a3 af 0e 5a 51 72 e9 b3 69 fa 0e 59 9d f7 0f 84 2f b7 f8 41 d6 b3 a3 6e 7a 23 f1 3f d8 f5 93 90 eb 6c cf 32 84 8e be 3d a4 db c8 a9 b8 3a 2a a2 4c 35 ac 28 cd af 3f 2c ef 8a ca a7 48 5e a2 f6 3f 2f 5a ae 74 29 e6 55 79 cf 1c dc 65 79 af e3 ce 81 37 4e ee 78 89 45 5f b2 fa 2d 8d ce 69 a7 7a 4b 38 89 6e ef 3b b8 33 4d 2e e4 f5 84 1f 42 f3 67 8c ec 99 58 dd 05 89 2f 32 4b a3 4a 9f 92 d6 9e 74 df ce bf 2d 99 b7 93 0e a9 62 f3 de af 98 7d 82 eb 57 3f a8 3d 97 ce 21 b3 de ab 7c c7 46 b0 cb 35 4b e7 58 b4 8e 0e cd 74 09 ac af 35 43 0d a0 4c b2 4d 2b 52 61 48 d9 c6 b9 d0 86 78 2e af 35 42 5d 96 0e 35 9b 18 7e 1c d5 8c c6 b6 8f Data Ascii: L(DX4(3TkOi8XZQriY/Anz#?l2=:*L5(?,H^?/Zt)Uyey7NxE_-izK8n;3M.BgX/2KJt-b}W?=!\|F5KXt5CLM+RaHx.5B]5~
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: b1 e2 96 11 c7 c9 5b 5f 54 ba 44 7b 0e b1 a5 36 63 36 a9 19 e2 31 90 c3 4e 0c 8a b6 5f 58 fa c2 1b 13 b5 f5 13 6e ea 6d 72 42 da 22 c9 45 5e 71 53 15 31 7f e6 0b 81 28 c5 1c 98 2e 36 f1 a9 2f fc 53 05 30 0b 1b 2c 02 cf 2c 53 c9 0f 28 05 bc e0 76 10 2a 14 5b d5 17 12 ba ca 33 2b 2e e9 c7 d6 8e 9f f2 13 62 75 1f b0 b1 9a 06 dd 57 8d 7d 7c 38 c1 14 1d 98 4d 1b 50 9e 92 b1 53 c5 18 24 e0 78 c6 7e 48 71 3f 64 fd 15 39 c7 1a 5c 97 14 dc 1b ca 86 da 42 8c d9 2b 4e 3c 09 43 30 3c 15 11 72 71 a3 8e 47 8c 8d 05 e5 df a3 00 09 f5 a6 a5 16 00 91 38 7d 71 13 85 72 0a 3d 87 3c d9 c9 13 15 f1 8f 01 38 fc 64 44 5e 30 11 3c 2c 85 1d 3d 86 3b 43 16 3b c0 db 8e cd 75 f4 8b 3d 05 e1 f2 17 16 40 8e 10 21 23 2c 20 11 7c aa 82 70 02 bf f0 91 34 18 c5 14 2c 40 44 ce 33 8c 54 ce Data Ascii: [_TD{6c61N_XnmrB"E^qS1(.6/S0,,S(v*[3+.buW}\|8MPS$x~Hq?d9\B+N<C0<rqG8}qr=<8dD^0<,=;C;u=@!#, \|p4,@D3T
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 5d 84 d4 5c fc 17 04 23 b6 a0 dc 0f 19 68 6f 90 01 3e 8d e0 3a d9 04 a2 7b da e6 42 a8 74 23 4a 01 8c ad ca 70 57 f2 7f 2c 62 23 cd b9 21 f7 a4 3b 20 8d 1b 26 f8 54 15 1c 50 52 c7 1e f1 21 61 15 57 d6 28 e3 a8 aa d1 f2 ab fa 82 fc 87 c8 2e 17 c6 0e 4c 69 1c 68 7e 14 d7 f8 81 f0 8d 9e 48 31 f5 d0 38 24 0b f1 83 f3 80 5c 60 af 38 a3 92 93 84 f2 f9 97 09 4b 2b d1 51 e4 5f 87 54 05 b5 54 74 ab de 56 94 bc 1a 55 75 a7 0a 15 5c 77 c5 bd 71 96 dd 93 56 da 8b 72 41 5d 27 97 23 88 ab 91 2b bd c6 94 ad ba ed 8d 72 ae 6e 43 e2 f4 59 2e b4 75 60 40 24 08 b9 63 05 a7 0a c6 0b 3c c5 fc ca f1 a8 d8 1a 9f fa 6c 9f fe 36 b8 1f fd a9 04 a8 17 cd 79 b5 fd 53 21 1d b8 e4 f3 95 90 86 38 8a 8a 62 2e 73 8f be 80 b5 09 ec 9e 58 ee 59 43 07 4a dd cf 53 12 1b fc d8 b6 70 d5 89 11 Data Ascii: ]\#ho>:{Bt#JpW,b#!; &TPR!aW(.Lih~H18$\`8K+Q_TTtVUu\wqVrA]'#+rnCY.u`@$c<l6yS!8b.sXYCJSp
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 1b 0a 29 2d c9 97 ad 09 23 92 62 45 87 2f 85 72 4b 88 e8 3a 20 61 32 3b 4c b2 cc 96 c5 0d b4 53 81 60 70 dc 6b 69 30 c4 db c0 4e 35 fb 6f 25 eb 8c 57 ca 7b b0 4d f8 cb 74 eb 92 1a b3 6d 07 fb b8 5c a5 dc 4f 27 2f 9a 24 07 15 f4 7d f3 75 5a 54 69 3d e4 25 c1 92 89 98 98 be 0f 83 ad 28 a0 cb 24 c8 ce fb 09 b6 93 89 24 82 29 24 1b 36 ac 41 0a 1b c8 d2 05 83 65 8f bd 25 c5 6d f3 04 76 6a 70 51 91 51 81 56 b1 b0 64 8a 45 9a b2 ac 7f f1 4c 71 7d c8 00 d2 ba e9 92 03 7c 2b 11 c1 94 ff 00 62 65 15 64 2b 85 22 e6 32 64 99 22 6e a3 e6 38 dc 84 54 92 fa 2e 70 8e 63 84 d9 67 f1 e6 31 0a 2c 98 62 d0 01 91 22 49 26 96 bd c0 35 50 f2 56 91 17 1f 04 31 9b 15 44 4a 28 1a 0f 92 8b b2 44 55 5f 16 d1 15 50 4a 3f 96 38 8d 0a 36 4d 72 fc b4 6c a3 b8 aa 6f 59 13 47 b0 3e da e3 Data Ascii: )-#bE/rK: a2;LS`pki0N5o%W{Mtm\O'/$}uZTi=%($$)$6Ae%mvjpQQVdELq}\|+bed+"2d"n8T.pcg1,b"I&5PV1DJ(DU_PJ?86MrloYG>
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 2a 63 e0 51 56 b8 ab a7 47 78 a4 69 eb 19 52 b9 47 23 0a 86 0a e2 62 62 7f ce 40 29 0c 58 ae c6 38 ee 21 28 82 2e 27 fc 54 70 c7 1c 0e 31 f6 d1 51 43 14 17 14 79 54 1f 88 e8 8a 8e a2 70 09 f1 cf 0a 83 f2 23 ce 20 f3 9f f8 32 f8 01 e3 1d 45 35 77 8c 95 10 9b 42 1c 25 4c 71 b4 c3 54 e7 94 5c 40 4e 39 f8 14 e5 07 f6 8c e3 be 55 d0 dd f4 0b 4b 93 e3 9c 87 a5 20 c6 40 94 8a 95 e4 ae 39 74 ea e7 ca e5 15 61 a2 9b 8a da 48 bd 04 56 ec 3d 98 a4 0f e5 84 23 69 5a 7c 9b 38 ef ab cd c9 86 72 01 b8 65 18 58 96 71 95 26 b6 64 ca 79 a4 f0 23 7a 04 04 8e 2d 4a f6 b8 6e 27 3e 0a b8 87 c1 34 48 85 25 51 47 f4 45 e1 4c b9 ce 71 13 17 20 3e 88 ad 58 92 b8 ed a9 21 14 e2 25 8b 60 4c 91 4a 57 5c 76 c4 dc 5f 72 ba 6e 4e f4 b5 15 7e 5b 7d 0d 5c 30 6c 59 92 a2 a0 fa ab 64 9c 63 Data Ascii: *cQVGxiRG#bb@)X8!(.'Tp1QCyTp# 2E5wB%LqT\@N9UK @9taHV=#iZ\|8reXq&dy#z-Jn'>4H%QGELq >X!%`LJW\v_rnN~[}\0lYdc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	62694	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	734	OUT	GET /wp-content/uploads/2022/07/13-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:53 GMT Accept-Ranges: bytes Content-Length: 464657 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 1c 65 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 39 3a 32 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: eExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:09:20
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 Data Ascii: PgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d9 e9 7e fb ff 00 a9 fe 93 f4 6a 3c d8 65 97 2c bd e9 03 18 d1 81 88 e1 f6 e5 c5 e9 84 e1 fa 51 c8 b8 64 31 88 a0 6c f7 d6 fc 9f ff d4 c2 ca fe 9b 6f f5 07 f3 5f d2 b9 3f d1 ff 00 e0 3f ee 52 cc 3f f2 5f 6f a4 de 7e 87 37 fd 3f f8 6f f4 7f f0 4b 9a 49 54 c9 fc e9 fe fe 3f fa 2b a5 b0 f2 2f 7b f5 77 e9 63 7f 31 fc d8 fe 91 fc ef d0 ff 00 cf 4b 27 ac f2 df a1 cb 78 e3 f9 ba fe 97 fc 3f ef ae 61 25 5f 07 fb aa 7e 5f f7 4a c9 fc d4 7c dd bb 3f 9e 77 1c 8e 39 fa 4e fa 5f f7 d5 1a 3f c2 7d 3f a3 57 1f 1f f0 9f c8 58 c9 2b dd 3e c6 11 bb aa ff 00 a4 79 e3 bf 1c 9f fa 0a 56 ff 00 35 8f f4 7e 83 3e 87 3c 3d 64 24 8f e9 c7 f9 7e 8a fe ad e7 f2 7e 97 27 e8 ff 00 39 ff 00 aa 96 ef 41 fe 97 47 d0 fa 6e e7 e9 fd 17 7d 3f fb af fb 9f f0 be aa e5 12 50 f3 9f cc cb fb a7 Data Ascii: ~j<e,Qd1lo_??R?_o~7?oKIT?+/{wc1K'x?a%_~_J\|?w9N_?}?WX+>yV5~><=d$~~'9AGn}?P
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 90 76 f1 24 09 90 4b 91 7f 5d 24 e2 a3 3b 74 bd 71 fc 9d 24 cb 31 2e ce 82 5f 9d 31 66 49 c5 e2 27 6c f1 ee 28 24 ed 9d 06 1f 49 93 62 4d 37 89 9e 31 2c 93 51 7f ce 3d 33 f8 97 e1 2f ce b9 4b f3 17 49 bb 12 70 99 24 fd 32 f1 27 2c ed 08 1b a6 55 2f 5d 74 ed e0 a6 c4 de 26 51 14 70 8a 4e eb 83 fe 25 d3 14 7b 93 84 cc e3 9e 5e b5 e7 60 ef 64 4f 64 07 13 04 5b 30 d5 4b 50 b8 d6 f8 c2 d1 57 9e d0 ac 86 41 bb 71 37 86 58 c9 c4 9a 8c ad 80 3f 02 9f a3 23 19 99 e4 0e ee 17 5e 27 87 b0 1c 13 cc d4 98 81 91 df 47 9b 67 fa 4e 02 ba 95 fc 65 17 23 a7 46 cc a8 1c 78 13 8a d3 c1 5a 8a 22 78 89 44 45 e7 8e 1d 98 62 b4 e4 fc 96 ce fd dc c6 31 d2 82 06 51 84 96 21 89 04 46 68 93 49 36 76 64 dc ba 62 51 a2 63 eb b3 77 67 8c fd a7 0b 7a 6d c9 90 74 d9 9a 50 4d 02 15 49 2c Data Ascii: v$K]$;tq$1._1fI'l($IbM71,Q=3/KIp$2',U/]t&QpN%{^`dOd[0KPWAq7X?#^'GgNe#FxZ"xDEb1Q!FhI6vdbQcwgzmtPMI,
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 15 a3 2d a3 29 c6 41 d8 19 17 33 b7 63 11 b6 73 1c e4 ca 07 af 4c 57 65 5a 9c d4 f5 e6 e5 3a d7 56 38 bb 26 4f 08 ea 9f 38 d5 8e b1 15 57 d0 e7 49 d5 37 82 63 bd 45 9b d3 59 55 96 21 a3 b2 e1 99 ae d6 df 39 72 c0 c5 2d 67 cc 74 31 3d 59 64 ed bc ba bb 5a 86 fd ee 39 83 a7 5d 0a 82 4d 0a 9d 37 1f c9 2c cf 12 ea 45 c3 a2 1e 40 c7 c9 4d 09 3a 75 d2 40 cc f2 68 60 d9 e3 dc 7d 12 9f 26 55 0a ce f0 c2 9c 25 20 9a 15 10 e9 03 b2 77 52 45 2c ec cc 5d ba 4e 93 31 4e c1 85 b9 14 a3 0c 98 90 68 19 5c b0 af 1c ab a0 16 02 86 26 99 14 46 93 d0 9a 72 29 ad 81 9c 92 ad e5 a8 db 85 ad 26 6f a7 5f 30 53 ae 14 4d f8 a3 4a 59 2c be 73 4d d8 3d 17 d1 d3 85 b0 d3 d6 94 5d 96 86 c9 93 4a 72 d3 c5 db 29 6a 46 31 a3 5e 36 cc 42 b6 84 9f 3d ac 8c 5b da 7f 85 e8 29 9e 8b 3f 20 77 Data Ascii: -)A3csLWeZ:V8&O8WI7cEYU!9r-gt1=YdZ9]M7,E@M:u@h`}&U% wRE,]N1Nh\&Fr)&o_0SMJY,sM=]Jr)jF1^6B=[)? w
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 18 ac b7 ea 9f 72 56 8d 31 2f 4c d4 56 c6 0d e0 6d 48 11 6a f9 ab ba ce 14 dc ae 0b a4 0f 26 7d 13 e7 da 50 56 02 ae e9 a0 b5 f0 ee 6f 9f 1a e9 65 21 2c 0f eb 3c fe 67 ee 71 6d 0c fb 57 9f 23 b7 83 fd 33 99 ba 79 ad 8f a6 1e 1d d5 d7 7d 04 15 16 e6 46 4c f4 ae 76 3c 20 b1 b2 47 f5 79 1c 10 0c db 28 6d 76 b3 b9 0b e4 19 b2 dd 18 16 ac 8c 8b 06 b9 d2 b4 f4 49 7a f4 da 92 34 2c 5b b8 5a 32 62 35 ad ca f9 67 a7 e6 32 be 01 43 cc 10 ee 0d ec 0e d8 ec eb ca 5d a8 9a 4b 81 6c 9e 47 a5 b7 f3 2c 64 3d fc ac db 87 24 f7 9b 69 56 9a 30 66 0f 41 cc d9 3d d7 2f 3e d1 b5 e5 b6 25 2f c7 98 79 8b b2 59 36 4b ba ec ba 13 9e d3 b6 f5 29 d1 75 6d ca 25 4d 68 27 24 5a 67 46 9e 97 d6 8a e3 c0 dd f0 26 58 93 e8 2c 12 63 d9 d1 dc d6 bf 10 96 46 ed 39 fc 3b d2 e0 e7 ec 3b 1a 9b Data Ascii: rV1/LVmHj&}PVoe!,<gqmW#3y}FLv< Gy(mvIz4,[Z2b5g2C]KlG,d=$iV0fA=/>%/yY6K)um%Mh'$ZgF&X,cF9;;
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d5 4d cc 0c 51 30 b8 d7 94 28 65 35 36 09 62 4c b8 b1 ea 32 2c 37 7e e7 58 75 84 57 ec 4c ca 75 51 be 43 68 42 9c ee 84 c6 ff 00 f6 13 21 8e 13 11 00 a5 d4 04 22 6a 8b ef 5f 44 4b 4a d3 e7 4d 6a c3 ab 6c 17 bb 71 fc 6a 8a b6 20 d3 c1 a8 88 7c 56 c4 fc 59 a8 d7 d2 ee 4b a9 e1 37 71 24 76 a5 ad 60 be fb b3 02 89 03 02 88 cf f7 fa 9c 50 3c 70 38 e3 39 f8 e7 08 19 c1 c3 ce 7c e1 07 3e 70 fe 9c e0 27 9f f5 fb 4e 75 18 38 20 73 ca 9d 6d 38 2c 23 97 0b bc 87 e0 4e 5a 91 ab 29 46 26 b5 5f 18 a5 94 24 7c 8c 1f 18 90 0e 04 e7 64 a7 17 2d 00 99 18 5e 70 e4 a6 67 bb 88 d7 a5 3c 63 6a f5 ed 16 a3 34 c8 07 80 79 ff 00 00 61 57 cf 23 3a 8c e1 1c fd 88 18 1d 4f 1f 78 04 c8 18 1d e7 13 f3 85 b2 73 aa b8 09 3c 84 7c f4 c2 00 1c 27 14 9c 53 29 56 3b 0d 78 a4 a9 a0 87 41 c7 Data Ascii: MQ0(e56bL2,7~XuWLuQChB!"j_DKJMjlqj \|VYK7q$v`P<p89\|>p'Nu8 sm8,#NZ)F&_$\|d-^pg<cj4yaW#:Oxs<\|'S)V;xA
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 51 c4 eb 17 24 4c d9 5b 40 43 2e 3d f8 ee ad 88 a1 57 92 02 ab 5b fb d6 c1 61 91 3a c9 96 51 f9 36 32 8c 05 25 22 5c ee 13 26 e1 6f 18 42 c6 44 8d 63 ec 80 cb 29 0b 6e 49 71 09 97 13 94 57 bc e9 78 cc 48 06 c9 af b1 1f 5a d6 b8 e8 73 15 54 10 e3 31 5d 42 d8 8f 24 3e cb 21 2a 3d b1 4e 84 19 05 0a c2 94 b8 94 a7 a2 5a 47 05 c0 42 9c 62 42 d5 5f 15 c6 99 5b 0e 2d d7 5e 48 6c a4 25 6d b8 ea 1b 48 fc 84 36 c9 e6 4b 3c a5 a8 c8 c2 79 53 d1 c0 54 fa 11 21 b7 f5 76 3e 9a 0d 65 fa e7 5e 69 e0 ab cb 6b a3 26 f2 0b 6a 5d 1c 07 0a ee 9b 42 23 ec 08 75 4f bb 26 6b d5 f5 3b 3b 95 6b 54 7b 06 57 25 f9 cd c6 81 6b 18 25 9a e8 f3 d9 5b ad c3 76 db 5b 69 6b a8 b8 bb 8e 8a bb 65 ad 12 ae 58 08 89 b1 43 5a da 28 28 76 bd 6e 08 8c 48 8e 59 79 a7 08 8e 38 8d 32 1b 42 c6 6a 0a Data Ascii: Q$L[@C.=W[a:Q62%"\&oBDc)nIqWxHZsT1]B$>!*=NZGBbB_[-^Hl%mH6K<yST!v>e^ik&j]B#uO&k;;kT{W%k%[v[ikeXCZ((vnHYy82Bj
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 8e 39 0f 84 90 20 a1 6e bf 1c 73 6f 39 b8 48 af bd 8d 2d d5 4a 61 95 49 bb 76 34 85 db 25 d8 df 5a 5c 2d b2 02 8a 15 cf 04 e2 1a 04 c2 84 1a 13 6d d6 95 2a 42 99 c6 6d 9d 01 89 ec bd 9b 43 2d 21 0d 4e 53 46 ba f1 85 86 d2 08 94 c2 99 4d 75 72 2a a3 b3 25 4e 4c a9 ef 1a 3b 6e a5 d2 ca 98 5e 4a 29 c2 49 2e b4 54 1a 8d d9 f6 d6 0e 2d d5 9c 69 90 ac 8e d8 4a a4 24 a8 b9 5a 87 cb 4d 98 c8 65 2b 26 4b 61 d6 97 aa 53 2d 4e 6b 6a 64 0b 28 6c 05 de bb 1e 7b 91 66 a2 75 05 84 89 10 d4 7f 71 7d 04 a4 76 ce e4 e0 50 39 26 1b 2f 89 34 89 52 94 80 5a 91 25 09 72 5b 2c ba 9b 46 cb 46 ae cd d0 cf e7 34 b4 cf 47 2d c4 42 4a a8 af 64 41 52 fa a4 7f 33 10 aa 3c 19 52 ec 6a a0 ca 42 a6 c8 72 33 26 d6 e5 d9 0f cd 32 13 3e cf bb 56 32 3f 90 9c d3 2d db 2c 59 21 48 ae 2f 21 88 Data Ascii: 9 nso9H-JaIv4%Z\-mBmC-!NSFMur%NL;n^J)I.T-iJ$ZMe+&KaS-Nkjd(l{fuq}vP9&/4RZ%r[,FF4G-BJdAR3<RjBr3&2>V2?-,Y!H/!
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 67 7b c8 aa 71 a2 ec 65 b6 1b 6b be 08 8e 28 94 a7 24 37 d4 c3 84 87 98 ac 8c a6 db 0c 94 35 31 28 4a c5 47 da d2 ea 07 46 a9 64 b8 1a a2 5a b0 57 24 24 b0 b0 03 6a 4b 7f 5f 50 1c 4a 73 f2 40 2f 3c da cf de ca 09 79 21 52 1f fb 43 95 cc 0c 4c 01 db f1 23 a4 9a e4 a8 88 49 e3 f1 92 90 d3 cb 48 73 f6 98 8d 87 0a 93 d1 c7 1c 6d 6d a1 08 4a 52 a5 02 56 78 50 2a c4 02 9c e0 e0 4f 39 d4 1c 00 1c e7 9c e4 72 00 e0 f2 48 3f 3c 62 93 84 01 9d 79 c2 06 1c f9 24 a7 e0 36 30 8f 8f 9c e3 8c ea 46 10 38 e0 e1 e4 1e 08 c1 f2 78 c1 c0 ce c7 0a 70 90 70 27 8c eb 9c 0c e7 8c 23 8c 4f 27 02 0f 3c 7c 14 11 8d b0 e2 cc 6a 29 0f 14 51 32 d2 8b 55 0c a5 13 6a da 3f f4 eb 49 72 f2 5a c3 af 2d cc 1c 71 d5 47 1b ab 92 e9 67 54 90 e2 5a d4 e2 e7 f0 30 d8 08 95 54 c2 65 6d 28 e5 fd Data Ascii: g{qek($751(JGFdZW$$jK_PJs@/<y!RCL#IHsmmJRVxP*O9rH?<by$60F8xpp'#O'<\|j)Q2Uj?IrZ-qGgTZ0Tem(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	62696	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	734	OUT	GET /wp-content/uploads/2022/07/12-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:46 GMT Accept-Ranges: bytes Content-Length: 417996 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 14 ad 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 39 3a 30 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:09:05
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d1 67 d6 5b f5 f5 71 eb b0 11 f9 87 61 ff 00 a7 eb 29 8f ac 5b 9f 07 11 a0 bb 42 e7 5d 53 04 47 e7 3e ea eb af e8 fe f5 8b 9b 37 11 e4 4e a6 1b 1f 86 e6 a9 8c Data Ascii: dEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?g[qa)[B]SG>7N
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 64 38 32 35 64 31 62 2d 33 37 32 37 2d 39 33 34 66 2d 38 62 30 39 2d 64 39 31 39 64 64 66 32 37 36 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 61 34 33 34 35 32 37 2d 31 31 66 39 2d 64 38 34 31 2d 62 32 38 33 2d 30 39 35 38 31 62 33 66 66 61 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <rdf:li>xmp.did:cd825d1b-3727-934f-8b09-d919ddf27689</rdf:li> <rdf:li>xmp.did:fa434527-11f9-d841-b283-09581b3ffa17</rdf:li> </rdf:Bag> </photoshop:DocumentAncestors> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d6 51 f4 f6 f4 36 bc b4 b7 9a fa 1f 52 e8 52 dd a6 1a 44 c7 1e bc d6 d1 84 89 1a 97 bd 65 81 2a e3 d2 d4 b1 1c 5a 46 d2 20 ce 34 4d 5f bd 6e 7d e7 73 0c 0d 48 46 04 fa b2 f8 76 89 38 da 92 89 5a 14 2d 14 f5 86 1c 0c 1b 22 e6 44 50 03 23 78 64 4a 73 5a 3c 9b 21 71 b1 30 d8 9c 6e 87 2f 22 79 bd 61 4a 17 74 13 32 55 91 45 1a c0 d1 28 ff 00 2b ff 00 28 fb 2b ca d8 3c d6 22 74 d0 24 24 a5 22 c4 23 4d 8a c0 7a e6 b0 94 5a 23 40 84 7e b8 2c 9a 10 a5 89 f7 80 9d 64 b9 5b 6b 6e 7f 1a bc 03 4d bc d9 22 26 19 25 a6 f3 ae c8 be 95 0b c3 5a 0c 33 93 4b 2e 28 82 58 89 22 c5 88 50 86 05 52 f4 59 fc b3 37 77 0d a9 e8 1e ae 6f b1 5f 43 f9 b7 a6 6a e4 30 f5 62 2a 4a d2 c1 85 25 59 7b d1 96 a2 73 57 d7 bf d6 94 fd 44 bd 1d e9 2b c1 e3 29 53 0c 3d 99 4b d6 06 18 9b cc 21 57 Data Ascii: Q6RRDeZF 4M_n}sHFv8Z-"DP#xdJsZ<!q0n/"yaJt2UE(+(+<"t$$"#MzZ#@~,d[knM"&%Z3K.(X"PRY7wo_Cj0bJ%Y{sWD+)S=K!W
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 2f c5 5a c3 92 a6 b7 41 0c db 2b 2d b8 7c 9a ce e9 7e 3c c2 8e 2d a1 39 b3 27 9a 1c cf de 2f 4c 74 6d 5a 8b a3 43 ea 6b 9c 62 b5 e9 a7 e7 9e 8e e0 e5 74 33 87 d3 39 9c 43 f6 3e 2c 35 8b 99 07 dd ed 35 91 4f 66 9b 36 08 1a 70 21 69 7a ab d2 41 a7 3a 95 de 35 6c b9 86 dc 3b a5 bd ce ac 3e 78 f5 b7 43 cc 53 10 ff 00 af 5f 61 e5 73 67 e3 7f ac e0 05 9a d1 bd 58 95 fb 9d 07 39 d5 89 06 7b 03 78 d4 ee 4d 33 8f 26 99 6f cc 34 e0 12 5a 90 eb b2 7d 96 fa 1d 92 d6 53 58 f5 8b 3e 84 a7 78 cd 0f 04 7e 47 b2 ef 65 3a ca 2f 70 70 3a 95 b7 4e 8a 4d 51 b0 6d 04 1b 4f e6 37 9f ba 84 a5 51 35 8f 8c f3 c2 46 66 e9 f2 26 1e 58 d4 35 78 da 7f a1 de c7 9f f4 b7 ae c0 a6 75 b2 a3 62 eb 41 98 19 59 b4 ca 48 a3 46 e9 33 62 a0 c4 fa 46 ae b5 10 cf bb b9 d5 56 96 71 30 0c 77 99 a3 Data Ascii: /ZA+-\|~<-9'/LtmZCkbt39C>,55Of6p!izA:5l;>xCS_asgX9{xM3&o4Z}SX>x~Ge:/pp:NMQmO7Q5Ff&X5xubAYHF3bFVq0w
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f2 62 a2 5c 50 75 f9 08 4a a8 e5 11 a8 ee 9d ec 95 20 63 44 4f 43 7a ad f2 a5 ea cb 88 13 de a0 83 ac 8b cd e5 96 19 5c 0d d5 fc 37 76 8e 54 58 7c d3 0a 68 98 f0 cf b3 af 6a 73 6c 53 da a4 0e 7d 38 77 aa e4 56 bb 31 48 3a 68 46 b6 19 f1 88 01 35 5e b1 96 3a fe a4 7e 53 7a 8f fa b1 8c f4 c9 79 67 e4 12 ed 6c 66 4f a2 63 e2 6d 9d ab 50 f2 f7 1f 3c db 8a 52 de e1 4e 25 a2 ad 77 be 13 a4 c3 58 eb 36 26 77 a3 34 12 63 61 56 ec da db e6 24 d3 9a 29 d6 7c 40 ed db 22 fd 01 bb 09 15 02 98 3f 78 5e dc 55 6a b7 52 c4 44 30 b1 f4 0e 21 4e 95 11 8a 8b 09 80 86 f9 77 82 d4 5e 1b d4 41 33 4d 4d 82 35 cd 5a e9 74 01 87 d2 b8 d1 cf 33 4b 0a 55 1b db 1c f5 2b f7 68 61 78 ac 1c 88 13 d1 e0 88 81 bc e6 c1 92 bd a2 cb 67 d8 6d 5f bf 3a 15 57 f5 3f 66 ce 9f 5a 3a be 8c ac 41 Data Ascii: b\PuJ cDOCz\7vTX\|hjslS}8wV1H:hF5^:~SzyglfOcmP<RN%wX6&w4caV$)\|@"?x^UjRD0!Nw^A3MM5Zt3KU+haxgm_:W?fZ:A
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 5c 02 5a b5 50 0d da 2d 45 d9 0a f1 93 09 d5 2e 0a 5f 52 1d 53 e9 2b 86 a1 9f 51 06 ae b9 bf 15 52 f9 26 7a 5a 8e e3 b7 6e b4 25 df c6 77 0d 84 75 2a 3d 34 d7 55 7d 5d 74 cb 53 52 f7 94 d8 2e aa 4a 2a 9a 5b e2 dd 6c 9a 69 61 2f 05 b6 54 84 72 3c 09 c7 e1 79 15 47 4f 13 10 1b 53 6b 69 c6 96 a2 0f 88 e4 a5 23 07 8e 2d 1f 0b 61 00 c9 6d 4d aa 0d 72 66 a6 f1 73 eb 9f a3 da bf 19 55 db a5 8b 69 96 1a 5a 23 22 4a 54 d1 23 3f 20 e2 9d 27 14 a1 89 04 27 81 c7 1f 29 2a 18 97 78 c4 ac 1c 5a 30 20 8c f3 c4 a7 0a 39 c2 df 19 c1 18 81 84 e1 58 cf b0 62 49 c4 ac e0 57 c2 5b 49 c1 18 8c 01 c1 89 7c f2 1c e7 0e 21 c0 31 09 46 2d 09 ce 08 c4 af 3c 41 c4 a1 3c 92 a0 02 95 cf db c6 2a 42 14 52 94 ab 3e 90 08 4a 93 91 da 5f 2b 3c 94 a0 e1 1c 67 29 18 02 0e 78 83 88 e4 62 16 Data Ascii: \ZP-E._RS+QR&zZn%wu=4U}]tSR.J[lia/Tr<yGOSki#-amMrfsUiZ#"JT#? '')xZ0 9XbIW[I\|!1F-<A<BR>J_+<g)xb
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 6c d6 ee 41 49 8d 6a d3 a9 6e cb c5 4b 79 2b 2d b4 87 14 a8 4c 2c a6 90 95 39 54 f3 47 f8 b4 15 39 4f f1 f6 48 4e 31 b2 a8 18 bb 02 14 10 ea 5d 52 a3 a0 89 15 a9 51 72 08 e5 4c 20 14 34 8c 6e 23 a0 28 a9 38 89 4b 18 d4 d6 c8 71 e6 d7 8a 40 4e 0f 85 29 ef f2 24 ab 04 75 f0 d9 74 16 e6 bc 9c 6a f0 a8 47 68 a1 01 38 1a 1c 1f 8c 4b 44 e2 0f c4 62 32 46 b9 58 da 5a 62 95 66 c6 15 20 16 16 3f 50 d8 da 9b 60 ec c8 31 1a 9b 5f b8 d9 a8 3b b2 4e 5b 91 2d 64 79 ce a8 fb 92 db 05 a4 cf d9 2e 1c 6d 35 76 32 d9 87 aa 5a b4 dc 6b 59 61 72 69 a1 cb 44 76 12 86 d8 8e 5b 54 19 1e 68 f2 c2 39 0e a3 93 21 b3 c3 d1 89 2d b1 89 8c 06 06 87 2a 84 a2 b4 b8 81 89 6f 14 d7 21 43 e1 c8 05 6f 88 dc 14 35 9f 86 8e 5c af 6d 58 13 8a 18 0e 25 0a 51 4d 3c d2 6c 22 3a da bf 11 1c ac 36 Data Ascii: lAIjnKy+-L,9TG9OHN1]RQrL 4n#(8Kq@N)$utjGh8KDb2FXZbf ?P`1_;N[-dy.m5v2ZkYariDv[Th9!-*o!Co5\mX%QM<l":6
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f7 e4 58 f8 e2 23 82 52 c7 f9 54 7e 1b 2d d9 d9 3d 25 41 38 91 8a 6f 3e ac 4b 7f 0f 21 7e 4c 3e 84 84 e0 58 18 95 0c b0 b3 92 ca 59 b5 2e ba b7 40 c6 1e 49 c6 80 38 f8 c0 8c 53 59 22 5b 0c 9b 9b f9 6d e5 6d bb d5 88 d6 37 3b 29 12 27 c9 0d a2 35 82 9d 4a 32 4d ea 42 cc 94 a8 05 02 1a fd d4 d8 f1 4a 00 c5 b3 e4 1d 68 f8 af 42 5a 15 02 2b 6a 76 53 6a 88 e4 cd 8d c7 25 15 7d 45 88 fe 46 c2 5b 51 f2 33 ec ba 5a 71 00 04 82 1c 8e 40 23 24 30 16 8a fa c0 cc 9f a5 38 f1 48 2f 58 a5 ac 4c c4 38 66 c9 6d 94 6c 5b bd 6d 56 6b fb 6c 19 88 32 99 03 8c 4a 71 b8 8e 1c 6d 9f 84 27 fc 9f 4f c7 d4 ae 7e a3 88 e7 3c 14 9c 27 e2 b9 b0 94 c0 7b c7 3f d9 65 b2 1e 90 a5 a9 0b c0 70 1c 53 a9 19 2d 5c a7 f6 52 51 ce 2b c0 1b 2d c3 e8 7d 17 4c ad 22 cd 82 54 c8 21 0c 80 9f d8 04 Data Ascii: X#RT~-=%A8o>K!~L>XY.@I8SY"[mm7;)'5J2MBJhBZ+jvSj%}EF[Q3Zq@#$08H/XL8fml[mVkl2Jqm'O~<'{?epS-\RQ+-}L"T!
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f2 31 2a 38 93 84 9c 0a e3 09 4e 10 30 71 9e 60 67 24 e1 1c e1 46 23 3c 86 05 83 9e 5f 25 59 c8 c2 c8 39 f5 71 9e 38 3e 41 6d 27 3e 82 30 21 c0 79 cf 24 f0 85 0c e4 62 ce 13 9c 27 3e a1 85 80 33 c7 8c 48 f9 59 50 c2 e9 18 5e e0 21 d0 47 c1 05 29 c5 7c 84 a7 38 38 f0 23 02 b1 b4 27 16 e6 79 1c 2b c4 ab 92 f3 68 e7 eb 04 16 c9 c2 d8 38 84 63 8b 4f 9f 8f 96 38 90 31 a5 f1 8d c8 04 a8 61 21 21 2f 02 0b 85 38 a4 79 e0 42 78 4c 64 24 fc f2 d3 47 86 99 1e 49 8a ea 95 12 95 6f a9 8d 43 93 0b 50 af 79 23 53 ae 49 97 a9 44 69 82 13 90 99 a9 4a 21 a6 10 11 ee d0 85 9d 8a 3b 89 be d8 25 24 7f 28 1b 31 65 17 0b f1 a3 a9 11 2b 7c 52 e4 6f 02 ed c4 26 10 8d d2 a9 d7 52 4e 45 90 94 b6 dc 9e 53 f5 24 89 0a 21 09 59 c4 2f 39 18 e2 c6 3c 9c b1 60 ad b9 90 1f 61 d6 c2 78 e4 Data Ascii: 1*8N0q`g$F#<_%Y9q8>Am'>0!y$b'>3HYP^!G)\|88#'y+h8cO81a!!/8yBxLd$GIoCPy#SIDiJ!;%$(1e+\|Ro&RNES$!Y/9<`ax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	62695	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	734	OUT	GET /wp-content/uploads/2022/07/03-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:25 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:39 GMT Accept-Ranges: bytes Content-Length: 366574 Content-Type: image/jpeg
2024-05-28 05:15:25 UTC	7957	IN	Data Raw: ff d8 ff e1 18 39 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 38 3a 35 33 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 9ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:58:53
2024-05-28 05:15:25 UTC	8000	IN	Data Raw: 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 Data Ascii: numESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenu
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 6a 70 65 67 20 74 6f 20 69 6d 61 67 65 2f 70 6e 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 64 31 35 39 37 32 34 66 2d 37 36 31 65 2d 39 35 34 61 2d 61 65 31 65 2d 35 36 62 31 36 35 30 62 64 38 64 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 32 39 3a 35 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 Data Ascii: jpeg to image/png"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:d159724f-761e-954a-ae1e-56b1650bd8d6" stEvt:when="2021-08-12T20:29:55-03:00" stEvt:softwareAgent="Adobe Photoshop 22.0 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved"
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 49 99 32 53 37 36 ba c9 cc 95 64 67 a4 f5 4c 55 fa 4f 5c f4 9e 93 35 5e 93 32 7a eb 37 59 95 b1 d7 46 8e a3 7b b2 bc 53 55 41 2c 24 5b b6 b1 53 c5 5b 95 6e f1 dd 95 d1 b5 e9 5e 29 9b 9e ba f4 99 93 25 5b 15 7a e6 64 f5 d7 a4 cd cd ae b3 73 17 3d 27 ae 70 ca 7c 33 b3 92 88 6d 0e 5c a9 ba 4f 8a cc 14 1b 52 29 f1 6f 95 d9 05 62 73 36 c3 08 ee 95 bf d3 96 f7 a1 2a 21 46 ba 4a a3 b1 51 4a 30 8f a4 19 b9 c9 32 07 10 62 b1 3b 5c b3 d4 e9 8d 68 3e 7a 27 7b 64 cf 5e 82 03 c9 c3 9c 34 fa 99 03 9b b9 e7 36 9a 6b dc f8 c9 13 1b 21 8b 2e df 45 72 19 92 0a ba 48 65 18 88 0d f2 f4 38 86 49 ab a0 70 fe d4 54 6e 1e 36 00 58 a2 d9 72 3c 3e f9 ff 00 d7 b2 e4 7a 7b 2f 1b 0e 02 a7 3e 29 87 78 98 cc 49 ab 6c 65 56 f6 1d 09 cf 33 27 95 0d 90 d7 c7 35 18 ef 95 b3 0e 93 f5 5e e3 Data Ascii: I2S76dgLUO\5^2z7YF{SUA,$[S[n^)%[zds='p\|3m\OR)obs6*!FJQJ02b;\h>z'{d^46k!.ErHe8IpTn6Xr<>z{/>)xIleV3'5^
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f2 72 aa 3a 79 ce 5b a0 fe c9 11 ec 91 7b 04 49 b1 03 0c a7 36 a4 34 f4 af 88 2a 76 21 6e 28 e1 4d 15 d0 0d 4d 13 0c 3a c1 fa 0a 52 24 b4 6d f1 05 d8 21 66 62 e1 40 ed 98 e7 be 63 5d 20 10 58 58 6d ca 52 84 b9 7c f3 6b 3f 40 fe 7e fb b4 c7 fd 25 35 34 66 6c a0 fe bb 4e dd 35 47 ae 16 b7 cf 7a eb 19 c6 ef 10 26 39 a4 5b b4 f1 be 70 fa ef 15 15 74 88 bb 30 ce 1c 61 1d 26 92 e6 77 d2 8d 7b 9b b9 7e 86 29 9a 41 83 5b 4b 63 98 87 56 83 59 31 d6 81 e0 f3 23 17 c8 0d c3 2c b7 97 50 39 cb 6b 15 33 ac 81 9e 16 5b 94 06 af 5c 63 b0 63 f9 65 39 9a e2 99 8d 77 93 74 8e d9 37 f4 f1 84 0c a5 09 31 37 a7 2d 5b 8a ea 2a 62 85 da b1 2d 82 d9 a2 d4 8b 3a 4b 6b 6a f9 5d 16 e6 79 9e 76 0e 35 32 2e 78 07 a9 11 17 47 33 92 ed f5 24 84 c1 29 47 55 99 3a 0e 5e f2 fc e4 ee 62 e8 Data Ascii: r:y[{I64v!n(MM:R$m!fb@c] XXmR\|k?@~%54flN5Gz&9[pt0a&w{~)A[KcVY1#,P9k3[\cce9wt717-[b-:Kkj]yv52.xG3$)GU:^b
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 67 e9 51 e9 2c 74 08 86 07 27 0b 8e 62 76 06 2e 53 51 c6 27 60 bd 0c 4e a3 25 23 46 36 d5 53 46 53 29 8f ae bc ab 5c 6d 4d 6c ee 62 cf 20 eb 14 d5 a9 6e cb b7 a3 00 f7 a7 93 63 3b a2 63 14 96 bd 98 1c d9 17 db 56 19 36 b0 39 41 f5 46 e7 03 66 85 a8 02 e8 07 a1 44 0e 52 46 2d 1b 07 89 d3 43 69 b5 91 cc 0b 94 2f 4b c9 46 67 0f 13 1e b7 30 57 b4 3f 5c d4 8b 06 ce 26 7c 4a 27 29 bc 2e 91 89 ae db 0e bd 75 8b 2f 59 26 b2 4c 44 89 aa 6c 76 74 2c 14 0d 16 a7 a9 bd a0 9c e2 33 ae 77 3e a7 fe 7a ef 37 90 ef 6b 50 2d e2 45 d0 c0 5f 42 98 75 a3 9b d4 dd a1 2b a4 a8 9f 44 e8 53 cf 7f 99 cd 46 8c 87 ad 5f 02 1f a4 ff 00 21 c8 fd 9a e2 8e db 69 cf d0 f6 70 ba b1 5c 3e 81 ef 17 39 a7 0f 91 ba e9 52 ed f3 39 92 62 76 e9 6b ba 58 dd 26 a2 72 5f 21 c7 7c d5 17 66 06 d1 52 Data Ascii: gQ,t'bv.SQ'`N%#F6SFS)\mMlb nc;cV69AFfDRF-Ci/KFg0W?\&\|J').u/Y&LDlvt,3w>z7kP-E_Bu+DSF_!ip\>9R9bvkX&r_!\|fR
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 11 ec 6b 49 bb 86 cd 3d f8 74 97 61 96 bd db c6 78 0c d5 cb b0 ef 91 22 7d f2 cd 83 2d 47 61 9f e3 a3 78 35 1a d6 db d3 b5 ea 5e 55 b6 53 79 e8 e8 c9 62 37 31 8e 81 e2 3b 51 78 39 b6 5f 15 9f f1 0d 2d a9 ac 15 58 f9 64 2f 85 a7 12 b8 35 4f e2 f5 bb ab e6 74 71 57 65 a9 27 ab 54 54 f3 b9 4b 59 66 2b 32 36 57 8a dc ee c1 b3 a9 24 21 b4 76 86 78 af 6e 25 89 bb 3d d3 ec 4d a8 8c 3d 92 c8 d8 55 5b 51 b9 bb ed cf e4 cb 5b 58 cd a5 58 3e da 92 5e df fd 6a f4 af 7c da 58 5a ca db 1d b5 5a 27 67 d2 32 58 e8 53 fb 84 94 25 aa 5d 61 a1 59 b9 55 f0 f3 fb 99 22 9f 7a d7 d9 aa d8 1d 5c 89 2a b5 91 b8 43 2d 8b 53 c4 ca d1 16 aa 26 4d 7c 9a f9 1f ad b1 6f 7c fb c9 f3 07 3e 16 32 47 57 d7 1b 32 33 92 be 17 d0 f8 9c ff 00 fa dc f7 b1 cf 6f d0 4b 64 05 39 ac f0 6e 4a 74 65 Data Ascii: kI=tax"}-Gax5^USyb71;Qx9_-Xd/5OtqWe'TTKYf+26W$!vxn%=M=U[Q[XX>^j\|XZZ'g2XS%]aYU"z\*C-S&M\|o\|>2GW23oKd9nJte
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 7c 0f 74 f1 d4 78 32 3c 07 32 e1 20 89 1b 1b 77 fd 25 77 d8 b5 b0 a8 e5 25 b8 88 17 18 86 ed 82 31 b0 8b 35 2f c5 5c 6d 37 12 32 d5 5e da bd ba 9d 3e bd b4 e6 7c ad 00 cd f2 1c bc 90 78 01 ae ca c8 0b ed 38 69 0e 34 98 18 b5 f0 7d af 8a 18 e5 7f f0 22 f9 0d a9 46 07 4c f8 7c 65 78 61 6a 63 5e 03 fe 80 a2 64 24 bc c9 96 fd 99 90 34 07 47 03 84 51 b0 03 f6 e7 c5 ee 4c 3f 4b b7 35 01 22 12 57 e3 b8 09 20 fa d3 5c e2 18 d7 39 1f 87 dd 0f 85 da 1b 2d 9e b9 5d 4e d1 b4 ab ff 00 9f 94 28 fa fb 0c 6b 7b 4b 01 0e d2 75 3e fd d6 0e 8e e3 6c 35 aa c3 3c d8 c9 03 94 12 3b c6 d9 6b de d6 00 ef 00 c6 c8 c0 48 ac 3c 23 05 34 64 38 00 26 3e 2d 89 c4 b8 7c a8 a3 05 0c e2 6c b8 55 7b 9e d7 b4 e0 9c 27 34 94 1b e2 bc 49 44 16 97 ec e7 00 ed 2c 04 76 f6 53 b6 f6 17 e7 c8 e5 Data Ascii: \|tx2<2 w%w%15/\m72^>\|x8i4}"FL\|exajc^d$4GQL?K5"W \9-]N(k{Ku>l5<;kH<#4d8&>-\|lU{'4ID,vS
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 00 a5 2c 0d fc 38 93 75 ec 72 75 08 da 04 41 8b cc 94 5f 22 7b de 13 25 c8 2f 55 99 13 9b 00 69 7b ea c0 f8 a9 08 9d 1b 99 87 47 63 24 59 2d 7c 92 bb 0d 24 a6 e4 16 82 17 f2 c1 70 5f 21 02 89 58 ca 89 ed 09 cd 0e 4e 2e 6a 04 3c 17 84 72 e4 f6 f8 90 72 8f f2 2f 2e 11 42 cf 92 d4 d3 97 05 fb 95 14 9e 71 eb 8e 27 79 f9 78 f2 16 07 fd 5e 48 10 56 16 16 16 16 16 3f f8 b2 b2 56 4a c9 59 2b c8 ac 95 e4 57 91 5e 65 79 15 e4 57 91 5e 4b c9 65 12 bc b0 bc 91 72 2e 2b 25 64 fe 80 7e 98 0b c4 22 16 11 08 fc 2c ac ac 85 90 b2 16 42 ca cf fc f3 ff 00 26 8c a8 bc 42 f2 40 04 1c 86 50 4d 6e 5c 24 68 31 c5 1b 63 01 3e 1f 27 7d cc 09 f2 07 39 e4 14 73 82 0a 2e 21 17 b8 16 ca e5 f7 02 1b 39 68 a6 1b 20 9a 53 0b e9 de 63 98 d9 fc cc 73 98 96 c6 f9 8a 3a 9b 08 ae 45 5e 42 f0 Data Ascii: ,8uruA_"{%/Ui{Gc$Y-\|$p_!XN.j<rr/.Bq'yx^HV?VJY+W^eyW^Ker.+%d~",B&B@PMn\$h1c>'}9s.!9h Scs:E^B
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 56 46 d4 64 96 66 d8 8c 85 67 f8 b9 ad 6f 80 27 04 92 80 f1 6f 88 71 21 cf 7c b1 64 0f 2f 20 4a cf 8a 6b d0 78 70 f2 08 3b e5 e7 28 96 b5 4b f0 1c df 90 56 7e 4b b2 9a 32 bf 70 02 71 c3 4f ee 89 ca 04 10 f7 1c b7 25 3f e0 83 fa 95 9f d0 12 13 3e 50 04 83 f0 9a 0a f1 4e c2 7a 8d 37 f6 70 58 f9 8d c5 c9 ec c8 2d 20 20 d4 02 6e 4a 89 e0 8a 98 0c 97 2f 2e 18 64 ef f9 68 c2 25 33 f7 c6 53 c6 50 00 26 bd a0 78 fc 80 48 20 e0 2f fc 34 61 17 7c 34 a2 72 7f f3 94 e2 01 73 f2 7c ff 00 42 7c 96 4a 0e ca 07 28 00 4b 47 c9 20 09 23 2d 5e 78 2f 7e 50 39 20 26 84 d0 30 f1 83 40 a8 5d 94 c0 5c 04 3e 2a cb fe b5 34 ae 05 92 3d 86 5c e5 cd 01 4e c2 f3 13 7f 9e bd e0 b1 df 4c 51 fd ce 6b 5c 2b d8 7b 5c c0 24 b3 2b 67 33 b5 86 ef e3 4f 13 1f 18 57 64 9e 38 98 1d 8b 92 d7 89 Data Ascii: VFdfgo'oq!\|d/ Jkxp;(KV~K2pqO%?>PNz7pX- nJ/.dh%3SP&xH /4a\|4rs\|B\|J(KG #-^x/~P9 &0@]\>*4=\NLQk\+{\$+g3OWd8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	62697	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	978	OUT	GET /wp-content/uploads/2022/07/hotel-06-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:27 GMT Accept-Ranges: bytes Content-Length: 134484 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 1a a3 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 35 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:25:44
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 01 38 42 49 4d 04 02 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 02 01 01 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 02 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 44 00 00 00 00 00 10 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 Data Ascii: 8BIMp8BIM8BIM8BIM08BIM-8BIM@@8BIMD@@8BIM
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d Data Ascii: 2/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elem
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 5b 87 80 e6 05 a3 14 f2 64 b9 11 c6 46 d6 41 19 7a 39 de 83 48 7e 06 de 44 57 a6 14 39 5f 9b 84 eb 6b c9 99 ab 96 6a 34 ec a5 ac d9 bb 87 a5 b0 27 c9 6d a5 9a 19 bd 2b 99 32 de a8 65 c3 7a 81 9e d4 df 15 a6 6a c8 07 01 21 d8 b0 52 45 b7 e7 9b 1f 7b 26 b5 c0 36 b5 62 a7 d8 ce 89 7b 6b 1c b6 58 a5 cd df ac e5 e7 a5 4b 10 5a 1c ec 7d 8b 47 a8 a3 c1 bc 1c 3b 69 57 a5 38 64 37 69 3f 34 e9 87 6f b5 70 b3 d5 4a 07 cb 11 c4 29 cf 1a 45 04 22 36 47 08 71 f2 86 d5 8f 01 f0 cb 09 06 d6 81 2c 91 cc 4f 04 04 0a 7c 64 d6 97 02 b1 b3 93 5d 97 d4 8b c2 53 2e 70 09 67 65 d5 7a 2a 58 0c ab bd 52 6d dc e7 55 f4 ed 6b c9 47 ab 43 30 b4 c2 9c 69 7f 47 cc 46 47 b1 b1 e2 34 4c 75 bc f3 ed 98 ec 76 89 25 8a 9d 6a af 45 11 8a b0 e6 8a 71 2e 87 31 d5 cc 6c 5c b4 17 89 ad 8c e3 3b Data Ascii: [dFAz9H~DW9_kj4'm+2ezj!RE{&6b{kXKZ}G;iW8d7i?4opJ)E"6Gq,O\|d]S.pgez*XRmUkGC0iGFG4Luv%jEq.1l\;
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 38 f0 50 59 b2 7e d6 00 a8 8a c0 18 ec 0a bb 02 03 8c 73 51 1d 83 1c cf 10 79 2d 3f c1 83 fd 9b c4 27 31 78 00 0f 25 1e 27 80 1b c3 03 e5 f9 18 ac 70 c9 89 82 60 6e 31 8e 55 19 e1 5c 4f aa d6 33 11 47 16 6e 05 6c 46 26 0f 2a 9f ee 83 ed 33 cf c6 33 38 c2 3c 63 e0 13 0b 41 9f 8f f3 e2 13 f6 e6 67 e3 26 66 62 62 11 31 30 67 99 e7 e3 cf e8 c8 84 ca c7 96 fa 93 8f 82 4e 7e 90 af 22 c3 11 0e 22 b8 30 7f ab 8c 92 b8 8b f4 1e 62 83 80 06 5f c3 a1 10 0c 4b 4f 94 22 2a f8 15 92 38 07 0b a8 14 2a 86 3f 48 de 25 47 30 34 06 09 99 93 09 f9 1f 4f 13 94 cc f1 3c 7e 82 b8 1f 38 87 e0 83 08 20 e6 64 cc 42 3e 31 f3 5f d3 3e 4c 63 81 e0 cf f0 ad 2c 41 c9 86 65 6b f7 54 f9 18 01 72 a5 2b af 33 35 ac cd 66 32 e0 38 ca a2 e0 96 f0 58 18 0e 25 36 b1 8d 63 08 09 c3 d8 72 07 85 Data Ascii: 8PY~sQy-?'1x%'p`n1U\O3GnlF&338<cAg&fbb10gN~""0b_KO"8*?H%G04O<~8 dB>1_>Lc,AekTr+35f28X%6cr
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f3 01 75 b9 fb 69 04 e5 82 54 8a d6 5a 89 1b 66 85 70 ec cc 28 cb 8b 2f 50 f5 dd 18 2a c5 6b cb 14 65 66 71 0d a8 45 57 a2 ab 3b 90 42 64 be a8 22 d2 d2 c3 b4 e6 9a 2f 63 56 be 62 d6 a8 0b 85 ae fe ee 8a c5 fd 8e dd d0 02 4f a8 e2 bd 0d 8b 45 1f d7 bb 1b 42 7f 56 dd 83 fa 9d e6 37 f5 2b f2 df d5 b7 0c bf a0 de a0 be 8e d2 47 5b 12 06 06 03 86 d1 ed 37 68 1b 36 b3 9e 97 5a bd 9d ac 92 2e ad c2 ad 7b 15 ea 5e b7 54 ce b7 a9 c6 ce 59 ed 59 e5 e5 2a c0 3b ec 11 4a ec 59 05 38 2a f5 a3 96 59 cc 89 da b0 3b 0a 3e ee be c4 6d 3e c1 95 f6 ba c4 09 a8 6c b1 0d f6 f1 a7 d6 b5 cb b7 35 ed 5e bf 62 ca ef b6 ad 7b 85 02 b6 d5 aa cf 5a 2b 59 8e 25 94 a8 0c 5b 11 ab 1c 15 a7 3e 25 2d b5 85 9e 56 b6 60 03 71 2c ae c3 cf b0 b7 22 58 08 41 20 f2 68 e8 19 0d 0a e7 5b 4d 68 Data Ascii: uiTZfp(/PkefqEW;Bd"/cVbOEBV7+G[7h6Z.{^TYY;JY8*Y;>m>l5^b{Z+Y%[>%-V`q,"XA h[Mh
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 52 92 ed f6 16 ac 2b 71 31 49 ca b0 58 ec d8 46 af 2c e1 4a d9 71 53 6f 12 6e 71 3d ce 8a 7c b7 f5 c4 22 ee f5 9f fe 56 a0 e0 3a ca 92 dd be c6 de 1a 6c 2c be c6 ba ba 8a 0f 6b 58 11 18 61 ab c0 bb 5e fa 4a db 55 cb af 6a d9 f7 54 42 3e 42 94 b5 b1 55 56 de fb aa f7 4e 83 14 ec 58 d5 d7 5a 6d e6 75 eb 75 f7 5b a9 a9 4d 15 ec 72 67 64 69 77 63 5d 2e 2e a1 95 6f d4 76 f6 53 6b af a8 c2 ea d5 d9 c1 cd 47 92 25 4c 92 c6 01 c8 00 9a 2d 76 02 bc 58 83 04 b0 5a ec 24 5b 72 52 0f 71 75 55 bf f6 0b 5a bd 1e d3 6d 26 e7 78 89 b3 57 f6 1d 9b 6c 1f d8 db db b1 bd 7e db 59 8c 68 6e d9 ab 6d 97 38 d9 d5 65 b6 58 7f f6 90 f8 04 e3 75 98 36 4e 33 88 a4 63 ed 21 78 81 e4 cc 00 09 62 48 c4 0a 00 66 50 12 da f3 94 24 b3 12 06 63 05 13 c9 62 d8 2e e7 8f 2d 95 ad af b4 01 7b Data Ascii: R+q1IXF,JqSonq=\|"V:l,kXa^JUjTB>BUVNXZmuu[Mrgdiwc]..ovSkG%L-vXZ$[rRquUZm&xWl~Yhnm8eXu6N3c!xbHfP$cb.-{
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d0 b6 5a b7 5b 36 f4 6d bd 07 5d 62 ca 6b b7 35 69 d1 65 5f f3 f5 8c fc 25 11 b5 ac c1 b3 61 15 0d 4c 6a 28 e8 0a 30 b7 d7 6e bd 1d 5b d8 9f f1 5e 2f 46 f6 45 fe ba f0 7f 5e ac a2 ff 00 5f d4 9f f0 7a e1 3f e2 75 66 7f c2 ea cc 5e 87 ad 10 74 3d 5c 1d 1f 54 27 fc 6e aa 7f c8 ea e7 fc 8e b2 7f ca eb 44 1d 76 80 83 47 48 41 ad a6 27 e3 e9 cd ce ea 9d 4d a5 fe cd 46 68 ef 59 3b 24 fe c7 d5 91 ad d9 75 bb 36 fa 69 9e 8a 27 e3 eb c3 af ad 3f 1b 54 cf c3 d3 30 f5 fa 06 77 d4 6b d0 dd 3f 5f a7 76 97 fc 9e b2 1e a3 ac 9f f1 fa b9 ff 00 17 ab c1 e9 3a c9 ff 00 0b ae 30 f4 1d 71 1f ff 00 3d d7 98 7f ae f5 e6 76 bd 5d 3a 55 6b 75 3a 77 d4 c7 8c 16 2e 76 2e af 63 67 b3 75 4b 31 e5 4f db d5 eb 63 53 ff 00 2f 30 18 0f c0 c4 e2 a6 0e 19 b4 a9 6a 6f b3 f2 2c af 83 d8 29 Data Ascii: Z[6m]bk5ie_%aLj(0n[^/FE^_z?uf^t=\T'nDvGHA'MFhY;$u6i'?T0wk?_v:0q=v]:Uku:w.v.cguK1OcS/0jo,)
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: ac c1 9b 82 0f fe df 99 dc 51 c9 21 98 64 60 72 58 71 e4 74 e7 63 f1 3e 31 ae 6c 7f 85 8d 3b aa 66 1a af 47 4f 25 1c 99 40 96 a6 60 e7 1d 80 84 2b ad cd d5 b9 79 89 50 82 48 12 17 e8 dd dd a4 19 91 96 f9 29 77 49 41 b7 89 8f ec e8 c7 2f 34 79 69 53 c4 78 71 94 49 de bd b1 e4 1e cb 70 68 63 c6 38 69 04 da c6 f6 fd af 3f bc a2 c5 80 20 86 1e a9 a0 eb dd 3b 44 11 d2 f5 2b 62 b2 93 01 4a 80 67 d9 be 8a e0 70 32 7c 45 73 63 db f6 5f 33 f0 e9 10 b5 c0 15 2e 47 d3 bd 65 78 9f 1f 9f 11 4c 4c e9 fc be 35 60 13 32 37 bc ff 00 79 5b b2 f1 be 77 0f e2 53 e4 43 68 51 04 93 1a 3e e2 ef 50 e1 64 be d5 1c 3d d8 9c a3 76 fd fe 85 1c b9 49 cb 94 31 2e c3 7c 41 e6 70 31 6e f0 7e ef dd d1 39 1d f1 05 04 ae 45 e8 bf 41 b2 32 fb bc 5f 37 85 48 15 8a 66 18 78 65 db bb 5c 99 31 Data Ascii: Q!d`rXqtc>1l;fGO%@`+yPH)wIA/4yiSxqIphc8i? ;D+bJgp2\|Esc_3.GexLL5`27y[wSChQ>Pd=vI1.\|Ap1n~9EA2_7Hfxe\1
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 78 86 51 8c b8 d5 59 0d ac e9 bd 67 0f f6 74 de 2b 34 36 30 db a9 b2 1f 19 df 7c dd 0c 98 69 38 d9 c0 24 93 8b 26 28 ca dd 5c 98 f1 e2 4e bd 63 7f 0b 91 71 f8 6f 0f 8b 87 9f 39 90 87 39 2c f6 5f f1 33 78 8f b2 e2 56 3c 8f 72 3e 52 4a 4a 91 89 b1 0d de 3a e6 6f 7a ef 96 80 6d 23 43 1b 68 c7 97 4a 12 c0 2e 83 5d be ad 07 b2 e4 ca ad c9 75 ae 0e e3 2d 26 67 88 86 12 45 da 91 f5 1f ed 69 31 90 a8 31 0d d3 1a 65 d6 f7 e6 fc 4f b5 a0 7c 39 23 55 6c 96 ed d3 98 ef f6 49 75 28 18 c9 7c ad 72 e5 60 02 90 a2 dc 98 70 af cb e3 52 b3 1b b2 3c b1 92 20 01 4e ed 2a 80 68 62 03 7b 54 b9 71 13 8d b1 e8 e0 13 24 1d de 75 1c 6e ab 8d 32 69 c5 02 d6 c7 1f 11 28 0c c3 26 2c 79 90 b6 3c c9 0c d9 1f a0 d9 37 5f 87 89 fe 5d 13 9f 0b 36 20 60 ce ef 33 a0 dc 3f 75 58 d3 12 15 ca Data Ascii: xQYgt+460\|i8$&(\Ncqo99,_3xV<r>RJJ:ozm#ChJ.]u-&gEi11eO\|9#UlIu(\|r`pR< N*hb{Tq$un2i(&,y<7_]6 `3?uX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	62698	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:25 UTC	979	OUT	GET /wp-content/uploads/2022/07/hotel-009-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:30 GMT Accept-Ranges: bytes Content-Length: 477104 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 1c 5c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 38 3a 34 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: \ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:08:42
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 Data Ascii: mPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 87 c0 b7 41 f4 5b 5e df cc fe 73 d3 ff 00 09 fe 0d 68 7d 63 b8 b6 eb d9 5d 86 0b 2b ba c2 43 43 89 70 8f d2 e3 fd 0a 5c ca ad af d4 c5 67 e8 6c fe 7f fc 37 e8 aa f4 fc bb 44 e5 64 39 ee 16 48 ad db 83 e5 c0 8f 4f d6 13 eb b7 db fc cb bf f3 e7 f3 4a 3e 5f 20 30 8c b2 82 63 21 fa 3f 3f ab d5 03 c2 99 8a 24 42 b7 ea ff 00 ff d4 e7 99 fd 0e cf a5 f4 bf c1 fd 2e 3f ed 67 fd d6 fd c4 27 77 fe 73 86 f1 f3 ff 00 c0 ff 00 79 72 09 29 0f 5f 20 d2 1b 7d 4b d4 77 7f f3 dc 1e 7e 9f f6 10 3b 57 f4 7e 91 e7 e8 72 3f 9e ff 00 85 ff 00 d1 6b 9e 49 28 ff 00 2f b5 27 7f e5 d9 e8 2c fe 71 ff 00 1f ed 70 3f f0 3f f4 6a 34 ff 00 3e df 97 1f 0f f0 5f ca 58 29 21 2e 89 8e cf 47 5f 6f 8a ee ba 3f f4 6c 2f a1 fc dd 9c 7f c6 33 fd 7f a8 bc 89 25 5c ef f6 7e 61 b9 8b f8 be f1 9b fd Data Ascii: A[^sh}c]+CCp\gl7Dd9HOJ>_ 0c!??$B.?g'wsyr)_ }Kw~;W~r?kI(/',qp??j4>_X)!.G_o?l/3%\~a
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: b7 63 aa 1a 2a f0 53 59 5f 83 8a 6c 0e 09 da 12 4f 3a 3f 66 08 38 3c a1 55 76 83 5d 53 1d c1 52 1f 62 c7 a1 66 3d 7a e2 9a a8 26 50 24 ac 5c f8 0a f2 67 aa 2b 2e 59 c4 49 4e 20 96 04 9f 1b 5d d0 ae 2a 41 a1 1a de f9 4c 9e 57 73 0c a0 64 22 1b 80 a4 84 24 df 15 6b 32 59 3d f6 27 d6 f9 ae dd 03 a4 3d 71 74 e9 e5 d1 06 42 47 47 be 32 62 c1 85 1c e0 b9 14 0a 20 eb 07 1f 8e 1c c4 5e 98 39 da 32 b3 f4 9c 40 da 6d 57 fd d0 ce 5c 7d 68 d3 3e a3 92 d2 f5 8a 57 33 16 4d fa 57 0a e2 e6 4b 6c fc 1b d6 9f 95 d0 39 9f 0f 19 ac 86 f6 03 b3 d3 ab 87 3d 00 b0 af 2c af a4 aa f1 bd 58 df a2 ce 64 dd cb 33 7e b9 09 18 7d 11 3a 3b 77 4d 83 ee 3c 54 4d 60 39 7e bb 15 fe 6d e8 5d 7e 95 e7 8f 1f 18 39 0e d5 f4 12 4e c1 d1 cb 78 76 4d f9 fb b6 9f bc c6 ce f9 36 bb f9 9d bc e4 ae Data Ascii: cSY_lO:?f8<Uv]SRbf=z&P$\g+.YIN ]ALWsd"$k2Y='=qtBGG2b ^92@mW\}h>W3MWKl9=,Xd3~}:;wM<TM`9~m]~9NxvM6
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 74 e9 bd 64 57 fa 59 fd 8e 5f 75 69 6b af 77 9c d1 99 e8 41 e9 d6 5a b1 52 e3 c8 be e9 99 ab f2 b1 95 ab cc ea a4 13 63 65 15 8b c3 57 22 7f cd 36 ec 7f 40 ef 93 7e cf 25 f6 fe 5e 90 d5 4c 6b 15 75 57 cf 3d c5 14 25 82 6f e2 2b e5 b3 c8 b8 26 a1 81 05 2c 8c b6 d6 89 68 98 d6 c9 69 91 d4 42 57 01 3e 8b 6f 16 d6 87 f3 37 f3 87 ad ab 59 6b d4 be 30 2a 4e aa f7 df 3b 6f ea 2f db 3c 6f e8 c0 f9 e9 72 30 84 c3 90 92 28 84 23 d6 08 44 f1 98 e4 c8 18 33 c3 c2 4a 9f 13 59 2d 48 f6 28 f2 a9 18 c9 72 21 8c 04 b2 63 da 22 3a a4 52 cb d1 cf 90 e9 d2 3c cf b9 f7 48 02 12 30 16 c8 9f 90 8d 3c 18 fa 42 f8 2b 62 5c 84 a8 85 78 29 a3 25 64 d2 96 c2 0e 49 f1 81 91 1d 4a 7a 01 08 02 fd 25 cd 02 0a 04 44 a6 70 44 5e 64 ba ed f2 2d e8 16 b5 04 5c d3 e5 66 a5 f3 ba d7 1d 9a e1 Data Ascii: tdWY_uikwAZRceW"6@~%^LkuW=%o+&,hiBW>o7Yk0*N;o/<or0(#D3JY-H(r!c":R<H0<B+b\x)%dIJz%DpD^d-\f
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 9a 43 17 d6 e2 3d d7 94 b3 e9 6e a2 d0 d3 a9 49 e3 e9 5b 75 ba c2 bb 4e c8 62 a3 81 8e 64 2d 52 b0 12 0f e4 be 2e 12 64 d5 19 66 23 0b 54 6e 4c f8 19 e8 9d cb f3 2f 56 3c eb bb 65 a2 af db 2a 8b 66 ad fb e6 6e e3 5f 7d 9a 8f b1 56 c9 c9 bb a4 bc 6e 8a 45 e5 59 78 fc fb 48 7e 63 7d a7 3a bf 71 b1 c5 66 4a 3d 22 89 dc 58 7a 5b 2b c2 de b7 b0 b4 3e 3c fe 8a f3 2a 97 68 bb a4 67 b6 d1 dc 62 44 b4 49 7a 15 6c 9a 6a aa 9d 64 42 c7 65 7b 5c 36 cd d4 c6 23 a5 72 6f 6b 4c 0d 76 10 aa 4f db f9 e3 d6 d0 37 8b 43 e5 69 51 a9 b5 f2 3f cd 68 4c c9 8b 37 cf 25 66 c3 3f 9a 06 2a 9c 2b aa fc 4f 15 ae 4c 4a 56 5e f4 b6 dd 9d 16 fe 2b ab 1b 95 ed ec 96 2a b6 04 9a d2 b6 8f eb 96 ef 9a 28 c0 8f 49 e9 b0 53 e5 7f ca 2a f2 ab bc de 06 cb 35 00 55 b0 c2 ce 59 5c c3 51 2c a1 cd Data Ascii: C=nI[uNbd-R.df#TnL/V<efn_}VnEYxH~c}:qfJ="Xz[+><hgbDIzljdBe{\6#rokLvO7CiQ?hL7%f?+OLJV^+(IS*5UY\Q,
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: dc 93 cf 28 ec 71 63 92 1a 2a 0a ec 30 05 0c e8 01 8b 4d 0a 28 08 03 0a 38 21 07 80 c6 7d 64 62 53 9d 80 c5 ac 20 4e d9 61 44 2f 6e 32 24 2e 5b 93 ed d1 ff 00 19 9b 91 7c fd f7 97 59 45 1e b9 b4 0e b9 cf c7 3f 0a 57 c9 51 19 cb 84 7d 6a 38 02 46 15 0c 2a 00 17 12 9c fb 81 cf b5 24 85 a7 3a 20 9e a9 e4 21 38 12 9c eb f3 d8 e7 6e 33 91 85 43 09 e3 3f a9 cf ac 62 1a c5 c2 42 cb d5 23 17 5e e3 78 a8 f9 f5 9c 53 44 84 a1 69 0b 65 0e 09 51 50 b0 d3 49 8e 1c 42 24 9b ea 47 5f 6f 51 ad 53 2f dc cf 6d 9a f6 6a 25 ce 88 8a bb a8 01 9d 86 03 cd cc 44 1a cc 87 7d 62 66 d9 ec f2 5a 63 59 d9 ac 51 2e 1f a1 46 18 6e 22 a5 10 76 38 76 59 b3 df a9 b1 5d 02 4c d8 d5 cd 4c 08 b5 bb d8 29 cb 1e 99 d9 10 d6 d9 55 8e aa d5 83 e7 5a 62 4c ad 89 87 13 26 eb 66 b6 56 6a d6 2c d3 Data Ascii: (qc0M(8!}dbS NaD/n2$.[\|YE?WQ}j8F$: !8n3C?bB#^xSDieQPIB$G_oQS/mj%D}bfZcYQ.Fn"v8vY]LL)UZbL&fVj,
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: ed c6 d3 d7 3b 0e a5 ee 70 a7 a9 4a d2 41 f9 c0 93 89 e3 92 ef 18 09 5e 73 db 14 a2 b0 94 84 e1 4f 52 79 38 4f c9 70 e7 0a c0 46 1c 07 92 48 c5 02 ac 2a 4a 47 3c 86 d0 da 84 e7 b8 c4 f0 a0 7e 02 1d f9 5a f8 c7 5c 03 12 a2 43 64 3d 9f 1d 6f 56 99 82 4d 9b ed 8b 96 9f 92 e2 d7 1f ee 8c ec 6b 66 ea aa 58 65 b7 eb 52 53 b6 b0 97 45 8d 29 ac 1a e5 dc a9 0e bb ff 00 e6 66 f5 6f c5 45 ad 57 e5 c4 a6 6a 72 61 47 ee 5b ee 49 86 48 51 61 0e aa 29 5b 49 79 83 d9 34 0d 4a 55 ed 6c e8 10 60 95 3e ee bf 05 12 e0 b1 0d b6 82 5b 4a 72 d6 5a 23 b6 e5 22 d0 23 4c 6e 58 9d 19 6d 18 b6 b6 15 d2 a1 4d 6a d2 ce 04 70 eb 0e 25 a6 0a ed 12 a4 ae dc 44 72 96 f9 8b 46 dc b2 4b a5 bb 09 89 73 ed 59 13 9b ee aa 98 ab 60 56 3c e2 d2 24 a8 65 a3 2e 48 97 52 d3 b1 93 3d b3 21 b6 c9 61 Data Ascii: ;pJA^sORy8OpFH*JG<~Z\Cd=oVMkfXeRSE)foEWjraG[IHQa)[Iy4JUl`>[JrZ#"#LnXmMjp%DrFKsY`V<$e.HR=!a
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: a7 7b 61 47 21 28 57 04 a8 e1 e0 85 f0 a0 50 52 56 f8 c4 b7 fd 7e ce 0a 52 0e 00 a3 90 4f f7 90 4f 49 05 29 25 24 84 a7 9c 27 e1 43 ae 05 1e 14 39 c5 8e 4c c5 9e 12 94 0c 5a 8f 0a 57 da 3f fe 4a 8a 92 e2 49 08 17 b7 ea 82 f5 b6 d0 dd 6b 71 9e 32 91 6b 60 ca 58 b1 b1 91 02 be be 64 89 ec 46 8a 55 62 8a b8 6e aa fa e9 14 ef b9 b0 b4 87 6d ac c4 49 70 f6 a8 4c c6 fb 63 3e e3 48 42 31 d4 ab a3 9f d8 85 96 f1 4a 0e 8b 06 24 88 f7 3b 4c c7 de 8f bc c4 61 2d 2d 99 2d fd 9f 5b 68 79 38 b5 80 9b 7d 71 32 91 4a f0 93 1c b8 e1 c6 9f fb 4f e3 a5 26 52 54 85 45 87 16 4b 4a ad 64 07 2a d9 c9 20 32 95 3e ea 15 4b 2c 8c fa f0 a4 71 25 80 e2 53 93 a3 04 ab fe ec dc 18 cc ce 2e 49 7e 42 c3 09 31 4a 82 a1 29 79 5d 4b 1d e6 59 ba 85 52 d4 3d d5 97 1d b1 53 6f 38 fb 7c 95 36 Data Ascii: {aG!(WPRV~ROOI)%$'C9LZW?JIkq2k`XdFUbnmIpLc>HB1J$;La---[hy8}q2JO&RTEKJd* 2>K,q%S.I~B1J)y]KYR=So8\|6
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 59 68 c8 2e ce 2d a9 d0 b4 a4 09 c8 73 1f 88 90 1f 75 0b 1f 82 fb a9 52 9d 60 fd e5 45 56 4a 29 01 43 10 b5 20 ba e9 70 21 60 04 ac 8c 71 65 65 0d 17 57 f8 cf a9 6c ff 00 ea 5a 94 94 38 a5 14 80 a2 8c 65 a3 24 38 5c 68 94 a8 9e 9d 04 20 71 8b 06 8a 44 b4 30 b7 e5 a5 c5 c5 71 a5 e4 86 dc 79 2d a9 d4 07 5b fa d5 12 07 f7 2f 7d 99 0e a8 93 62 da 9b 0e 12 42 db 2b 68 0e 31 29 71 78 d4 17 de 5f f8 64 99 55 f2 22 64 18 6b 40 61 94 be 3f 0c ad 4a ae 59 2b 8a a6 f1 48 38 5a 2b 2a 64 9c 2d 2b 0b 6a 56 29 b1 c2 52 91 8a 1c 1e a9 27 91 91 f4 f9 ee e3 9a 7a 98 4f d2 db 2a 55 82 d2 57 39 f5 67 f3 84 f2 38 f9 09 c4 90 71 28 24 04 f3 91 b5 e9 8f 64 0a 16 63 e4 97 99 86 95 ed 8c 21 52 f7 27 72 5d bb f2 09 70 a8 28 f2 7b 12 39 e0 82 08 ea ae 07 f2 47 07 f8 c4 9e 31 2a c2 Data Ascii: Yh.-suR`EVJ)C p!`qeeWlZ8e$8\h qD0qy-[/}bB+h1)qx_dU"dk@a?JY+H8Z+d-+jV)R'zOUW9g8q($dc!R'r]p({9G1*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	62699	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:26 UTC	978	OUT	GET /wp-content/uploads/2022/07/hotel-10-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:32 GMT Accept-Ranges: bytes Content-Length: 497922 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 22 0c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 38 3a 35 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:08:54
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 87 eb 5b 57 eb 1f a5 fd 15 8c f6 7d a5 60 63 fd 61 ea f6 5f be a7 34 59 67 a6 ef 4d 8c 63 6b 16 54 19 e8 bf d1 b4 3e b7 5d 5f a7 ea d5 77 f3 9e aa b3 7e 65 bd 72 f6 db 9a 05 66 f0 03 ef 2e f5 5f 2d 0e 65 85 d5 59 e9 b9 94 b9 de 97 ad 4b 7d 37 ff 00 84 ab f9 a5 2c f2 00 75 3e 92 0f 15 03 c5 1f e5 fd 55 c0 d8 db 51 55 db cf 47 1e fe ad 9b 6b f2 6f 93 7d d9 6e 2f b7 27 69 0e 0f 77 f3 ae 6b bf c1 bf fe a1 8b 58 e4 75 1e a3 d3 e8 c1 cb 79 0f ca b9 b6 e1 3a d1 12 46 ea ed a4 ec dc f7 6d 7f a5 fa 7d 8c 7f e9 16 b7 4f e9 f8 9d 23 13 25 f9 16 3a ec 1e a6 e6 51 90 d6 6e a5 cc 63 5f eb 0a 9f 91 5b 5f fa 3b ff 00 98 b5 de 95 5e af e8 fd 2f e7 95 0e a1 93 83 80 32 32 ba 61 16 54 4b 1b 8b 92 f2 77 3d 84 97 bb 73 5e c6 7e 96 bd fb 1e dd 95 fa 5f f6 d2 86 5c 39 08 96 01 Data Ascii: [W}`ca_4YgMckT>]_w~erf._-eYK}7,u>UQUGko}n/'iwkXuy:Fm}O#%:Qnc_[_;^/22aTKw=s^~_\9
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 77 1e 9e 21 c5 2f fd 15 71 17 f2 8d 9f ff d2 c6 67 d2 27 c7 f2 ab 78 51 ea 92 74 1a 2a 8d e0 79 09 56 f0 81 1a 1e 5c 7f 82 cc e6 3e 49 79 53 24 37 0f 41 d2 c1 f5 1c e8 fc c7 7e 24 7f e4 17 51 85 ad 00 76 d3 f2 05 cc 74 b1 0f b0 81 20 88 f1 d0 06 ff 00 7a e9 2a ca c7 c7 65 6c b5 db 0d c7 6d 7a 39 da e9 b5 be c0 e4 ce 44 5c 6f c5 b1 23 e9 79 bf ac f8 b4 32 fa 9e c0 69 b3 36 d7 ba cb 98 f2 1c 19 43 07 b2 a6 06 fe 89 d6 bf d3 df f4 ff 00 eb 6b 9e be fc d6 61 bf 07 a9 e6 dc ea dd 2e 73 ac b8 9d a1 c4 b5 ae 6f da 4f a6 ea f6 fe 8f d0 b3 d4 5b 5f 5a fa a6 33 2f c2 7d f5 da c3 5b 6e 80 58 0e e9 2c b6 bb 29 3b 99 ea d6 ff 00 4b 77 ef fb 3f d2 2e 7b ab fa b9 8d af 03 0a f2 db 6f 1b 5d 49 a8 40 2d f7 5a f6 db b7 f3 a7 d9 ee 52 67 f7 4e 48 40 93 18 70 83 66 fd 3c 37 Data Ascii: w!/qg'xQtyV\>IyS$7A~$Qvt zelmz9D\o#y2i6Cka.soO[_Z3/}[nX,);Kw?.{o]I@-ZRgNH@pf<7
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 69 08 8b 12 ba 4f 46 ce 3c ea dc 65 6b 4e 07 ad 7f 36 d8 99 63 ef dc ea 3b 94 1a 14 a0 18 6c ef 90 cf a9 06 03 73 55 17 42 e7 47 fe 6e d0 63 e9 c1 a0 9b 9d 05 f9 7d a0 24 50 3c 68 ce bb 3c b2 fb 75 5d 9d ee 1f f2 ef 5d fc b1 ce 53 55 ae 40 83 26 db 19 65 ea ce bb 3f 6a aa b0 6a d5 7e 99 28 40 93 b3 63 96 e0 48 09 75 05 31 95 59 12 7a c1 c9 e6 ef 3a 87 96 b4 7d aa 5a e1 4d 61 d7 49 8f a0 56 13 3d ae 74 c3 47 56 38 82 d6 7c 64 ad 0a d8 d7 2b e3 15 d9 26 bf 4c 5e b4 ca b5 28 7b a1 ff 00 3b 6b e4 a5 8c 7e cb 3f 6e ab 2d 7e cb 53 bc 95 07 76 17 26 ea c5 96 48 96 da 66 6d 35 e5 b5 24 7b 22 e4 f2 df 3f 59 41 d5 fa ad 76 4a cb 15 ef 2d 70 c3 e9 ea 22 2e 90 e7 ee e7 2f 5b b4 ae ac 3a 9f d1 f2 3f 86 94 65 6c 80 ef ef 11 1e c8 38 0c 1b 99 a3 ef 71 ee ea f3 65 72 12 Data Ascii: iOF<ekN6c;lsUBGnc}$P<h<u]]SU@&e?jj~(@cHu1Yz:}ZMaIV=tGV8\|d+&L^({;k~?n-~Sv&Hfm5${"?YAvJ-p"./[:?el8qer
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 0b 05 2d 1d 3d 87 be 22 59 a5 92 70 88 8c b6 a3 ea 92 ac 73 03 6d 9d ae db a1 2c 02 50 9e 4e 90 b9 ab 59 9d 5c 9e 57 4c d1 60 69 6f bc 92 77 f4 ac ed 41 3a fd a0 77 6b 67 09 4c cd a5 92 bf c1 7e ae 4c ad 34 ba a1 15 b9 0c 77 05 b2 5d 58 f5 5b 06 e3 41 ad 00 57 c1 e6 46 0d 46 42 ce 4d ee a9 9d db c0 5f 03 39 15 4a 1b a5 3a f5 f3 e6 6c e4 36 d1 43 c7 4f ad e3 04 9a 14 3d f4 52 25 80 d8 6d d5 e6 4b 5e 85 46 12 d5 7e af 62 f4 95 31 92 85 09 e8 47 aa 25 fd 38 55 c5 7a 39 94 d1 d3 7d e6 e5 69 34 8a 97 90 35 c6 5a ee 68 1c 47 c6 50 5d 92 c4 00 97 c8 96 30 48 64 68 f3 62 d8 45 f2 cd 8e b0 8c bc e3 01 2e c2 42 3f 79 df 3c ef 5e f2 56 cc 2a e4 a0 fb b6 3e 7a e7 28 f3 e6 be 09 3e 3b a5 0a 23 d5 62 1a 3d c0 95 6d d8 02 3a 21 32 5b 7a 29 8e 10 cf 43 6c d4 54 59 44 77 Data Ascii: -="Ypsm,PNY\WL`iowA:wkgL~L4w]X[AWFFBM_9J:l6CO=R%mK^F~b1G%8Uz9}i45ZhGP]0HdhbE.B?y<^V*>z(>;#b=m:!2[z)ClTYDw
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: a0 13 73 dc ae 1c 93 03 96 82 a4 9e 2c 6a c7 83 05 9f 8e c1 1b e9 3f cd 26 a9 6c 8e c2 51 14 85 73 61 5d d1 4c 05 72 b5 f5 c1 9e 17 e5 a2 ae 1c c1 d8 d5 69 d9 23 64 30 56 3a d7 07 eb 1d ce f9 83 b9 79 28 e6 3d 60 40 9a 92 e4 ea 85 c7 19 58 10 2c ea 33 d8 50 96 34 8b 2a a4 ac 6a 1b d1 21 bd 65 06 82 ea 52 f7 4d c5 f4 97 43 06 5c c1 bc 16 17 c7 d3 8e e7 74 e1 2f 7e f4 07 3b f8 72 a3 34 1e 59 5f e6 62 3e 44 c2 23 f5 4a f8 1b 02 c5 cb a6 2a 32 ae 1a 11 ef 82 6c 0e 2b cf 37 cc 5f d6 ea 6b 76 e3 a6 2a 99 98 f3 87 d9 28 27 20 41 5d d9 96 9f ab 34 11 bf 48 4e e2 30 6b f0 a9 8d 23 7d f3 72 b4 39 bb 48 3b 1e 25 fb ea ea 1d a3 72 8b 97 7d 00 ba df 35 9c b8 d5 14 5b 70 d3 9f 6d 74 d6 2d 3b 09 90 2a ba 9d 6d 51 6a 71 a5 12 dd 41 5a dc 8c 5f 76 0c fe e4 8a fe 88 b4 35 Data Ascii: s,j?&lQsa]Lri#d0V:y(=`@X,3P4j!eRMC\t/~;r4Y_b>D#J2l+7_kv(' A]4HN0k#}r9H;%r}5[pmt-;mQjqAZ_v5
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 3d 84 9b 68 5d 35 02 d4 ed da 60 67 59 b2 d3 16 97 cc 39 1a 5c 90 f1 20 4e 6a 76 67 e3 8c 9d d0 7d 96 ac d8 d9 36 de a3 68 46 d6 9c db ac d1 eb 4b 01 ed a1 e1 48 f2 a5 9c 97 14 05 17 43 6d 7c fc 51 55 79 5c f6 79 27 0b 8b f1 95 8e 7f d1 7d b4 28 d9 b9 31 b6 9b 93 24 df 24 4e 15 4b 05 b2 70 eb 2b 42 30 4e 98 dc 50 71 7c d7 e7 95 4c d9 dd 26 52 0c 76 55 b9 b1 82 2d ad 8d 0c 0b 22 fe d2 33 43 3a 63 32 db d5 6e 56 35 a9 cb 8f 63 93 2c d2 3b 52 6e e5 33 2a c1 d7 a1 b9 5f 68 33 31 c6 5a 9b 95 f4 71 21 36 f3 0c 36 2e 57 7e ea b3 5f 1a 2b 3f b0 f3 2e b6 0d db 32 71 19 21 8e 64 de 34 e2 3c dd 84 75 e5 45 39 10 55 c1 e3 15 50 70 cd 4d 21 f8 00 bf ce 36 00 78 be 4b 8a aa b9 6e ff 00 b1 de 30 22 24 35 7a 10 92 0d 63 02 0d c7 57 1c 4a de 52 c1 97 45 99 0a 93 52 3c 47 Data Ascii: =h]5`gY9\ Njvg}6hFKHCm\|QUy\y'}(1$$NKp+B0NPq\|L&RvU-"3C:c2nV5c,;Rn3*_h31Zq!66.W~_+?.2q!d4<uE9UPpM!6xKn0"$5zcWJRER<G
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: fc 1c 34 e6 21 f1 90 c8 41 27 c8 29 18 df 99 2c 72 e4 51 10 c9 91 fc 5d 14 c1 e7 96 1e 46 9c 72 69 49 c8 d0 dd 01 6e 30 a6 3f 0c 5e c6 54 95 1e 84 5c f9 2a 67 92 e3 96 0d 37 96 0f 4e 7d aa a8 31 9e c9 9f f7 49 83 6a b2 71 fa a6 24 a3 b5 52 d1 c4 d6 d9 7f 23 52 94 57 9a b8 46 1f d8 da 6a 73 1f a8 0e b7 5a df bc 88 3d c5 0a d1 d8 c9 1e f6 52 64 ab 49 84 96 44 f4 4c 72 b9 a9 0c a6 b6 d7 09 af 78 0b 54 84 38 ed 7b 4c 8b 12 e4 da 95 66 b8 dc b7 d3 5d 6b 86 a0 7e be 4e ab 59 6e 14 22 03 72 bc 15 df da 83 10 aa 2d da 7a 54 da 58 96 ab 4b af 43 ad 45 61 85 5f d4 64 b2 c2 a5 a9 0d bd 46 0c 46 66 28 03 73 2b fd 4c bd 02 33 c3 22 ad b9 19 72 5f a8 ed ac 71 69 fb 1a c5 69 b7 90 a3 0d 05 1c 0b 12 a9 84 cc 62 b4 25 26 07 fe 09 e2 99 cb 7e 24 24 98 8a 89 96 50 e4 3d 26 Data Ascii: 4!A'),rQ]FriIn0?^T\*g7N}1Ijq$R#RWFjsZ=RdIDLrxT8{Lf]k~NYn"r-zTXKCEa_dFFf(s+L3"r_qiib%&~$$P=&
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: f6 bd a9 1a 3b ac 4b 96 cb 4f 0b ce 1c 29 8a e8 c7 12 d9 df 69 c0 15 c4 2f c9 1b e0 48 f0 c1 55 11 57 1e 25 15 0f 2f 22 14 40 7b 8f 17 9d 5f 22 3f 69 37 f8 99 1f 88 b8 6a 6b 00 d5 64 83 86 e0 a3 aa 18 cc 92 77 20 8f 91 7c 21 33 0d 64 a4 16 5f 44 89 1a 63 4a f9 34 83 15 04 d2 4c 50 90 a7 04 10 21 b6 eb 31 a2 38 aa bc 72 a7 e4 98 2e 21 a3 8f 36 19 69 76 11 18 8b 06 25 ab f6 d4 2d 59 3b 08 1d 71 e6 ab 99 60 52 2a 49 c7 d5 ef 64 a6 89 c5 69 86 f8 9f 4c 00 a4 f2 b3 1c 27 70 56 8c b1 6b 5c 3a e3 95 4f 34 f2 29 2a ae 58 c4 f1 c1 15 cf 24 e4 7e 30 89 5b c5 05 55 ba 9c b1 d6 d6 73 6e 38 ec a6 d0 5a 95 c4 7a b8 a6 c9 41 6d b6 d9 44 f8 27 c0 1c 36 bf 14 34 5c 44 e1 60 12 a3 90 94 95 c3 6d 45 14 79 5e 14 32 63 6d 9b 8a c7 0a 8c 22 62 c5 f2 c9 0d 13 79 c2 2e 26 5c a8 Data Ascii: ;KO)i/HUW%/"@{_"?i7jkdw \|!3d_DcJ4LP!18r.!6iv%-Y;q`RIdiL'pVk\:O4)X$~0[Usn8ZzAmD'64\D`mEy^2cm"by.&\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	62700	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:26 UTC	969	OUT	GET /wp-content/uploads/2023/01/0hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 09 Jan 2023 20:27:49 GMT Accept-Ranges: bytes Content-Length: 692099 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 22 2b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 31 3a 30 39 20 31 37 3a 32 36 3a 33 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "+ExifMM*(1!2i$''Adobe Photoshop 24.1 (Macintosh)2023:01:09 17:26:30
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: da c7 ff 00 3d b6 d7 3b dd 45 6d b3 d4 f4 d6 8e 47 49 e8 99 9b a9 ad b9 18 b9 0f 79 6b 2f b9 d2 d7 3c fd 0f 59 bb 7d 3f 4a c7 3f 67 ea ef f5 2a ff 00 08 9b 03 ea e7 53 66 59 ca c9 ae a7 56 d6 bc 0b 59 78 3b 9e 06 c2 e6 6c de ff 00 de af df fd 7f e6 d3 0f 33 03 8c fa 84 32 81 be 58 c6 1e e4 a3 fa 5c 3c 5c 1e af ef 32 86 ed bd 06 69 ad fd 0b 28 d9 9b 8a c1 ea 34 b8 56 db 18 e0 77 ba ad ef 76 d6 ed de cf f8 2f f0 9f e9 16 45 76 e5 d1 5d 38 59 bb f1 6b 63 a1 8c b0 39 d5 c9 1b b7 b0 39 cd a3 dd fe 92 ad fe c5 7e ab b2 69 b1 f9 34 b0 d3 6f aa ca ab dc e2 e0 08 dc 5f 2d f7 ee 6e c7 7f a1 ff 00 8a f4 95 bb 7a bf da 29 a2 8c b6 8c aa 5e 36 5f 0e df ba c1 fc d6 5d 47 6f a9 8b 73 1e fd bf a2 ff 00 8b 4d c5 cd 73 38 a4 0e 99 63 a5 ca 35 8f 2f ef 4b f9 bf 47 fe 93 59 Data Ascii: =;EmGIyk/<Y}?J?g*SfYVYx;l32X\<\2i(4Vwv/Ev]8Ykc99~i4o_-nz)^6_]GosMs8c5/KGY
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 1f f7 5f a0 8d 2f 57 ff d2 c4 ce ea 63 24 58 31 4d 34 31 f6 39 b5 fa 7b 98 49 1e e7 5c cc 6a 3f 46 da 37 7b 59 b5 ac ff 00 b6 b7 d8 a1 8b 75 7d 3e aa ed 60 a1 f9 b6 7a 84 5c e6 b8 34 b1 85 8e f5 b2 eb c7 fa 55 54 e6 59 6d 7b 7f 5b ff 00 0d 6a 8d dd 11 f5 6c 7b 2a 6f a9 5b 1b 95 91 69 73 83 2b c7 2d 6f a4 d0 ca dc 7d 9e 91 63 bf 47 fa 4f e5 ac df b7 5d 65 ac a2 82 43 5e 36 d9 6b e1 8e 74 02 7d 4f 68 1b 2a ad bf 42 a7 7a bf e7 aa 30 8c 64 08 86 df a4 65 dd 04 d1 7a 46 f5 07 1b 6c c7 eb 4d 7b dc ff 00 a1 45 7e 9b db 27 6b fe d9 8b 5e 33 6a 7e cb 7d 9e 9d 96 3e eb 3d 25 43 a7 d1 87 d4 da e6 bb 05 8f a8 3d e4 33 1d de 93 f6 33 f9 e7 b6 f7 7e e3 7f 4a ff 00 67 e9 3f 45 5a a1 f6 b0 ca aa a7 29 ad b5 f8 e0 55 b3 d5 3e 99 00 ee 63 99 f6 47 b5 ff 00 a3 fe 62 b7 7a Data Ascii: _/Wc$X1M419{I\j?F7{Yu}>`z\4UTYm{[jl{o[is+-o}cGO]eC^6kt}OhBz0dezFlM{E~'k^3j~}>=%C=33~Jg?EZ)U>cGbz
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 68 55 19 c3 3c e1 c8 f3 93 f1 76 1c 81 a3 d1 9e 08 c9 30 b4 47 e4 3f 85 f4 8d ce e0 f5 2c 1b 18 ca a6 91 2c 6b 26 68 d5 d4 9c a8 e4 f6 66 ac 5d 60 d6 87 78 83 9c fd ba 47 e7 30 98 1c dd d8 99 15 4c 7a a8 fa ec c5 5a 6b f4 3a 5b 45 af d1 a1 10 af f4 8f 6c 47 07 9c 93 18 ba 27 cb 9b 12 5d db 75 57 43 cf 01 18 12 1a 1d 2e 24 79 19 b4 ef 39 b8 fe a5 fa e8 be 23 11 39 57 64 cf f0 da 9e a9 57 9e 71 72 95 3a 84 27 67 ce 73 1b 1f 1d 57 d3 b7 22 95 b9 dc e3 b4 bf a7 02 50 6a f0 e2 a1 52 34 5d 1c 1c 1a 7e f3 32 27 24 f5 5c c6 fc 58 5d aa 4a 76 1f 9b b7 cb f0 2b 05 2f c8 e1 52 e3 d7 9b 75 5c 81 02 4a 57 9c 5a b3 df 3e b7 a0 d2 a2 6b 2e 2c 51 94 33 5e 50 fb d7 2d 12 53 ed b4 bc 9a d3 c9 63 87 4b ce 0a 10 ae 43 26 b2 d3 dc fb 35 47 60 38 0a d5 98 fb ef de 63 db 28 d5 Data Ascii: hU<v0G?,,k&hf]`xG0LzZk:[ElG']uWC.$y9#9WdWqr:'gsW"PjR4]~2'$\X]Jv+/Ru\JWZ>k.,Q3^P-ScKC&5G`8c(
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 2f 79 f9 f7 3f 11 55 9a e3 eb ad 83 4a 51 7a c8 13 1f 99 3e be 43 f4 5d f0 89 6b 9b 3a a1 97 92 cd 4d 4e 12 ef e7 93 e4 13 d8 cf c3 b9 f2 0a 90 46 94 e9 ab d0 6c 4a e6 b6 df 54 8e e9 62 0f d5 38 aa 15 b0 81 f0 51 13 90 d0 49 bd cc 55 af 32 5f 2f ae 94 83 a1 9f a0 5a 4f 77 01 ff 00 cc 06 c5 be 58 81 e1 95 06 b8 97 e8 34 cd 9a dd 6c d9 5b 54 15 92 1d 0d 1a 9b 75 1d 92 5b fc 7d 84 e5 db 1b 27 9b 9f d9 de 13 63 e7 ab f4 42 bf 9c fd 0b 5c a4 d8 61 45 21 cf ec bf 23 a6 b5 fd 99 21 8b 00 b2 e4 23 21 4b c5 50 f1 58 27 fa e8 e0 54 6a cd ff 00 ca 54 b2 5b 2b 0f d0 6c 27 23 42 ef 17 4a d7 64 8f aa 41 a7 80 e8 36 9e 06 51 5c 43 8d 74 06 b4 6e fb 93 19 ff 00 44 b8 f6 6c dd 77 2d f8 0b a2 1e 0e a0 ca 34 8a cf 94 e7 76 21 b1 6d 3d e7 0a ff 00 3a ef e1 a9 33 11 66 d8 63 Data Ascii: /y?UJQz>C]k:MNFlJTb8QIU2_/ZOwX4l[Tu[}'cB\aE!#!#!KPX'TjT[+l'#BJdA6Q\CtnDlw-4v!m=:3fc
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 0d cd 1c ab 36 3d bc 77 dd c2 99 68 f6 2d 4d cc c8 d9 32 c6 9f 63 2f 10 79 60 87 46 ce fe 66 de 06 25 da e0 a3 17 cf 69 16 19 65 85 cd ed a5 ac 64 52 93 d0 33 7b f5 c8 8e 3f 3e 5b f2 a7 f4 7f 0e 29 60 da 14 8e 08 3b e7 9b bb 33 5b 7c 58 1f 45 ff 00 9b 44 b1 b3 b4 e2 6d 7e 77 6c 70 b4 22 a9 46 df 45 5d 39 d4 9c 46 38 f3 cd 8b 94 cd 7f d0 aa ca 1f d0 d4 f1 3b 6f 0e dd 95 18 f7 dc 8a 7a b0 99 71 ed 4b 87 5a bf 5e 27 8d cf a5 fc 51 06 c9 07 46 f5 2c d6 85 48 b3 ac ee 48 f3 23 e5 a2 dc 33 f5 21 9a 68 82 5c b1 5e fc 2e 50 de 1c af c0 e5 4b 4a 68 a6 62 0b 61 61 ae 6e 39 e0 39 fd 5d 2d 96 14 6b 3d 92 6a 98 ed 52 91 a7 91 08 a6 80 65 35 ff 00 92 7a db bd c4 87 53 4e 80 f1 9e a8 0e 65 b1 62 7f 37 df ad 40 f3 67 a8 06 8b c1 4a a2 53 cc 0e c9 36 4a 65 8e 45 2e 2a 1a Data Ascii: 6=wh-M2c/y`Ff%iedR3{?>[)`;3[\|XEDm~wlp"FE]9F8;ozqKZ^'QF,HH#3!h\^.PKJhbaan99]-k=jRe5zSNeb7@gJS6JeE.*
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: a4 b2 ba 7d f5 5d 4e 76 09 b6 fa 3d 64 bc 7f 38 ac 86 0e 17 2a a6 c2 ba a9 6c a4 29 91 ae 6a 48 56 8d 1e a5 72 e7 a0 0c fd 32 9a b2 96 5a c1 bb 1e 92 b8 2a 28 e8 04 62 89 e4 f9 92 88 3f 23 a8 d4 42 37 cb 87 3d 57 c8 aa f3 3d e8 a3 71 5a 50 34 6f 2c 85 40 b8 6b d2 38 fd 1e a0 35 81 ff 00 57 55 73 dd e7 5c 13 a0 fa cd a0 b5 36 4f 86 c7 a2 15 16 75 95 40 c9 8e c6 50 e7 68 ab a0 02 f6 b2 fa 76 a3 91 ed 6a 1b 2a fe 15 c1 92 82 50 2b 2b c5 2c 64 65 75 32 27 96 73 81 0c 65 11 5f e5 64 5f ab d9 4b 1d 84 bf ad 79 c0 b1 08 f6 2c 47 22 74 5e 4f 4b aa 89 5f eb 74 ec d9 b0 e6 00 ea e5 6c 61 c4 93 6b 71 25 e7 b6 a5 ae 74 8b 68 10 41 5f 5f 87 b4 99 33 9f e3 db 53 11 19 f4 f0 cf fb 79 20 0e 5f 05 11 15 a3 82 8a f3 ca 1c 69 30 ca d9 22 14 17 05 93 23 35 48 38 de 42 8c 69 Data Ascii: }]Nv=d8l)jHVr2Z(b?#B7=W=qZP4o,@k85WUs\6Ou@Phvj*P++,deu2'se_d_Ky,G"t^OK_tlakq%thA__3Sy _i0"#5H8Bi
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 1d 2c 14 53 67 76 78 84 35 87 b0 96 52 2b ad 3a 66 96 f2 66 de fe 9e 96 e7 9f 76 1b 4b 9b 18 b3 3f f0 bd 57 ea 69 0c 13 96 bd 1c 79 81 45 f1 55 5d e4 a5 6b 9c 17 aa 79 25 8a 74 ff 00 af 81 a7 c7 6e 61 cf 8d 98 ea 76 0b 2b 3d ac 74 d2 44 94 a7 45 44 70 c8 9f 47 d6 47 63 7c 7b 1a ae 58 e9 f5 6c 86 ab 20 7f 8f 0e 49 48 93 4f f9 45 15 15 eb be e7 70 6f 13 ff 00 5a db c4 f0 9a b9 54 14 10 7b 2d 81 b4 73 21 4d 0c 9e 8b a4 24 c6 8a 13 15 0f 29 7e b5 f5 ae 99 2b 15 95 8b 56 35 72 7c 7d 5a e7 01 18 46 97 fe 7e 1c 4e 72 94 df 24 2a 8c 9e 1e 22 39 cb ff 00 c2 a7 d4 73 08 e4 29 84 a4 1e 97 97 8c 8c b6 ae 91 5a 41 1c 4a c6 c8 6b 9c ba a9 6c 78 6d ff 00 fc 8d 95 14 05 74 5c 7c 3a 6b 3b 5c a5 88 ec f0 71 2b df 5b a3 cd c9 9d 15 69 74 63 bb ab 14 68 2f 7c bf b3 06 8d 1b Data Ascii: ,Sgvx5R+:ffvK?WiyEU]ky%tnav+=tDEDpGGc\|{Xl IHOEpoZT{-s!M$)~+V5r\|}ZF~Nr$*"9s)ZAJklxmt\\|:k;\q+[itch/\|
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 92 1d cb bf 1c 79 2d 77 92 91 3e 3f e2 a8 63 b1 7c e8 57 c5 b2 8f 59 9d 4f c4 5e 3d fe be 0e de be 35 b1 29 31 10 8a 9c fe 24 37 cb d0 61 61 45 36 26 9a 35 dc 3b 32 ba 3d 9d 64 84 1c ba ed a5 60 e9 e1 f5 f6 57 0a db aa dd ca f0 f3 e4 1d 51 a9 e2 2a 33 c7 bb e1 c8 e4 f3 eb f3 e3 51 15 1c c4 54 00 d5 7c a0 e7 13 95 d4 55 83 70 cf 09 a8 f7 4a 90 34 fc 27 1c 7c dc ff 00 d9 65 b2 a0 c4 17 2b da 56 a9 91 d1 5e 84 22 b7 e3 57 cd eb 1f 65 a1 e0 24 0b 6c 73 f3 60 9c b5 62 47 8f 28 f7 37 3d 41 fa 24 1d 8b 9c d0 c5 42 3b 71 c8 99 71 63 4f c7 f7 0d b2 ed fa 89 90 9f c0 59 3a aa 9f 4d 65 63 b1 b9 e5 be ba c9 a2 b9 3c 94 22 6b be 87 93 cc ea 52 35 6b cc f4 55 2f cb 43 f8 9b e6 ba dc a8 1b 4c 7b 47 2a d3 4f 59 58 20 58 1c ad d6 d9 c7 b5 a4 93 ab b4 58 31 e0 36 c6 55 a4 Data Ascii: y-w>?c\|WYO^=5)1$7aaE6&5;2=d`WQ3QT\|UpJ4'\|e+V^"We$ls`bG(7=A$B;qqcOY:Mec<"kR5kU/CL{GOYX XX16U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	62702	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:26 UTC	970	OUT	GET /wp-content/uploads/2023/01/00hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 09 Jan 2023 20:27:52 GMT Accept-Ranges: bytes Content-Length: 660663 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 20 b8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 31 3a 30 39 20 31 37 3a 32 36 3a 34 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 24.1 (Macintosh)2023:01:09 17:26:46
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: ef 43 f9 da ff 00 a7 7d 2f e6 ae ff 00 5f f3 17 12 92 a5 97 f9 9c 9e 7f f7 4d 83 f3 45 ec 1f fc e6 4f 1f cc 55 f4 7f ad 4f f4 3f fb bf fe 87 ff 00 41 d5 7e 89 ff 00 6a 7f a4 ff 00 35 7f d3 fe 8f fc e6 3f f3 ff 00 fb b5 ff 00 09 e8 2e 5d 25 5e 7f cd cb c8 7f d1 59 d4 bd 6f 4d ff 00 c5 17 e7 7d 13 fc e7 f3 7c 9f a1 ff 00 75 ff 00 ef 8a 9f 5f ff 00 94 bf 33 e8 8f a7 f4 7e 93 bf a0 ff 00 dd 6f f4 7f f0 9e a2 e7 92 51 c7 fd d1 ff 00 52 8a 8f ca df ab f9 97 7f 35 fd bf e7 39 7f d2 ff 00 5f f4 6b 63 27 f9 ee 95 f0 af fa 9f 49 bf 47 f9 3f e8 bf ee af a2 b9 84 94 ff 00 e5 e1 fd e9 7f d0 4c 7f 4b f9 75 7a fe b9 fd 27 ab 71 fc f5 1f cd ff 00 3b fc cb bf f6 57 fe fe a8 74 0f a7 67 f3 9f 45 df cd 73 cf fd a7 fe 47 fd c9 ff 00 82 5c fa 4a 29 ff 00 37 97 fc 0f fd 27 05 Data Ascii: C}/_MEOUO?A~j5?.]%^YoM}\|u_3~oQR59_kc'IG?LKuz'q;WtgEsG\J)7'
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 88 90 e8 8f 0f a2 d5 09 12 32 91 34 41 3c 51 d3 e5 64 96 4f 4c 63 db f8 36 3e c7 7b 71 69 ce 35 b2 da 2c 3b 40 71 20 30 ee f4 9a e7 c3 aa b1 ad 7e cf d1 5b 5f e8 bf 9c ff 00 47 63 16 95 b8 78 2c af 27 36 ba 83 71 a8 73 a9 b7 1e b2 f9 2f d8 5f 53 9f 63 87 e9 b1 ee 7f a7 b1 8f b7 d5 ff 00 ae 7f 38 0e a0 dc 5c c6 37 33 17 25 94 be 96 b4 fd 85 c3 61 6e d0 7d d5 3e d7 6d b1 8e f6 fe af 8f ff 00 19 fa 3f d2 2d be 83 66 3e 2f 4d aa fc a3 5b 29 af 73 99 61 ac b7 f4 8f 2e b2 b3 7b 5f ef cb 75 56 b6 ab 19 b5 9b 3f 9b ae b5 4f 36 59 7b 62 67 8b 8b 8b 87 80 09 46 5e ad a3 fd 69 7f 5d 50 02 e8 55 55 da 4c 6c ab b3 72 36 d3 73 18 df 4d 96 e3 b9 82 1f 51 a1 ad f4 b6 c8 af d3 fd 1d 5f 4d 8d fc cf e7 2c f5 15 fc 8b ba 86 5f 54 c5 ad cf 9c 49 35 b0 56 1a db 2e 70 6b 32 ee Data Ascii: 24A<QdOLc6>{qi5,;@q 0~[_Gcx,'6qs/_Sc8\73%an}>m?-f>/M[)sa.{_uV?O6Y{bgF^i]PUULlr6sMQ_M,_TI5V.pk2
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 1d 51 ec b2 fa 59 32 1b ea 41 e0 61 f7 5c 2c 84 e6 a6 72 dd 01 36 bf 8c 1f 17 f2 65 bf a9 16 45 66 1e fc dd fc 04 66 fb 33 9e 6a 03 3d 2e d5 59 46 36 e1 9f ac b7 57 9c ff 00 e1 61 75 57 26 4e c0 9d 65 14 2f ac e7 d6 77 d1 08 5d 6d 96 79 05 d3 af fd 44 bc 96 58 b7 ca f4 43 0f 4a 46 88 40 79 3a 61 79 f6 48 4d 88 80 b6 0f b6 21 2a c3 33 29 6a 6b ba 2d 74 81 e5 41 e2 cc 4d 9d 1e f5 74 76 43 26 fc 09 3a e9 fd c4 18 8c 5a bd d1 c5 e0 de 0c c9 0e 8b 64 f7 4a fa 5d b0 c1 9d d1 a8 19 61 2b 67 a7 5e 60 33 78 ad 8e ac 51 11 5c 96 f7 35 f4 2a 6c 59 96 e5 c3 b6 13 6f 61 3a e7 21 63 b4 4a 96 70 73 9e 95 a0 7c 71 d6 2e cd 22 d3 e4 57 a9 f1 e1 71 21 9d 46 be 87 80 f1 be ac 5e 8b e3 14 cb 6c 3f c7 bc fb 4b 9d bf 63 74 a2 3d 34 1c 87 a3 cf cd db 99 7c 58 9f 34 bd ea 13 f5 Data Ascii: QY2Aa\,r6eEff3j=.YF6WauW&Ne/w]myDXCJF@y:ayHM!3)jk-tAMtvC&:ZdJ]a+g^`3xQ\5lYoa:!cJps\|q."Wq!F^l?Kct=4\|X4
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d7 3b 59 a2 03 aa e7 24 0f 07 e8 c9 85 eb a6 58 ac 4b 20 27 34 c0 3a 86 65 d7 2b 52 1a 23 19 18 3a 8e b8 27 93 0d 16 5f 34 b6 e1 c6 cb 9c 72 28 ef 9e b5 be a5 42 3a ef 74 62 67 c6 c5 65 a4 de a1 c0 1a 95 9f 6c 44 32 b5 55 91 55 86 67 63 53 80 ff 00 74 26 58 50 b2 00 ed d5 4f ec 7e ab 99 4d 78 e9 68 59 bf 3f 37 73 c2 bd d8 4c a1 36 25 7d 6b a6 d2 e6 fd 67 68 b1 aa 99 44 3c 60 e4 19 d9 3f 6c b2 eb 7c 0c b6 f0 23 c3 48 91 6c c8 8a dd 44 8f a3 a9 72 08 50 a0 d0 88 4c 91 5b 79 b2 6b 44 10 3e 58 d5 9f da 40 bf 93 7f a6 39 1d 6d ae c0 1b 8c fb 58 69 c8 4d 6a eb 76 8e ff 00 d3 4f 3f b5 39 0d f9 3a 8f 9d 0b 37 ad 6e 18 09 9c ae 55 db 4c 92 75 d0 af d5 a8 52 fe b7 2b de 7a f4 be 47 92 83 c7 db a0 c3 b4 07 7f 6d f8 c7 42 f4 67 c4 b6 0c c4 d4 87 27 3b 74 39 52 f0 e9 Data Ascii: ;Y$XK '4:e+R#:'_4r(B:tbgelD2UUgcSt&XPO~MxhY?7sL6%}kghD<`?l\|#HlDrPL[ykD>X@9mXiMjvO?9:7nULuR+zGmBg';t9R
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: b9 a9 d7 34 b3 16 94 fb 72 89 71 29 46 8a d5 83 da 6f 56 31 19 5b 48 9e d2 92 d5 5e d7 76 60 c4 8d 98 ae 78 75 55 63 3e b7 9a a2 67 76 a6 b8 f8 fc c5 da 5c 40 9f 40 45 e3 25 25 10 cd a2 fd 48 37 49 9a f3 6f 8c b3 aa 1c cf 12 ca 3d 5a 81 85 b3 1c 43 d4 3a f3 1f 27 3a 61 bd 21 c4 5e 6a a9 25 90 5d 61 87 b3 3a 7b 2a 7a 09 a3 b5 29 c7 02 a1 2b 15 ba 7e bc 10 bd 40 6e 29 12 3b 48 14 98 5f cb 54 ec d1 6c 43 5a 1f 4a 29 76 6e 37 a3 8e 8c a3 58 c9 39 4e 0e 46 9f 19 f0 95 2e ea 09 6d fe fb 6f d9 64 29 b3 d4 e8 4c 26 1b ab 7a 73 a5 cf b2 6d f9 a5 a7 1c be 60 34 38 a4 28 63 57 2a 51 4c f6 d1 01 89 6d 95 9e f2 db e2 88 4d b0 ce ed 1e 91 79 f2 f0 01 99 f7 82 4f d5 ae 64 36 dd 2b 5e bf 3f 9e 7e 8e c9 68 8c 6d d7 1e 43 f3 c7 df 21 a0 ee 1e a4 fd 06 f8 8a eb 16 9d 3e 76 Data Ascii: 4rq)FoV1[H^v`xuUc>gv\@@E%%H7Io=ZC:':a!^j%]a:{z)+~@n);H_TlCZJ)vn7X9NF.mod)L&zsm`48(cWQLmMyOd6+^?~hmC!>v
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 9b 8c 93 68 3e 3a 56 52 b8 7e b7 57 0c 69 28 98 93 35 27 c2 72 f0 ae ca 70 4c 44 e2 73 00 99 27 26 40 3e 53 f9 42 41 02 f1 c9 c8 a9 c1 e7 a0 26 f9 31 50 aa 1c c7 39 4d ec fc 86 71 ca 9a 26 15 c3 fa 0a 65 55 44 9b a8 a9 4c d1 4f 1c 90 4c 78 f1 70 e7 cd e4 53 51 42 8c 2d ec e5 21 2f a3 e2 35 c7 e6 f2 69 53 fe 14 2a a4 1e 27 28 b1 9c 3b 58 03 8d 14 ff 00 8d b0 ff 00 63 a0 00 2e d1 27 b9 c8 98 15 03 01 08 d9 75 c8 06 51 c1 dc cc 47 aa ec 5b 32 5d 02 95 a1 d5 28 48 4c 19 a4 2c 43 89 15 4d 23 14 dd 59 af 00 59 e4 d9 4c b1 b7 45 b9 20 3c 98 12 f2 46 e8 d5 54 54 3a 64 55 ba e1 f2 23 ec 99 0a 50 4f 85 12 0f 14 0f e0 48 23 cc 5e 69 64 8c 26 01 32 cd c8 05 fc 72 09 df 44 b7 78 8d fb 35 5a 3c 4c a1 55 32 a6 f0 62 2b ee 00 25 28 03 a0 2f 13 28 88 d0 2f 6e e0 dd 54 ac Data Ascii: h>:VR~Wi(5'rpLDs'&@>SBA&1P9Mq&eUDLOLxpSQB-!/5iS*'(;Xc.'uQG[2](HL,CM#YYLE <FTT:dU#POH#^id&2rDx5Z<LU2b+%(/(/nT
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 97 e5 12 97 d1 23 a0 22 df ea d5 16 28 bb 7c e9 e2 c5 8f 71 1c 97 20 a4 23 d2 95 84 ce 48 98 ec 43 4e 86 64 d2 be de 35 28 96 4a c9 96 d7 5c 50 2c 51 d0 2f 9a be 06 3f 22 51 56 14 dd 32 be e7 2c 1a 4b d7 1c c3 40 46 48 d6 dc b9 90 0b 87 c3 27 11 40 74 89 da 44 00 88 fa f3 d8 a6 03 3a 32 61 6e 8e 9a 76 dd 88 1c 8d d5 51 43 03 86 1f cb 63 09 54 33 72 24 57 17 26 e8 4b c7 2c ed 44 d1 30 97 8e 5d bb 7b 3a a4 8a 2a a2 dd 05 8e 8b 48 71 54 a9 22 a8 1a 12 35 14 85 d3 7f 26 8d 8f 30 19 d9 0e 55 0e 62 fa 3a 70 b7 85 8f f1 09 e6 12 4c ad fe 47 7c 5d b1 48 45 57 70 63 40 56 9c 1d c4 44 7a 48 ab 0e f1 14 1f b1 f2 98 5c 9f b6 06 b6 87 8b b9 55 d5 80 e4 38 e8 07 14 5c b9 55 63 a2 a0 79 8c 58 3d c1 f8 fc 59 45 fd 77 8e d0 76 64 92 07 02 98 b0 d0 64 08 d1 ab d5 14 76 8b Data Ascii: #"(\|q #HCNd5(J\P,Q/?"QV2,K@FH'@tD:2anvQCcT3r$W&K,D0]{:*HqT"5&0Ub:pLG\|]HEWpc@VDzH\U8\UcyX=YEwvddv
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: d9 46 29 29 fe ad 83 b4 a0 a8 ae e4 ae 67 4f c7 01 12 18 5e 46 1d c1 54 a8 a8 75 5a 43 11 31 66 df e2 23 e6 52 62 fa 24 eb 26 d2 29 57 6e 5b a4 90 94 0c a0 17 9a 1d f5 e3 35 09 25 20 f2 3a a9 98 27 1e 1a d4 0c 6a 01 59 87 48 0b 67 b5 0a e0 2b 37 f8 ea 2e d2 22 ce ea 69 c7 a6 a2 04 f1 1f 5e 74 f1 34 24 58 b5 35 b9 65 9e 4e e5 f2 9f 31 5b c6 bb 7a ba 95 36 71 83 63 b7 b9 78 5b 12 6b 0a 55 76 2a 8b 5a 2e 90 dd 59 79 fb aa 52 ec ac f9 89 de c6 d5 22 20 c0 ef 8d 07 16 df 45 62 d9 79 08 eb 13 75 82 2e f2 56 aa 5a 13 46 6e bc c2 c2 f6 3c 6c d0 6d 92 9b 7e 9c 74 58 52 63 13 7a df 3d cf 5d c2 cb 58 62 92 8c 77 41 9c 7a 9b d8 0b aa 8f db 54 ae 93 c1 1f 1f 2e fa 5e 34 b1 28 95 14 d5 30 f3 c8 94 51 6e 50 29 7d 84 52 f0 9f 2a c2 43 20 d9 33 28 33 ab 18 a8 24 54 cd c5 Data Ascii: F))gO^FTuZC1f#Rb$&)Wn[5% :'jYHg+7."i^t4$X5eN1[z6qcx[kUvZ.YyR" Ebyu.VZFn<lm~tXRcz=]XbwAzT.^4(0QnP)}RC 3(3$T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	62701	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:26 UTC	966	OUT	GET /wp-content/uploads/2022/07/001.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:26 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:22 GMT Accept-Ranges: bytes Content-Length: 117816 Content-Type: image/jpeg
2024-05-28 05:15:26 UTC	7957	IN	Data Raw: ff d8 ff e1 18 3e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 38 3a 32 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: >ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:18:22
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 03 a7 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 03 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 Data Ascii: numESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHT
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 39 33 33 37 38 39 45 33 41 45 43 37 38 39 31 41 44 34 43 31 30 37 30 32 46 31 31 35 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 34 30 46 44 43 31 33 45 45 38 32 31 39 38 33 42 35 31 42 42 38 33 33 43 30 31 38 41 30 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 41 42 46 41 34 42 43 32 41 37 33 35 38 37 32 42 38 41 45 43 46 42 33 30 38 46 46 33 30 41 3c 2f 72 64 66 Data Ascii: hop 23.4 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>3A933789E3AEC7891AD4C10702F1158B</rdf:li> <rdf:li>440FDC13EE821983B51BB833C018A077</rdf:li> <rdf:li>45ABFA4BC2A735872B8AECFB308FF30A</rdf
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 94 05 91 24 ac 89 25 72 94 82 24 92 24 d5 34 08 80 b1 00 00 09 48 66 81 ab e9 40 58 c4 c0 00 06 26 03 94 5c b2 92 96 6b 94 65 9b 27 17 2c 9c 5c b2 22 4a c4 0c 40 dc 41 b8 84 dc 1c 49 c5 ac 9c 48 9a 4a 59 11 2c 92 48 6a 2b 51 c4 8e b2 c8 ab 26 a0 24 d4 0b 26 40 2c 20 45 8e b6 b3 22 e5 91 10 91 10 90 88 62 06 85 60 02 0c 64 49 09 12 41 15 24 89 49 59 15 22 c8 a9 89 02 4e a0 4d 44 46 59 11 c6 ca 46 3d 31 53 56 45 82 00 23 10 30 06 d0 4a 50 72 ce 50 96 6c 9c 5c b2 71 16 64 5c ad c5 c0 00 00 00 03 41 27 17 2c 84 12 22 44 92 8d 49 45 59 28 a8 d9 28 a5 ac b2 0a e6 6a 2a c9 90 69 27 01 66 44 26 e0 4b 63 ad cb 37 17 2b 00 6d 10 da 15 89 c8 0c 00 62 18 25 20 8a 9a 48 a9 ab 22 48 22 31 12 92 b2 23 42 52 56 53 cf bb 8d e5 ef e8 c6 bd 48 a9 16 44 6a 85 21 22 49 22 18 Data Ascii: $%r$$4Hf@X&\ke',\"J@AIHJY,Hj+Q&$&@, E"b`dIA$IY"NMDFYF=1SVE#0JPrPl\qd\A',"DIEY((j*i'fD&Kc7+mb% H"H"1#BRVSHDj!"I"
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 89 fe e0 13 24 ea df bc 3e df db a8 fb 4f fc a1 fe 26 4c 53 85 29 a0 42 b4 82 27 5f bd 03 b5 12 11 f7 0c c8 3a fb 22 cf 00 e2 43 dc 0f db ee 50 24 21 ec 49 2c 14 dd 46 20 21 10 10 0c 80 04 74 25 14 c5 fe e6 2c e6 20 44 38 5d cd d6 c1 ef 1f b0 f4 0f b4 87 bc 7e cc ca 72 f6 72 51 81 26 43 b5 34 89 15 12 6c 1d a8 7d db a1 28 cb d9 ca aa 44 a2 02 9c a3 12 26 19 c9 51 62 01 51 fb 4a 2e bc 65 0f bb 3a 66 e8 c8 8e 80 7b 00 c4 b2 f6 20 c9 88 3d 02 9f dc 82 44 1c 01 28 a9 17 04 32 3d c4 88 c9 ff 00 72 72 c0 28 8f 76 4c 1a 28 87 56 56 57 f7 2c 51 2c 3b 8a 97 ba 00 aa c0 02 c9 19 19 d8 02 84 5c 4a 4c 5b f6 94 22 7b 62 e5 17 40 20 7d fe e3 a4 cb 01 33 23 10 c3 b5 10 bd 8a 3f 76 4c 80 53 fb 85 27 5e e9 ca 93 95 17 09 d7 8c 23 02 f1 81 43 a1 50 e9 60 78 b1 08 02 83 22 Data Ascii: $>O&LS)B'_:"CP$!I,F !t%, D8]~rrQ&C4l}(D&QbQJ.e:f{ =D(2=rr(vL(VVW,Q,;\JL["{b@ }3#?vLS'^#CP`x"
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: ec e6 05 57 e4 e7 38 db 56 2d 77 4e be 63 66 c9 dd ae d9 4a ac d5 ce 32 c3 7d 3a 73 69 ae 59 63 3e 46 cf c3 3a ea 85 d7 6d bf 3d 30 ba dd 0a 51 99 03 0e 29 4a bc 30 c9 2a 63 87 34 bf 90 ed ae bd e6 35 1d d1 b2 7a f6 62 e3 eb db f2 dd 76 53 5e 41 aa ba 6e cf c6 d7 ab 97 b6 d9 4a 56 58 70 7c 77 6e 85 87 86 e3 71 93 2e e5 0a a7 33 9b 8f 9c ce aa 7c 77 f6 ae d5 d8 bb 57 6a 21 32 31 28 c5 18 b1 21 10 bb 51 08 c5 18 85 d8 ac 80 36 f2 bc 2c 77 46 9f 8c 4d e9 e1 78 fa 54 60 20 19 10 8c 51 08 84 c8 84 cb b4 2e c4 62 42 30 25 4b 35 33 47 8d c6 4f f1 39 65 6d 9c 34 64 4f 0b 6a bf 1f 21 6d 32 e3 34 85 45 02 89 4a 89 2c d1 b6 17 5d c8 72 b9 6f ab e4 bc ce 79 4f e4 5c 81 52 f9 75 37 d3 97 e4 bc 65 12 ff 00 b3 71 9a a1 0b 73 98 dd bf 74 eb 07 75 99 b0 ce db 62 79 0d 59 Data Ascii: W8V-wNcfJ2}:siYc>F:m=0Q)J0*c45zbvS^AnJVXp\|wnq.3\|wWj!21(!Q6,wFMxT` Q.bB0%K53GO9em4dOj!m24EJ,]royO\Ru7eqstubyY
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 22 08 51 f6 99 93 4b b8 f7 33 9c ba 67 96 ed fb 6d bd 15 c0 ff 00 ed 88 ba f9 18 69 85 02 c6 52 27 a5 7f e3 b0 c7 b4 97 8d 27 fd a0 fb 98 ce 63 35 23 45 9c 7e 93 e0 ba d3 b3 67 19 b4 4e ed 16 42 d8 db 0a 6e b7 3f e0 71 26 3b af d7 8f 90 b6 19 6b 9f 2b 54 a3 aa 9a 6c b6 f1 56 dc b3 6b f2 ed ae c8 d1 9f 47 87 20 a3 1f e7 4b 4e 9f cc 80 be 23 8c ff 00 4d ba b4 4e 2a cd b7 c6 79 ff 00 23 c1 a2 a1 76 da cf 1c 33 47 3c bf 1f 93 e3 25 2a a3 0c fd dc a6 1c d6 46 da 81 96 0e 37 92 c7 6e 7e 37 77 8f 2c e5 cc e2 b6 63 45 33 37 d9 82 ac 1a b9 ae 27 82 1a b5 71 38 65 5d b1 22 8d 1a 74 6b c9 c7 43 85 cf 44 29 cd 7d 94 5b 46 b9 f6 ea db 3a a7 6b 4a bb f4 f8 34 53 b3 66 ab 6a ae 9a e1 0a a7 9f 0f 2b aa b8 db af 91 f3 df 8a fa e3 ae db 75 ca fe 7a 02 9b 30 01 69 a7 60 8c Data Ascii: "QK3gmiR''c5#E~gNBn?q&;k+TlVkG KN#MNy#v3G<%F7n~7w,cE37'q8e]"tkCD)}[F:kJ4Sfj+uz0i`
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 40 01 1b 5b 40 bd 5b 8e ee a7 05 f1 42 b1 59 a9 26 af 0b bb 32 9d 42 62 1d 44 23 37 4d 57 57 50 42 8a 1a b7 0a de 12 ca ca ca ca ca d8 5b 00 4f c4 80 eb ec 43 69 39 3a 82 fe fa 6a 8d a8 f5 7f 17 6c 31 84 34 32 ba 71 74 e5 6e e4 38 33 e2 6f 4b 52 70 b6 0e 8b fb 87 90 47 1b 21 e2 67 08 cf 80 65 38 32 ae 9e 97 38 3a 05 e5 e1 a1 0d c6 c7 1b 60 8c 16 e0 ef 3a 0e 3f 9f b1 72 e0 6d 1a 62 8e aa 38 d1 5f ee 79 70 4e e3 b9 9b 2c 21 ec e8 0f cc e4 a1 cb 80 d4 92 f8 34 d1 75 e0 4f 07 7f 97 1c 72 4e 78 21 47 86 dd d5 4a 7d bd 2a c1 7a b3 fb 94 63 ea 38 51 48 a9 7f 06 7a d3 49 cd 5f 22 a0 a7 27 34 0b 93 05 bd a9 b9 d1 f0 ed 23 82 16 83 03 eb 49 53 c2 d2 8e 9f 17 b2 ad cd 6d 39 b3 0f c7 80 2a f8 ad e0 27 04 e3 cb 89 75 74 ee b2 57 14 35 c9 05 1f 44 dd 5c ab 95 24 d6 06 Data Ascii: @[@[BY&2BbD#7MWWPB[OCi9:jl142qtn83oKRpG!ge828:`:?rmb8_ypN,!4uOrNx!GJ}zc8QHzI_"'4#ISm9'utW5D\$
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 77 95 e3 c2 fa 62 19 a4 8e e3 ef 30 8a 5d 4a d4 84 36 f4 ab 70 68 a4 54 02 dd 45 a6 dd 26 6b d9 45 76 e4 2c e1 6d a9 21 25 89 bf 36 32 2a 4b 8f 2f cc a7 2f b7 89 ec 06 45 58 b2 7c 90 63 76 79 7a ba 1b 0a 06 23 26 37 38 18 f3 88 70 07 a6 59 d2 44 c6 9f 52 48 95 ad ce 09 79 99 ae 7a 5a 49 11 21 44 6f 4e 93 22 fb 6d bb 29 0a 43 e9 45 60 7b ca 5d 33 5e 6e 5c 24 ac 49 87 1e d9 13 6d 10 93 b7 bc fb ad d3 e5 93 5f b9 aa f4 5f f1 1d d0 88 94 b2 ed e2 6f 17 d4 c3 4c f4 b2 fa 51 25 3b 7e 0d b1 4d bc 71 8c 9b 71 20 bb 01 ec 95 84 00 e8 af b5 f5 fd ad 4d 2e e9 a4 9e 53 19 31 cd 29 62 33 ba aa a2 bf b3 8f 97 2f 52 84 bb 9d cd e6 8c 82 ab 09 c9 81 1f 79 d1 1e 2d 58 c2 09 5f 21 73 97 ec 0c 62 ae 24 b7 ea af 02 33 22 8e d7 1c 10 7c a9 5b 96 8b 47 32 3e e4 1b e9 da c8 cb Data Ascii: wb0]J6phTE&kEv,m!%62*K//EX\|cvyz#&78pYDRHyzZI!DoN"m)CE`{]3^n\$Im__oLQ%;~Mqq M.S1)b3/Ry-X_!sb$3"\|[G2>
2024-05-28 05:15:26 UTC	8000	IN	Data Raw: 1e c0 7d 2e 1e 8d 2b 88 f4 9c 9d 36 65 6e 0c 05 a7 61 e9 7d 72 3e 35 0c 99 64 a4 78 91 8f 27 d5 78 5e 8b fb be 1c f5 be 9d 64 c5 37 4e b1 86 92 e0 00 c2 6c fe 4c 3b 7d ba ea 7f 75 1d 6a 18 89 89 91 b2 86 23 89 11 86 68 d3 f8 6e 92 46 92 56 a2 5a 45 8e c4 96 75 03 16 36 45 e6 c7 a6 9b de 12 48 d5 b2 07 20 40 52 3b c8 79 b9 17 1a e1 15 b8 79 09 1f d7 50 e9 12 04 99 70 26 fd 24 0a ed 06 ba 01 a7 2c a0 11 e4 fc d4 08 00 03 c4 50 55 c6 e4 d8 73 58 57 62 37 c5 20 a2 d2 45 c0 79 79 4d 71 18 fc 20 5a a5 66 25 b1 41 6b 92 6d 73 e4 1f 9a a3 fc 29 31 d4 25 65 94 b7 62 2e 25 53 87 79 e4 67 e4 ad a4 57 32 4d 3c c8 ab d9 c0 64 b9 be 3f 91 41 e2 03 29 ec bf 61 7f 3f ca a8 48 17 11 c0 4d ed 70 3a 9b ce aa b5 1a 5e c5 76 8f e5 51 7b 47 33 db 88 69 7e 8d 22 d8 5c 1d b2 df Data Ascii: }.+6ena}r>5dx'x^d7NlL;}uj#hnFVZEu6EH @R;yyPp&$,PUsXWb7 EyyMq Zf%Akms)1%eb.%SygW2M<d?A)a?HMp:^vQ{G3i~"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	62703	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	971	OUT	GET /wp-content/uploads/2022/07/02-hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:25 GMT Accept-Ranges: bytes Content-Length: 329098 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 2e ad 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 34 3a 30 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: .ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:54:02
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 76 3e 53 49 b0 b8 da ca 88 b1 c2 90 36 46 9e a7 1b fd 1d f6 6c 65 9e 97 bf fd 1b ea 59 9d 33 a4 dd 95 9b f6 73 67 a7 8a e0 6e c9 17 34 d7 b6 b6 b9 ac dd 55 db 1c df 52 d6 5b b1 ee f5 2b fe 73 f4 9f a1 50 a7 a8 e5 bf 3a ab af b8 d5 59 dc 7d 52 c0 e7 e5 80 5b ea b7 68 d9 87 55 94 fa 7e 9d 76 d9 ff 00 82 7b d7 53 d0 f1 5d 85 86 fb 5a 1c 2c bc b2 c2 6d 04 5b 5e e6 fe af 45 e2 ad ae c7 6d 4d df 7f f3 17 63 be 8f d1 7f 83 46 bd bb da bf 97 56 3c 58 fd c9 00 36 de 4e 81 73 d9 3b 62 ba ab 68 65 0c 2d 02 22 1b fa 37 3a c6 37 f3 6a a3 f5 5c ba fd 5b 19 eb 57 fb 8a b8 6e 4b b1 ae b0 6b b8 ef 6d 87 56 ec fd 2f f8 6f e6 3e 8b 7f ee 7d 5f cb ab fd 31 aa b5 f6 36 d7 62 35 d6 06 3b d3 fd 13 66 36 0d e4 38 d0 fc 76 7a 8e b7 d3 6b 99 b7 e9 d7 bd 2b 6f ae b7 d8 fb 1f b5 ec Data Ascii: v>SI6FleY3sgn4UR[+sP:Y}R[hU~v{S]Z,m[^EmMcFV<X6Ns;bhe-"7:7j\[WnKkmV/o>}_16b5;f68vzk+o
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e4 e4 8c 70 eb 9a 5b 02 5a c3 67 00 9f de 55 ba 0f 51 7d d6 dc 2d b0 3c b4 c4 37 46 b7 5f cd 04 fe 7a e7 ba 8e 4d 17 64 33 1a 9c b6 db 65 8c 2e ab 1b 7e ed 00 36 57 fa 46 0d 9b 5c df fd 47 ea 20 e3 dc ec 5c bb 09 77 a0 ea 8d 2d 61 6e e3 bc 5e 36 31 9b 7d ee 76 ec 8a ee ad 4e 21 87 db 23 8c 12 74 e2 fd 18 70 fa f8 65 26 9c f9 ac e3 3c 6b 14 84 63 fa 17 eb c8 25 e8 e2 84 7f c2 7b 1e a9 86 32 aa 26 97 35 a5 87 7c 9e e4 0d 8d 6f f2 76 ff 00 e7 c5 c2 7e c4 c8 c5 ea 34 32 96 bd 8e af 0b 22 b7 da df 60 79 00 0c 5c 36 db f9 95 d5 e9 7f 83 5b 23 eb 26 65 12 dc 71 56 d0 e7 36 cb ee 73 85 4c 2c 12 fe cc fa 1f 49 ff 00 98 b3 2c ea c3 3b 20 fa 9d 45 b6 ec fd 23 1a c6 39 80 87 37 f3 dc d0 da 59 f9 be 86 f7 7e 97 d4 ad 67 4f 36 30 78 47 eb 38 4e 92 06 22 3f d6 f5 4b fe Data Ascii: p[ZgUQ}-<7F_zMd3e.~6WF\G \w-an^61}vN!#tpe&<kc%{2&5\|ov~42"`y\6[#&eqV6sL,I,; E#97Y~gO60xG8N"?K
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 8c ed db bd 3a e3 ed de b6 cf 6c 6e db b3 fa be 9e ef d6 3e cf ff 00 a3 12 4e bf 11 f2 ff 00 28 ad f6 8f fc ef f9 df ba ff 00 ff d7 e4 69 fa c5 76 23 db 00 3f 15 c2 2c a5 ce 04 38 c4 6c f5 36 bd fb 76 ef 40 e9 16 63 0b ae 19 59 03 0b 1e c7 87 b4 b4 49 7c 97 c3 2b 8d 95 ed 66 ff 00 7d 9f e0 bf d1 ae 9c 7d 46 e9 9a b4 97 b9 a0 fb 43 74 da 3e 8f e7 6e df b9 df 9f 67 fc 5a 90 fa 87 d3 bf d2 64 0e 20 45 4e 3a 7f 5a a7 2c 93 cf f2 a6 32 8c 78 e3 c4 35 97 0f 6f ef 71 27 18 9e 39 46 43 5a bf f9 df dd 6e b7 ab 74 6c 0a 5b 5d 25 ad 25 a6 d7 bd cd b2 c7 11 a0 0f 76 53 da cd 9e ef d1 b3 df e9 d7 fc b5 43 2b ae 61 5d 5d cd ba db 6d a7 68 3e 95 20 30 bc 91 b7 e9 3c bf 6b 19 e9 d7 ea 36 bf cf fc f4 7c 6f a9 38 b8 f6 fa b4 5f 9e 1d 24 fb 7d 2d ba 8d ae 6b ab 73 3d 37 37 Data Ascii: :ln>N(iv#?,8l6v@cYI\|+f}}FCt>ngZd EN:Z,2x5oq'9FCZntl[]%%vSC+a]]mh> 0<k6\|o8_$}-ks=77
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: d8 15 e8 8a c7 69 78 97 a4 a9 25 cc 07 30 9d b5 b2 70 39 00 a6 1b 9e ae 49 33 73 12 69 2a 83 05 6f 5e 54 fd f8 17 35 e4 2e 87 98 4b b3 57 a4 1b 03 77 81 97 00 fd 28 7b 56 17 4e 51 4e 46 b7 2b 15 55 62 86 39 39 95 9b 99 95 b5 5e f5 37 aa 98 4e c6 6d 32 f1 7a b2 76 b9 52 dd 5b c3 b9 a5 4f 9d 2e cd 41 ef 48 10 1f 20 a5 d0 99 b4 a3 9b 71 7a ed 4f cf cb 51 af ae 6d c2 b5 cf d3 3f 3b 52 7e 95 b3 b9 27 34 ae 24 bb a1 fa 1f 39 89 5a dd 62 4c 5d 6b 63 1d af 5b 1f 42 c4 91 d8 6b 73 5b ad 6e b1 26 b7 58 97 ac 9a dc b0 b7 c6 52 50 39 85 b4 5d 9e ca da 6b 1e f2 f9 b6 ec 25 8a 2d a8 c3 69 ca 31 f9 ac 81 dd 4e 9c 89 6d 26 e2 52 09 5b 5b ac ad 93 ac e7 12 9e ae 59 36 93 49 50 95 0e 6a d7 35 e5 4e e8 73 93 ba 1c f2 68 73 36 3d bb 4b d8 6e d0 32 c8 dd f5 b3 32 40 43 45 8a Data Ascii: ix%0p9I3si*o^T5.KWw({VNQNF+Ub99^7Nm2zvR[O.AH qzOQm?;R~'4$9ZbL]kc[Bks[n&XRP9]k%-i1Nm&R[[Y6IPj5Nshs6=Kn22@CE
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: cd 97 b2 05 3a 59 b9 4e 76 50 a2 67 d0 95 c8 44 78 4d e7 3d 8c 24 33 35 ef 9b a1 2f af 9d ff 00 09 e7 94 e5 2e be 71 0f 1b 68 24 ae ae 4e 85 85 f6 71 b4 43 c6 ea 4d 83 11 f3 0e f6 47 4e 53 8d e1 bd 8e 3f 69 96 dc 5c 8a aa 65 ce 94 e8 49 06 ad c7 b0 2c 1a ba 6b da 6b 8c 7a 4c 9d 1f 9b aa a1 8d 8c b6 d5 e5 ee 9f 4e 94 7b 23 26 d9 d2 f9 f6 bf cb 97 75 16 b9 b5 2a 75 b3 3c 2a a9 f1 86 b3 ae df 74 fa 87 67 32 f7 2c d4 b3 b7 5c c1 ce 7a 03 8a a6 e4 be 75 82 36 c0 ac d8 25 ab 23 9e 5f d1 45 d5 73 42 d8 0f 95 74 d2 d7 88 fa 02 ef 92 e9 11 3a 2b e8 2f 0b d2 dd 94 97 d7 cc 9b d4 4d 46 54 07 5d 43 ce 6c 3e 99 28 ca 47 15 36 e7 75 e5 e8 01 b5 40 f6 a8 b6 6d 2b 7b 54 9f d3 49 fc 85 7d 25 d5 38 5b 06 ec 4e ac b7 ee b2 cd c9 cb 7c ee ce 7b da 4e 20 fd 19 cc 67 39 cd 14 Data Ascii: :YNvPgDxM=$35/.qh$NqCMGNS?i\eI,kkzLN{#&uu<tg2,\zu6%#_EsBt:+/MFT]Cl>(G6u@m+{TI}%8[N\|{N g9
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 39 9a 26 c7 b6 d5 1e c6 1d 19 2d 65 0e 34 de 4d a5 a6 8e da 5e 7c 6b e7 59 22 d0 1d 97 6d ab 9d 6a ce 63 f1 c6 77 88 85 95 37 06 e3 69 7a 80 7c 27 cc 85 5c 59 4d f5 ba c0 e5 c1 d4 35 84 86 10 d4 d3 6c 08 a5 c6 30 88 da 6e 81 6a 55 0d 75 56 19 66 02 c6 80 60 ce c6 2c a7 66 ac 7b 68 41 8b 52 66 41 80 1c 6b ba 67 6a e6 82 2b c0 3b 47 4b ac 0c b7 74 dd cd f4 3d 07 07 4f 01 70 b2 af d0 89 b6 42 d5 f3 5e cf 9d 58 76 13 d8 80 e2 99 cd fa b6 4c 1a c9 9d 73 8b 3a bd 75 65 e5 ea 64 b5 ae bc ac 63 68 ed c9 40 0d 6f c8 5b 2a c2 b7 45 1a 66 76 ac 04 a7 35 ab 56 44 ae 7e e3 c8 3c 5d 95 b5 db 4d ea 62 33 72 61 96 d5 8e d6 e9 d1 5c da a6 cd 0b 5a 33 cb 8b 48 86 4a bb b3 89 46 31 6d e6 af 9c a8 c1 65 c1 70 bf 57 98 01 98 96 a5 5d e4 cb ac 21 2c 5e 88 69 86 da 19 a5 57 52 Data Ascii: 9&-e4M^\|kY"mjcw7iz\|'\YM5l0njUuVf`,f{hARfAkgj+;GKt=OpB^XvLs:uedch@o[*Efv5VD~<]Mb3ra\Z3HJF1mepW]!,^iWR
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 11 76 51 71 51 bf 3f e4 4a 25 17 2b 0d 04 47 65 b9 92 6f 16 27 20 c5 6b 22 49 72 a2 93 89 e7 e2 c9 3c aa bb 07 d9 84 2c 8c 59 9c 12 2c 10 03 fc 39 ee 4e 1e 1a d1 98 c8 22 58 88 22 e3 9a d8 a5 e4 3f cf 3f e7 95 95 94 0a ca 71 25 72 28 26 0f 8c 29 21 05 7a 30 0c 7e 0b 16 10 08 65 37 c2 73 32 8b 56 11 08 84 51 45 15 8f 8c 20 10 6a 63 32 84 58 15 d3 4a 95 a8 f9 45 12 b2 89 ff 00 1c a0 e5 ec c0 64 e9 b2 a6 49 e3 2b 9a e4 8b 91 28 94 f5 3c ee 4c ac e7 3a 68 9c d6 96 64 16 61 31 c7 33 3b 02 3b 6a 57 87 06 b8 84 24 25 3b 2e 26 32 17 15 95 84 58 51 18 50 b9 4b e5 48 3c d6 18 1f e8 67 fc 72 b2 b3 fe 18 45 a3 e0 14 0a cf c1 44 22 d0 83 02 f5 85 eb 5c 16 13 9a 9c d5 84 e6 a2 d4 42 28 fc 80 9a d4 d8 ca 81 9e 5e dc a8 99 84 02 90 78 70 c2 21 39 12 b3 f0 16 56 51 4d 0b Data Ascii: vQqQ?J%+Geo' k"Ir<,Y,9N"X"??q%r(&)!z0~e7s2VQE jc2XJEdI+(<L:hda13;;jW$%;.&2XQPKH<grED"\B(^xp!9VQM
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: c9 cd 1e c3 5f 9a b7 5a 36 b6 c5 69 0c b1 09 18 1c e9 1e a1 7f 15 24 a3 01 e9 ce ca 31 87 08 e2 f2 19 85 23 07 06 8c 8a c3 cd a9 03 58 e3 93 19 e2 62 f6 17 48 e0 d4 c9 1a e7 06 f8 e4 d2 64 77 80 8f c3 5a e0 9c 49 69 67 14 df 0a 29 4e 64 98 e5 c4 94 1a d5 19 70 60 73 91 76 7e 0b 18 e5 c8 27 91 86 86 a3 80 bf 91 45 85 02 42 c8 2b 24 11 22 1c 42 e4 0f c0 68 41 98 47 25 70 ca 20 85 82 84 64 ac b4 2e 5c 8b 72 8c 98 0d c9 74 f2 b7 10 58 e2 72 30 1f 95 60 12 ab b3 c5 9a 79 0c e0 03 48 2d 92 5e 22 66 30 41 ac 38 6b 8f 8e 5c 4c 92 64 39 a1 c7 f4 de 5d 05 50 04 b0 16 a6 bb 22 db 00 35 80 71 8b c2 b3 e5 b2 57 2e 5e a2 1a c9 1c d3 1b 01 16 5a 31 14 8f 00 3c 05 21 24 73 76 58 32 1c cf 0c 8f 2a 08 40 2f 89 80 39 d8 3e cc 01 70 b0 c6 f0 e2 f6 82 9c d7 72 8d 57 fc dc 61 Data Ascii: _Z6i$1#XbHdwZIig)Ndp`sv~'EB+$"BhAG%p d.\rtXr0`yH-^"f0A8k\Ld9]P"5qW.^Z1<!$svX2*@/9>prWa
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e6 13 69 b1 34 b8 b5 0e 69 8c 7a 10 c6 a5 63 23 0c 90 cd 24 8f c4 75 8f 37 71 e2 25 01 ad a9 c2 30 f6 97 06 00 13 9a a6 c0 60 7f 15 19 e2 9e ee 31 e5 cf 12 38 b0 88 f0 d6 37 0a 46 90 c9 4f 24 c9 30 e7 9e 4a 26 17 06 b4 67 91 e4 d2 39 97 1c cc e2 00 c2 73 bf 90 7e 51 20 27 b4 67 07 8c 67 2d 31 35 e2 17 78 33 b8 29 32 f2 e8 c8 11 cc 11 39 4f ce 58 d6 02 24 00 bd 9c 9a e9 8e 63 c6 78 b9 e1 cc 2d 4d 7e 4f 95 7a c1 2e 69 21 02 9c 53 32 bc 26 92 0d 59 b0 a7 66 04 ae 7e 19 29 91 95 ce 19 2d 76 38 fe b6 5f 24 8c 0e 9e 11 23 a4 a9 20 31 48 23 36 ef 36 44 d8 c3 cb 75 6d 2c 3a e6 a3 55 81 08 f0 63 b1 2b 19 ea ca 65 28 8a 6d 18 81 ad 4e 22 64 f4 85 86 95 82 d4 e9 a5 23 2e 51 bd cd 50 59 e2 e9 ae 7f 37 4c e2 bf 5e 42 85 19 70 20 91 a8 c8 e2 3f b2 68 6f f3 90 b2 a4 9c Data Ascii: i4izc#$u7q%0`187FO$0J&g9s~Q 'gg-15x3)29OX$cx-M~Oz.i!S2&Yf~)-v8_$# 1H#66Dum,:Uc+e(mN"d#.QPY7L^Bp ?ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	62704	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	734	OUT	GET /wp-content/uploads/2022/07/01-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:35:34 GMT Accept-Ranges: bytes Content-Length: 440915 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 17 9b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 36 3a 30 39 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:16:09
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c Data Ascii: RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESl
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 63 64 32 61 37 65 33 38 2d 35 32 33 31 2d 39 39 34 32 2d 39 64 61 37 2d 33 64 64 30 35 36 64 32 64 63 61 35 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 31 31 2d 30 36 54 32 32 3a 30 32 3a 34 34 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 70 6e 67 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 Data Ascii: nstanceID="xmp.iid:cd2a7e38-5231-9942-9da7-3dd056d2dca5" stEvt:when="2021-11-06T22:02:44-03:00" stEvt:softwareAgent="Adobe Photoshop 22.4 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/png to image/jpeg"/> <rd
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 14 9e 9a be a1 02 72 17 23 4a 95 9c b9 0b 92 25 a3 f9 bb f4 27 c3 33 82 00 bc 88 fc ab 79 20 c2 23 40 33 7d 54 0c 8c 2d 24 45 24 87 9f 30 27 07 d7 8c 03 8f 97 20 8d f7 2b e0 dc ce 5e c0 9e 30 ca 23 01 f0 e3 53 43 72 8c 77 ac c7 9a af 0c eb 10 64 aa c3 94 78 07 32 37 19 11 3d f2 13 23 43 5f 19 63 95 63 3b d1 f8 f0 8a 27 8d f7 9d cb 14 ec 52 ae 43 96 a6 c2 74 27 18 45 2e 51 26 90 44 88 1f 64 04 45 18 6e 69 52 b0 91 80 1b 80 1b 9a 09 02 01 63 f0 ac 00 82 2e f1 fb e5 15 be 34 33 1d 8e 6f bc 85 4c 32 85 11 39 02 01 e1 f5 45 ef 93 97 08 ab e2 23 cd ac 4f 95 5e 9d 26 b0 84 aa d2 72 22 12 2c 62 e5 8c 01 63 08 c4 1d 92 04 61 7e 5f 04 e6 f2 ad 2e 58 a5 8b 1c 17 c6 05 e0 0d e3 e5 47 d2 c3 2c 68 3d 22 9a 1b 93 20 68 2b d7 cd 1f 5f e5 2f e6 ff 00 53 8a 2f a2 a2 f1 4b Data Ascii: r#J%'3y #@3}T-$E$0' +^0#SCrwdx27=#C_cc;'RCt'E.Q&DdEniRc.43oL29E#O^&r",bca~_.XG,h=" h+_/S/K
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 93 23 fe 61 f7 c6 44 fd 03 f1 06 a4 f1 1f a2 b3 6b b0 7c 9a de b6 c6 4d 35 56 bb 59 c5 ba 4e 9e d4 69 2c 0d 9b 74 07 e9 5e 3a 4f 4f 57 f9 94 c3 f5 a7 91 e0 48 fe 64 94 9e 92 92 3c 9d e8 52 20 40 f8 80 a1 56 1d 89 02 54 7f 6d 16 ab e8 a8 ff 00 40 21 91 f8 1d e3 5f a0 8d d0 db 5a a9 f8 8f dc 16 e3 e2 cb ae 7a f8 32 e8 79 5f 76 0c 38 c2 7d 15 f9 8b b5 ca 44 f7 fc de 6e a0 e9 16 fb 19 dd 72 ef ad 7c 5a 03 d9 6b b1 5d b8 9b e2 d6 2d 9f 13 2c e6 68 d7 2e fa 96 82 f4 5f 9d 1a b3 e9 2c 6d 0e d7 f6 c9 93 ae ab 52 bd 92 5b 1c eb f6 01 25 73 48 5f d1 55 45 32 3d 56 60 cf ae b4 fa 18 e3 d1 9a 31 63 4b 30 3d f1 55 dd 1d d2 9c 37 a7 67 77 96 2a 76 0d f2 30 49 d0 e4 4a b1 0d 75 68 24 57 b3 42 c8 37 d1 d7 fb fa 98 6b 4b 02 57 cf c8 d1 5e 6b 6a de 91 0d b9 78 ea 8d b0 8e Data Ascii: #aDk\|M5VYNi,t^:OOWHd<R @VTm@!_Zz2y_v8}Dnr\|Zk]-,h._,mR[%sH_UE2=V`1cK0=U7gw*v0IJuh$WB7kKW^kjx
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 58 e4 6a 0b 27 34 8f 43 b7 90 25 58 c2 ab 7b 06 d9 0a b0 3c 6b 40 0b da ce 50 d8 8a 74 bb f4 a4 af ae 88 9e 02 bf 22 4a 8c 5a 78 9a dd 60 fb 8a da 21 d2 34 33 9e 7e ac b8 d8 ff 00 88 e5 b9 52 22 4b c9 a3 7a 43 59 e4 85 e7 c8 bb 5c 9f ea f8 be f3 99 28 d8 f3 f6 5d cd 4b 22 ca 13 66 6a d8 c8 e2 99 eb 8b 09 57 1c 25 74 3d 6f 2a 40 1b ff 00 57 f8 89 39 6d a3 16 20 68 ab 47 07 af 0e 34 97 df 3e 0e e1 ad 2f d4 c3 ad 1a 06 bd 18 e9 03 3b 72 77 05 d4 e1 8d 2e 65 6e cb 28 d2 93 13 55 78 9d 84 82 a2 41 70 73 e7 a7 c0 7a c3 8e a8 9e 32 18 cb 35 ec 6f bd 34 9b 0a 4b 9b 5d 21 90 f7 e5 a7 5e 26 2e f4 8b 0d 36 e6 5a cb 07 8a d3 ec 47 2a ca b6 04 eb 21 55 06 af 6c a8 12 28 a2 c5 d7 68 c7 85 36 3d 93 12 bb 74 48 ed 19 c0 91 aa 9e c4 96 17 6e 66 cd ae c7 4c 30 af 25 6e 5f Data Ascii: Xj'4C%X{<k@Pt"JZx`!43~R"KzCY\(]K"fjW%t=o@W9m hG4>/;rw.en(UxApsz25o4K]!^&.6ZG!Ul(h6=tHnfL0%n_
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e2 44 c0 4f 9c 06 fc 81 1b e7 d7 c0 47 3e b8 60 a1 9e a1 c3 20 3c fa 87 05 3c 14 c3 3d 78 09 e0 a6 18 29 06 7a f3 c3 9c 29 39 c2 26 19 f1 9c f1 86 30 67 b0 33 da 18 0a e0 2d ce 01 83 00 d8 53 e0 0e 14 fc 60 2f 85 5c 33 dc 19 f6 0b 80 b8 60 1b 00 d8 41 cf 2c 93 76 98 25 75 d8 07 69 2f 63 b2 3e 66 d4 44 b2 08 d2 67 db 37 6b 73 82 7a de 69 ad 79 36 24 72 e9 42 15 79 a4 80 92 2d d2 55 26 75 57 2a b6 85 93 48 8e 36 24 8a 4f 5e c2 b2 4d c1 22 75 bb 77 0f 98 51 ff 00 a9 67 25 73 8f 8b 7d 2d b2 5f a8 94 35 6d b9 94 8f a4 13 c6 42 98 ec a9 c6 d3 8a 08 44 1d 04 d6 ae 6e 86 50 51 ed 37 fc ec a1 a8 10 c1 5c 35 22 4c 5d 35 45 30 c2 13 8c 91 97 41 a2 32 1b 2a 11 a3 3b 57 66 e1 10 3a 6b f1 80 be 15 4c 2a e1 85 73 c6 15 f0 61 17 29 b0 a3 81 ce 26 a0 e2 4b 62 6b 60 28 19 Data Ascii: DOG>` <<=x)z)9&0g3-S`/\3`A,v%ui/c>fDg7ksziy6$rBy-U&uWH6$O^M"uwQg%s}-_5mBDnPQ7\5"L]5E0A2;Wf:kL*sa)&Kbk`(
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 81 ee 6e dc 04 ab a4 04 2b 74 47 84 57 20 9e 29 81 04 7f c6 72 21 93 bc 0b 3a 9a 9c 9a d6 22 2b 3c aa 3a 72 e2 df 43 5e 3c 4a ba a6 25 59 c2 c2 a3 65 3c 4c 0e 3c 84 a2 18 3e 22 1c e0 1f 25 5b 79 3a 66 c0 3d 8f 59 94 ea 81 3d 78 8b 01 50 13 87 29 01 fd 5d 25 14 91 83 03 aa 40 69 1a 9b 8b a3 3f 14 15 2a 80 dd 0f 21 51 32 89 5e 18 44 65 d1 32 a0 f6 b0 92 a5 5a 9e a2 45 b2 c6 1f 9a 5d a5 76 0a 22 e5 17 f8 85 3f c0 8c 18 9d b6 4c ba 15 c4 12 13 e0 c4 15 d1 1a c0 2a 54 e7 e1 14 70 10 d5 46 e8 67 f5 03 84 6e 9a 78 46 df 79 dd b6 25 39 19 29 aa 80 42 05 09 12 39 35 e2 58 ae 5f 43 4c 2a b9 d8 38 31 31 66 49 82 a0 c9 76 e1 20 b0 82 0f 9d 94 ad 20 98 10 d8 83 c0 49 32 c9 1d e8 04 42 ae 57 5e 29 44 04 c6 00 33 89 21 04 dd ce 28 56 af 63 1b 3a 64 84 c3 98 d1 8b b6 ba Data Ascii: n+tGW )r!:"+<:rC^<J%Ye<L<>"%[y:f=Y=xP)]%@i?!Q2^De2ZE]v"?LTpFgnxFy%9)B95X_CL*811fIv I2BW^)D3!(Vc:d
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 29 0c 55 31 cc 6a 8a 36 88 86 55 92 a6 8b 14 0b 18 90 a2 a2 29 19 55 1f b4 2a e9 a5 f0 2b ae 5c 55 52 1c 0c 41 02 9d 52 94 f2 07 c7 4f 0f c2 e9 a6 6c 4d cc 7f ad 25 ca 25 49 42 90 a4 60 9a a8 47 c0 8b 4c 95 74 44 55 67 2a 9a a6 44 a6 01 fe c5 30 32 aa 01 b3 9e 44 07 f8 a6 21 cb b2 08 cc c4 ff 00 f7 0a 61 e1 a8 e1 8f c1 bc b8 00 28 e1 c3 f8 a8 6e 71 3f 93 e4 c1 4d f5 0a d8 a3 95 b4 bc 53 c8 76 a7 f5 2c b9 11 4a 7a 59 31 49 79 13 19 20 72 e8 c1 22 c5 c3 b3 b5 88 28 a2 e0 85 6c b3 fb 2b a1 59 25 8c a9 9e c7 a8 79 98 aa 0a 8e 49 26 71 66 de 1c de e2 c4 a8 42 e2 5e b1 29 51 12 1c 0a 98 84 53 b4 d2 59 fb cf 05 58 ae 27 09 e9 83 36 6e 0e 54 54 ac 65 c1 ba f0 f2 29 28 47 0c c5 41 5a 35 3f 6b fa e3 74 9d ec 17 6e 90 18 49 06 32 6d 64 24 5f 55 de 35 59 64 d4 64 65 Data Ascii: )U1j6U)U+\URAROlM%%IB`GLtDUgD02D!a(nq?MSv,JzY1Iy r"(l+Y%yI&qfB^)QSYX'6nTTe)(GAZ5?ktnI2md$_U5Ydde
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e0 86 0e 1b 9c 10 c5 f0 47 04 b9 ea 0c 10 e3 15 11 e5 73 87 2a a9 f0 73 f3 87 38 00 28 a0 8e 18 47 0c 3f 80 26 14 99 e1 86 0c 39 79 c3 17 0c 5c 54 30 e5 cf 58 e0 22 03 82 88 60 b7 0c 04 83 05 3c 32 78 40 31 47 4e c9 bb 91 50 fe 90 4e 35 9f 90 5e a8 ec 1f a5 b5 68 4b 0c 44 94 32 ed 14 14 80 30 52 c1 4b e4 c9 8e 0a 5c 01 83 8c 1c 04 44 70 ac f9 12 32 1c 49 88 e1 59 97 01 bf 18 46 e1 80 90 80 1c 9f 02 1c 67 90 60 9f 04 c3 9e 58 26 c5 4d 9e 5f 83 7f 9f c0 8e 73 82 7e 30 ea 62 86 cf 3c f3 1c 13 0e 79 60 8e 06 08 fe 00 70 07 3c b3 cb 00 e2 18 55 70 83 ce 14 d8 03 81 ce 00 67 1f 8e 7f 20 5c 29 70 30 30 30 a0 01 85 0c 0f c0 e1 87 0c 70 0c 39 f0 4d f8 e7 04 70 e7 0c 3a 9c e1 8d c6 09 f0 c6 c3 0e 09 be 44 73 9c e3 00 33 c0 70 4b 82 5c 31 70 e1 82 18 76 e0 6c 33 40 Data Ascii: Gs*s8(G?&9y\T0X"`<2x@1GNPN5^hKD20RK\Dp2IYFg`X&M_s~0b<y`p<Upg \)p000p9Mp:Ds3pK\1pvl3@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	62711	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	966	OUT	GET /wp-content/uploads/2022/07/002.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:31 GMT Accept-Ranges: bytes Content-Length: 92130 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7958	IN	Data Raw: ff d8 ff e1 22 e5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 39 3a 30 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:19:00
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 10 3f 05 14 a1 13 b0 a6 51 32 00 bd 5a bd 76 ea 2e fa dd 7d 8e b1 c2 9b ad a1 fe b0 1c 8f 4e 97 57 ee 77 e6 7e 72 f5 de 9c da ed c1 ab 69 fc de 7c d7 8e e5 b2 9c 8c bf 4c 54 eb 1f 60 6b 0b b6 f3 b3 65 4f db 67 b7 73 59 ec 6f d2 5e b7 d1 1c 29 c4 ad a4 e9 03 95 4b e2 71 81 c5 01 3a a0 35 07 c1 97 10 26 33 ae f6 d9 fb 33 e7 9f ce fe 09 2b 5e bd 69 2c 1f 6b 94 fd ee bd ff 00 05 b5 27 ff d0 f3 e3 91 64 7a 21 8d a9 ae f6 83 b0 07 10 7b 1b be 92 b1 5b ad c9 78 a1 d9 4e a7 0c 43 5f 63 81 f4 9a 47 d0 17 36 af a1 56 ff 00 de 5a 39 5d 2f 0d af 70 19 14 3e a9 83 37 30 11 f1 73 9d b3 fb 6c 4f 57 46 c1 ff 00 b9 94 0b 00 90 05 f2 f0 0f 1b 5d 50 f7 37 f7 37 ef 55 25 cc e1 89 a9 1a 90 fd 1a b9 5f 93 36 80 7f 39 1e 13 de 5c 3a 7e eb d5 74 ef b6 f4 fc 4c 6c 76 b3 ed cc 65 Data Ascii: ?Q2Zv.}NWw~ri\|LT`keOgsYo^)Kq:5&33+^i,k'dz!{[xNC_cG6VZ9]/p>70slOWF]P77U%_69\:~tLlve
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 45 cc b2 ef d1 b6 bb ff 00 49 fc e2 31 aa 00 8b ad e8 7f e8 ac e3 96 9d 6b 40 8f 10 e7 64 d1 55 43 6e e3 63 e5 a1 bb 4c b0 35 8d 6c d8 cb 07 f8 4b 9d f9 9f b9 fa 4b 12 cb bd f6 16 e3 dc d9 ae 91 be c9 30 6c d0 6c 0f 78 1f 9a cd bb 15 de a1 9b d0 f2 8b 43 30 69 e9 ed af 46 8c 47 bc 3d cd 3a ed c8 7d ff 00 69 65 9f f1 db 3d 45 51 ac e9 d6 b9 cd a2 9b 5c f8 36 39 ce b4 38 06 e9 2e 73 7e ce c6 ed f7 27 d8 d0 90 74 ea af bb 48 9d 25 13 f5 6c d5 89 d3 1b 97 40 ea 99 4d f4 1e 5a 6f 7d 64 81 b0 b7 de d6 43 3e 97 b9 8c b9 ed a6 eb 51 b2 f3 5a 2b 8e 93 bc f4 e6 ba 37 09 97 58 d0 5c f7 d9 ea 97 7d 0a 3d be ef f8 cf f0 ab 67 ea e7 d4 bc 3e b1 d1 f1 73 ec cb b9 99 17 1b 5a 58 58 1e d6 bd ae 76 33 76 7b ea 73 9b b2 ba be 9a b9 81 f5 1f 07 2f 09 99 0c cc aa eb 2c 31 ea Data Ascii: EI1k@dUCncL5lKK0llxC0iFG=:}ie=EQ\698.s~'tH%l@MZo}dC>QZ+7X\}=g>sZXXv3v{s/,1
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 4b d8 e3 65 e3 4d fa ad 1e 23 a7 27 ab 9f 90 ad 3d 87 17 cf d5 a9 ec 0e 35 98 d7 76 ae 74 26 b0 53 9b a5 6f 27 65 1a 97 11 25 cf d5 97 6e 35 be 1b 31 74 b3 33 97 a1 85 6b 9d d4 05 ce 8c ea 53 59 b4 db b0 c1 97 6e 27 09 d9 54 cb ee c7 7e 4f 2f 4b 12 ef 58 0c ba 39 31 ce ce c6 79 4f 93 9d 5f 43 9f da fb 7f 39 ed 3c 4b 58 67 a3 25 96 99 dc 8d 55 76 d5 9d 49 4b c9 70 76 4a dc b6 12 a6 2e a6 e0 e1 68 84 25 db 4e 7b f3 db 2c a1 7f 4e 49 d8 f0 ab 5d 36 4d 67 d1 26 ce 38 ed 95 55 2c 4c ee 55 c8 dd 9e d6 55 4c 6d 55 69 d9 ac 4b d2 79 ce 74 9e b2 ff 00 1d df 39 71 a3 4a f3 a9 d3 9f 78 8c af ef cb e6 eb ee e2 97 1f 57 99 a7 53 74 b9 6e 5b b0 f5 54 6c ea f9 0b 6b d6 53 cd e9 72 d7 02 5d c8 2c f8 fd 68 a6 2c 7a f1 cf 46 69 c7 7e b1 45 fd 1a 5c f8 52 e9 e8 d7 2e 16 9e Data Ascii: KeM#'=5vt&So'e%n51t3kSYn'T~O/KX91yO_C9<KXg%UvIKpvJ.h%N{,NI]6Mg&8U,LUULmUiKyt9qJxWStn[TlkSr],h,zFi~E\R.
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ed 0f ae 70 49 9c 8e 4c 1c 71 94 10 ba ce 6b 03 02 57 f4 92 50 f7 31 58 30 23 28 44 51 0c 30 8f b4 b0 ea 26 3a 11 8e 98 c1 30 fe 36 20 94 fe a6 8d ea 47 63 e8 3d 4e 67 69 c6 00 31 81 14 60 fb 8c 01 62 65 2e 31 6a 85 2b dd 4f e9 02 31 ec 46 21 fd 00 64 fe 50 43 33 0b 4c f4 3e 9f 80 a3 bf 02 c7 13 13 81 c6 3a 09 5e 32 7d 1b a1 00 c1 d8 e2 60 c5 03 1c 44 c4 18 13 8c c4 f5 00 97 7c 08 7f 46 70 39 c2 d3 91 c2 2f dc 3d 20 e9 8f a3 1d b1 d0 09 83 d3 1d 47 63 59 cb fe 78 30 67 8f 13 38 18 09 95 b7 dc 6d 87 bc cc cc 5f d4 de aa b9 86 b3 06 26 44 23 30 30 c0 80 e2 02 41 ac e6 37 e8 2c 08 c4 c1 88 86 05 c4 02 63 e8 c1 9c 5a 7b 6d 15 49 9c 5a 70 81 21 49 ed e6 7b 6b 38 2c e0 b1 94 08 9f 69 2e 9d 01 10 b8 13 dc 13 94 0e 60 39 3e 81 81 cf dd 30 d0 e6 73 20 16 c8 30 66 Data Ascii: pILqkWP1X0#(DQ0&:06 Gc=Ngi1`be.1j+O1F!dPC3L>:^2}`D\|Fp9/= GcYx0g8m_&D#00A7,cZ{mIZp!I{k8,i.`9>0s 0f
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d7 80 fa e4 3d 96 a2 05 bb ba 8c 86 d7 b7 e4 6f 39 0a e4 94 d5 e5 9b 42 d8 9f 1f ed 5a d8 b7 12 0e 08 94 ea 6c 6c 0d 7d 2d 9a ec d8 1d ec 8d eb 04 54 05 48 c4 13 47 c7 d9 b9 2e d4 a7 58 dc 57 24 c4 d7 b5 d6 b5 04 56 ed 55 eb e5 b7 08 5f 29 be c4 6e ed bc 1b 7b 16 1f 7e ff 00 77 dd b9 9d 19 8b 1d 87 f6 96 be 52 d5 fb f5 f5 9e e6 ba ca a8 5a 98 ad db 15 f0 b8 89 a8 92 d5 61 61 87 d1 41 e3 c8 a9 b1 41 12 b5 18 24 b1 55 24 98 91 bf 54 da aa ea 95 d4 c4 66 a9 fe 41 62 cc af 66 9d 5f 22 db b5 dd 45 fa b6 5a 97 d4 f4 db 80 ea 44 a4 57 b3 43 d6 41 aa cb 28 7a b6 ab b6 a0 ce d6 db b1 ce bd 2d 9f 6d 51 ab 7a ad af 93 aa 2b 37 f2 1b 8d d6 6b 69 87 a3 45 19 28 7d 8a 6b 96 5b 5d 86 c5 65 9f 75 95 78 b0 12 c1 62 fc df 2b 72 8d 1b d7 8f 89 f1 ba 23 69 ac 09 59 d2 f2 e6 Data Ascii: =o9BZll}-THG.XW$VU_)n{~wRZaaAA$U$TfAbf_"EZDWCA(z-mQz+7kiE(}k[]euxb+r#iY
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 91 8d db 36 0a 3b d7 c4 cb ee 6a e2 ec f9 24 ad 3c f6 f2 4a 3c fd 8e 17 ce 54 62 f9 4d 27 22 dd 2b 26 d5 3a c2 8b 3c 76 be 94 bf da b0 a3 71 1d 8c fb a0 4b 20 aa e9 6a 32 2d 3c cc d6 e4 66 bd 72 b1 80 b1 66 61 30 c2 d1 ae 51 1a e5 02 cd 8e 50 3c b9 45 d4 57 b1 65 4d b5 b3 6e cd d9 82 c7 58 2d 47 a3 4e e6 46 42 31 d7 10 01 28 ff 00 c1 be f3 5d ba ce 2f 2e ca 93 4d 3d e6 23 1d 7d 67 10 27 69 46 ad fb 12 ea 2d a1 a1 32 c6 12 c3 87 b3 f8 fd af a5 a1 fc 63 c2 6c aa 7f 12 f0 42 27 f1 bf 0b 41 ab c9 6b ea b0 d9 a6 eb cd e6 da 57 51 76 63 78 a5 68 7c 62 85 1e 38 2a 3f 8b db cf c0 d8 e3 ad 53 d7 36 34 b9 9a ec 7d 77 37 a2 59 76 c1 75 50 aa 76 6d 36 3d 77 d8 ab 56 c5 de f9 3d f3 33 30 a6 70 c4 c3 cf ba 0e 50 66 6d 1f fa cb c5 9b 59 10 55 aa a4 d3 a1 e2 97 6e 93 fc Data Ascii: 6;j$<J<TbM'"+&:<vqK j2-<frfa0QP<EWeMnX-GNFB1(]/.M=#}g'iF-2clB'AkWQvcxh\|b8*?S64}w7YvuPvm6=wV=30pPfmYUn
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ca 59 f3 76 6e 2f c7 cd 25 68 c0 91 8d 19 11 2b ab a6 97 b1 6a 2f a6 84 be 0b ac c1 73 06 0c 8f 44 ee b1 ca 7e 2c 96 4c e4 be 94 2f b5 12 5c eb 30 7b 4f 6f b4 e5 64 93 ea dd c0 49 f4 99 f1 2b 69 4e 6d d4 64 b3 ae 0c 52 e6 0b 0c c5 31 85 06 0b 62 bd 65 d6 88 e0 cb 1f 01 3f 68 da 7c bc da 6e a9 28 c5 32 74 32 e8 b3 e0 c3 d3 6a 62 99 d7 1c 0b 70 2c c4 a9 74 59 e8 ce ab d7 26 69 76 cc e9 bd 3e ba 61 fc 2e 74 5d d3 3c 2c f0 d6 b8 2f ae 5e 9b 96 d3 83 1a 73 4b 26 60 88 f8 4b a9 2c a4 ba 8d 0e 48 8c e9 c4 d6 eb 5d 97 c0 24 98 94 e7 55 dd 2d e1 2d 49 77 d1 bb b0 ec d3 04 c1 8d a4 4a 47 9a 78 57 a5 b8 49 89 ea b5 6e 4b 27 43 ec a3 d1 3a 62 33 56 a7 e0 a0 4b a9 ae 0d e9 8d 16 d4 cc fe 87 4d 26 49 67 dc 7e 44 d6 17 98 8a 5d 22 ca 38 69 be 14 32 c4 34 4a e8 25 17 54 Data Ascii: Yvn/%h+j/sD~,L/\0{OodI+iNmdR1be?h\|n(2t2jbp,tY&iv>a.t]<,/^sK&`K,H]$U--IwJGxWInK'C:b3VKM&Ig~D]"8i24J%T
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 18 9c d6 90 1c 8c 4a a7 26 a8 87 08 09 0c d3 db a6 c5 a3 5b 11 9a 94 7c 43 44 5e e1 a2 11 9d c2 59 30 9c bb 51 8c a7 23 d6 98 93 da 85 97 dd 05 c2 07 91 a2 29 99 46 d5 a0 f3 ce 4a 32 95 5e 85 11 91 a8 e4 26 74 81 c3 a5 10 69 b3 94 93 82 d4 16 b8 e0 71 e4 33 3d dc 13 9e 52 8f 21 85 d8 98 90 68 e1 04 27 6c d6 38 14 65 30 e4 e6 10 c4 db 8d 76 39 42 53 9c 5c 52 31 91 68 c0 7d 19 28 8b 72 d6 73 39 23 6e e4 75 44 e0 73 05 4a dc a9 28 16 29 c5 24 31 e7 e4 d2 5a 17 ed 50 4b 29 c7 b9 e2 fb 7f c4 46 32 0c 46 21 09 c0 b1 1d 84 7a b2 4e 03 4f 31 b1 0d 01 f4 d5 18 5e de 1c d9 7d 15 18 5d 9b d8 1d de 94 0c 18 84 d9 12 80 6a 05 0f 2b 6c 70 ef 15 28 4a 2d 71 e8 56 9d 44 81 43 13 8a 30 94 c0 6c 93 40 bc 8e 4b 0a 8a a2 64 1b 62 9d c9 86 d2 1a 21 42 46 b2 d5 8e c5 3b 4c f2 Data Ascii: J&[\|CD^Y0Q#)FJ2^&tiq3=R!h'l8e0v9BS\R1h}(rs9#nuDsJ()$1ZPK)F2F!zNO1^}]j+lp(J-qVDC0l@Kdb!BF;L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	62712	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	966	OUT	GET /wp-content/uploads/2022/07/003.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:39 GMT Accept-Ranges: bytes Content-Length: 224843 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 35 4a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 39 3a 34 31 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 5JExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:19:41
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 1c 97 67 31 96 5b f9 b8 35 0a d9 1f f8 76 ea 87 e8 ff 00 e2 71 9f eb 7f a4 42 ea 3d 57 ed 3d 4a fc ba de f0 49 35 d6 e6 1d ae 15 0f 63 43 6c 3f 43 d5 fe 75 db 19 fe 11 51 f5 18 c1 ed a2 b1 1f bd 2f 3f f4 ff 00 45 bb fe b4 a7 e5 f9 59 c7 14 78 e4 78 a5 eb c9 5a 4a 59 32 7a 8f ab f4 78 7e 5f 4b 3e 5e 62 3c 44 44 0a 8f a6 37 a8 e1 8f fd 26 c6 4f 52 b3 2d ed de e6 ed a8 11 55 4c 0d 6d 55 37 f7 6a a4 03 e9 ff 00 9f ea 3f f7 d0 4b af 74 10 43 03 be 89 73 c0 24 1d 3d ac 1b ac ff 00 c0 d5 ee 90 c3 99 f6 9a ac 2f b0 80 d2 da da 04 06 fb cb bd 3a db b2 9f cd f7 d8 ef 62 0f 58 e9 9f b3 3a 8b f0 c3 da f2 18 dd ee 69 07 e9 7e 63 9c df a3 cf e9 3f 3f fc 1a 92 33 c6 32 1c 20 08 c8 0b af ea ff 00 29 2c 90 99 80 c9 76 25 f6 ef c2 d7 89 da 4d b5 38 b6 b0 df 74 c1 01 d6 0d Data Ascii: g1[5vqB=W=JI5cCl?CuQ/?EYxxZJY2zx~_K>^b<DD7&OR-ULmU7j?KtCs$=/:bX:i~c??32 ),v%M8t
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 00 00 1a 38 42 49 4d 04 0c 00 00 00 00 33 dc 00 00 00 01 00 00 00 83 00 00 00 9f 00 00 01 8c 00 00 f5 f4 00 00 33 c0 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 9f 00 83 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 09 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: 8BIM33Adobe_CMAdobed"?
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 75 84 38 16 d7 60 da e7 5e db 77 bb f4 6f f4 ee fd 17 e8 ff 00 44 85 d4 fa 95 99 3d 47 2f 22 a3 fa 3b ee b2 c6 d6 e0 d7 b6 1c 7f c1 b6 c6 d9 f4 5c ab 7d a4 ed fa 0d 02 0c ec d2 41 e6 43 bd 4f 67 ef 31 48 31 f1 c2 88 ae 21 a8 ed 6b 0c 80 91 a3 74 7e 67 bb cb c0 bf af 61 54 f6 38 51 d6 7a 49 b3 18 82 1a d1 68 67 f3 4e 6d 84 3f d2 73 b6 fa cc f6 fa 5f ce ac ec 07 dd 8d d4 6d 6d 95 1a 32 1d 5b 9c ea 0c 87 36 da 08 cf ab f3 1b fc e3 71 ad 6d 7b 7f d2 22 7d 56 ea 42 cc 9c 5c 8b 6e 6d 43 21 ac c7 b6 d7 c0 68 bf 18 06 33 d5 b3 f3 7e d1 87 e9 ed 40 ea 7f 58 72 87 58 a7 ed f4 8c 71 d2 f2 1e 6c 15 32 5c 36 97 45 4d c8 b9 db 9d 45 ec d9 bf e8 33 65 9f cd 28 e3 8e 39 b9 7c 98 e7 a6 5c 77 18 fe ec c7 fe 83 34 4e 53 c7 9a 13 8e b8 a7 44 f7 8c bf f4 28 b6 be b3 63 e3 bf Data Ascii: u8`^woD=G/";\}ACOg1H1!kt~gaT8QzIhgNm?s_mm2[6qm{"}VB\nmC!h3~@XrXql2\6EME3e(9\|\w4NSD(c
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 63 38 65 33 2d 39 34 64 39 2d 64 32 34 34 2d 39 62 61 31 2d 62 36 65 62 36 34 66 65 39 38 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 65 36 31 38 33 62 34 2d 62 30 65 31 2d 61 33 34 39 2d 39 66 33 32 2d 30 32 62 39 61 31 35 62 32 61 36 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 39 43 43 38 38 39 39 43 30 46 33 31 31 45 39 42 36 30 42 45 41 33 44 37 44 39 45 41 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 62 66 33 30 38 32 37 2d 31 38 34 31 2d 66 39 34 66 2d 62 64 66 62 2d 32 66 36 66 32 31 66 38 61 31 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 62 36 30 66 61 31 2d 66 63 33 39 2d 61 Data Ascii: c8e3-94d9-d244-9ba1-b6eb64fe983f</rdf:li> <rdf:li>xmp.did:4e6183b4-b0e1-a349-9f32-02b9a15b2a6d</rdf:li> <rdf:li>xmp.did:59CC8899C0F311E9B60BEA3D7D9EA07B</rdf:li> <rdf:li>xmp.did:6bf30827-1841-f94f-bdfb-2f6f21f8a1fb</rdf:li> <rdf:li>xmp.did:76b60fa1-fc39-a
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 85 05 7e 7d a6 84 38 9b 40 a0 9e 2c b0 56 50 43 3c 01 de 54 ea ac cc a9 1f 9e 8e f9 1e c9 1b 04 d6 9a 74 48 4c 1a 85 49 7b 41 77 20 a3 17 e8 b6 a1 30 26 12 76 20 e0 64 6a 16 d5 d0 b2 41 4f bb 41 c1 f1 82 ad c4 88 20 2a 4b a3 6b c6 74 a1 02 5c d5 6c 14 b5 1b b1 ae f6 b5 61 74 ae 17 66 c3 82 96 7e e3 a0 f9 b7 02 5b 48 65 bc 02 1e 8d 33 46 16 5a c0 04 60 b3 20 6e a6 21 a0 3a c0 53 a3 4a 0c c5 b7 c3 ab 7d c7 91 e6 ce 3d ce 1b 9b 1c 69 a0 35 b1 23 78 77 1e c9 ad 41 a3 af 0f c9 d3 03 66 c5 95 a8 2c 53 23 2e 10 e5 bd 32 32 e1 f9 d4 9a e5 e3 bd 81 7a 60 b6 59 d0 e0 6c 4e 38 4b 75 2f 23 65 00 9c 15 63 3a 14 5e d8 92 36 41 c8 0e f4 61 17 cf 16 5d a9 52 86 6b 5c 1a 71 f4 1b aa d6 48 dc b7 8c 02 a2 96 27 0a a0 23 34 1e d0 17 61 ec 53 7f 4e c2 99 19 6a 2d 36 2a 16 ce Data Ascii: ~}8@,VPC<TtHLI{Aw 0&v djAOA Kkt\latf~[He3FZ` n!:SJ}=i5#xwAf,S#.22z`YlN8Ku/#ec:^6Aa]Rk\qH'#4aSNj-6
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 95 b6 ce a0 a9 91 36 2a 4c c1 bf a2 78 19 db c8 2a fb 15 e4 74 c7 90 31 57 fd 15 ce 39 25 89 fd 66 76 5c b6 c1 85 52 ad 0f 35 19 cb 78 3e 1c 72 18 46 c7 12 32 13 e5 19 18 4b 2a 02 e5 58 90 c1 6b ef 73 4c 35 1f 29 31 99 b1 21 12 09 29 c9 cc 21 66 95 c4 0a 6c a2 64 93 07 1b d6 0c 7f f1 8b 2c 9f d6 9f f9 b7 8c d8 5c 74 3a ab 60 b8 f9 39 35 3e 79 f5 e4 5c 52 35 af 03 ce 7b 06 89 fd a5 7d 2b c8 da 08 ee b5 89 55 89 f9 10 c4 e0 38 4e 83 2f 22 ca 41 0b 81 49 67 d8 29 2b 2b 3b 12 dc 79 06 99 95 cc 8c b8 1f 96 71 d0 47 1a e6 d1 24 76 37 17 22 32 69 3d a4 9d 18 9e 3d 0f 86 fc 45 f9 b3 fe 14 ff 00 cf 59 c4 68 1e 25 d0 ee 09 84 8b fd 12 12 31 db 36 71 48 27 7b 54 27 72 4c 48 30 fe ea 80 63 6c 18 4b 2a 89 00 11 37 21 33 6a 39 21 1c 75 83 3f 03 8b 1c 4d 6d e2 60 c0 e0 Data Ascii: 6Lxt1W9%fv\R5x>rF2KXksL5)1!)!fld,\t:`95>y\R5{}+U8N/"AIg)++;yqG$v7"2i==EYh%16qH'{T'rLH0clK7!3j9!u?Mm`
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 9a 3f f1 19 28 d3 7c 6c 61 03 35 8a 38 a9 38 3c b2 8c 27 40 ae cb 7e 57 37 84 eb e5 f5 81 b6 b8 cc 76 34 42 10 16 65 00 f9 c8 4f c4 ad b6 f3 91 ff 00 84 c4 00 ac 0e 72 3c 9f f2 7e 37 9b fe 94 24 80 4e e6 5d ac 47 ca e4 e3 c7 f4 0f ce f7 84 f9 5c 40 75 31 f1 b3 87 78 bf 83 f8 27 e7 88 20 b7 ea bf 96 4f 21 7c 0c 98 e0 27 03 68 b5 8f 05 88 c5 72 4a 91 c6 53 b6 d6 71 f2 d8 7e 4e 6c e0 3f 28 74 db 18 be 70 2f 17 5f cc c7 f5 d0 c0 46 fe 17 f2 5b c9 39 18 18 3c e4 ad b6 f8 de 13 f1 ac d6 06 23 09 27 13 f3 23 7e c5 8e 91 c7 19 0f eb a2 48 56 cd 0d 1d e0 fc ab e9 58 83 85 b1 5b 0f f8 fc 9c de 0f 8d e6 f3 79 19 c9 47 91 92 c8 36 75 fd 4b 8b e0 33 85 1b ff 00 f2 51 e0 fe 4e f3 ce 12 4e 79 cf db 3c e7 9c f3 9b 39 ac 0a 77 ac 40 08 23 47 58 46 30 c2 3e 06 7e 73 78 49 Data Ascii: ?(\|la588<'@~W7v4BeOr<~7$N]G\@u1x' O!\|'hrJSq~Nl?(tp/_F[9<#'#~HVX[yG6uK3QNNy<9w@#GXF0>~sxI
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: c9 a6 79 18 f8 cf d9 cd 7a e5 48 0b 5a 23 24 8e d7 20 91 30 85 27 f1 9e 1b 19 34 43 62 4a 50 b4 9c b1 39 b6 56 aa bc a6 ec 96 28 c5 a7 b0 cc bf a2 ca f5 da 0b 2a 05 aa ab 2e 47 33 a3 11 15 a8 d5 a4 af 24 92 ab a4 14 a6 91 6b d7 82 13 3c b0 26 09 15 d0 48 25 47 85 aa ce 00 73 d7 4d 15 b8 4d 4b 35 a7 30 2f a9 56 34 88 fb 00 82 cd d5 86 3e ee f2 84 ff 00 a1 42 a2 e7 43 2a bc 90 24 73 2d f9 23 eb 65 7a d5 12 f5 33 8c 95 ed 2d 9e 87 46 2b b7 e9 88 a7 ad 3b 52 92 4a cf 72 90 b2 7a bb 4e 25 48 23 b6 8f d1 a5 78 9b bd 7e 33 4a 65 3c 8e ab 1a b1 59 ad d9 25 39 fd 90 76 ed 32 bf 39 64 49 05 5b 36 ab 63 d0 b3 6e b2 33 43 25 b8 d1 42 27 0b 7d d5 0f 54 b1 11 03 45 7a 29 24 8a 68 fa ce b5 66 12 cd 3f 5e 2e f6 f6 d6 68 ad 2c 51 59 76 a8 29 d8 ea 20 49 2d c5 49 e4 bd d9 Data Ascii: yzHZ#$ 0'4CbJP9V(.G3$k<&H%GsMMK50/V4>BC$s-#ez3-F+;RJrzN%H#x~3Je<Y%9v29dI[6cn3C%B'}TEz)$hf?^.h,QYv) I-I
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: eb 25 aa 4c 63 0c 04 e2 58 b3 18 96 f3 b3 09 27 dc 91 02 34 ca 56 c4 ca 01 0e aa e5 4c e9 c8 43 32 91 29 01 85 82 c0 a3 92 20 9e 40 2a 59 08 b4 c0 c1 5e b2 e1 78 d4 75 f7 ab 2c 37 ec 7d ab 12 7d 99 25 99 8c 12 1b 96 78 47 5e 63 3c 62 c4 79 d9 5d 6a d5 da 73 1c 21 eb 29 b4 23 6a f5 66 48 24 ec 6c 44 6c 1e c5 e5 ce 85 cb e5 88 12 42 3f 94 8a 57 a3 34 8f 62 e5 9b 13 5a b7 62 ea d6 4d c7 02 f3 4e 97 ae b0 5a f7 5f 12 19 16 ba c5 2d aa bd 72 3c ad 21 ff 00 9e ab c5 59 94 12 fc d9 8e 84 c2 59 ec 2d 49 9b 05 19 ce 0a 53 e7 d0 94 e2 f5 ef a3 d7 c8 c0 51 74 cf a2 e7 3f 8f 42 7e 8c 78 68 42 49 a3 10 c1 4e be 7d 48 81 6a b1 ec d6 50 23 ac 4b 1a 71 67 d6 88 91 5e 22 1a b7 24 35 5b 66 ae 34 0e 09 8a 4e 3e b7 c6 ae db fa db cf a2 a7 1a ac 60 1a aa 4f d7 2b 9e 86 18 6b Data Ascii: %LcX'4VLC2) @*Y^xu,7}}%xG^c<by]js!)#jfH$lDlB?W4bZbMNZ_-r<!YY-ISQt?B~xhBIN}HjP#Kqg^"$5[f4N>`O+k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	62705	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	711	OUT	GET /?ob=open-bridge%2Fevents HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	420	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Link: <https://www.campobahia.com/wp-json/>; rel="https://api.w.org/", <https://www.campobahia.com/wp-json/wp/v2/pages/85>; rel="alternate"; type="application/json", <https://www.campobahia.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-28 05:15:28 UTC	7772	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3a 61 64 64 74 68 69 73 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 68 65 6c 70 2f 61 70 69 2d 73 70 65 63 22 20 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 61 68 42 79 7a 64 71 6f 4f 4f 47 43 5a 6a 48 6d 47 76 73 4f 6a 4c 69 7a 56 4d 36 70 65 32 72 56 51 72 51 61 48 41 6c 66 30 77 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR" xmlns:fb="https://www.facebook.com/2008/fbml" xmlns:addthis="https://www.addthis.com/help/api-spec" ><head><meta name="google-site-verification" content="-ahByzdqoOOGCZjHmGvsOjLizVM6pe2rVQrQaHAlf0w" /><meta c
2024-05-28 05:15:28 UTC	8618	IN	Data Raw: 74 49 74 65 6d 28 0a 09 09 09 09 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 4b 65 79 2c 0a 09 09 09 09 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 20 69 74 65 6d 20 29 0a 09 09 09 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 7d 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 68 65 63 6b 73 20 69 66 20 74 77 6f 20 73 65 74 73 20 6f 66 20 45 6d 6f 6a 69 20 63 68 61 72 61 63 74 65 72 73 20 72 65 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 76 69 73 75 61 6c 6c 79 2e 0a 09 20 2a 0a 09 20 2a 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 73 65 72 69 61 6c 69 7a 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 61 20 57 6f 72 6b 65 72 2e 20 54 68 65 72 65 66 6f 72 65 2c 20 69 74 20 63 61 6e 6e 6f 74 20 72 65 66 65 72 20 74 6f 20 76 61 72 69 61 Data Ascii: tItem(sessionStorageKey,JSON.stringify( item ));} catch ( e ) {}}/** * Checks if two sets of Emoji characters render the same visually. * * This function may be serialized to run in a Worker. Therefore, it cannot refer to varia
2024-05-28 05:15:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:28 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 6f 72 64 69 6e 67 6c 79 2e 0a 09 09 09 20 2a 2f 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 74 65 73 74 20 69 6e 20 73 75 70 70 6f 72 74 54 65 73 74 73 20 29 20 7b 0a 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 20 3d 20 73 75 70 70 6f 72 74 54 65 73 74 73 5b 20 74 65 73 74 20 5d 3b 0a 0a 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 3d 0a 09 09 09 09 09 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 26 26 20 73 65 74 74 69 6e 67 73 2e 73 75 70 70 6f 72 74 73 5b 20 74 65 73 74 20 5d 3b 0a 0a 09 09 09 09 69 66 20 28 20 27 66 6c 61 67 27 20 21 3d 3d 20 74 65 73 74 20 29 20 7b 0a 09 09 09 09 09 73 65 74 74 69 Data Ascii: 4000ordingly. */for ( var test in supportTests ) {settings.supports[ test ] = supportTests[ test ];settings.supports.everything =settings.supports.everything && settings.supports[ test ];if ( 'flag' !== test ) {setti
2024-05-28 05:15:28 UTC	8198	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 Data Ascii: kground-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--w
2024-05-28 05:15:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:28 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 31 70 78 20 31 70 78 20 31 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 20 75 6c 5b 69 64 5e 3d 22 6e 76 2d 70 72 69 6d 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 22 5d 20 6c 69 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6d 65 6e 75 20 6c 69 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 Data Ascii: 4000olor: #ffffff;border-radius:0px 0px 0px 0px;border:none;border-width:1px 1px 1px 1px; font-size: 14px; line-height: 1.6em; } .button.button-primary:hover, ul[id^="nv-primary-navigation"] li.button.button-primary > a:hover, .menu li.button.button-pri
2024-05-28 05:15:28 UTC	8198	IN	Data Raw: 20 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 6c 69 20 3e 20 61 20 73 76 67 7b 20 77 69 64 74 68 3a 20 31 65 6d 3b 68 65 69 67 68 74 3a 20 31 65 6d 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 7b 20 70 61 64 64 69 6e 67 3a 30 65 6d 20 30 65 6d 20 33 65 6d 20 30 65 6d 3b 6d 61 72 67 69 6e 3a 30 65 6d 20 30 65 6d 20 30 65 6d 20 30 65 6d 3b 20 7d 20 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 7d 20 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 2c 2e 66 6f 6f 74 65 72 2d 74 6f 70 2d 69 6e 6e 65 72 20 Data Ascii: uppercase; } .builder-item--secondary-menu .nav-ul li > a svg{ width: 1em;height: 1em; } .builder-item--secondary-menu{ padding:0em 0em 3em 0em;margin:0em 0em 0em 0em; } .footer-top-inner{ background-color: #ffffff; } .footer-top-inner,.footer-top-inner
2024-05-28 05:15:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-28 05:15:28 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 70 78 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 6e 61 76 2d 69 63 6f 6e 7b 20 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 6e 61 76 2d 75 6c 20 3e 20 6c 69 3a 6e 6f 74 28 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 29 7b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 20 7d 20 2e 62 75 69 6c 64 65 72 2d 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 2e 73 74 79 6c 65 2d 66 75 6c 6c 2d 68 65 69 67 68 74 20 2e 6e 61 76 2d 75 6c 20 6c 69 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 69 74 65 6d 2d 6e 61 76 2d 73 65 61 72 63 68 29 3a 6e 6f 74 28 2e 6d 65 6e 75 2d Data Ascii: 4000px 15px 10px 15px; } .builder-item--nav-icon{ margin:0px 0px 0px 0px; } .builder-item--primary-menu .nav-ul > li:not(:last-of-type){ margin-right:20px; } .builder-item--primary-menu .style-full-height .nav-ul li:not(.menu-item-nav-search):not(.menu-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	62707	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	734	OUT	GET /wp-content/uploads/2022/07/15-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:02 GMT Accept-Ranges: bytes Content-Length: 305452 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 14 1a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 31 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:11:16
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ca fd af 92 08 1e 8b 74 1e ef a5 cf 92 31 ea 56 b8 0d b5 3a bd 41 3a eb 03 f3 75 6f e7 22 b7 37 fe 0d ff 00 87 f7 a9 8c d3 fe 86 cf 8f b7 ff 00 24 b2 e5 86 5d 30 7f ce 76 63 9b 17 5c ff 00 f3 58 3b 3b 2f d4 69 65 24 01 1e d2 79 9e 77 42 25 79 b9 9c 7a 1b a3 59 27 58 fe ca 71 9b ff 00 05 67 98 d3 ff 00 24 a6 33 c0 d4 d3 67 c7 db ff 00 92 50 cb 06 5a a1 cb 83 fe 13 28 cd 83 fc ff 00 e1 ff 00 a0 a1 78 ea 97 5a db 40 75 65 a3 da 01 01 a0 f9 35 e7 f3 bf 94 a7 fb 3f a9 0a da f2 fb 1c e2 60 86 bd c4 fc e1 58 67 52 68 e6 ab 3f e8 ff 00 e4 91 99 d5 2b ef 55 83 fc df fc 9a 82 70 e7 46 Data Ascii: uFVfv'7GWgw?t1V:A:uo"7$]0vc\X;;/ie$ywB%yzY'Xqg$3gPZ(xZ@ue5?`XgRh?+UpF
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 01 d8 d6 aa 12 9d 02 03 f1 30 06 f9 81 69 bf 78 9a 57 bc 8d 38 6f 52 a2 8b 7a f9 8a 39 6b 57 84 a3 0a 13 4a c2 96 ad 48 47 2d 6d cd cb a3 70 ac 22 77 f2 35 27 ce c4 da 73 cc 86 ed 9a cd 85 fa 41 1a 98 ab 46 0a ca c3 4f ca ca f9 88 9c 01 d1 2e 34 d2 58 68 88 aa f5 4f 8a 89 2a 43 2b 4c f2 eb a2 05 54 92 19 46 4d a2 18 1b b0 2d a3 26 75 46 49 3b 8e c0 f6 a5 b4 84 11 8b ca 74 4c bd 29 ce a8 8c 60 d8 52 9f 64 64 93 29 d5 09 4a 9e ae 71 04 7a ea ed b9 20 70 d0 91 6c 83 12 a2 9d 14 ca 95 e7 13 21 26 a4 2b ac 07 2d 91 a4 4d 80 b2 d5 25 9f aa 2e a8 d5 98 48 31 30 c2 59 2c 91 1e 25 95 ab 94 b8 1e fe 10 30 32 a6 60 50 9f 30 e1 db 0a bb 4c 0d f4 72 b3 2b 55 10 91 4c ed 36 46 ab 60 aa eb 6e ad 2a 68 06 bc d3 ed 5e da 95 fa 03 73 62 2a e0 2c ba 2c 19 5e 9b e4 7a 8f 87 Data Ascii: 0ixW8oRz9kWJHG-mp"w5'sAFO.4XhOC+LTFM-&uFI;tL)`Rdd)Jqz pl!&+-M%.H10Y,%02`P0Lr+UL6F`nh^sb*,,^z
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: e0 b5 f6 0f d9 4d 73 d7 b8 b0 9e b4 ad 49 24 ea 68 0a ab 6e 27 64 a0 ac 19 c4 00 2b dc 02 9b 6a 70 a1 88 d3 41 89 9e 15 97 96 89 5d fc d9 07 a5 ca 8d d0 92 92 b8 e0 32 96 79 e7 81 b8 9b a6 2b b1 c4 d8 39 c3 92 c6 40 3f 1a 68 b2 75 2b c8 33 0f 54 aa f4 c8 2b ae 09 db 39 dc 04 6d d1 5c eb 3c 5b 76 72 98 a5 25 6f 8e 58 42 90 8f 9e c2 82 67 98 5f 69 36 9d 0c d8 b7 11 bc cc cf 5c d2 c8 c0 06 9a d2 d9 f9 dd e5 d5 ab aa 0c cd 81 d5 55 94 ed 1c a4 9a b0 ec f6 e8 89 87 13 75 98 14 75 32 a3 49 64 d6 13 0c 25 55 82 cb ee 01 bb 23 79 4b ce cf d0 74 1b ac 7b 37 a1 0a 8e ac 4e 8a ab 98 6b 14 46 55 47 da 50 b1 20 fc c9 ea f2 7e 71 e6 ec 73 13 2b d5 05 1c 4e 59 4d 09 38 ca 99 dd 46 17 3b 70 19 d4 2e bc 67 6a f2 1f 0a d7 95 20 74 3f 58 9c 83 df 85 58 7a 63 79 1f 54 8e f6 Data Ascii: MsI$hn'd+jpA]2y+9@?hu+3T+9m\<[vr%oXBg_i6\Uuu2Id%U#yKt{7NkFUGP ~qs+NYM8F;p.gj t?XXzcyT
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 44 70 89 1c 0e 11 09 c1 34 fc 92 51 61 e7 d6 41 3c f2 40 5e 25 12 8f ca 24 fe 87 9e 08 f8 3c a7 31 48 3e 1c de 51 6f 09 ec 25 3e 21 cc 91 29 df e0 4c d1 73 f6 00 51 bc 11 00 63 cc 31 34 06 b3 80 ce 1c 83 13 23 41 a9 a9 bf 28 31 34 0e 1a 10 e5 7c 2e 41 20 7c 83 c2 e1 dc 03 c2 1c 73 f1 c3 47 27 93 c0 07 92 00 24 72 b9 3c 36 42 50 00 22 bc be 41 68 40 12 b8 21 72 b8 72 69 44 05 e0 80 e3 f4 03 e3 cd 8b 92 89 5e 28 70 4f ec 82 3c 05 c9 2b 90 07 ca 3c 71 e4 13 bf 62 b9 1c 7f ec fc af 25 c2 00 12 02 20 ae 78 5f 1c 70 b8 5f 1c 96 21 c9 44 12 bf 64 0a 04 f2 50 44 fc b8 02 82 1f b7 c2 fd c3 64 05 79 14 24 45 c0 a0 bc 82 71 45 dc 2f 20 4f c1 4d 67 92 e0 2e 39 41 84 af 0e 17 c7 3c 14 00 45 a1 10 02 7b 1a e4 40 6a e0 14 5a 38 3f 28 34 20 c4 47 24 f2 57 1f 26 24 e8 fe Data Ascii: Dp4QaA<@^%$<1H>Qo%>!)LsQc14#A(14\|.A \|sG'$r<6BP"Ah@!rriD^(pO<+<qb% x_p_!DdPDdy$EqE/ OMg.9A<E{@jZ8?(4 G$W&$
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d7 15 1a a3 31 84 f7 c4 8d b8 78 8e 46 b8 17 c6 13 a5 85 33 d4 bc f8 46 c9 5f 6f e5 c5 8f 1e b8 02 32 b5 a9 ee 80 8f b5 4d aa 6b d5 8a 83 20 4a 7d d7 34 c7 94 62 8f 23 09 47 21 5d 7d b0 44 97 88 4f ca 3c 16 65 07 11 e4 c1 33 65 da c1 1e 51 b2 99 03 dc 1b f6 18 9f 7a 28 c4 b7 e1 7a 6d c7 81 26 44 a8 25 13 99 63 63 84 75 e8 82 5f 51 06 c4 54 66 40 9d 3f 20 85 ec 73 54 99 47 04 32 51 13 f7 2b 94 cb 10 35 3b 2d 18 03 2d 1f 1f d8 b5 c3 ef 07 1f b7 f2 32 6d 69 7d d8 9c 04 be 48 5a f1 5f 71 a5 49 6c 35 3e cb ca f7 ce e4 5b 2a e5 cc 51 ce 13 26 e1 3a 69 18 5d 2f 92 63 dc e1 f5 5c e4 fc 73 41 60 29 b5 5a be 9c 25 7d 68 80 6d 38 57 d6 ae 13 64 63 53 a4 45 8f 71 73 67 4f 96 76 af 29 1c b8 93 91 2c e5 31 f6 91 33 20 25 29 ed 99 19 2d 73 c3 f8 f7 40 c3 f6 61 72 7c 91 Data Ascii: 1xF3F_o2Mk J}4b#G!]}DO<e3eQz(zm&D%ccu_QTf@? sTG2Q+5;--2mi}HZ_qIl5>[*Q&:i]/c\sA`)Z%}hm8WdcSEqsgOv),13 %)-s@ar\|
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 56 8c 26 c3 e2 8b 41 28 8e 50 6a 0d 2b d6 51 88 14 5a 02 71 70 4e 67 2b eb 38 23 5d ce 3e ae 51 61 e7 d6 b8 21 09 1e 13 6e 48 08 c8 c8 86 49 37 24 ce 59 72 27 af 38 0a 0d 80 83 14 0e 3f 5a 25 f4 e2 27 fa e8 8a fa 0c 68 34 c7 1f 5c 90 ec 63 c9 10 78 8e 26 2f 8e 39 1a 4d a2 c4 32 20 a3 23 1e ef 58 21 ac 9a 35 25 a2 17 fc a5 42 d0 f5 34 2c 61 7c 91 14 f9 18 d2 c9 a3 7a 11 46 43 6a 82 1f 58 c6 b9 3c 16 b7 98 aa 79 35 b8 c9 00 0c 6c 21 d1 c3 21 15 a0 7a 7e 26 2e 1b 5d b0 a9 6b c6 e3 15 22 d5 09 91 88 cc 50 9a d3 87 95 a8 87 dd 98 b5 d6 a6 2e f5 ca 4b a0 68 2e 86 76 b2 2a 56 5e 99 46 cc 4a 3c 5d e7 ba d5 2b 6e 55 68 4e c6 cb 52 77 9f a6 f8 4c 77 5e 99 90 96 36 9c 8d a7 19 32 d7 1a a3 ca da 2b ef 5a 70 64 e5 ed 7c 30 94 19 1b 07 f2 50 cd 22 61 71 4e 8f c9 08 78 Data Ascii: V&A(Pj+QZqpNg+8#]>Qa!nHI7$Yr'8?Z%'h4\cx&/9M2 #X!5%B4,a\|zFCjX<y5l!!z~&.]k"P.Kh.v*V^FJ<]+nUhNRwLw^62+Zpd\|0P"aqNx
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 09 73 5a 0b a3 8d 35 8e 09 ec 99 a7 99 9c a2 91 f1 16 f1 32 64 7e a2 5b c1 9a c1 80 1e 25 46 3e 53 ea 48 13 ab 38 2f ae ce 5d 13 91 8c b5 32 28 c9 f0 60 2f 62 8b c4 29 23 63 8b 9b 1b 50 00 81 1a 7c 0e e5 f5 fc 4b 58 e2 9d 13 b8 fa e5 0a 8f 0b e9 02 45 17 b9 3a b3 a3 42 2f 25 f5 9e 13 aa 3f 81 55 c0 3a 07 38 0a e0 83 04 48 43 1a 2c 81 a1 8d 81 eb d4 d0 9c 3c 43 65 20 09 e5 24 c8 f7 a0 e2 11 3c 90 f6 00 66 8b 93 31 5e c7 82 6c 38 96 4c e4 eb 0e 6a 36 4a 32 f2 9b 21 4f 9c b9 72 f4 ef 68 11 cc f4 e9 01 4e 7b 0a 2d 69 0d 87 94 60 21 08 c0 4d 60 e5 ac 89 18 1a 80 47 86 a9 07 29 81 ac 4e 30 b9 1f 4a f1 88 a1 01 71 30 72 9d 5a 30 9e d0 84 00 88 e1 88 a8 e0 60 47 c5 89 f3 07 12 d0 e4 d6 b7 90 c6 a0 d7 72 f6 39 36 39 13 24 72 6b a6 6a 73 9e e4 03 51 81 a4 32 16 b8 Data Ascii: sZ52d~[%F>SH8/]2(`/b)#cP\|KXE:B/%?U:8HC,<Ce $<f1^l8Lj6J2!OrhN{-i`!M`G)N0Jq0rZ0`Gr969$rkjsQ2
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 8f 63 b8 61 25 14 e6 8e 00 08 c9 ca 2d 77 3f cc 16 be 42 3c 1b cf fe 8b 39 5c f8 07 96 a7 b1 9c 80 ce 5a d0 d0 d2 f4 f7 58 69 fb 0f 21 92 c8 40 b1 23 13 e5 7b c3 83 ca 6d 46 14 69 b5 39 be 29 f3 c8 11 91 c5 06 4a 09 f6 90 1d c0 74 8c 2b 88 dc be a4 65 32 9b 4a 34 d8 50 ac d6 a6 39 ed 41 cf e5 cd 91 a4 c9 21 0c 0e 28 87 27 c9 c2 73 da b9 69 45 ad 27 d5 ca f5 39 3a 27 04 58 e4 01 08 38 04 24 42 42 57 91 e5 d2 05 c9 28 31 c5 78 15 e4 02 13 12 bd c5 19 dc 10 b2 57 bb 95 cf 20 96 85 f0 8b 57 ad a9 b1 80 9a 02 25 71 fa 18 9a e4 6b 84 e6 3d a5 c5 17 34 2f 21 c7 90 41 81 7a 82 f1 6a f5 82 9d 19 5c 2f 12 bc 4a 6b 4a 31 85 e0 c0 9c e0 83 1c 50 88 a2 d0 13 4b 79 73 9a 11 12 12 63 78 47 90 b9 5c 82 9c b9 e4 9f 94 41 6a e7 95 fb 2e 5a 11 20 af 26 b5 7b 87 1e e3 c9 b2 Data Ascii: ca%-w?B<9\ZXi!@#{mFi9)Jt+e2J4P9A!('siE'9:'X8$BBW(1xW W%qk=4/!Azj\/JkJ1PKyscxG\Aj.Z &{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	62710	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	966	OUT	GET /wp-content/uploads/2022/07/004.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:41 GMT Accept-Ranges: bytes Content-Length: 195079 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 2f c1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 30 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: /ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:20:16
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 47 8b fb 91 97 fd 06 ff 00 33 03 ef 1f a3 6f a7 e4 61 9e ac 1d d3 da c1 5e 56 f6 3e 1a 03 0d bb 77 50 e3 e9 c6 e6 b7 1d 97 7a ee ff 00 08 ab 99 77 4e af 07 12 9f 52 c6 b8 e2 d9 6b 9c da ea 6b 68 75 b5 d4 d6 d8 f1 fa cd ce 6f a7 6d 8d af 7b 16 05 2f 6f 4b ca 6d c6 bb 3e c8 6c 65 94 36 c2 01 86 3f f5 8d 9b 7f 9f c6 ca c5 b3 63 f7 ff 00 84 ab d5 5d 37 4f 7b 73 db 65 b4 b7 7d 74 64 d8 5b 65 a6 01 f5 1a db 6d 73 59 21 cc f5 3e d4 ed b6 ff 00 e8 b5 36 2e 73 16 08 c7 1c cc b8 4f a3 88 6b 08 89 70 7e 94 bf c4 60 94 09 23 86 8c ae ff 00 97 f8 ef 31 76 06 70 e9 14 59 06 d6 64 d0 eb d8 c6 06 ba 7d 0a 4b e1 cd 76 c7 6e af dc fd 8f ff 00 86 fe 71 1f a6 66 0e 97 7e 13 ef d9 91 81 7d 6c 61 79 69 78 0e 6f e9 7d 6a 99 0e fd 66 bf 52 df d1 7a 7e a5 15 ff 00 2e db 56 ae 55 Data Ascii: G3oa^V>wPzwNRkkhuom{/oKm>le6?c]7O{se}td[emsY!>6.sOkp~`#1vpYd}Kvnqf~}layixo}jfRz~.VU
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: fd 6d 3d 47 f7 59 d0 d2 6f 7f 4d 2f 0f b1 86 ca f2 ee 7b a5 8d 63 4e d7 54 c7 3c 39 d4 d3 bc 6f d9 f4 fd 5f e8 57 e2 a0 5a 31 ef c5 c8 c7 ca a9 e3 a7 62 c1 fb 63 cf bd af 7b b6 fa 9b 5d b9 ff 00 ce 3b f9 a6 fa 56 b1 9f d2 2a f5 ec fd 28 f2 f1 b6 5b 91 6e 33 ed b3 0c 5d bb a8 d0 19 fa 60 7e 87 db 2a 73 b6 3a e6 5d f4 fd ff 00 e1 1f fa c5 1f 98 f5 6e 6b 5e ca f2 bd cc c6 71 23 1a a6 c7 ba 07 a4 e7 31 ef f7 7a 9f e9 ad ff 00 ac 54 fc 8a 16 cc 25 ee 40 5e f4 3f ab c2 7f ee 5a 72 f4 12 3f b6 32 8a 11 9b 77 4f 77 d9 ba 81 0f 63 58 06 25 95 98 6d 81 df e1 3d 51 fa 3d f6 b7 f9 eb 2e f5 ab b2 af 7d 74 7d a5 19 f9 ce b2 a1 6e 76 a2 c0 5b 4e 24 02 43 44 bd bf a2 74 be ac 7a ac 6f ab b5 af fb 4d df e0 bd 04 9f 4e fc 6f b2 65 83 63 ac 78 db 8f 4b 07 ea c0 89 1c 7f 33 Data Ascii: m=GYoM/{cNT<9o_WZ1bc{];V([n3]`~s:]nk^q#1zT%@^?Zr?2wOwcX%m=Q=.}t}nv[N$CDtzoMNoecxK3
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 11 92 32 1c 5f 5b ff 00 ba 60 8e 18 c4 89 01 2d 3b bc 3f 44 83 95 d4 a9 31 39 34 b6 e6 e9 c9 a9 d6 63 db ff 00 42 ca 57 27 d5 40 19 55 08 9d d4 80 de e4 ed 7d b5 37 fe 8b 17 43 85 90 31 f3 b1 72 09 8a cb ac a6 e3 e0 cb 84 6f 77 f2 19 6b 2a 73 9e b6 7a 1d b7 e1 e0 3d d8 b5 e3 d7 94 cc 8b aa b3 29 cc 16 5a 1a 1d ea d2 c6 be c3 b1 8d db 7e ff 00 a0 a6 31 bd 19 a2 69 e3 fa 7e 2f 5a 78 68 a7 13 2a e6 9e c2 9b 5e 3e f0 c5 a7 6f 41 fa cf 93 43 ab 67 4a cc 97 0d 26 a7 37 5e 7f 3f 6a e8 72 7a ef 53 6f f3 fd 61 cc f2 16 b5 9f f4 6b da a8 d9 d6 a9 79 fd 2f 52 b2 df 2f 52 db 3c fe 8b 37 25 c3 e2 ae 2b e8 d9 ff 00 9a ff 00 59 ef 97 0c 07 b0 0e f6 ba a6 7f d5 5a 3f ea 52 6f d5 0e b2 4c 5c fc 4c 71 dc db 90 d1 1f f6 d8 b5 66 3f a8 e1 17 92 4d b6 f8 82 c7 9e db bf 3f 6a Data Ascii: 2_[`-;?D194cBW'@U}7C1rowksz=)Z~1i~/Zxh^>oACgJ&7^?jrzSoaky/R/R<7%+YZ?RoL\Lqf?M?j
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: b3 d9 1a da 64 d5 0b 94 19 30 59 49 73 fa e0 cb 99 b2 56 f2 cb a4 8e 89 55 47 cd a5 32 88 1b 9d dc 6d 54 b9 bb b3 32 76 f1 f5 96 36 33 37 e3 0c d5 b5 03 08 1b eb a8 1d 10 b2 cb 62 79 7b 89 2a c3 e8 f2 ae 4d fa 6e 7b 4b 3a 65 4d 0c f8 8d 31 da d8 50 bc ab 1e a4 e7 ed e5 69 c3 a0 28 ee 6f dc e6 ce 76 93 ad a6 a4 e9 01 c5 db 47 97 45 f0 74 52 b4 3d a4 19 cd 29 a0 83 57 db a7 99 ad c5 de 7b c1 e7 4f be 3d 83 e8 39 1b f2 55 cf 6f 5e 6e df 96 e9 f9 0d 21 ca af 91 9d ee 7b 29 fc f4 71 29 28 2e 17 0f 34 9d b7 33 6d 55 a3 27 78 ec 9f 21 45 5d 8a b9 59 62 ea ab c7 b6 1a 74 58 e1 7f 0e 42 c2 34 89 15 76 ec ce 6e bd 35 83 91 d0 df f3 59 7d 02 b5 a5 b7 cb ef 64 39 b0 5c 05 40 07 24 9b 5d 36 33 66 f6 ab 0c 66 15 66 d3 e1 d1 70 14 2d 6d 85 b5 df 56 4e 5e ae 66 b2 ee ff Data Ascii: d0YIsVUG2mT2v637by{*Mn{K:eM1Pi(ovGEtR=)W{O=9Uo^n!{)q)(.43mU'x!E]YbtXB4vn5Y}d9\@$]63fffp-mVN^f
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 6f f4 6b 38 31 21 1b 66 33 a0 0e be 87 37 fa 35 9a cd 7e 8d 66 b3 58 3e a7 ed fa b7 a3 fd 4d 8c d9 cf 3f 4d 0c 4d 6b 58 df 6d 0c d7 d3 ce 68 e6 f3 91 ce 43 36 3f 46 bf 48 fa 9f b7 e9 de 7e e0 f8 de 6c 66 f3 7f 4d fe 8d e6 bf 52 fd f0 82 73 5f ab c0 cd 78 c2 73 96 06 1f 5d 7d 0e 0f af ed fa c7 f4 40 f2 cb b3 a3 fa f7 9b c2 7e 9b 19 b1 9e 73 8b 67 10 09 fa 9f a7 9c e5 9c b3 79 ad fe 8f db fa 07 ef fa 75 9a c0 35 fa 38 8c e2 b9 c0 61 41 9c 33 86 70 c2 83 38 2e 2a a8 cf 1b 3f 7f d9 be c7 fa 3b 39 cb 37 f4 18 47 f4 37 fd 01 f6 cd 7e 93 ac f6 66 dc e6 8e 71 19 c5 70 85 ce 39 f9 66 d8 61 6d e1 fe a8 27 09 39 e7 fa 7b cd e6 cf d1 7e df a4 9d 61 db 67 db 37 fd 03 e7 0f d3 7f 4d 9c f3 fa 8e 0c 5c 3f ac fe 9d e6 f3 79 bc 43 e4 fe 96 f3 9c 74 37 9b 1f a0 fd 09 ce 43 Data Ascii: ok81!f375~fX>M?MMkXmhC6?FH~lfMRs_xs]}@~sgyu58aA3p8.*?;97G7~fqp9fam'9{~ag7M\?yCt7C
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 94 3a 50 af 5e 29 a3 b9 55 16 2f 89 2b 47 1c 71 c9 5e fc b2 db 9a 62 8d 5d e7 12 ac 51 2c 4e ed 0c e2 ad 65 86 cc 17 15 9a d4 2f 96 29 ef 22 71 13 d6 bc 00 2f 05 a5 6a f2 46 d1 b4 d2 9a f0 43 1a 80 ac 2c 8b 21 a2 9d 26 56 ad 2b 1a 35 21 85 2d cf 25 59 22 9e 2b 90 cb 0f 16 9e 30 72 27 e0 d1 5d 0c 2e 9f ce 28 e5 7c 8a b8 50 b1 90 2b c4 35 a0 b9 cb 58 65 de 3c ac 71 e5 27 19 d5 44 f6 ce 96 40 d1 de 9e c4 34 fa bb 92 cd 1d 8e cc 4b 63 ad d0 1d d3 83 95 e2 87 d1 f0 62 68 a4 eb 1b 8a bd 9a a6 76 b0 d3 4b 6a 2f 87 5e 40 56 d7 38 d2 88 67 8a ed f7 57 eb 06 e4 b5 3f 31 61 4b b4 55 a3 68 e4 aa 63 8e 39 2c 57 88 4c a6 59 ad 54 7a 82 22 72 09 c1 a8 8b 08 86 41 d8 55 99 60 8e c5 66 eb ac fb 21 82 5e ab b5 9a be ac 5a 0b 4a b4 12 16 92 02 67 82 b2 06 12 cd 23 55 23 9c Data Ascii: :P^)U/+Gq^b]Q,Ne/)"q/jFC,!&V+5!-%Y"+0r'].(\|P+5Xe<q'D@4KcbhvKj/^@V8gW?1aKUhc9,WLYTz"rAU`f!^ZJg#U#
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d6 c8 d0 fc 4b 86 25 ad 71 23 f9 b1 c8 b3 59 67 68 63 f5 c7 d9 da e2 90 cc 60 8a c4 b3 a3 0b 0d 0c 71 58 a7 0d 69 16 b3 a3 c9 6a 44 bb 6a 0b cc 83 27 39 20 ff 00 27 4a ee 62 bb 5c 01 27 86 5d 86 a7 25 88 92 58 63 9a 19 a0 e2 6b d9 21 61 a0 24 68 1a 9f 2b 13 cc 92 99 e5 c8 6d 0b 8b 3d 72 4b 2c 91 3d 58 e5 b2 12 38 20 99 66 4a f3 bd cb 10 f6 56 12 48 9c a9 c7 0b c4 a0 18 79 3c 71 92 c9 08 02 cc 5c a5 9e 42 a0 01 bc 70 54 f3 e5 84 71 c4 5e 44 a0 09 34 84 57 95 cf c2 51 bc 80 83 37 61 a0 23 42 d9 dc 82 2f 49 1a c5 4a 44 32 19 9b 6d 41 55 a5 20 49 17 5a ba aa a3 52 5f 8c ad 7a 68 cd 6a e2 1c a7 ff 00 af 65 58 40 cc cd 4b a5 69 03 3d 99 da ed db 9e 98 7a b6 e7 9d 94 c1 53 55 ea f5 f1 08 8d 0a bc 26 a3 4c 29 ab 1d 55 68 67 ac e6 94 72 cf be be 3e 2b 72 60 91 c7 Data Ascii: K%q#Yghc`qXijDj'9 'Jb\']%Xck!a$h+m=rK,=X8 fJVHy<q\BpTq^D4WQ7a#B/IJD2mAU IZR_zhjeX@Ki=zSU&L)Uhgr>+r`
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: cc 71 64 ae 52 d0 dc 50 23 70 ac 09 8f b8 aa df 32 bc 76 12 dd 8a 21 ee 75 e1 40 ec 4e aa 55 8e 34 5a 11 2b dc ed 54 86 b0 8c 2d 7a b8 c8 61 76 6a 53 c9 48 c9 dd 4e c3 aa 9e ec d1 75 6b 37 be 09 a4 ed 27 35 62 12 f7 2a 45 1f e3 b1 6d 9a bf 23 62 8a 24 96 e2 09 07 5f d7 bb 11 4c 67 73 14 b1 d4 a7 19 d4 15 94 60 ac 33 dd 2c 77 16 15 65 f8 e3 05 61 9f 1c 60 80 6b d0 32 c7 38 cc 0c 92 a7 a4 67 a4 6a fc 40 51 6b 3a bb 7a cf c3 a9 4a d7 c8 83 82 a3 5e 92 39 6d f6 11 8f 54 31 2f ab be 8b fc c1 df 8f 52 dc a1 14 a3 6b 92 5b a4 24 f7 27 11 5d a5 15 28 f9 4e 45 6d 00 61 ec 55 84 0f fd dd 6f 8e c2 28 63 45 35 63 59 7a f8 42 f5 f2 eb 94 6a 00 0a cd 97 a0 f5 75 55 2e 76 d6 24 8a 25 58 ac c1 a3 d9 c2 21 96 09 24 82 49 76 b3 d5 04 bf 7e ad cb a9 61 25 08 dd b6 06 84 51 Data Ascii: qdRP#p2v!u@NU4Z+T-zavjSHNuk7'5b*Em#b$_Lgs`3,wea`k28gj@Qk:zJ^9mT1/Rk[$'](NEmaUo(cE5cYzBjuU.v$%X!$Iv~a%Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	62709	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	734	OUT	GET /wp-content/uploads/2022/07/16-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:04 GMT Accept-Ranges: bytes Content-Length: 447628 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 0e 39 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 32 3a 31 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 9ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:12:12
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 6a a5 3d 43 a7 30 3a bc 4c 53 8c e6 82 5c e7 3d c1 ae 81 f4 0e 3d 6e 6f b9 4a ec cc 7b e9 db 76 3e 3d 4f 3f 4a 96 50 da 8b 08 ff 00 0b eb dd 5b ec bd ce ff 00 8c 4b da 14 23 2b 15 d7 d5 01 f6 7e b3 89 5c 66 f8 a3 46 ff 00 c2 ff 00 bc 6c fd 87 a7 d9 6b 9a cb 71 64 c0 dc 2b ae a6 19 1b 1d b1 d4 3b dd ee fc ed b6 fa aa 0c e9 a2 a7 5b 38 d8 ce f4 8e e2 e6 b0 ba 09 3e d6 0a b2 7d 2b bf d7 f4 48 dd 1e 8e 9b 9c f6 63 df 8a cb ab 60 2e 75 95 d1 ba c0 67 e8 e4 3a af 7f f6 d8 d5 a1 91 d0 5b b9 83 13 ec fd 36 b0 ef e7 2a b2 c6 b9 ec 3a 3b 76 3c 7b dd b7 fe e4 26 92 23 3e 03 22 74 df a5 7f 82 b8 0b 8f 10 88 f2 ff 00 d1 9c ab 5c d7 e3 57 6e 4f 4e 79 c6 78 d9 eb 50 d2 21 c2 7d 3d 8e db 45 bf 4b e9 ff 00 e0 68 dd 3d 9d 0a da 9a 5d 49 37 c9 73 69 b1 b7 bc 96 13 fe 06 da Data Ascii: j=C0:LS\==noJ{v>=O?JP[K#+~\fFlkqd+;[8>}+Hc`.ug:[6*:;v<{&#>"t\WnONyxP!}=EKh=]I7si
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 01 04 02 02 02 01 04 02 02 03 00 02 02 03 01 02 03 00 11 04 05 12 06 13 07 21 08 14 10 31 22 09 41 15 32 16 20 23 17 33 18 42 24 25 26 0a 11 00 02 01 03 03 03 03 03 02 05 02 04 04 04 00 0f 01 02 03 11 04 05 21 12 06 00 31 07 41 22 13 51 14 08 61 32 71 81 42 23 15 52 16 91 a1 33 09 b1 62 24 17 c1 d1 72 43 f0 e1 82 53 25 f1 26 18 92 63 73 34 b2 44 35 12 00 01 03 02 04 03 06 04 04 04 05 04 01 03 01 09 01 00 11 02 21 03 31 41 12 04 51 61 05 10 f0 71 81 22 13 91 a1 32 06 b1 c1 d1 14 e1 f1 42 23 20 52 62 15 07 72 82 33 24 16 92 a2 b2 63 73 25 30 d2 43 17 c2 e2 34 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 e8 4f d6 ff 00 cc 10 05 d8 d2 6f 55 33 00 30 b1 36 45 96 81 25 a1 54 08 45 c3 46 5b bb 14 0d ac 4c 81 08 c8 bb 08 59 05 8c b0 aa 09 55 26 4a 82 a1 89 21 e5 a6 Data Ascii: !1"A2 #3B$%&!1A"Qa2qB#R3b$rCS%&cs4D5!1AQaq"2B# Rbr3$cs%0C4OoU306E%TEF[LYU&J!
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 2b 54 5a 81 c0 53 85 d8 57 14 55 c9 15 79 15 c9 ae 95 25 5a 19 9a ac 2b 1d 08 d8 b5 14 d4 2e d6 82 24 08 74 38 ce 32 ab 04 e1 76 28 3a 30 19 2c 2b 28 49 b9 89 59 16 96 63 40 b2 0d 88 15 81 31 76 55 6b 64 b7 7a 50 a6 cc af 9c 6b d6 99 33 cb d5 64 65 7b 19 c0 be 5f d3 f4 66 6e b7 43 f9 d7 a2 7c 15 f8 93 d7 be 71 6f f1 b7 af 9b ef af 69 c8 db fc af 4b ec 60 e6 ed ae 69 79 c7 be c7 f9 89 f4 bf 16 8a 32 73 fd 1e bf ba bc 57 b0 fd d3 7e 83 7c d1 4d 07 21 24 4a 43 70 04 03 10 54 31 60 96 8e 86 a4 82 26 42 b8 dd da 24 a9 19 46 49 52 60 36 29 30 82 12 4c ba 4d 91 ae b4 62 f2 02 6b aa e6 f3 2e 45 a5 00 b2 46 c4 2b 51 82 03 a9 ac 95 85 91 54 bb 41 82 c0 4b 29 d6 2e 13 5c a6 04 e2 95 a1 e1 48 08 87 65 72 64 cb 10 03 15 4e d9 45 54 15 eb 2a d4 93 2d 96 43 02 61 44 d2 Data Ascii: +TZSWUy%Z+.$t82v(:0,+(IYc@1vUkdzPk3de{_fnC\|qoiK`iy2sW~\|M!$JCpT1`&B$FIR`6)0LMbk.EF+QTAK).\HerdNET*-CaD
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 7c 5e 11 ea 34 da 67 13 2b 52 64 e0 f5 17 93 76 3d 33 e6 3d 97 9b aa ce f1 ed 4c fd 8e 39 89 9b 9d d6 9e 5d 78 d7 79 8a f5 b3 66 e0 e7 61 78 f9 79 e6 a3 7b 9c 62 64 62 ed 97 9c d5 24 ad e6 45 17 d7 58 62 bf 2c 37 8e c1 eb 5e 41 6c 97 6b fc 7a 7c 48 5b 96 fe 2b 9b f8 b8 f0 4b 96 b2 e8 2a 30 d7 cb 19 03 9b 12 4d e6 1d d6 71 94 4b 24 f3 ae 2e aa 5a 01 e7 2c a5 31 7b a3 0a df 3c 1f 9f 5e d7 e6 98 8f 2b bb e4 ae 7b 6d d0 3c 67 41 9d c6 f1 f6 94 f2 1f 53 a8 e8 7c ec 5f aa 3a bd a6 99 c1 c5 f9 a7 bf c0 cc 37 ba ec f7 aa d2 6d 6f 4c e5 b6 5a d5 80 79 b7 5f bd bc d7 bc fb c9 f2 87 b1 6c 8f 37 db e9 1e b3 5d f2 b7 e9 7f 37 e6 2b 71 a3 1b 2b 69 2d 1d 45 c4 ee fe d0 fc f1 da 78 d7 d9 ce 9d d5 1e 7f 21 91 98 71 db 4b 2d 16 cb 67 6e a9 f5 38 f5 e9 7d e7 9c e4 5b ad 6e Data Ascii: \|^4g+Rdv=3=L9]xyfaxy{bdb$EXb,7^Alkz\|H[+K*0MqK$.Z,1{<^+{m<gAS\|_:7moLZy_l7]7+q+i-Ex!qK-gn8}[n
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 24 da bf c0 7e 25 9d 8d 02 6c 27 24 f9 5a 83 11 4f 2d 07 6a 59 18 57 95 a8 4e 1a bc d1 81 24 e8 c3 cd 46 53 4a e4 1f 28 05 a6 76 af 23 5c 3b 0a 12 91 4c ec d4 b2 b8 a5 9d ed f9 76 3f 94 4d 09 6e a5 e3 b8 91 6c f2 2d b9 58 79 45 33 b1 ae 6a 0f 91 6e 1f e4 cf 7a 49 b9 0f 2d 79 c0 af 34 44 19 62 25 a5 73 5e 56 a7 90 57 9e bc f7 5f 2d 79 69 64 5b 99 1e ea fc 8b 90 5d 9e c2 e4 98 cd 97 c8 80 09 4d 19 09 01 ac 4b 35 73 6a 04 16 32 81 46 42 c0 12 2b 9b 55 c9 ab d1 90 0a 32 05 02 42 5c 90 2b ca 68 cd 60 b3 86 25 d2 bc d4 66 34 5c 92 58 92 b2 3a 8f 2f c1 9d 56 bc c1 ab 9a d5 de 8b 33 55 85 87 1a 3f b8 2a 1b 9a d2 90 c6 d7 03 e1 8b 05 a5 65 23 f8 59 b8 d1 70 28 cc c4 99 3e 03 b5 73 7a 0e f4 24 71 44 9a 8d 94 03 20 a6 6e 45 18 28 63 73 e5 60 3c ae 4a 33 06 67 e2 7c Data Ascii: $~%l'$ZO-jYWN$FSJ(v#\;Lv?Mnl-XyE3jnzI-y4Db%s^VW_-yid[]MK5sj2FB+U2B\+h`%f4\X:/V3U?*e#Yp(>sz$qD nE(cs`<J3g\|
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 43 d2 7a 4b 45 91 d3 3a 91 56 f5 df 52 32 7f d2 b4 0a 26 e9 ba c7 38 9d 16 24 9b 33 d5 43 60 7f e9 3b 4c 70 dd 5b 3a 23 3f 56 d8 b8 9b af 06 39 1d 7f 0a 58 77 ba 8c 68 75 79 1d 87 69 bb c7 db cd a7 d2 e3 c5 de fa 0e bf 47 2e c7 a7 f5 fe b3 a4 3a cd 9e 7e fb 55 d7 32 db a4 e9 f2 32 e0 87 45 97 d6 97 7b 99 d2 f0 f7 3a 8d 73 6e f7 59 9a f4 c6 cc 8b 74 f9 7a bd 1e 20 97 1b b4 60 68 e4 5e 91 a8 d8 f4 6c de e5 d9 f6 3d 83 2f af 69 b2 fa 2e 4e f7 2b 45 89 ba 78 b3 b2 b4 fa e9 30 75 7b bc 9d c6 16 36 df 6d 91 da b6 d8 1b bd 8e 0b 61 e4 e7 eb b6 f9 bd 6f d9 9b 4d 76 2a eb 70 73 75 69 a1 1a 3c 08 fa e4 91 64 c9 a1 d0 8c de b5 db 36 bd 83 b3 6f bd 6b 07 75 97 a5 7a 4a 0d 7e 27 e3 f5 cd 06 07 b7 fb 56 8f 77 3e d0 74 b7 d8 f4 e4 93 b0 e0 2e b6 5d fe 4e 7f 45 ff 00 ac Data Ascii: CzKE:VR2&8$3C`;Lp[:#?V9XwhuyiG.:~U22E{:snYtz `h^l=/i.N+Ex0u{6maoMv*psui<d6okuzJ~'Vw>t.]NE
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 2c 4d 1a e3 ff 00 20 07 06 36 e1 8b 9b 1d b6 18 f1 cc 5b 0c 2b a6 1e 7a be bb c8 72 1b 0b 0f 24 9c 53 03 6d 71 24 96 a0 6c a8 e4 c3 ce e0 bb 0c a8 a4 5b 69 d6 28 f6 86 6c 7c cd 4e 34 f5 d8 36 b2 e8 30 72 7b 4e e7 21 f6 39 f9 d9 a5 25 60 49 49 44 86 52 12 56 25 cd d2 4f 87 8d 85 bc 8a 08 21 ab e6 a6 04 d6 44 12 1a 4c 07 8e a6 04 31 58 16 48 a7 88 1f ce 8d 8a 38 7a 33 82 ce ad 1d 16 42 52 c2 47 91 15 9a 4b ba b4 7c 19 ae c1 d4 22 95 68 e3 5e 2d 92 eb c3 f2 94 18 c7 2a f1 92 54 f8 56 e0 87 e4 15 c3 29 02 e7 89 af 1b ad 3b af 0b 13 4a 0d ed 56 02 89 5a 04 1a 17 b7 ef 40 0f d3 d9 9f f6 bf f7 92 ff 00 b2 f1 69 3f 37 cd a8 ff 00 65 e5 c6 3b 6b 49 f9 3e 2d cd bc 5b 4e 35 9d 6b 63 ff 00 b3 f2 f5 ff 00 fb 5d ba 33 7b 14 64 61 37 69 29 ac 3d 87 cf 91 f9 bf 87 ff 00 Data Ascii: ,M 6[+zr$Smq$l[i(l\|N460r{N!9%`IIDRV%O!DL1XH8z3BRGK\|"h^-*TV);JVZ@i?7e;kI>-[N5kc]3{da7i)=
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: bb 47 6a 08 00 e0 a6 b8 2d 08 7e 19 6c dc 7e 6d 56 a5 4b 55 bf 47 52 69 92 ca 80 dc d2 a8 27 80 35 e3 06 8c 4d 71 18 14 41 20 20 14 6b e2 c0 55 a9 d4 b5 05 02 88 2c ce bf 21 6c 38 83 42 d4 45 18 ef 46 35 a0 9f 2d 10 e3 c4 b0 11 96 06 16 21 61 75 a1 13 57 8a bc 54 63 b0 f1 50 8d 68 c4 a4 ac 0a 2b c4 69 63 a2 80 00 3e 58 12 48 bd 70 02 80 02 8d c7 fe 37 ab 1a 0a 42 05 f8 af 91 51 8e 4c 63 51 42 30 69 d7 8d 02 d7 2d ca 8c 61 e8 c4 79 08 69 a2 21 55 2d 47 e4 7f 8b 8a 4b 31 f1 ad 14 5a 6b 2a 82 49 e6 54 f4 6f 67 04 4c 1c ad 43 e1 4d d4 32 26 61 8e a4 7e 20 a3 00 34 60 04 3e 1d e8 e0 8a 38 6b 6f c1 56 23 04 2d 3e 39 56 30 05 a5 c2 06 86 2a 0a 38 e1 6b f1 c9 af 0b 90 50 aa ac 5f 2e 82 95 58 d7 0e 3f a3 29 35 c0 d0 5f 82 ab 5c 45 00 45 15 24 ac 6b 7e 1f 20 5c 71 Data Ascii: Gj-~l~mVKUGRi'5MqA kU,!l8BEF5-!auWTcPh+ic>XHp7BQLcQB0i-ayi!U-GK1ZkITogLCM2&a~ 4`>8koV#->9V08kP_.X?)5_\EE$k~ \q
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 24 da d5 41 d4 30 30 a4 93 53 a8 c3 31 1d 56 2f 8b 17 58 41 da e9 16 db 3f ff 00 a2 db 39 56 d1 6d f6 58 92 75 7e f9 3c 0f 8b df b0 72 93 57 d9 b1 27 61 b3 c3 c8 5e c1 a3 eb 79 78 db 7f 5c ec 44 ba 5d 26 ff 00 0b 21 5f 25 a3 18 d9 f3 b6 26 93 b4 a3 67 74 d9 36 82 3f 58 ec f1 e4 c3 d0 64 62 c1 3e 36 22 47 b3 ec 7b 2c 0a eb 9b 55 dc e2 cd d6 75 d9 09 b7 ea 30 40 35 91 6b 70 23 ca cf 99 06 a7 b3 e2 62 a4 9d ef 0b 32 78 3b d6 61 78 3b 06 8a 49 bf d9 f4 f9 17 b4 68 23 95 b5 fa e8 72 1f 63 d5 e6 f0 c3 b8 cd c0 95 f6 8f 2d 66 f6 1d 8a cb 93 d9 a4 99 75 3e c2 c9 c4 ad 0f 61 c2 cf 87 2b b2 cf ab 92 3f 69 45 00 c8 ec 63 66 e9 b3 8b 9e ca 6c 7c 94 9b 1f 36 29 60 ff 00 62 c9 16 34 84 08 0a 8f e0 b4 00 6f d2 c6 8a 90 54 1b fc d1 16 20 90 55 f9 18 da e1 97 90 8e 3f 95 Data Ascii: $A00S1V/XA?9VmXu~<rW'a^yx\D]&!_%&gt6?Xdb>6"G{,Uu0@5kp#b2x;ax;Ih#rc-fu>a+?iEcfl\|6)`b4oT U?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	62708	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	734	OUT	GET /wp-content/uploads/2022/07/19-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:18 GMT Accept-Ranges: bytes Content-Length: 345271 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 1d d7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 35 3a 30 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:15:00
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 Data Ascii: tinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: a8 a5 f6 b0 b8 fb 49 63 77 f6 dd fb ab 9c fa 83 61 65 59 c2 46 c2 ea 9c c2 1d 24 83 eb b6 48 77 d0 fe 46 e6 d7 bd 74 5d 6f 26 fa 3a 61 fb 3e d1 6d d6 d7 50 71 1b b6 c9 2f 16 06 1f 65 8e df 53 3d af fd 1a b3 f7 0c 20 f0 ea 63 b5 5d 7f d0 e1 44 20 00 e2 ab 96 f6 5a ff 00 54 ba f6 4f 57 bb 32 8c b1 8e e1 8c da ee a8 d0 0e 9e a1 75 56 36 df 50 37 7b bf 47 57 f8 35 d4 33 26 e6 08 ae c7 b0 0d 00 6b 88 11 ff 00 16 fd f5 b7 fb 0d 5c 7f d5 7c ec 67 75 57 d1 8f 7f db d8 70 dc e6 e7 d8 22 f7 b1 96 63 6c a9 ec 1b 36 55 53 ad b7 f9 c6 fd a2 dc 8f 5f 7d bf a3 62 e9 f7 b4 f0 ed 7c 0e 85 4f c0 21 51 80 e1 00 00 00 e8 be ee ef 55 db 99 73 85 ce 7e 3d d9 8f aa e7 01 fa cb d8 cf 68 6d b5 e8 2c d9 46 d6 bf e9 d8 c5 93 d5 fe aa 75 9e ad 93 f6 cc 86 9c 3a 2d 68 06 8a f3 dd 60 Data Ascii: IcwaeYF$HwFt]o&:a>mPq/eS= c]D ZTOW2uV6P7{GW53&k\\|guWp"cl6US_}b\|O!QUs~=hm,Fu:-h`
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 04 03 03 04 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c2 00 11 08 02 0d 04 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 f8 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 00 07 05 06 08 09 03 04 0a 02 01 00 0b 01 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 09 0a 10 00 00 06 02 02 02 02 01 03 03 03 04 03 00 02 03 01 02 03 04 05 06 00 07 11 08 12 13 21 09 14 10 22 15 31 23 16 32 24 0a 20 41 33 17 34 25 18 42 43 35 26 19 11 00 02 01 02 05 02 04 03 06 03 06 05 03 02 00 0f 01 02 03 11 04 00 21 Data Ascii: !"1#2$ A34%BC5&!
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 97 a0 b8 f6 11 28 23 66 5b a4 5f a3 1e 97 3b 65 b7 8c 14 a9 65 3a 89 e9 df 9b 7d ee c8 2c d0 3a d7 5e 06 dc 73 60 cd af 35 63 9b a5 97 c1 58 ba be a6 db 6b 6a 75 60 19 06 3d b6 da 6b 4c 49 42 af d8 70 99 f7 4f 9d c0 51 bb 3c 1c bc 8c b9 eb 25 7e 44 50 cc de 1b 06 b8 80 b1 b5 d8 71 b3 75 b3 56 b8 71 fa 57 2e bb 4c da e7 dc d8 af 25 46 93 ad c5 ea 3a ae 24 0a d9 2b be 44 db e3 af bd d6 93 d9 d7 a4 f3 6d c4 6f bc d3 05 12 2a 3f b2 79 88 21 ac 3c 73 0f b0 10 e4 45 01 eb df 9e f7 09 58 3f 1f 2b bb c4 44 83 7e 86 3a 8f cd 85 00 17 8b 21 6f 14 c2 36 c8 09 96 6e 0f d9 1e 98 95 a9 a2 2b 6e 2a 0a e6 b4 da 23 4c b1 ea a0 38 f1 dd 05 3c 16 d9 0f 75 df 8d 05 16 5c e5 7a 09 55 c8 15 b9 93 9a 53 a6 4c 40 44 28 de 8e 88 7e 27 dd 6c 60 53 c4 dc 10 3b 33 a8 23 57 a0 bd 1b Data Ascii: (#f[_;ee:},:^s`5cXkju`=kLIBpOQ<%~DPquVqW.L%F:$+Dmo?y!<sEX?+D~:!o6n+n#L8<u\zUSL@D(~'l`S;3#W
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 2e f5 8b d7 ca 34 a8 06 7a 76 b3 27 65 45 6a d7 bd c0 8c 79 d9 1a 17 7b 1e 22 e8 c2 13 f5 56 31 91 b7 e9 f3 f7 d2 ce 75 29 0e 53 74 5f bc 7c de 33 28 1a 6e d0 b4 e8 69 75 a1 4e fa 05 f2 e0 71 9d 94 70 51 a4 97 7a 9d d4 d7 d6 93 9b 52 f6 ed f3 49 ae a5 6a ca d4 85 d8 d3 b4 1d 42 82 1f d4 5b 7f 7a 84 77 a3 e1 ef 31 ab 89 ee 32 f2 86 6e de f2 9d e2 ce b2 4b f5 bb 7c c8 9b 10 ca 29 65 aa a8 67 25 4e 0e 3a 7f 5b 59 72 99 c0 d9 6d ca 89 ca e7 ec a7 c7 6e d1 ab df 11 df c3 3b 9c 7b fa 5c 29 00 76 2d 06 90 be d4 92 3d b0 b0 a4 d3 e4 ea ed d0 0b 6c a3 24 c9 1d 65 b5 a2 96 d3 44 d4 c5 4e f1 1f 9e 70 fb df bb dd cf 2b db 2e e6 65 59 9c 63 51 5e 50 8e ff 00 be 3d af ef 62 f7 74 b8 ad 2e 73 33 29 6e 2e 25 66 68 39 a9 3a 24 e2 00 f2 84 28 64 5d d0 65 3f a1 4c 35 40 26 Data Ascii: .4zv'eEjy{"V1u)St_\|3(niuNqpQzRIjB[zw12nK\|)eg%N:[Yrmn;{\)v-=l$eDNp+.eYcQ^P=bt.s3)n.%fh9:$(d]e?L5@&
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: e6 25 7b 55 1c f3 c6 f7 7d cd 14 ab 65 b5 22 2a 42 13 f3 22 bd 98 3e 87 5b d4 e3 2d e7 19 91 74 fd 2a e2 b1 8d 9e ca 73 1b 14 c7 ce 5f 3c 06 0e 52 a7 57 9f 54 31 ae ea 60 f5 ca f4 55 48 51 f2 44 46 01 88 fe 46 1f d1 4f cc 01 cb 73 e7 5a 4d ad 79 a9 ae 48 8f 2c 45 79 f0 0e c4 ee 09 61 75 0e b2 84 ad d4 38 b3 a5 e6 8e f1 f2 76 d2 a4 22 a1 d8 a5 85 4f 21 47 7a f9 cd b4 e5 26 bc e5 e2 55 39 d5 56 1c 5c 69 2b fe 66 89 6f 95 08 04 7e 2a 48 72 d3 26 97 76 32 ad ca e5 d5 71 7b e5 a1 9b b5 8a 6d b3 d2 92 9b c5 eb 31 dd 9e 37 81 48 49 5f 7e 29 3a ed 77 0c 75 f2 e3 6b 87 07 e3 5a 42 d6 aa f0 1c e5 54 64 44 2a a3 ad 4b 08 2f cd d1 45 a5 02 5e 62 11 67 49 f6 8a e3 65 bd 60 c8 c8 da 7c a1 19 d3 df 7e ee 56 f8 99 d6 dd 1e 4d 96 0d e4 a9 94 95 4e a6 13 44 2b 0f 8c 4a 1c Data Ascii: %{U}e"B">[-ts_<RWT1`UHQDFFOsZMyH,Eyau8v"O!Gz&U9V\i+fo~Hr&v2q{m17HI_~):wukZBTdDK/E^bgIe`\|~VMND+J
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: cf 8f fe e2 49 e0 22 de ac cb c0 a6 50 44 de 41 93 ae 8c fd d3 44 01 ba 28 2a 18 63 fc cb c8 37 4d 10 6e bb 45 a2 ce 91 9b b5 58 c0 74 c3 26 52 f3 6c cd da 8e 52 70 4c 31 00 4a a8 7c 28 60 0c 29 c0 87 6a a8 a6 50 28 28 06 68 52 e4 d4 cb 66 04 8d 92 49 d2 4e 4a 5c 7a c5 31 19 f7 1e 83 45 7a 1e 9e 30 c9 b9 6f 37 38 8c 58 fb c3 13 5f e5 c9 ca 47 10 8b 8f e4 17 fa 3a 1e 32 55 33 7b 52 5b 9c 6d 00 63 8c 3c 3a 86 72 b3 62 94 ca bd 44 e5 99 a7 ca 3e 74 d2 b8 24 49 d3 a2 20 62 39 45 4c 4e 3f d8 74 10 10 24 dc 61 94 34 e4 0a e5 5e 16 ca 56 69 02 42 f1 d3 0a e9 11 08 e5 5b 1c 50 55 05 0a 82 49 24 36 bb 31 78 1e 0c 2e 22 48 e4 d1 95 82 94 20 d6 6a 04 2c 63 74 cd 27 4e 4d f3 a4 98 2a c5 68 f6 de 20 ec 86 92 77 0a c8 88 a4 b4 43 83 9b d0 b8 b9 47 62 2e d8 90 3c 19 09 Data Ascii: I"PDAD(c7MnEXt&RlRpL1J\|(`)jP((hRfINJ\z1Ez0o78X_G:2U3{R[mc<:rbD>t$I b9ELN?t$a4^ViB[PUI$61x."H j,ct'NMh wCGb.<
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 8f 06 21 0e 20 1e f3 88 cf 2a 21 8b b8 10 24 29 fc 91 b7 48 02 79 76 57 99 7d 3c 97 ff 00 4f 2a d0 78 a7 98 4a d8 5c 35 f5 de 92 04 5c ac 63 06 7e 52 9c 11 c0 98 80 3f 0d 8e 3c c5 91 ab 66 ed 15 54 e3 2a 89 93 38 06 70 22 3c f0 1e 78 3f 39 4a 22 e2 b4 7b 29 12 1b f8 d7 47 16 30 c5 4c 6c e9 09 5d 01 78 01 c1 0f 90 c0 1c 5f 9e 64 5b b9 32 91 a8 ba 13 d5 d1 14 92 4d 93 83 9c a5 27 0b ba 44 86 52 61 63 e1 ed ce 10 1f f3 93 94 8b ee 86 09 e2 bb cd b0 61 77 e3 70 c5 fb 02 dd d1 12 db 2d f1 9d e8 4e 44 8a 8b 80 4a 14 79 51 82 a9 e2 aa 8f 8b 47 2a 80 49 b7 04 49 fc fc 61 81 65 1a 2b 88 56 d5 54 62 aa c0 90 03 43 18 a2 d3 e0 59 a8 18 a4 20 18 0b 14 50 0f e3 12 01 fc 14 47 26 d9 b7 4d 95 34 79 64 5c ff 00 b0 8e 08 e0 67 38 01 fa 7f dc 0b ce 00 65 9d c8 94 5d 3b 31 Data Ascii: ! !$)HyvW}<OxJ\5\c~R?<fT8p"<x?9J"{)G0Ll]x_d[2M'DRacawp-NDJyQGIIae+VTbCY PG&M4yd\g8e];1
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 9b 85 e4 b2 68 08 12 59 21 31 2c 09 09 4c e5 51 01 74 bf ca a6 0c 14 c0 4a bb 1e 41 58 fe 05 66 1c e3 d8 be 71 dc 67 c2 bb 19 d1 f1 0d a2 bb 7c 1d 86 ec ab 0e ce 71 e1 2d b6 01 21 91 bb 7e 51 c6 78 be 26 96 11 cb dc d0 f8 7b c0 54 6c 02 6c 6a c8 47 10 8f 11 c6 31 02 26 88 82 28 63 36 1f 09 b3 c0 6e 1c 19 b0 06 0a 00 19 e4 50 c5 9e 90 81 21 3e 42 84 c5 a7 c4 55 90 3b 82 c8 35 5c 46 06 03 f2 4f a8 b5 eb 75 52 90 84 2a 10 09 c4 94 a2 91 8e 98 12 5c 07 06 31 b2 e0 ac 52 85 2f 80 94 cd ed b2 0d f1 be cb 30 63 6d 89 1c 25 69 7a 8b 31 53 b2 24 70 2c d2 86 c4 de bb 1c f6 18 44 44 b8 51 0e 01 6f 1c 72 b2 67 05 d0 20 82 0d 53 10 3c 5b 7f 25 54 15 13 3b 62 94 7d 64 e0 c2 40 c3 90 82 0b 2a a1 01 ab b4 d5 29 d8 a0 a6 3d 31 d2 58 25 8e 18 cd 50 3a 5f a0 8f 38 42 08 8a Data Ascii: hY!1,LQtJAXfqg\|q-!~Qx&{TlljG1&(c6nP!>BU;5\FOuR\1R/0cm%iz1S$p,DDQorg S<[%T;b}d@)=1X%P:_8B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	62706	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	734	OUT	GET /wp-content/uploads/2022/07/17-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:09 GMT Accept-Ranges: bytes Content-Length: 442178 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 19 73 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 33 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: sExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:13:44
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 00 30 00 32 00 20 00 68 00 6f 00 74 00 65 00 6c 00 20 00 64 00 65 00 73 00 6b 00 74 00 6f 00 70 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 04 00 00 00 02 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 0d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 06 73 6c 69 63 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 Data Ascii: 02 hotel desktopnullboundsObjcRct1Top longLeftlongBtomlongRghtlongslicesVlLsObjc
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 43 44 69 67 65 73 74 3d 22 45 38 46 31 35 43 46 33 32 46 43 31 31 38 41 31 41 32 37 42 36 37 41 44 43 35 36 34 44 35 42 41 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 32 32 3a 35 33 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 30 37 2d 32 36 54 31 31 3a 31 33 3a 34 34 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 30 37 2d 32 36 54 31 31 3a 31 33 3a 34 34 2d 30 33 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 Data Ascii: CDigest="E8F15CF32FC118A1A27B67ADC564D5BA" photoshop:ColorMode="3" photoshop:ICCProfile="Adobe RGB (1998)" xmp:CreateDate="2021-08-12T20:22:53-03:00" xmp:ModifyDate="2022-07-26T11:13:44-03:00" xmp:MetadataDate="2022-07-26T11:13:44-03:00" xmp:CreatorTool="
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: aa 20 6d 3f 22 72 a2 8d c6 74 f2 66 d5 98 f6 73 3c 0d b8 ac 96 99 0d 4d 96 0a 32 37 ab 7a 8b 5e 38 98 8d 1c b8 19 dc 98 56 15 01 49 ec 4f 75 66 5c fd c4 63 5a b6 30 b3 59 3a 45 11 3d 48 69 79 ce 1b 84 32 2f 8d 0f 6c 47 29 1d 85 d2 80 84 1a d3 02 60 eb 8a d5 53 e8 11 0f ee 26 4f 46 92 5b 12 5c b6 65 d3 28 77 4c 12 ca b0 10 e2 e5 01 d6 f9 a4 7a 69 a6 26 0a 39 c6 64 3b 60 d0 a4 bd 87 9a a8 95 7e d3 e6 b2 f1 47 6b 83 0b 85 36 bc 43 29 f4 f3 1b b2 52 39 f1 47 26 f2 96 11 42 87 3f a0 d0 17 01 d2 c4 ee d1 2f 48 e0 47 3f d9 54 f8 f9 26 49 92 64 99 26 49 92 7b 26 d2 94 96 a4 8a 49 b4 99 25 2c 2d 73 be 1b 02 63 63 e2 2b 9a 80 04 d0 0c d5 45 6c 0b b3 b7 c2 24 13 57 16 7d 38 26 9c 6b 3b 1a 3f aa 9b 28 98 00 91 03 6e 51 a5 16 26 10 05 c3 8c e4 15 85 0f a8 fc 65 2d 17 Data Ascii: m?"rtfs<M27z^8VIOuf\cZ0Y:E=Hiy2/lG)`S&OF[\e(wLzi&9d;`~Gk6C)R9G&B?/HG?T&Id&I{&I%,-scc+El$W}8&k;?(nQ&e-
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: d5 b6 1e 6f 13 c1 91 dc f3 4a 6d 20 c6 fa 3d be 53 1a bb cb 7a 75 ea 44 75 c7 9c 6d a6 a2 f1 61 b8 56 da 32 5d 6d 7a 99 30 f2 c1 25 6a c4 3d 00 a3 38 7d 82 5e 3f 19 0f 6d f4 61 76 18 2b d1 1f 87 04 ed f3 2e 61 af 02 32 49 8e b9 b2 c4 33 84 66 8f 8a 17 5e c1 ac c8 13 42 e9 b4 f8 2e 54 11 a7 21 81 ce c0 27 b9 5d 2a 67 9f ed fe a5 f8 a6 c7 92 d7 19 7b 1f 25 36 e7 9a af 7d 2f 52 7c 6b dc 3e 7b 9c 73 59 e8 3b 13 7f 66 e8 89 6e e8 ac 00 e9 d1 de 6b 3c b7 e0 fd 34 d7 4a cb b8 e5 84 4f 43 1d b6 38 df d5 5d 3c e7 32 d8 43 5d 10 b0 6a 2e ba 95 48 1f 12 65 22 de af 9b 58 b5 df 1c 42 f2 2c 35 59 5d 89 1a 2c 59 07 0a 16 36 d6 62 b7 35 ac ad 5b d2 6a c9 5c 7d 3d ce 05 62 ca f5 13 23 ec ef 9f 7a 8f a2 3e 4b a0 17 c3 67 e3 f7 dd fc 78 67 b1 e4 3d 05 80 07 44 9c a7 a9 1e Data Ascii: oJm =SzuDumaV2]mz0%j=8}^?mav+.a2I3f^B.T!']*g{%6}/R\|k>{sY;fnk<4JOC8]<2C]j.He"XB,5Y],Y6b5[j\}=b#z>Kgxg=D
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: dc 34 5e 9a cc 95 7b 9c d1 8c c0 9c 2c 5a c5 57 cd 7a de 09 4e 18 52 1f 59 1f 16 3a 1b b0 95 09 c8 62 c6 eb ab c1 22 eb f3 4f 2f a1 f6 3b b1 c4 b2 26 a8 ce 76 ce 7a 8a cb ed 65 1a 19 89 c3 49 73 e5 f6 cc a8 82 df 17 7c db e9 17 4f 4f 95 03 c1 f4 11 20 34 a5 90 9d f4 1b 08 ec 34 3b c3 bf e7 a3 b9 5d 01 e5 0e 77 de e3 57 df a3 be 16 d0 a4 ae 5e 2c e6 30 4a b0 e0 19 dd c7 c6 aa ef a3 84 b5 18 90 a3 2c d9 3a b5 23 81 0b 32 c9 f7 3d 40 77 89 36 2b b9 38 6d 04 3e 2d e0 a1 88 78 73 d1 38 14 28 54 a2 67 d5 70 ec e7 73 f5 2e 6e 77 3e 4e b3 e9 29 31 6a 43 8e dd fb c7 e8 5b dc 5e 95 a3 c6 e9 58 7c ce a1 20 1d db 59 4f 59 4e e3 b2 09 1b 89 48 94 a4 26 93 95 a5 da 77 5a d4 81 c4 a9 e5 5c fb b6 d2 da e6 27 9b 77 74 90 f5 25 a8 8c a6 d2 b5 d4 f2 ae 3f 36 8d d4 66 77 0d Data Ascii: 4^{,ZWzNRY:b"O/;&vzeIs\|OO 44;]wW^,0J,:#2=@w6+8m>-xs8(Tgps.nw>N)1jC[^X\| YOYNH&wZ\'wt%?6fw
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 2f 13 0e 9c 8e 84 c4 06 b4 19 e4 f1 f2 b4 ea 91 23 85 29 20 3c b0 fe 29 15 97 08 d3 11 c4 b0 07 12 51 ca 53 87 e4 6a 3a 9e 40 d2 47 0b ab 4a ac 23 81 14 f2 78 ca aa 46 a3 91 29 51 1c 4f 34 f6 62 4e d3 fe f9 1d 4b 44 86 47 af 23 81 03 b3 71 e4 56 66 73 e7 31 3f 25 66 8f c2 c1 12 94 02 71 4e 73 e4 c5 14 d7 9d 11 91 7c ac 47 54 fc 86 2f 95 4a 05 e0 2f c0 d2 76 84 b2 86 fc 99 5d 78 49 eb c4 b1 20 2f 0b 33 07 25 84 92 12 01 24 46 e1 84 6b f1 b4 64 85 46 21 a4 e8 38 72 5c c8 10 c2 e4 09 00 25 08 31 27 fb 6a a3 be 2c c7 a2 cd e2 18 29 4f 26 3e 44 29 98 72 49 7c b9 e7 e2 a4 34 6d 1f 82 94 04 03 fc 12 10 c1 e2 3d 09 13 cd bc fc 0a 02 88 c5 8f 03 74 f0 c8 48 41 fc 08 f3 e3 06 51 18 54 e4 4e 01 ed 80 92 3f c5 80 1a 30 82 37 fc 29 f1 f8 e3 8f a1 c7 72 52 45 05 63 1f Data Ascii: /#) <)QSj:@GJ#xF)QO4bNKDG#qVfs1?%fqNs\|GT/J/v]xI /3%$FkdF!8r\%1'j,)O&>D)rI\|4m=tHAQTN?07)rREc
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 51 47 2c c1 05 85 ad 4e 0a c9 d0 3c 36 cf 5f bf 27 52 64 44 83 d8 74 e5 6b 49 e5 e7 5a c7 52 d3 46 ab 4a 4b 05 4c 19 56 7e 5d bb 22 34 0d 1d 8a c9 2a e3 6c 63 50 7e ca 96 32 4b 1f 94 d2 95 af 35 c8 59 39 14 61 b9 93 f1 55 c2 d8 6f dd c6 92 69 8e d9 99 50 09 eb 19 0c 15 c8 16 c7 87 15 81 08 bd 17 1d 92 58 f1 a2 20 4a fd f1 50 1e 46 a1 96 5f 30 08 2a c3 be c2 87 1e 61 48 62 c5 cf f0 43 d7 04 65 87 8f 91 0b d1 5e 94 9f 1e 4d 38 43 10 12 8b cf 1f 56 66 26 35 60 20 90 22 a5 45 2a c1 42 71 49 1c 2a 14 4f 09 75 b7 48 88 20 ab 65 39 7a 17 0d 1a 3c 31 bc 30 cf c9 d0 99 e9 aa 3d 98 25 ed e0 76 f2 92 ba a3 89 49 3f 20 42 5c b7 18 fe 15 bb 45 74 e7 8b 30 55 f0 e1 88 46 4c 6c 04 c1 98 cd d0 36 2c 25 7e 26 75 4b 7f 69 64 2b e7 1a 25 4c f2 bf 32 b6 c5 fa fa ce 59 84 51 Data Ascii: QG,N<6_'RdDtkIZRFJKLV~]"4lcP~2K5Y9aUoiPX JPF_0aHbCe^M8CVf&5` "EBqIOuH e9z<10=%vI? B\Et0UFLl6,%~&uKid+%L2YQ
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: c1 e1 1c ef f3 d3 39 31 81 c5 5e f9 e2 3c 95 01 e3 2f 44 11 c0 01 e1 e8 00 07 08 5e 0e bb 24 1e 2a 91 c6 00 09 0f 40 4e a7 88 de 3c 3f 8e 12 7f d1 15 9c b1 e8 f0 f3 ae 8f f9 e4 0b d9 e7 5f 90 a0 f0 f4 39 e2 a7 fd 3a e7 5f e9 60 f4 a8 9c eb 9e 20 f3 ae b9 e2 c7 8b 1b f3 c1 9b 86 92 96 48 02 83 10 e6 40 c9 e3 64 49 e5 21 90 41 58 c4 52 81 b9 f1 59 36 3b c6 fc 80 dd eb f6 58 cd cb cd 19 58 0a 79 51 fd 9f 1a ff 00 30 e7 72 72 6f 9b c2 ef 9f c5 8c fd bf 2b c1 bf 72 6f 2f 91 bc bc ac fc fc a7 df 8d 9f 2f 03 f1 f9 47 ff 00 68 27 e4 8c 9f 92 d1 1f 2c 9e 5d 47 e5 c9 3b e7 e7 a7 eb 91 ff 00 93 d7 4d e5 db ff 00 91 c3 df 3f 3c 3d f3 f3 fe 8d fe 3f e8 7b e8 77 df e3 8b df 1b be 7f d3 fe bf 9e 0f 2e c7 7c 4e 7e 7c 57 cb a1 cf fa 0e 2f 5c 8f c7 c8 ff 00 d8 3b f8 ae ff Data Ascii: 91^</D^$*@N<?_9:_` H@dI!AXRY6;XXyQ0rro+ro//Gh',]G;M?<=?{w.\|N~\|W/\;
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 88 7c bf c9 96 2f 85 10 20 49 43 33 49 1f 8c 32 79 09 82 79 c9 67 be 3d 98 d1 1e cb af 3e 70 cb 2d a6 e9 6d 4b dc 96 9b b9 26 91 b9 0c 92 c4 7f dc f3 45 60 20 42 ac 5e 42 05 8e 8a ce c0 3f 98 e1 0e 55 1a da 08 66 29 25 62 ea d1 92 8a d3 ca 38 b2 c8 89 62 69 59 a5 95 49 9b 21 5d 41 cb 47 f0 7f 69 08 e1 92 49 80 8e 53 19 89 e4 e3 3b 98 20 57 0c b5 cb b9 f9 52 38 92 68 4d 98 6c 96 55 96 51 72 49 49 44 92 64 5b 12 47 c1 71 f8 96 a7 52 2d 4a 1d 2e 58 84 0b 57 19 7f b0 b9 dc 96 2f 27 0e 46 ec 82 bd 8b df 1c 99 4b d5 de 1c 9d a5 96 4c 95 df 35 c9 5d 8c 2e 62 78 d5 32 d6 41 97 39 32 18 f2 97 e5 7c 61 69 1e c4 44 8a 30 83 09 fc 73 29 21 ed ae f7 c8 6c 99 1a 5b 2d d2 d8 2c bf 28 3c 32 f4 cf 93 58 da 2b ab 20 4b bd aa 64 d1 9a 4b 68 b1 ae 44 19 1a cc 5f 1f ca 07 0c Data Ascii: \|/ IC3I2yyg=>p-mK&E` B^B?Uf)%b8biYI!]AGiIS; WR8hMlUQrIIDd[GqR-J.XW/'FKL5].bx2A92\|aiD0s)!l[-,(<2X+ KdKhD_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	62713	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	971	OUT	GET /wp-content/uploads/2022/07/05-hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:44 GMT Accept-Ranges: bytes Content-Length: 459078 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7957	IN	Data Raw: ff d8 ff e1 35 58 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 35 3a 30 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 5XExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:55:08
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: c2 f6 39 ad 63 7d 0a 1c ef 4f 73 6c 7f a0 d6 35 62 75 ec de b3 e8 01 93 91 76 53 f1 72 bd 36 6c 70 2d 6d c1 bb 6e 6b af 7b 1a d6 35 95 dd e9 3f fe 15 ff 00 cd 2b 78 ff 00 5a 7a c6 37 4c af 28 e5 5b d3 f1 eb db 40 c7 b2 b6 3d db 8f ba a6 d3 ea 51 63 dd ea 54 77 7d 3f fa da 92 38 ea a3 f3 63 22 b6 d6 3f d5 e1 fd c6 d4 40 84 78 22 23 c2 49 35 5a 78 ba 59 3f 50 b3 f2 ff 00 4e ea f1 aa c8 dc c2 61 f6 59 5b da d2 1d 1b 2e f4 ec ab 8f f0 76 7a 76 7f 84 54 3a 59 ce c1 fa dc 7a 66 61 ac 0c 67 31 a1 95 34 35 9f a4 65 76 ce d1 bb 77 d2 57 ab fa c1 f5 9a ca db 75 59 e6 da ec 68 7b 1d e8 30 c8 3f d5 c6 6a c8 a6 cc eb be ba 3e ec c9 b2 e0 da 6e c9 7f a6 5b b6 b6 30 36 cb 9e cd ad f4 d9 5b 19 f4 fe 82 59 b1 e3 38 fd 20 99 40 7a 6c 0f 4f f7 57 e0 84 06 42 48 88 f4 9d b6 Data Ascii: 9c}Osl5buvSr6lp-mnk{5?+xZz7L([@=QcTw}?8c"?@x"#I5ZxY?PNaY[.vzvT:Yzfag145evwWuYh{0?j>n[06[Y8 @zlOWBH
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 4d 04 0c 00 00 00 00 33 ea 00 00 00 01 00 00 00 83 00 00 00 9f 00 00 01 8c 00 00 f5 f4 00 00 33 ce 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 9f 00 83 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 09 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 Data Ascii: M33Adobe_CMAdobed"?
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: dd ea fe cf 7e df 5a 7d 3d 83 77 d8 e3 ec d1 f4 7f a5 fa 9f ad 7a 1f e8 12 54 7f 68 7d 61 f5 3f a7 0d bb 37 6f f4 86 df 53 67 ee ed fe 8b ea 7e af bb fd 3f e9 3d 34 94 7f 7c c5 df 26 ff 00 d4 f9 7f ce ef fc d2 de 1f 11 f6 f4 fd e7 ff d5 97 d6 9e b5 8f 5f d4 ec 3e 97 53 df 48 b6 9a a8 bc b8 11 fc cd 1e a3 2a 6b 37 ef d9 97 91 5d 14 fb eb fd 1b 3d 6f 51 71 1d 18 7a 39 0d c9 70 dd 5d 41 cd 70 27 90 5b 11 b7 fa c9 b3 0d b8 f4 36 9d ee 77 da 1a 19 b5 cc da 5a 19 b5 d6 c7 e6 bd b6 3d ff 00 99 fb 9f a5 fd 22 91 6b a8 c6 ad 95 89 b1 e4 b9 cd e4 96 b0 1b 6c 6e df ce fd 1b 55 79 5f 07 0c 88 26 76 3f 74 70 b3 42 02 62 52 98 f4 63 06 52 af d2 f0 7d 27 a6 32 8c 0f aa 2f a1 ae 38 97 1a df 73 dc e9 9b ac be 97 59 55 54 c3 b7 58 fc 6a bd 2a 2d f6 fb 3d 1f 51 79 cd ec cd Data Ascii: ~Z}=wzTh}a?7oSg~?=4\|&_>SHk7]=oQqz9p]Ap'[6wZ="klnUy_&v?tpBbRcR}'2/8sYUTXj-=Qy
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 50 1d 71 3a 63 c8 ab 44 4e ac 40 c8 5a d3 37 1a 36 ac 29 24 33 eb ec 7e 75 8a ba 62 89 7d 28 da a9 3e ab 62 6d 9a ed a0 73 c6 44 13 15 59 d1 94 71 3c 4d 10 e7 97 d3 43 3a 19 e6 7a 83 79 17 5d 77 93 16 16 4c 75 e6 e5 72 05 6a 3b 8e 4c dd ba d1 8f 4a da a2 ea 98 77 98 70 b9 26 c8 d2 48 07 78 36 c1 de a3 20 1e 01 b4 b5 7a 36 4d 20 e5 45 bc e6 e1 36 66 96 79 b6 40 34 0c 4d f3 e6 bb 1f b0 d7 70 0b cb 4c 5e b9 51 41 c9 f8 8e ab a6 39 81 ef e2 09 26 3c d1 9c 02 9b 66 fa b9 8e 94 2f 5b 95 8d 1e 29 57 a1 3e 6f cd 14 4d d3 a0 70 52 b4 97 ac 61 ee 77 41 1c 3d fa 67 9a ab eb 1f 75 72 89 aa 29 1a e4 22 c9 4e 04 51 45 ec 4c 73 32 8c 9e a8 91 b6 03 ae 9a 2d 21 8e 06 dc b9 f4 40 92 8c dd 63 3b 4a 0f d2 58 96 8a cd d1 11 69 66 ab d9 ec 05 6b 47 ab 9c 90 59 70 ba f1 4c 40 Data Ascii: Pq:cDN@Z76)$3~ub}(>bmsDYq<MC:zy]wLurj;LJwp&Hx6 z6M E6fy@4MpL^QA9&<f/[)W>oMpRawA=gur)"NQELs2-!@c;JXifkGYpL@
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: e2 59 45 ac 80 d7 dc 14 82 cb 6a b0 66 ad ad 10 69 6f b5 71 bb 29 87 a7 f1 16 e5 b6 b0 21 eb 7f e8 6a 79 ef 94 6a 2e 5d 63 fe 9b 7e 9e f7 bb ee 8f bb ba 9e ea 7b d2 ee e7 bb ee f4 bb ee e1 e8 e5 bc e9 ea b7 57 af d7 ef 45 86 c5 35 8c f6 67 95 88 24 2a 4a 95 6d 5b 8f 62 ee 49 9e 31 d7 7f d6 50 19 c4 83 a9 63 93 2e 3a 2e ac d8 33 1c ef 90 a1 76 c6 ce de 96 9a 9e 90 d1 19 0d 59 ea d0 5c 89 71 05 18 4c d1 25 a0 2d d8 ae 36 08 72 1b 9d b9 99 8d 8b 07 e9 59 d1 32 19 ac 59 cc f7 6a 97 aa 96 2d 04 b0 59 00 cb 81 28 eb ac e0 5d 2a f4 a1 d2 c7 5b e8 81 b3 91 e4 f0 64 40 2d 0b cc 4b 25 da 55 6a e9 59 61 09 86 7b ee e8 e6 3d 90 fa 79 55 ab 48 37 57 30 b2 0c e3 a4 d5 4b c6 6b 58 67 76 46 9e 8a 7a 28 26 4e 9f c7 da f6 97 e2 cb 1a 5d fa f2 a6 25 5a ca f2 48 76 e3 db a7 Data Ascii: YEjfioq)!jyj.]c~{WE5g$Jm[bI1Pc.:.3vY\qL%-6rY2Yj-Y(][d@-K%UjYa{=yUH7W0KkXgvFz(&N]%ZHv
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ec fc 61 ee 26 b1 a9 b2 84 0d b1 3c c9 d7 2e 31 5f ba 69 ca b3 20 96 12 5b 2c 0c df 8e bd d0 7a 63 a1 9e bb 88 4c 67 cf 5e 49 76 bd d5 b0 d2 58 54 0a 58 9b 91 16 86 49 c0 26 d8 83 54 57 9f 69 93 2d 15 cd 55 1d 11 5c 4a 48 0b 9a 42 c5 88 e9 1d 2a 48 a0 dd 45 9a 36 9d df 15 54 d5 a2 0b 5f 5e a8 32 b0 31 57 84 15 ac eb 75 f5 e9 0f 55 ee 1c e5 c2 c1 89 cb e9 80 43 a2 c1 c1 f4 19 a0 ef cd 1b f9 22 e7 99 f3 b5 db 2a bf 54 75 2d ba fe 6c 5d dc 84 c3 dd f9 ba a2 10 d0 1f a0 5d 69 c5 d0 6e d0 e2 39 c9 c5 79 5f af 2c 5c b5 5e d0 54 3a a9 40 f9 ea b1 2a 25 10 55 0b 79 88 08 f4 28 68 f7 5c 2c f9 f2 6a b1 29 de 81 4e ef 3b b4 aa c5 90 eb 24 fe 79 ea 18 ce fc bf f4 01 b8 12 cd 45 71 b6 64 54 09 77 57 6b 6c 71 4e 05 75 4c 26 b3 20 b2 23 d1 d4 f1 81 98 c8 6f 28 e6 60 a1 Data Ascii: a&<.1_i [,zcLg^IvXTXI&TWi-U\JHBHE6T_^21WuUC"Tu-l]]in9y_,\^T:@*%Uy(h\,j)N;$yEqdTwWklqNuL& #o(`
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: c8 12 20 aa 0a c7 96 53 de 11 e9 e0 2a b4 a3 54 59 4c 88 ac 4e 5a 81 09 af 42 75 73 34 14 d4 ee e3 e1 6f cf 3d 75 bb ed 01 2e 49 2f a5 9d ac 2a a7 b0 05 11 6e 20 60 b2 83 96 24 2e 13 df 91 98 af 90 72 72 cd c4 45 1b c7 06 0d 9c 32 11 32 9c 07 9c 6a f1 95 f6 19 0c 95 d9 da 38 a5 66 97 5f 21 14 ea 32 9a f2 f2 0f 38 b0 85 6f 68 05 b4 c0 25 a2 c1 16 46 39 1b f0 de 25 71 7d 0a 45 e4 64 bb c1 86 21 29 60 01 90 16 12 b1 66 9a 13 21 96 48 80 b5 49 d6 38 18 8c f1 fc dd 4a 8d 4c 3c 2c e0 96 dd 44 4a f2 24 59 64 40 16 c3 1c 0e c8 18 04 c4 b2 cb 22 5b 12 ac d3 ab 64 ab c9 69 49 48 a3 52 d7 ae 9f 08 c8 2c 1d 94 c9 39 73 e4 38 f3 20 b1 f1 68 19 01 8a b4 92 02 24 55 0c d9 14 61 b3 61 60 79 03 ee 35 53 20 49 20 47 32 a1 55 96 bb 02 de a1 ec 13 82 dc aa 4c f0 31 9a 98 2b Data Ascii: STYLNZBus4o=u.I/n `$.rrE22j8f_!28oh%F9%q}Ed!)`f!HI8JL<,DJ$Yd@"[diIHR,9s8 h$Uaa`y5S I G2UL1+
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 56 51 2c 32 03 5e 71 c3 c2 cb 90 39 84 d8 88 30 98 0e 0b a9 58 a4 5f 30 ee 19 54 9c 3e 25 8c 10 c8 c6 b3 2c a2 6f 1c 49 6b a9 90 a2 2c 96 4c a3 da 6e 62 88 11 0f b8 86 08 f8 06 30 70 d7 41 24 eb ea 63 e0 44 48 3e d9 19 35 7f 32 23 52 ce be 25 87 19 c7 91 64 07 2a d9 92 31 fc 84 80 c3 7d 79 9d 03 09 a0 25 92 26 6c 61 90 f1 e5 c8 e5 1b 1d 8e 29 c6 0b e3 e8 0b 46 78 9b c8 04 03 94 90 ae 47 20 7c 68 fc 32 84 aa d2 7f fe 3f 64 9c 58 23 b3 9b 3a d2 bb 19 23 4c 85 db 99 43 07 29 eb e7 ee 2d 50 5a 4b 8f 1b 65 48 bd c0 a1 59 0f 2c 35 83 9c 69 13 11 47 88 07 dd 92 6f 5e 40 c9 22 91 16 1b 24 98 79 21 a0 e1 05 5e 32 65 4e 3c 3c b2 45 5c fd 07 9a 3a 6a c5 c9 f4 8e b0 73 2f 05 89 e3 11 71 8e 39 e7 09 c0 85 b2 09 cc 78 c1 64 0f ca 32 3a ca 25 87 c4 c5 37 90 92 32 31 5d Data Ascii: VQ,2^q90X_0T>%,oIk,Lnb0pA$cDH>52#R%d*1}y%&la)FxG \|h2?dX#:#LC)-PZKeHY,5iGo^@"$y!^2eN<<E\:js/q9xd2:%721]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	62714	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	966	OUT	GET /wp-content/uploads/2022/07/005.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:27 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:46 GMT Accept-Ranges: bytes Content-Length: 69483 Content-Type: image/jpeg
2024-05-28 05:15:27 UTC	7958	IN	Data Raw: ff d8 ff e1 11 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 30 3a 35 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: BExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:20:55
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 3b 00 7c 96 f4 42 5e 8a 28 74 a7 91 dd 38 73 7e 28 3c b7 82 0f 41 37 a0 ac cb 52 f6 a3 f7 b5 a7 96 f0 2d 6f 41 2f 43 c9 5a f6 a4 1a 4e a0 13 f2 4e fb d0 ee b7 ee de 6d 4f 43 c9 2f 43 c9 5b da 7b 82 3e 49 16 f7 82 8f de 82 be ee d4 f4 3c 92 f4 7c 95 bd b1 c8 4e 1b f8 72 97 de 42 3d 86 a7 a3 e4 97 a2 7c 15 cd 9e 3f 34 2b ed a3 1d bb ae 78 67 80 3c 9f ea 33 e9 bf fb 28 9e 64 01 64 d0 0a f6 2f 41 ab 58 d5 e4 aa e6 64 63 e2 55 eb de 4b 69 11 ba c6 82 f0 d0 7e 8b df e9 cb b6 2c fe af d7 6c b0 ba bc 0b d9 87 53 1a 0b f2 ee 69 24 97 7f 82 ae 86 d6 fb 59 67 e7 b2 df 52 af f0 9f f0 76 ae 31 f6 62 db 6b 86 43 cd ef 78 79 c9 b4 ed 01 81 ed 2d f7 b0 3b fc 27 bd 8f bb d2 b7 f4 8a b6 4f 8a 44 0f d5 7e b3 7f 54 75 aa f0 66 87 22 4f cf e9 f0 ea f5 df f3 8f 16 27 d9 ce cf Data Ascii: ;\|B^(t8s~(<A7R-oA/CZNNmOC/C[{>I<\|NrB=\|?4+xg<3(dd/AXdcUKi~,lSi$YgRv1bkCxy-;'OD~Tuf"O'
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 2e 5f a5 fa 13 f0 34 52 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5f a5 fa 68 ce 07 ec e8 27 2b 37 e9 7e 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 c6 70 a1 b6 24 8f 24 cd 60 e2 c6 e5 cb 97 2e 5c b9 72 e5 fa 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 1f 51 46 d8 f2 50 00 f8 17 0a 99 e3 68 54 ca 32 bd b7 e9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 3e a0 07 d9 88 57 17 e5 f8 20 b1 55 00 9a 27 37 e4 4d 7a 54 e2 0c e0 b3 c6 b0 e4 b3 c4 b3 c2 27 86 78 4c f0 b4 f1 34 f1 b4 28 d2 8c a3 28 ca 69 4d 3e 61 63 2e a7 90 5f 39 66 2b d9 e5 39 ce 6d 03 12 06 90 3c e7 70 ea Data Ascii: ._4R.\r.\r.\r.\r.\r._h'+7~.\r.\r.\r.\r.\rp$$`.\r\r.\r.\r.\rQFPhT2r.\r.\r.\r.>W U'7MzT'xL4((iM>ac._9f+9m<p
2024-05-28 05:15:27 UTC	8000	IN	Data Raw: 69 91 5d b9 4c f7 f8 04 34 d7 30 c1 d1 c4 3c a0 eb f6 58 7e 86 e4 7e 87 60 94 e9 f5 d0 14 c2 df af d4 72 ff 00 5e 01 db ad be 4c bc 2b 14 cb 92 e6 ad 06 a4 1f 21 33 99 27 3d 4d 67 a5 94 e5 34 c1 5c 1c 33 cd 95 b3 59 a0 5d 43 96 11 3b 04 05 ed b2 96 d8 81 a7 6e 1e c1 50 bf 63 9a 8d bb 38 6c a7 a7 91 99 f5 12 fc 60 32 a8 a4 c4 52 70 e2 ec ca 83 65 78 a5 1e 2b 86 72 75 ac 99 8c 24 99 fc 08 47 79 aa 82 dc 80 5b e4 8a f9 b9 26 d4 2b 08 34 24 82 5c 2b 12 39 32 a3 97 30 37 cb 31 11 d8 d5 ce 41 4f cb 03 fe 2f e6 e7 20 25 c2 0d b8 22 13 53 c9 47 2e cb 2a e5 b0 d2 32 03 19 2a 3a 7c 1c c1 9a 75 3a ac 3b 5d 26 c5 82 b4 f2 a8 61 a0 a5 d4 40 e6 99 cc 06 5d 47 73 1b 58 34 f9 73 ca 5d 15 d6 67 b0 8a c1 c7 89 0c 09 73 80 94 23 54 79 87 5b 7e c1 4f ac eb 28 6e 8f 54 47 ea Data Ascii: i]L40<X~~`r^L+!3'=Mg4\3Y]C;nPc8l`2Rpex+ru$Gy[&+4$\+92071AO/ %"SG.2:\|u:;]&a@]GsX4s]gs#Ty[~O(nTG
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 2a 97 b4 dc 1e cd 1b 3d 91 c9 76 b8 dd 87 ac 6f 5f 3f fc 54 d3 7b 5f 69 4a d2 18 de 22 31 dd bc 30 0f 65 1f e6 7f e2 3b 57 db 7c 2a 56 8c 09 a2 06 f1 16 39 08 9f d1 f5 72 7f 77 4e cc aa cc 84 95 24 de 22 6c b1 62 fe ea 78 7f a8 fb 2a 9b 86 e4 04 02 c4 0c 73 1f 69 2e 4a be d3 87 0d 18 4f 6c 71 23 69 22 b1 b9 6b 65 ff 00 88 c7 ad e1 fa 58 fe cf d6 7a 59 e9 d2 14 e2 ab 80 ab 3b 95 b5 a3 c5 ff 00 a8 fc cf a2 ec de b3 87 ff 00 88 a1 1f 68 90 4e d2 80 72 50 1d 91 13 aa 89 7a ef 64 9f 0b aa fb 49 28 c0 cd 22 64 a4 20 38 e3 2b 8f 45 c4 7f e5 fd a4 dc 3a 3d 9f 84 91 38 b8 79 24 19 76 8b df 8b c2 89 32 ea 93 7f ae 99 3e f2 92 44 69 2d 8f 5a c0 85 7d 9b dc 26 6e 9d 70 24 22 27 25 50 48 ab 86 22 4c 62 9e 4e d1 eb 78 9b de 87 de f5 bd 55 2f 66 96 5b 4f c6 c0 04 2f 93 Data Ascii: =vo_?T{_iJ"10e;W\|V9rwN$"lbx*si.JOlq#i"keXzY;hNrPzdI("d 8+E:=8y$v2>Di-Z}&np$"'%PH"LbNxU/f[O/
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: b6 35 d5 81 f2 5e 3a da a6 fa dc 36 0d 7a 2c 18 b1 f1 5a c2 b0 bb 58 8b 5e df 59 eb 59 94 2f 74 37 ee 51 b4 e2 42 3b c2 38 69 e6 c8 9d 67 c4 a2 c2 36 8d 47 2d ee 3c d6 91 70 7a b3 26 67 99 d0 c7 f4 d7 72 8a 3c 41 79 6c 46 c1 e2 bd 6f 64 13 be 03 5d 05 59 0e 2d c8 c0 ee e4 3b d9 ab 09 11 a4 51 c8 03 66 a7 d9 c9 bf 56 59 4a bf 22 b8 c5 88 f2 68 12 57 9f 67 27 ce a0 09 d4 f2 d8 e3 7f 29 a8 94 25 c1 d1 94 d9 83 78 8d 15 14 42 d1 78 a0 e4 07 91 c4 df ab 29 12 ad b6 74 5b e6 bd 18 cd e3 94 8b 8d aa da 7f 32 85 a4 3c 36 d8 92 6f 10 6f d1 57 5a 2c d2 e2 9b 40 0c 03 7b b5 e2 35 7a 43 32 0d 4a 17 5d d7 07 c4 fb ca 40 89 90 b9 bc 68 08 7c 4e f3 71 a7 c7 bf 7a c6 35 93 b3 e2 45 c8 ca 74 61 6e 83 f6 7e d2 f5 73 b7 9d d5 75 f8 5d 93 ab 4a b6 60 6d d6 d5 6c 8f ea 5b d5 Data Ascii: 5^:6z,ZX^YY/t7QB;8ig6G-<pz&gr<AylFod]Y-;QfVYJ"hWg')%xBx)t[2<6ooWZ,@{5zC2J]@h\|Nqz5Etan~su]J`ml[
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: df 51 57 ef 36 df 90 50 d7 e4 ad 2c 2d cf a5 70 df be d8 45 62 dc 87 51 d1 3f 32 b3 81 c1 3d f2 9b 29 fa 7d 3a 79 2e b0 c9 6c 8b 2f 44 9f 1a 3e 85 28 21 40 be 24 9d 9a f8 39 3c 94 25 68 52 61 d1 28 d9 47 7f 76 cb 9f 67 cd 28 7e 52 21 02 91 76 46 7b ad bc 39 30 dc e1 d3 32 b2 2c 62 d7 b3 3f 0c d8 ef c7 24 71 ff 00 79 41 54 c4 41 20 74 d9 6d df a7 5a 98 7f 7b 57 8e 35 b4 84 12 24 7c ad f6 6b 1c 13 37 1e 3f 67 4d a0 c5 94 10 26 2c 78 97 df e1 4a 9c 57 87 89 ed 65 a2 14 af 67 6b df 71 0e 5b 32 75 ec dd a7 ad 8d fa 1f 69 4a c8 5e e6 c5 88 4d 55 7d 64 72 cb 0f f8 14 96 93 03 c8 1d 64 37 07 bd e3 cc fc 2e f7 ec e1 8a 80 25 9d 8d c9 40 1e 24 f6 d2 49 c6 e2 76 7e 87 57 44 c5 23 95 b5 d5 71 33 c6 31 3d e4 d2 47 1f 4f 1f 4b d7 45 44 89 5c c3 b1 78 65 02 3a b1 e8 e3 Data Ascii: QW6P,-pEbQ?2=)}:y.l/D>(!@$9<%hRa(Gvg(~R!vF{902,b?$qyATA tmZ{W5$\|k7?gM&,xJWegkq[2uiJ^MU}drd7.%@$Iv~WD#q31=GOKED\xe:
2024-05-28 05:15:28 UTC	5525	IN	Data Raw: 17 21 a5 c5 80 a1 c9 f2 d5 f1 27 b8 b5 b2 df 2d 6a 45 f9 8d 5b 78 73 05 1f c7 b9 5b b7 d7 65 c8 1b 6b 51 6f d7 95 12 d6 52 36 b1 1f c3 5b a6 f5 dc ee 56 95 63 90 61 b2 d5 60 1a dc ec 00 a2 92 82 a4 73 fe ef e8 bd f6 d7 35 05 63 b3 96 ae a6 f5 a5 bf 5e ca 04 81 7e e7 e8 db 5a ec ab 6a 6b 6b 29 ee 8d 3e 8d 58 b1 61 dd d7 eb 55 ca 21 3c f8 af f0 d5 82 e0 3c 43 85 eb ab 90 fc 8e 2f f4 e2 ab 05 0c 79 c9 18 d7 58 c2 fd c1 a5 69 6f 94 56 a6 b1 75 17 e4 75 00 30 fa b5 94 7d 6c 63 95 2f 9a 8f 69 17 f8 75 ac 98 9e 61 bc 6b 6e 43 fc f4 05 ac 2f af 25 5d 6f 7b 73 16 ab b6 a0 6d b8 23 e7 46 d5 a6 9c c2 fa d0 e1 87 32 58 6e ad da ac 20 92 fc ec b8 91 f4 92 b5 89 54 f7 5d 57 93 c1 c9 ea ea 85 b5 b9 c7 09 07 d6 ab bc 6c a7 61 2a a6 b1 06 c7 65 c8 37 f9 8f 58 99 6c 7c 65 Data Ascii: !'-jE[xs[ekQoR6[Vca`s5c^~Zjkk)>XaU!<<C/yXioVuu0}lc/iuaknC/%]o{sm#F2Xn T]Wla*e7Xl\|e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	62715	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	723	OUT	GET /tr/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:28 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 28 May 2024 05:15:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	62716	157.240.0.35	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:27 UTC	760	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=215059717349806&ev=PageView&dl=https%3A%2F%2Fwww.campobahia.com%2Fhotel%2F&rl=&if=false&ts=1716873323501&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.3-3.0.13&ec=0&o=4126&eid=ob3_plugin-set_6f968943f22fbaa6d893336783a3e03795a24332d2a8b7f339ec66d86da91c4d&fbp=fb.1.1716873256113.429051690950261479&cs_est=true&ler=empty&cdl=API_unavailable&it=1716873320446&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 05:15:28 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-28 05:15:28 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	62717	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	734	OUT	GET /wp-content/uploads/2022/07/18-hotel-desktop.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:14 GMT Accept-Ranges: bytes Content-Length: 442402 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 21 7a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 34 3a 33 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: !zExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:14:30
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: cf 64 8b ad 3c 1b 39 fd 2b a5 66 32 ff 00 4a a6 e2 65 58 24 5e c2 e8 26 77 b7 d4 63 9e f6 bf df fb ab 94 ea 1d 45 d9 97 7d 93 28 3f 1b 2b a7 fa 86 1a 62 7d 47 35 df a2 2f 0f ff 00 ad 7f a5 62 e9 ac cb 1b 64 3b 58 d0 fc 3b 72 b0 3e b0 d6 c3 43 f3 db 05 f5 b0 d5 68 d6 4d 4f fa 23 e9 6e fd 0d c3 db ff 00 06 fb 54 fe d4 05 11 10 08 ed a2 c8 64 90 1c 37 e9 ec ff 00 ff d4 cc c5 e4 fd 0f ed 73 cb 78 fe 52 d3 67 d3 6f d2 fa 0c fa 1f cd f2 cf e7 7f d7 e8 7a 6b ca 92 54 fa b6 9f 53 eb df f2 06 77 fc 41 e7 e8 fd 21 ca c1 bf fa 6e 77 d0 fe 79 bf 43 8f a1 fe bf 6b 5c 52 49 63 ff 00 be ff 00 b9 5d d0 f9 c7 fe e9 ef 6d fe 8b 91 fd 2f fa 2e 3f f3 ff 00 47 e9 8f fd 93 ff 00 43 ff 00 76 3d 35 b9 95 f4 31 7f e4 ef e8 f5 ff 00 4e e7 8f fb 49 ff 00 03 fe 93 fe ec fa 2b c9 92 Data Ascii: d<9+f2JeX$^&wcE}(?+b}G5/bd;X;r>ChMO#nTd7sxRgozkTSwA!nwyCk\RIc]m/.?GCv=51NI+
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 7b f1 6b 6e 5f 50 a1 d4 3b 74 38 58 c2 d3 01 ad 65 61 cc b1 bf 9b 6f bb fe 16 df d2 a7 ce bb 0e cf 52 fb 19 55 8e 69 6d 56 d4 fd e1 af 7b 77 b7 18 fa bb fd 2f 4a ba 59 6d 9e b7 a3 fa 4f 49 57 84 47 be 28 19 0c 5a f8 71 fe 8b 72 26 58 f9 73 2f f3 a4 f9 f0 42 f8 8b 96 ea 41 77 ea f9 75 5d c7 e8 ea 60 dc 00 fc ff 00 4e b7 bf 6a 90 a2 a7 90 db fd 5b 0c c1 02 bb 1c 27 c3 f4 55 59 ff 00 56 ab 62 e5 dc cc cb 32 f1 48 6f a1 5b 71 cd 9a 90 4f a7 65 8e 6e f9 bb 6e fb 2b fd 0d 9f 43 d6 f4 57 5b 5d b7 1e 8e 6d c7 b7 6b 9b 5d 4e c7 6b dc e6 34 5b 2c 36 3d cd f6 dd fd 25 d6 ff 00 c0 df fe 93 f9 bb 15 cc f9 ce 31 b0 d7 b9 fd 25 b8 84 b2 09 9d 07 04 38 ff 00 b1 c4 a3 1f 06 9f 7d 6e c8 c6 f1 75 58 f9 01 df bd f4 e1 8a e6 56 7e 5b 70 dd 56 2f 51 ea 0f f5 77 54 fa f2 19 63 Data Ascii: {kn_P;t8XeaoRUimV{w/JYmOIWG(Zqr&Xs/BAwu]`Nj['UYVb2Ho[qOenn+CW[]mk]Nk4[,6=%1%8}nuXV~[pV/QwTc
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 2c 01 84 bd 97 1d 70 76 8f 91 aa 59 c1 8e 7b cb 44 63 71 17 2a ba 05 c3 5b ca af 91 e7 11 0e 4e 83 85 09 5f 22 f5 79 67 ae 57 6d 36 66 16 c0 29 cd af 9e 93 38 92 63 7c 48 d7 cd 7c 8e b7 f8 de c2 b3 dc 31 e9 99 b3 b7 d1 b1 c6 7a 5a 7e 6f c1 f4 55 9e 8a 05 32 f5 1c 7e d1 47 b0 51 0b b8 11 1c 96 77 1d af 7d e1 b5 65 a0 e2 ba 73 f3 c7 d9 f1 42 97 74 71 cf 6c 8c 69 4d 6a cb a6 9d 7c 9c c5 4a f7 32 3c 09 18 48 23 94 02 44 82 3b 41 cc 07 3c 4d d4 2e af 33 42 44 40 49 75 b8 55 bf 58 ee a8 79 ae c1 0f 2a 34 15 8c 3b 6f 96 b7 bb 36 f0 49 34 15 9c 61 28 ee 65 7c bb 04 f3 68 17 b1 c8 8c a8 9f 56 8b 11 ec 76 67 47 63 ce 38 bd 15 1d 26 f6 6f 2d 2a e6 e7 1b 86 63 c9 1a 83 63 42 f0 fa 3f 68 eb 31 26 3d 7d 04 91 2e 58 a2 45 b2 e5 30 a5 79 7b 0f 4b 03 99 e1 8e c0 9f 5f 7c Data Ascii: ,pvY{Dcq[N_"ygWm6f)8c\|H\|1zZ~oU2~GQw}esBtqliMj\|J2<H#D;A<M.3BD@IuUXy4;o6I4a(e\|hVvgGc8&o-*ccB?h1&=}.XE0y{K_\|
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 51 c2 6c 23 ac e3 8f 76 41 86 33 37 5c 80 8d a0 e8 bc 19 57 1e de 93 65 12 50 cc d7 33 37 1c 93 c8 8b a5 6a 0a 3b 17 a2 8d 5d 6a 45 af 1c 55 de 61 5f 7c 01 e8 8b 1e fe 9b a9 9f 07 35 c4 f1 53 1c e5 b6 72 e4 d3 6d 08 6a e0 e7 01 70 99 f4 17 37 b3 19 d4 ef 48 56 55 25 9d 91 c4 6d 49 ac a8 22 f5 7e 69 cf 0d b4 fb cb 47 ad 3e e6 1d a0 ab 14 8c 7c cc 65 a2 ba 88 78 a6 a9 2f 31 66 8a 5a e6 a8 86 52 fe 6f 4e bc ae 88 9e ca 18 7d 0d 9a c0 72 24 8c e8 15 5a f9 ac 90 5a 34 70 54 36 90 6a cb 6c a8 40 7b 4a 5a a9 a6 25 ef c2 1d 35 6f 16 73 8e 73 5a ed e9 88 a7 75 bb d3 3d ae 6c d1 dc aa 6d a3 1f d1 5f f3 67 db bc c6 1a ee 98 8b 9e 4c 74 05 6b 7c 3d 73 22 7d e5 cd cb 91 3b cb bb 49 1b a6 e5 d7 e4 f2 ce d4 5e d9 54 99 e5 98 63 f3 23 33 aa 6e 3d 7d 1d 5a a7 63 15 cc 60 Data Ascii: Ql#vA37\WeP37j;]jEUa_\|5Srmjp7HVU%mI"~iG>\|ex/1fZRoN}r$ZZ4pT6jl@{JZ%5ossZu=lm_gLtk\|=s"};I^Tc#3n=}Zc`
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: af 3c 9d 0a a8 e8 71 d7 a7 4b 1a b5 50 18 ad 17 5d 5a 9b 28 b4 97 9b fc f7 ac b4 a9 60 ed 2e 73 6a 47 2c 04 86 23 3c ac 80 6f b9 82 41 7c 90 0c bb 30 05 9a d7 24 0b 97 f5 3e 8d 09 6f 9f 88 ee 97 61 a5 06 ff 00 32 a0 35 5c e5 e9 ab 25 1a 8b d6 31 99 97 d3 de 9f 34 f4 6f 2a 4f 28 a2 73 a0 a8 fd 0f 13 48 b5 79 3d a5 2b 5d c7 18 68 61 f9 31 c2 95 d1 cf 02 f6 47 cd 95 44 05 94 7a ba d6 dc af 6f f2 2e 2f 53 6a 76 db df 08 d9 ae 35 99 05 cd 64 97 4a 0e b0 8d 1f 26 ce 02 35 b6 74 34 f3 c6 4a 32 11 b8 0f 1a 5a da 1d 76 5b 05 34 d0 b3 06 46 d6 18 94 40 0b db ca ed be 66 67 b9 4c 8e 39 e6 80 f2 e7 6b 96 dc 95 0a 1c f1 24 8f d0 7c 4d fe 98 f9 d1 19 e3 ea 90 e4 13 6a 3b f7 97 b1 31 27 df da ce 56 77 27 b8 ee c3 cf 87 22 47 01 72 31 c3 42 7e bb 5d ce 3d 5c 38 27 5a 39 Data Ascii: <qKP]Z(`.sjG,#<oA\|0$>oa25\%14o*O(sHy=+]ha1GDzo./Sjv5dJ&5t4J2Zv[4F@fgL9k$\|Mj;1'Vw'"Gr1B~]=\8'Z9
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 82 e3 22 dc 95 6d 4a 48 2e 23 bc e2 96 0f ce 6a 12 fc d8 5c 4c 5e 79 92 9c 84 e6 5b 26 d5 85 4c 8e ca 79 38 2d 81 2b e4 b8 2c bc 78 95 dc e3 75 ed 26 42 b2 6e 7b 6e c8 c7 24 f0 a5 62 88 84 dc 89 21 65 12 5b 25 5e ff 00 da 91 db 1f 15 6d 15 1d 87 e7 87 0d 5b c8 ca db 21 3e 33 52 15 6a da 54 61 87 db c5 9b 2c 15 bb 7c b1 b4 07 85 b8 ed 9b 4d b0 03 8c a2 22 39 f1 85 25 b0 29 8e 11 ac 28 0f cb 1b 48 72 e0 b6 0e 1b a6 4f 28 04 84 fb 0d e7 be c2 86 cf 93 f4 e2 81 21 3e 4b 63 ff 00 e0 ae 68 99 8e f3 de 66 9c e2 8e 27 38 2b f0 0a 9c b1 ff 00 23 5f 25 c5 c5 4c 44 f8 e3 38 f8 8b 80 bf 05 f2 50 53 85 bc 98 b2 ac a4 21 4a 9c 51 54 54 51 d6 b2 e6 77 da d6 8d 64 9f 71 7c e7 86 18 70 82 aa 8b 77 0c 65 33 5f 28 49 2e 61 23 32 25 36 28 e4 53 06 b3 5d 86 32 67 ab bc 62 29 Data Ascii: "mJH.#j\L^y[&Ly8-+,xu&Bn{n$b!e[%^m[!>3RjTa,\|M"9%)(HrO(!>Kchf'8+#_%LD8PS!JQTTQwdq\|pwe3_(I.a#2%6(S]2gb)
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 46 b9 c1 67 d2 b8 0d 92 67 04 98 aa 6b 8c 58 1b 08 57 86 ab fd fa ae 2b be 4b 85 e5 cf 91 2e 59 ff 00 13 69 c4 6d c1 98 ab 9f 96 b9 f9 2b 88 ea f3 f9 4a 98 92 f9 51 40 55 b4 9c 30 1a b6 b0 95 28 e9 5f 27 20 5f 22 84 51 17 df 30 8f e4 92 49 b7 5c fe d4 4c 7f bb 18 e2 d5 9b 0a c0 cf 67 c9 b7 45 16 60 b8 6d c1 17 61 ca af 9e 12 46 57 28 97 7c 94 31 67 ff 00 50 99 17 26 be 88 e0 5e b7 e6 d7 2a 27 48 fa 31 2a d1 13 1a 02 3c 69 85 20 01 46 f0 48 10 95 41 87 d3 e3 09 3e 65 c7 07 85 c0 57 a3 59 1b 8d e0 23 91 d7 c4 41 40 da 25 64 1d 68 1f 03 71 55 e0 67 27 11 bc ad c8 8e d8 9b bf 73 f7 0d 93 75 7b a1 2b d0 e3 9a 38 2e 7f 89 f9 60 0e 4b 88 a8 b3 aa bc 5b 6a a5 05 b4 88 c9 59 1d ac a5 7d d8 15 64 63 62 8b 05 89 0f 23 4d c2 6c 9c 76 b6 00 30 ca b2 da e2 36 18 ec 46 Data Ascii: FggkXW+K.Yim+JQ@U0(_' _"Q0I\LgE`maFW(\|1gP&^'H1<i FHA>eWY#A@%dhqUg'su{+8.`K[jY}dcb#Mlv06F
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: cf c4 92 8a 98 a9 f1 c7 c9 7c 12 af 96 3e 0b e3 64 2a da 45 6c 9b 72 42 a1 b5 0d 96 c1 da 92 4f a6 cc 50 5c 55 e7 01 70 7e 71 45 39 68 15 10 55 57 13 1d 15 52 14 41 c4 f8 c3 75 c4 44 32 5c bd 57 85 ba c4 43 6d 39 20 18 e8 d9 18 21 2b 43 e2 a6 d2 08 a2 91 a1 22 21 0b 6a 78 9e 44 9f 28 42 3c 22 a7 38 2a 98 62 8d 91 12 f2 e8 38 40 1e 5c b4 87 e3 21 d2 06 5d 37 0c b8 06 df fb 95 52 1c 85 71 a1 6d 44 3c 11 11 48 48 8c 84 95 95 11 56 3f 88 89 03 6b e6 3f 5f dc 20 26 62 6b 1e 38 b6 d5 d2 f8 b0 8e ba de 14 f9 29 85 69 2d 45 ab 79 cb 8d 59 cc 70 98 0f b2 41 a2 37 8e 2a 8a b0 8a 2d c8 69 de 6e 5c 70 59 92 df 93 96 a5 e0 96 89 e4 95 6d a3 b2 5b 55 fa c4 1c 45 56 95 15 47 2c cb 88 cc 36 a6 95 88 80 c2 38 88 85 e3 c7 98 26 1b 5c c9 f3 16 d6 52 29 39 35 50 9c a8 68 be Data Ascii: \|>dElrBOP\Up~qE9hUWRAuD2\WCm9 !+C"!jxD(B<"8b8@\!]7RqmD<HHV?k?_ &bk8)i-EyYpA7*-in\pYm[UEVG,68&\R)95Ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	62718	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/006.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:48 GMT Accept-Ranges: bytes Content-Length: 91817 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7958	IN	Data Raw: ff d8 ff e1 16 89 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 31 3a 32 31 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:21:21
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 1d 38 42 49 4d 04 0c 00 00 00 00 15 1b 00 00 00 01 00 00 00 83 00 00 00 9f 00 00 01 8c 00 00 f5 f4 00 00 14 ff 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c Data Ascii: NonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIMAdobe_CMAdobed
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 70 68 6f 74 6f 73 68 6f 70 3a 36 33 31 38 64 65 37 30 2d 35 36 62 63 2d 65 30 34 37 2d 61 64 64 30 2d 34 39 39 64 36 37 30 37 62 37 64 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 36 64 35 66 64 37 2d 36 63 66 63 2d 30 34 34 38 2d 62 37 62 66 2d 64 38 61 39 37 32 62 33 62 37 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 39 64 64 62 33 30 63 2d 62 66 32 66 2d 63 35 34 64 2d 61 62 35 36 2d 39 30 34 30 64 34 30 33 63 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 63 66 65 37 63 31 2d 31 65 31 33 2d 35 32 34 64 2d 39 39 39 30 2d 33 38 31 66 62 31 31 33 61 36 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 Data Ascii: photoshop:6318de70-56bc-e047-add0-499d6707b7d5</rdf:li> <rdf:li>xmp.did:136d5fd7-6cfc-0448-b7bf-d8a972b3b7e5</rdf:li> <rdf:li>xmp.did:19ddb30c-bf2f-c54d-ab56-9040d403c492</rdf:li> <rdf:li>xmp.did:36cfe7c1-1e13-524d-9990-381fb113a6be</rdf:li> <rdf:li>xmp.d
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 59 e6 4f b3 27 93 a7 a1 27 2f 77 0c 1b e9 39 4b d7 39 71 d9 e8 9e 76 e7 71 86 46 fc db 23 1e 8e 79 ad a3 a5 cb 1a 67 ac 6d 86 12 36 91 97 54 6d 5d 47 2e 59 bd b9 e5 b4 ba 92 e5 9d 39 9d 9d 51 cd b6 6a 34 8a 27 4c c9 8e c9 8e 6e ae 79 d4 eb 9e 64 9d 58 e6 e9 b8 9b 36 c7 0a a6 a2 4d 6f 14 9a 61 58 af 5e de 6f 6c 72 e7 de ac e2 ea ad 4c 31 de 8e 27 d9 2b e7 e9 d3 67 32 ee 79 71 4f 5a 31 ac 30 ae 97 cd d1 2f 6e 5a 79 fa cf 4e 39 f3 d7 a3 a7 9f 15 ec af 23 ab 2e ac 16 95 94 d6 86 4b 5c 6b 73 96 e2 73 e8 a3 92 b4 d4 e7 5e 90 71 77 64 8c 99 35 be fe 75 c7 6e bc 5b e6 f6 f3 8a 5c 6a 16 a7 43 e3 0e b7 cb a1 ae 99 cc 6f 7e 76 47 a8 fc 7a 5f 57 3e 57 67 5c f2 6c 3d b8 a8 d9 66 59 58 b4 46 d9 68 54 75 d1 c7 d1 b1 9b 98 f6 97 1d f3 d2 26 6b 1a 87 8d ea 56 97 58 d6 2f Data Ascii: YO''/w9K9qvqF#ygm6Tm]G.Y9Qj4'LnydX6MoaX^olrL1'+g2yqOZ10/nZyN9#.K\kss^qwd5un[\jCo~vGz_W>Wg\l=fYXFhTu&kVX/
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: b6 6a d8 d8 e5 86 c5 50 5b 54 6d 91 06 c5 5c 6c df 66 2b b5 5b 1c 89 6d b4 d4 a7 6a cc be db 3d 5a d6 71 2c d6 67 ca e1 93 61 14 b6 d2 e4 de 23 b3 31 33 1d 08 87 e8 1d ce 0e 78 46 50 26 21 fc 75 24 c0 22 82 4f ca b4 ca 76 39 0e 69 3e 45 70 de b0 b1 2d e7 48 1d 48 6b 55 41 b8 06 3b 38 51 b2 f9 2e ae 0d 8c b0 6d 10 ab b4 61 d9 24 be d6 27 9e c8 d6 87 52 3b 81 98 44 c4 51 df 1c c9 5c 10 20 10 08 04 0b 02 c0 b3 84 e1 38 19 c0 ce 26 04 33 8c e3 02 c0 b0 24 15 98 2a 33 c4 61 ae 1a e1 ae 14 85 21 58 56 15 9c 4c e1 0a c2 b0 a9 9c 4c e0 c6 78 cc f1 99 fb 08 ca 4c f1 18 2a 95 52 d9 b2 8b 61 d7 75 0e 04 0a c6 78 2d c7 81 e3 57 0a 99 c1 a0 ad cc f0 b9 86 87 10 a1 07 11 10 b3 0d 02 21 d3 33 e0 c1 a4 00 3a 6b 0e a2 88 d4 00 0d 4a 27 01 16 92 41 ac 00 09 10 13 3f 9c cc Data Ascii: jP[Tm\lf+[mj=Zq,ga#13xFP&!u$"Ov9i>Ep-HHkUA;8Q.ma$'R;DQ\ 8&3$3a!XVLLxLRaux-W!3:kJ'A?
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 6e d3 e5 aa f0 90 5d b1 1a dd e7 71 5d 84 58 d5 bc 6d 5a 6c 03 53 59 a7 c2 a8 0a d5 05 46 c0 65 7a f9 75 6b c4 7e 24 3d 4a c5 6a f1 4f 36 bd 61 76 34 6c b4 3e 81 63 76 9e b8 1b d5 5d 61 d9 7a 62 6f ea d8 9c 41 9f 3b 59 56 cd 96 b0 d7 ec 47 1f 2e b6 c0 f8 d6 23 d9 a9 eb 31 51 d6 28 1f 4e 97 3b 16 56 c7 66 cb 83 b3 52 d4 b3 dc 03 62 5b bf a5 5b b7 b4 f5 b6 32 6c 7a 96 0b b9 ea e2 ec fa fb 67 3d 70 3c d5 81 f2 e8 cb 37 af 60 af eb 01 46 ab 16 a8 70 6c d7 48 b7 6a b9 6a b5 7c 8d a7 eb ad 89 ea f4 96 1d 11 58 b2 8b 8d 47 fb 75 8d f2 4c af 5f d8 41 af 72 05 6b c8 7b 96 a0 76 1e d0 76 69 58 cd eb 1c d3 76 b2 0f 92 98 16 55 80 f9 29 e5 63 63 71 61 72 96 74 76 96 a6 c5 52 eb 2e 41 5e cb 2c 3b 0e 23 6e ee 06 4d bf 60 22 ec 6b b4 3f d6 99 e6 d1 ae 3e fa 18 77 35 21 Data Ascii: n]q]XmZlSYFezuk~$=JjO6av4l>cv]azboA;YVG.#1Q(N;VfRb[[2lzg=p<7`FplHjj\|XGuL_Ark{vviXvU)ccqartvR.A^,;#nM`"k?>w5!
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ee 67 78 66 41 e9 df 00 9e 84 f7 c0 c7 13 30 66 08 9f 88 26 08 80 09 81 38 98 47 40 d2 b7 00 d7 62 19 53 88 1d b3 e5 01 94 a8 9e 41 8e 78 0c c0 b0 3c 9b 96 22 95 10 10 10 58 ab 60 b4 81 5d 81 48 b9 40 36 a4 16 0c 12 0c c8 56 21 4c e4 42 64 e0 29 30 08 48 c1 33 b9 99 04 81 da 7f 03 38 c1 c0 18 9f c9 ce 66 3a 11 da 76 c1 51 0d 62 3e a5 2e 2c f5 80 c7 d6 de ae 2e cf 86 26 ee a3 93 f1 9a 36 bd 2d 3e 21 03 e0 36 52 bb c2 29 74 2d b6 30 bb 6f 5a 7f 63 49 9c cd 80 5a b5 9f 98 20 7e 50 85 11 ec a3 2b 66 b2 47 f6 14 86 d7 d9 47 0f 65 ad 1e a5 65 c0 98 80 18 41 cf 5c 0c 60 4c 76 27 a0 03 3d e6 48 80 98 70 27 69 80 60 00 c2 31 31 88 04 24 e6 1e c1 2d e3 29 dc 55 29 b6 8d 05 a8 c0 32 03 9c 42 79 42 c6 0e e4 00 27 12 c7 00 a2 d4 bc 51 02 85 ab b0 a5 e7 85 d5 9d 19 27 Data Ascii: gxfA0f&8G@bSAx<"X`]H@6V!LBd)0H38f:vQb>.,.&6->!6R)t-0oZcIZ ~P+fGGeeA\`Lv'=Hp'i`11$-)U)2ByB'Q'
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: b4 92 63 3e 2c 48 63 23 cf 5c 53 32 31 36 fc 4a 86 4f 10 d6 30 80 64 22 db c3 51 e2 a2 f3 ae 90 01 b1 02 1e 31 7d 62 d8 f3 a7 34 44 a4 63 23 a8 86 a7 f8 68 db 38 da 06 93 27 aa 0c d2 ba 8c 41 0d c8 94 51 94 c1 2d a1 c3 20 e6 13 ae c9 1e 66 ff 00 fc c4 d0 cb b4 1a 81 68 27 bb 62 33 10 e2 d1 b8 b5 f7 61 66 fa 7f cb 8b 3b 87 97 f3 16 f8 96 c0 43 92 b7 8c 22 46 00 93 6f 49 02 f7 51 9e 96 8e d2 be 02 b2 c2 82 84 72 33 33 10 73 be 43 30 88 3d a8 a6 2c 18 92 0d 37 87 35 01 49 4a 3c b9 30 1d 38 2e 34 60 dc 68 d4 f4 ee 8a 72 4c 5d 87 1b d9 3c 88 da 8b 1b a4 30 67 0c 3a 4b 07 62 41 a9 1d 64 24 38 91 34 2d 8a 78 82 06 25 bb e8 90 0e d2 22 89 11 a8 01 bf af fc b4 01 89 ad 5e 24 48 75 10 05 86 2e 03 0a 7b d2 92 ba 32 31 38 00 09 92 df 96 d1 2d 48 5e 78 04 44 ae 46 44 Data Ascii: c>,Hc#\S216JO0d"Q1}b4Dc#h8'AQ- fh'b3af;C"FoIQr33sC0=,75IJ<08.4`hrL]<0g:KbAd$84-x%"^$Hu.{218-H^xDFD
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 90 03 4b 4c f8 d0 10 96 59 97 38 37 6e 4a 91 80 6e 4c a0 7b 92 57 0c a1 28 e9 34 4f 1c 90 78 18 77 f7 13 f9 26 24 60 04 23 2e d4 66 b7 a8 79 92 ee e5 a3 64 8e c6 15 fe 16 66 fa 6b 65 22 71 dc 3d ec ac c4 23 2c bc d0 75 da d1 ed 4d 35 b7 13 80 70 56 fc 6b a0 17 1d d9 ad fc 86 3a e2 07 89 11 64 80 d7 bb 20 9a 70 12 9e d0 dd bb 50 68 e5 c7 60 7e fa 68 80 40 d0 c5 38 c9 81 8f 08 32 ed e5 af c9 90 1a f7 53 47 2a ed 64 ce d3 d9 8a 26 41 a5 a1 a6 65 f0 2b 4c 9a 42 96 bc be 35 43 18 be 80 ed d8 5b b0 05 f4 0b 8f 7b 31 53 26 9a e3 28 8e b5 f2 4d 3c a9 96 c1 84 62 3f 9a b7 af 8b eb 90 3d d9 49 3c 85 c4 6b 32 5b bf 4e 78 77 8f 89 07 8c 62 4e 0e 59 34 73 62 3d df ef aa 4c 36 8d d8 c4 78 96 f6 5e 5c fd e2 64 7b 30 82 61 08 08 9e 48 97 c0 98 42 24 1d 73 6f 02 73 94 41 Data Ascii: KLY87nJnL{W(4Oxw&$`#.fydfke"q=#,uM5pVk:d pPh`~h@82SG*d&Ae+LB5C[{1S&(M<b?=I<k2[NxwbNY4sb=L6x^\d{0aHB$sosA
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d3 e6 e6 1c cd 82 04 2a 64 cb 84 fe 29 27 88 19 7e a8 f8 d3 91 95 31 ef 06 fe 4a fc bc 86 fd e2 79 0c b8 f0 66 4a 1d f5 bc 72 c8 db 31 35 48 65 7a ad 54 11 88 d6 ff 00 0c 93 47 36 12 3a ae 29 a4 0b eb 06 5e 04 f1 9c 87 04 e6 b7 3e a2 63 87 7b be 89 f2 cb 68 79 dc ff 00 bb 40 cb 26 04 9d 4e 4f 56 29 f2 e1 36 18 01 12 3b 33 57 79 4e fa 73 24 2b d4 4d 99 28 44 e3 4c c9 4b a1 f2 f2 d3 89 4e 41 a9 11 7f f2 fe 5d e8 0c d8 cb 74 34 60 61 1e c4 af bd 06 c8 cc 8c 41 76 a0 af 4e f5 bd f4 53 3c 99 13 bd da dc 4f 2c 9c d8 9d 32 04 77 b7 10 10 8c ab 4b af 17 37 23 e5 dc a4 f9 d3 c9 96 21 8d e7 f7 9b a8 c0 e6 c7 32 52 c7 32 43 cb 98 e6 58 8c e1 f3 a2 0e 04 1c ce c2 1e 56 4e 60 89 34 8c 63 64 4b ff 00 d3 bd 19 e6 89 0b 71 cb 19 3f ea dc ad 8e 4e 6c a4 ce 0d 8d d8 b9 3c Data Ascii: *d)'~1JyfJr15HezTG6:)^>c{hy@&NOV)6;3WyNs$+M(DLKNA]t4`aAvNS<O,2wK7#!2R2CXVN`4cdKq?Nl<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	62719	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/007.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:50 GMT Accept-Ranges: bytes Content-Length: 200102 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 30 7b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 32 3a 30 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 0{ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:22:05
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: a0 c0 32 35 d4 1f 6c 79 f3 ee 56 31 ab b2 fb eb aa b6 fa 8e 90 d6 56 35 24 93 0c 68 8f a2 aa 35 e3 6c 4c cf d2 77 69 fd c6 ad df aa 94 3f ed 39 19 7a 87 e1 50 eb ea 69 88 0e 3e d6 17 34 8f 7f b7 7b ff 00 e0 d4 92 2d 2c 50 b2 ec cb 5d 75 18 f5 b9 cf af 1d 90 5c 44 17 3a 61 d6 3a 7f 3d df f6 df ee 2d 0c a2 18 d7 38 09 db a0 68 f3 54 ba 58 75 b6 1b 9c 34 3a 89 d4 90 26 35 3f ca f7 22 e5 5a 5d 6f a6 24 00 7d d0 a0 94 b7 2e 80 8d 50 1d 1e 57 ac 59 83 7f 57 c8 7e 5b 99 5b a9 2c aa b2 f2 01 63 1b 5b 6f f5 98 e6 ed df 63 af b3 e8 3f fc 0f e8 bf 45 fa 35 cb f5 ca fa 78 cb 79 e9 8e 02 9e 36 d4 41 12 00 fa 0d 73 dc f6 fb bf 71 d6 2d 2e b1 8f d4 2f ea f9 36 df 87 6b 8b ec 2d 68 65 56 39 ae 63 46 ca 76 ec fe 73 f4 6c 6a cd b7 a1 64 10 1e dc 7b de e3 3e a5 5f 67 b0 38 Data Ascii: 25lyV1V5$h5lLwi?9zPi>4{-,P]u\D:a:=-8hTXu4:&5?"Z]o$}.PWYW~[[,c[oc?E5xy6Asq-./6k-heV9cFvsljd{>_g8
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ae cf f0 9f a4 51 c7 0c 48 37 60 1d 77 f5 2e 33 23 a8 d1 d8 3d 67 1c 83 b1 c5 b3 01 ae d9 ed d7 74 ed d9 ee 6a 4e fa c0 dd e4 d0 0d bb 5b 05 8f 68 63 04 fb 65 ee 67 bd ff 00 4b da e5 82 d7 cb 8b 1d 24 10 01 98 10 3f 92 d7 0f 24 e6 ca 5a ef 4d ac 60 16 7b 98 1a e9 78 d7 6e df df fa 49 ff 00 77 c7 e2 56 7b 93 3b 37 f2 3a 86 6e 40 06 cb cb 2b 24 02 ca da 19 24 43 7c 37 bf 6b 7f 94 a1 8f 7d 8c 69 34 dc ea 4e df cd 2d 04 77 61 df fd 6f dc fd 2a a8 e7 d4 ed fb 61 db 04 bd c0 19 9e ee 6b 9d ec 49 cc c5 7b 4b ab 6e fb 04 11 73 de 74 3f ca fc c5 27 0c 6a ab 4f 20 b3 88 dd d9 bf 36 ce eb 76 ed 91 b7 74 4f a6 7e 96 ed fe b7 d2 fe 73 7f b7 7f fe ac 49 56 d9 74 4c 99 fe bb 39 98 d9 fe be f4 91 e1 8f 86 f7 fd aa b9 78 f6 7f ff d0 25 bf 5c b3 69 6d 39 16 63 be bc 7b 1d Data Ascii: QH7`w.3#=gtjN[hcegK$?$ZM`{xnIwV{;7:n@+$$C\|7k}i4N-wao*akI{Knst?'jO 6vtO~sIVtL9x%\im9c{
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 2b f0 f3 de d6 75 1d e2 dc 77 b5 ee 60 69 0f 32 76 96 ec 73 1c c7 7a cc 77 b2 bf d0 7e 92 9f f8 45 77 17 a2 b3 d5 14 d6 f2 31 7d 40 eb 03 5e dd a1 9e ff 00 4d 99 4e c5 76 e7 66 7b 7d 1f b3 ff 00 37 5f fd 72 a5 0c b3 ca 18 c4 65 23 1c 83 e6 9f 0f 10 9f f7 57 83 23 2e f1 ec ed fd 5c a6 de 99 6e 55 6f ad ce c7 24 bb 1d d6 38 93 ed 68 74 9d a1 d4 ef bf 6f a9 bd cf ab d9 5d 7e 97 e9 3d 4a d6 9d a7 a6 5b 51 7e 66 2d 04 08 75 af bd ac 71 00 90 6d 73 9c e6 bd e8 5d 2a bb 72 7d 47 5c c2 2b 75 00 36 c7 01 ea 11 1b 0b 5c c8 6b 77 3b 6f ab fe 12 9f f4 95 fe f8 f1 fa 9f 4e b1 db ab 79 db 5c 97 17 54 43 60 02 f1 f4 be 93 b6 37 7e d5 6f 91 f7 32 60 39 0c 22 25 72 e1 23 f4 bf ad 2f f0 93 22 01 11 27 7e ee 67 d6 1a 71 3a 75 0d 6d 77 32 9c 3b 6e 79 b6 88 7b 9e 58 06 d1 4d Data Ascii: +uw`i2vszw~Ew1}@^MNvf{}7_re#W#.\nUo$8hto]~=J[Q~f-uqms]*r}G\+u6\kw;oNy\TC`7~o2`9"%r#/"'~gq:umw2;ny{XM
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 8a 07 56 d0 15 1c d6 9c c1 38 01 7b 09 bb 3d 9c dd 27 5e 0c e9 3e 8c 39 19 bc da e9 8f a7 a7 28 a4 0e 91 0f 7e a9 7e 0f 4e 7e 84 2e da 43 da ce 45 c9 7e 5c da de 77 29 dd 73 ce b7 cf 5a 38 6f 2d d1 0f 8a dd d3 84 f1 2a 16 8e e0 ac 75 e5 da 62 ac ac db 93 2b 09 be ab 40 b5 51 d0 ce bb 59 db 17 ad c5 d4 b4 30 63 24 20 7c 44 11 84 0b d3 39 b8 ba 28 a4 4c a1 43 1a e1 ac b2 84 c2 9a 61 32 43 2e 5e ea 83 c6 da cd ae ab 49 31 68 4a 19 35 f3 33 b4 90 f6 58 fb 2c 0d 2c fd 0d e6 92 ca 90 12 d7 d9 93 08 5b 2b 05 83 60 4b 67 33 d2 d7 23 ce 75 a3 b3 20 51 a8 62 dc d0 d0 b9 6a 6a 05 db 78 d3 7a d8 1e a3 08 11 2b 63 b9 d3 1b 0a 5a d2 ec a2 e8 bd 25 71 ce d3 a3 a6 7e 4d cd 05 6a dd 3b 1f 55 b6 59 e2 80 14 25 85 82 97 a3 c0 cb 40 d0 e7 49 4d 7c 51 ed 1b e2 e6 4c c3 3d c0 Data Ascii: V8{='^>9(~~N~.CE~\w)sZ8o-*ub+@QY0c$ \|D9(LCa2C.^I1hJ53X,,[+`Kg3#u Qbjjxz+cZ%q~Mj;UY%@IM\|QL=
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 36 cc 7b 51 2c a9 a4 56 20 48 99 24 48 42 a1 70 14 ab 82 33 96 b0 fe c1 3c 66 b7 9a d1 8c 9c 2c 30 58 8c 62 b0 60 c0 82 c9 cb 3d 03 3f d0 89 33 96 48 bc d4 ae b3 79 af 95 c6 fe 07 f3 f0 54 13 e7 35 bc 68 b0 2a e0 0a 40 00 63 f9 0a bc 71 8b 06 85 7c 49 1e cb a1 2d 01 76 c7 4d 08 58 a8 27 c3 b7 15 8e c6 ce c6 0f 38 77 af 67 90 d2 86 47 05 89 de 30 19 1c cb a9 2d aa e4 96 e2 45 8e 65 95 38 a8 0a 50 e2 b2 b6 7e 31 e3 0d fc 0e 01 8c 7c ff 00 91 fc 3c 67 21 86 65 c0 e0 e7 31 9c 80 01 b7 f1 ad fc 6f 00 d8 28 40 96 2d 98 a0 70 4d 6f 2b 1c 63 35 e2 50 73 d6 46 40 ac 00 cf 18 4e 10 4e 2e c0 52 d9 23 85 50 41 67 70 83 88 71 b9 21 96 5b 52 2c 7f 6c 13 0c ce a8 ce 38 89 34 75 fc 4f 93 f0 4e 13 f0 d8 14 68 28 df 15 50 64 55 c0 a4 31 7d 15 72 c5 75 ad 0c 32 22 e2 4b b5 Data Ascii: 6{Q,V H$HBp3<f,0Xb`=?3HyT5h*@cq\|I-vMX'8wgG0-Ee8P~1\|<g!e1o(@-pMo+c5PsF@NN.R#PAgpq![R,l84uONh(PdU1}ru2"K
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: da c1 2a 18 38 b4 35 24 cb 3d 95 4a 79 2c f2 dd 48 fb 1b 08 ad 3c 62 39 7b 0a 50 c8 7b 7b 93 4c dd 9c 9e a5 e7 c8 f5 88 e9 0d 06 68 20 05 24 79 66 99 23 8a 47 36 16 b4 45 ec fa d4 5f e4 65 04 59 68 2a 59 8e 76 89 62 fb 0a e8 d2 21 c4 48 99 6a 30 8c 3a 4a 1f 84 f1 85 57 64 8a d2 33 4a 64 27 d1 61 b2 38 df 10 ef 1a 3b 21 8c 76 13 1e c2 28 5f 5c 8a 8a f3 b3 08 c8 e2 31 e4 64 05 58 90 cf 9c b2 24 91 20 fe d5 cb 54 99 23 97 d9 56 38 ea a5 71 35 ca 45 22 4e ba 5b 49 1f 53 7d d0 bb c6 c2 5f 3c 98 e2 b3 ab 00 8d 21 e6 31 e3 8f 15 78 60 20 16 91 59 ba f1 d6 05 b7 d5 57 08 a4 88 d8 46 ed 35 49 03 94 96 23 17 56 25 ad 3f 5f 35 73 0e e5 95 11 15 d6 5a 7c 2f 23 3d 9e 4a a0 b0 db c9 ac 05 b2 32 46 12 da 33 63 f6 97 e1 c6 ee e1 45 bf 23 49 3a dd 0f 52 2e c6 d3 44 dd 84 Data Ascii: 85$=Jy,H<b9{P{{Lh $yf#G6E_eYhYvb!Hj0:JWd3Jd'a8;!v(_\1dX$ T#V8q5E"N[IS}_<!1x` YWF5I#V%?_5sZ\|/#=J2F3cE#I:R.D
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 12 d3 a9 63 62 02 d1 da 00 58 99 d9 bd cc 1a 2b a1 44 1d 8c 91 bc 96 94 c9 3d b6 9e 5a ce ce b6 bb 59 6a dc b1 6b 9d 39 6c c8 cb 0d 69 6e 4b 77 a3 9e 38 a5 91 91 2e dd 92 71 1a b9 4e da 18 ab d8 ad 4a 2b 52 d8 e9 12 bc 52 33 c6 cf 30 e2 d2 90 dd 75 9b 51 4f 66 cb c3 2b f6 30 59 87 b0 96 cb d8 ae f1 a9 a9 66 a4 85 3a de be e4 3d 6d 53 ee 48 60 79 eb f5 22 58 26 f5 88 d5 89 c1 b6 64 dc 68 a0 b0 84 17 5e b5 7d 0b 1d 79 e9 df ee a6 49 7b 04 7e 05 ee b4 8e 67 fd 44 d2 83 2d 97 93 23 45 51 15 e3 5d 3e cd d9 9b af e4 82 e4 20 d8 7e aa ca 1b 15 67 a8 f2 c9 cc 0a e5 cb 41 0a 86 a7 04 98 dd 6c 03 0d 5e 0c 25 d4 6d 33 30 58 e4 38 b5 ac 72 74 94 39 43 bd b9 c5 23 09 7c e2 01 f2 70 10 06 d9 b3 41 47 fb 14 07 69 23 c6 df fa f7 23 9a 26 8a 45 0c ac b2 03 9f 9c d1 04 8d Data Ascii: cbX+D=ZYjk9linKw8.qNJ+RR30uQOf+0Yf:=mSH`y"X&dh^}yI{~gD-#EQ]> ~gAl^%m30X8rt9C#\|pAGi##&E
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: f6 c4 61 8d a5 91 21 95 e6 52 20 8a 44 57 8b 13 b4 94 67 de ac ab 35 d1 34 06 67 e3 d5 5e af 6a 2b b4 2a a4 d2 c0 b1 4b 4a 29 ea 75 f5 27 b0 af 2a 0b 90 ca f5 2a 22 d7 9e 69 6b b3 ac 27 eb 40 90 58 a1 7e d7 63 7a 24 63 6a 2c 8a dc 87 3f f6 db aa 8b b3 9a 34 b1 12 1c ea 61 95 25 64 ab 12 59 af 1c 80 ce 98 1f cc 67 c0 1b c3 c4 e7 15 19 5e 67 2b 42 47 f5 4b 4a 38 ec 44 2c 1c ee 6b 46 6d 34 84 1e bc 8a c6 69 aa 98 9e d8 9c 77 42 ac 56 12 e0 0c d7 21 dc 96 d0 a7 b2 ba d3 fe c2 b7 d7 af 62 4a c2 1b 7c 32 bf a5 40 aa 82 3b 12 bd 66 59 5d 72 4b 01 83 5a 90 24 76 a4 26 66 e6 88 e7 12 43 85 7d 86 bc 42 21 b8 9b 23 16 38 33 3c 99 18 e0 35 28 c5 20 10 64 42 67 2a 1e 56 05 f8 f2 11 aa 98 8b 87 8a 79 e4 35 04 cb 25 c4 8c 4e 74 c6 35 1a 89 77 9a 00 79 d1 d8 03 5a 20 e2 Data Ascii: a!R DWg54g^j+KJ)u'"ik'@X~cz$cj,?4a%dYg^g+BGKJ8D,kFm4iwBV!bJ\|2@;fY]rKZ$v&fC}B!#83<5( dBgVy5%Nt5wyZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	62720	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/008.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:52 GMT Accept-Ranges: bytes Content-Length: 206875 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 31 0c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 32 3a 35 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 1ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:22:50
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 26 04 5d 9d 29 15 75 37 08 3b d1 b6 eb ac 16 b8 d7 5d ae 61 de c6 b5 db 5f 7b 6c f5 18 dd f7 ee c9 f4 7d 4a ff 00 9f f4 ae de ab de ce ad 9e da af a1 b6 98 24 65 60 34 c5 95 b6 9f a5 7e 33 5c 1a ff 00 b2 ec 7f e9 ab 6f f3 9f e8 bf d1 cb eb 67 48 be bf d6 45 0d a5 99 82 bb b2 6a 73 c0 3e ab bd 56 32 f6 d2 1d ea 51 5b 6b 7e e6 d4 f7 d9 ff 00 0f fa 44 7c 1c ac 0a db 55 d0 d1 98 d6 b4 97 87 92 69 6c 06 52 fc 6c 80 77 fa ae b2 96 59 7d bf cd fa df a3 f4 7e 9f a8 c9 40 44 8c d2 1e e7 19 f5 08 c4 71 55 6d ff 00 a1 a0 8a 91 bd 01 e8 13 51 d4 72 30 7a 7b f3 71 58 71 dd e9 39 8d ae db 86 e6 86 7e 91 db aa f4 ef b6 cf f4 d5 ef fb 27 ab 8f 56 fa ff 00 56 a7 f4 97 b2 1b d3 b1 ba 86 5e 47 55 c9 a3 2e cc cc 5a 45 98 62 3d 13 63 45 79 15 b9 be e6 ee df e9 d5 b7 6f e8 ff Data Ascii: &])u7;]a_{l}J$e`4~3\ogHEjs>V2Q[k~D\|UilRlwY}~@DqUmQr0z{qXq9~'VV^GU.ZEb=cEyo
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 61 77 b6 fb 6b d8 d8 73 7d b5 fa 96 b6 af 5a f6 37 e8 31 fe b7 e8 90 db 9d d5 ad bc 13 9d 94 48 0e 20 9b ec 1c 0f a4 cd 8f 55 dd d3 b0 b2 4d 87 28 36 c1 73 fd 66 1c 72 45 8c 0f 6b 25 ef 74 3a 8d ae fe 73 63 fd 4f fa d3 fd 96 db c7 6d 4e 60 f4 f1 df 8e 36 3c 56 36 ee 67 b7 f9 14 4d 8d fa 5f a4 a9 fe 9d e9 0e 73 16 39 1c 72 89 1c 24 c4 c8 01 2d 7f e9 ca 2b 00 27 50 56 bf 3b ab b9 c7 7e 7e 58 68 89 02 fb 07 6f e4 bd 3d 39 fd 62 a0 cf 47 3f 2c 18 12 c6 dd 61 1c 78 17 39 ab 29 f6 e6 f4 dc a0 de a1 60 b7 1f 24 b9 d4 e4 37 5d bf ba ef 4f e9 57 4b d9 b1 fe 87 e6 7f 9e ae e4 75 dc 5e 9c cf b3 50 e3 6d af 68 17 d8 c0 22 b6 b9 9b 5c ca ed 6b fd f7 7b be 9f f8 3f e6 ff 00 4a a7 39 a2 71 71 e3 88 c9 7b 01 d5 55 a9 b2 53 37 3f ab 07 b9 ff 00 6f cb 24 8d 1d f6 8b 04 7f Data Ascii: awks}Z71H UM(6sfrEk%t:scOmN`6<V6gM_s9r$-+'PV;~~Xho=9bG?,ax9)`$7]OWKu^Pmh"\k{?J9qq{US7?o$
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 03 13 1e c6 e3 e4 b1 f7 62 bd af be f6 ba c3 ea 8d a5 af 73 4f a2 ea fd 5a f1 ec db fa 5d fe fd 96 7f a3 5c fd dd 33 a1 51 6e c6 ec 2c a9 df 6a b8 54 f2 01 a2 c6 b1 f5 7a 57 39 96 6f dc df d1 7a 7e b7 e8 aa 7d fe 9d 57 59 6a b2 33 40 4c e2 84 25 c5 20 38 a7 c3 c5 8f fe 97 a5 32 89 bb 3b 5b 74 66 d9 89 fa 06 b9 ad 6b 5b a3 5e 49 20 1f a2 79 f4 dd f4 fd 3f f5 7a a2 eb f2 a9 63 dd 75 ce 35 b3 77 b1 90 0b 5a 3d ce c6 f7 ba cf 59 ee 69 fe 77 fe d3 7f 37 ea 56 b0 9d 9a eb 8b b1 85 4e 38 ad 25 8d 34 82 d7 ec dc e2 c6 9d de ed 8f f6 7e 8f f9 1e a2 83 3a a5 cc 70 75 af 37 8d bb 7d 2b 1c e0 01 67 ef 40 da f6 b5 fb 3d 2f fb e2 64 b9 33 7a 57 88 ad ff 00 ef 58 f2 48 1d b4 7a 3a 2d 65 b9 18 ef 63 cb 69 b5 cc 67 a5 b5 ae 70 24 11 8e fb ec 1e ea 36 4f d1 af d4 ff 00 00 Data Ascii: bsOZ]\3Qn,jTzW9oz~}WYj3@L% 82;[tfk[^I y?zcu5wZ=Yiw7VN8%4~:pu7}+g@=/d3zWXHz:-ecigp$6O
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 57 ec 2b 11 e6 9a 2c b8 9c 78 d6 4a ba 0f 5a c1 43 45 47 f9 1f 60 2b 32 86 78 32 e3 12 15 1d 9e f6 4d 20 4f 04 b9 67 6b 44 d6 25 82 c5 aa 70 fa c3 bd 00 5d 0b d0 ee 19 d6 01 e0 3e 87 e0 7a 23 d2 d3 71 93 b2 41 71 d6 3d 66 fe 4f d4 c5 01 39 47 21 07 26 1e 13 32 95 91 34 01 2b a7 a1 37 bd b2 e6 30 82 75 62 7c 1f da 8f 27 73 c0 ea 96 c6 28 19 d3 12 42 31 50 b4 7c 9a 51 4a fd 72 fe 49 bd 6c 02 4c 11 b2 da a9 24 d3 2e a4 51 83 b3 e7 7b 65 db 64 f1 db 6c a9 57 74 91 a3 73 e6 7d 2a ed 4c 7d 8a 56 78 bd 2a 1c e2 8b ca 70 6b 5a 2f 35 36 6a 04 30 3d 1a d2 57 6b 7e 75 ca 77 9b 66 09 dc d3 1b cc b1 48 75 09 1c 0b 46 c6 00 c1 89 c4 71 19 bf 2a b9 c2 cd f2 f4 c5 ac a6 75 e9 aa 91 98 f6 e5 a7 81 01 84 7d a2 2b a5 68 c7 03 6c 18 e9 4d 10 0b 14 cc 40 1c d8 6a 2f 18 51 d1 Data Ascii: W+,xJZCEG`+2x2M OgkD%p]>z#qAq=fO9G!&24+70ub\|'s(B1P\|QJrIlL$.Q{edlWts}L}VxpkZ/56j0=Wk~uwfHuFq*u}+hlM@j/Q
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: db 3f 1b 18 19 49 70 1b 19 0b 2c 67 c4 7f 88 9d 58 16 18 f2 a8 0f bd 85 d8 e3 ac 3f 81 21 03 47 89 84 30 12 2c 68 b6 4b 60 f0 ce c1 d5 54 ed 19 72 75 1a af 21 38 51 58 f0 00 eb 1f 65 58 10 54 1d a2 ef 04 5e 5e 00 19 c7 84 de 30 c3 9e 31 34 44 b2 27 16 ff 00 d0 21 1c 46 80 2c 37 24 68 41 19 19 1a 3f f5 72 c7 11 f5 9e d2 a0 b9 21 0b 6d 89 e1 ec 91 32 36 da 99 7f 64 75 25 48 20 eb 6d bc 28 09 08 06 4a e5 b3 f4 39 a8 d5 a5 39 10 0d 81 01 66 88 68 21 d2 ba f1 1b c5 de 1d 0c 8c ec 70 53 81 46 16 09 88 ea 4c b2 79 0d bc 88 8d 49 f8 7d 83 ac 3a d6 c9 56 55 39 c1 40 d6 b0 ae b0 1d c6 74 b9 ec f2 a4 10 49 e2 a8 87 18 1d 46 e0 33 c8 03 b3 29 0a e8 32 59 19 b1 86 0c 8e 42 0b be 81 72 4e 3b 61 8c e8 02 8c 4a be 2e c1 42 41 f1 9a 20 4a 4a 0d 73 c4 77 5c 0e 64 55 7d af Data Ascii: ?Ip,gX?!G0,hK`Tru!8QXeXT^^014D'!F,7$hA?r!m26du%H m(J99fh!pSFLyI}:VU9@tIF3)2YBrN;aJ.BA JJsw\dU}
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ac b0 87 9d 94 ac 91 15 97 c8 8a 34 6b f6 53 af eb 72 c4 11 fa 20 eb e6 78 a2 86 52 cb 35 9a d6 aa 5e fb 4b 52 67 b5 0f 69 4d 95 8a 95 62 47 1a 56 c4 98 85 56 3b d7 0c ec 14 6f 8f 92 30 ae 8a c6 e7 16 07 70 51 c6 02 32 0b 4f 0a ac f2 b3 c4 b5 ea 2f 2b 10 bd 5e b6 79 ed 35 08 61 eb ec bf 18 21 ec 56 af 5e 6e de f5 c7 66 25 92 d4 75 d6 34 87 ee d7 ab d7 4f 60 41 d5 26 41 5e ac 2d 25 94 af 1c e0 c8 d0 2f 1b 9a 40 1e 3c bf 21 55 35 c1 c5 ff 00 c9 68 32 89 6d 7d 1e 52 db 92 ad 2a b7 ac cf 27 61 5e fd c8 20 eb 6e 45 61 ea 76 f5 de 53 2b b2 96 88 2b e8 57 ea fd a2 f2 bd 5b 95 0c 72 ad df 52 cf d7 23 bd 79 80 33 58 11 8c 61 a0 ea e7 28 fe a6 25 ac 98 b6 60 c3 34 6c c1 55 da d5 e5 ad 8a 24 b1 24 51 30 ce d1 1d 6d 98 9c 86 54 19 d2 bb a2 76 f3 34 36 2a d2 47 6b d3 Data Ascii: 4kSr xR5^KRgiMbGVV;o0pQ2O/+^y5a!V^nf%u4O`A&A^-%/@<!U5h2m}R'a^ nEavS++W[rR#y3Xa(%`4lU$$Q0mTv46Gk
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 09 a7 2a f1 ba 22 8c 16 66 11 4d 35 8b 19 29 af 0c 10 fb 5a 46 1b 6d 1d 45 03 49 8f 13 21 e6 42 af 10 28 4a c9 6a eb 10 ad 35 2b 6f d7 48 62 bf 7e 46 af 56 42 cb 0c 77 a2 48 e4 75 9a 5e 90 c8 6d 32 5e ca af 3d c9 1f ae 05 2a 75 f2 fb 64 a3 03 21 86 79 ef 58 e8 65 96 2e da 9d 84 97 a3 85 2c cb 24 32 a4 df e3 aa b2 d9 ea 84 36 62 48 91 3b 5a 35 ec d5 ec 5c 41 6a 9a 5e b1 1c b0 c9 92 47 bc 24 93 fd 9c 5d f2 71 b2 3c 8e 3a 1a 38 17 00 d6 0d 1c 84 03 2f 32 23 ae ec eb 1a aa d7 92 29 55 a0 5b 2b 8d 73 9c 73 4a 48 3b 39 ac 19 ac d1 1f 1a c0 32 1a f2 4c 6a 2c f0 dd a7 7e b4 52 cf 6e cc b8 61 69 eb c7 05 98 cd 8e aa cc 76 69 75 50 ab b5 56 af 60 de b0 99 52 0e ba db cd 7e 9c 11 f6 95 ea 45 94 6d 49 00 92 ad 83 0f 59 6c 49 67 b1 b9 3b 65 c8 ee c9 23 21 52 17 02 e7 Data Ascii: "fM5)ZFmEI!B(Jj5+oHb~FVBwHu^m2^=ud!yXe.,$26bH;Z5\Aj^G$]q<:8/2#)U[+ssJH;92Lj,~RnaiviuPV`R~EmIYlIg;e#!R
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 18 66 49 44 5c 5a 64 f5 34 ab 04 e9 2b c4 b5 de e9 59 0c 6c 54 c9 04 fb f7 c3 5a 64 04 09 1d 5f 1a 56 2a 90 bb 9a b1 45 56 28 cd 7b 6f 3d 13 36 59 af 6a 9c 7d 15 48 ad b4 b4 24 a8 f5 ef 85 ec 24 d8 4b c2 79 52 75 db 50 95 72 fb 2c d6 9b 90 ca ee 16 62 97 dd e0 b8 63 b1 73 ae b4 8d e9 98 c7 4a eb 52 9a 4f f6 0e b4 63 ff 00 b0 f5 cc bd 95 ea d6 f2 05 42 20 8c f2 8a 25 e3 de 41 23 5c 5a f1 0a 2c 1c 62 1e 21 ca 91 46 ac 2d 2d 3a 29 5e b5 a6 48 0d f8 3e b3 75 73 92 fd 84 c7 e9 1b 7a ae bd bd 49 14 41 66 c4 e9 21 69 6d 3b c6 29 3b 49 1d 56 9e 35 92 48 c1 69 90 b3 40 be ed 13 10 40 d1 5a 95 6c 3c d2 ce 8d 49 38 ca d3 99 ab a4 50 89 aa 2c 51 47 34 af ed 66 31 97 96 19 2d 4f 34 09 34 d3 24 f1 f5 91 21 b7 72 85 aa cb 4a eb d4 af 1f 67 66 c3 a5 f9 56 58 ae c6 cf 67 Data Ascii: fID\Zd4+YlTZd_V*EV({o=6Yj}H$$KyRuPr,bcsJROcB %A#\Z,b!F--:)^H>uszIAf!im;);IV5Hi@@Zl<I8P,QG4f1-O44$!rJgfVXg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	62721	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/009.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:53 GMT Accept-Ranges: bytes Content-Length: 96144 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7958	IN	Data Raw: ff d8 ff e1 1b fc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 33 3a 31 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:23:17
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 Data Ascii: WhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&?8BIM8BIM8BIM8BIM8BIM'
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d6 f4 d2 36 3a ca b6 3a 5d af 00 f0 4f d1 73 5b fb cd 51 2d 2e 0d 6b 4b 43 bf 37 58 1f d5 73 a4 ff 00 9e 93 ab 7d 4c 3b 5c db 09 d4 9a 8c e9 f9 fb bf 39 3c 01 a0 ea 8d fc d7 05 81 9b 9b f4 83 4f bb b1 8f e4 15 01 16 ed aa c2 58 d7 96 b6 47 03 5f fa 09 cb ef 7d b0 e6 41 2d d4 d9 ed 00 0e 3e 9f fd f5 49 cc a5 9b 80 87 98 8d ce 76 9a ff 00 a2 6b 7e 8e df de b7 fe db 4e 14 0e a4 7d 53 42 ab 6f 24 f6 5b 53 dc 40 96 35 83 65 60 99 24 34 46 f7 68 9c bd cc 60 a8 fa 66 5b c0 00 bb 5f cd 75 91 ff 00 43 72 01 75 9b 0f b4 49 03 e8 9e 3f 76 7f 39 2d f2 f9 6b 7c 86 84 6b f9 bb 53 38 45 77 5c 3c 13 32 c6 b6 5e 09 92 c0 d6 81 02 07 f2 9b f4 5d f9 be d4 0b 5c f6 39 8c 74 6e 03 b7 07 f3 bd bf bd f4 93 97 3d ac 3b 40 21 de 00 90 08 fa 3f 47 f3 93 ee 78 6b 4d 80 b8 6a 2b d3 Data Ascii: 6::]Os[Q-.kKC7Xs}L;\9<OXG_}A->Ivk~N}SBo$[S@5e`$4Fh`f[_uCruI?v9-k\|kS8Ew\<2^]\9tn=;@!?GxkMj+
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 47 66 ba 72 4f a1 73 97 8b 1e ce 2e 9e 45 fa 99 7a b5 c8 75 bf 2c e1 ae cc 4e 4b dd f4 b8 46 eb ac e0 d3 a9 e6 70 be de 68 27 bb 3e f8 e2 af 43 3b 79 36 b8 4a 5b 3d ce 79 df 97 74 bc f6 d4 cc 5d 07 3b ec c6 39 df 56 7a 9c f5 d3 56 70 be b2 b8 8e b9 d6 79 b5 d2 ce 7c ba e2 b9 4d 56 e6 6f a9 e5 c8 ba b1 d4 cd 56 ba 99 ba ac a3 79 8c df 44 f3 df 97 a7 79 c0 ce f3 85 db da f8 83 b5 f1 15 da f8 99 d8 f8 c3 b0 e4 76 f5 9c a1 d4 73 33 a1 62 eb 59 81 69 c2 cd d7 36 78 c5 4d 78 2d 54 d7 3c d3 97 cf 34 27 88 b5 ce bb ce b1 3f d5 f9 cc 37 e5 f9 fb 49 3f 81 d4 8b 33 73 5a 45 d6 31 b4 6f a6 6a ce b5 5b 7f 57 2a 2d fa 03 6f 79 4c 68 00 36 89 14 d9 87 2d ee 62 e7 ac 9a 8d 09 6b 9f 63 2c 34 b3 37 3a a4 8e a0 a3 3d 0c 5e 6e 90 80 0b 18 88 ac 35 17 25 b9 5c cf 70 79 da 93 Data Ascii: GfrOs.Ezu,NKFph'>C;y6J[=yt];9VzVpy\|MVoVyDyvs3bYi6xMx-T<4'?7I?3sZE1oj[W*-oyLh6-bkc,47:=^n5%\py
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: b6 9c 35 56 0c 3e cb 62 99 1d 74 32 cc 10 19 9f 3b c9 18 0e 22 bd 2e 5c 21 4c f8 d2 00 16 12 23 05 61 c5 44 f6 ce 42 30 53 2c 09 c8 4b 5b e6 27 c9 0e a2 7c 83 f3 a9 52 a5 4e 22 70 10 e6 21 ce 14 33 8b 41 ce 1c d5 86 dd 24 20 e5 ae 67 2e ab e8 53 a5 8a 8f 83 11 0e 59 cf 85 22 e6 04 0a d3 8b 4e 0d 38 19 f1 99 f1 cf 8a 7c 33 e1 9f 04 fe 79 fc d3 f9 a7 f2 cf e4 9f c8 67 f1 99 fc 66 7f 1b 4f e3 69 fc 6f 3f 91 ff 00 cd 50 88 44 a8 25 42 b0 2c 22 11 2a 05 80 4a 95 2b ff 00 07 50 89 52 e5 cb f4 a8 04 af fc 49 12 bd 6a 57 fe 36 bf fd 21 5f fe 1a 1b fd 13 e9 72 ff 00 dc 28 2b c8 97 2b ff 00 1d 50 89 66 03 fe 5a 84 89 e2 57 fb 9e 25 cb 94 6a 8c 04 c0 47 f8 fc cb 9e 0c a1 2f fd 4b fc ca dc e1 52 e7 2a 9f a9 7e 00 12 8c b3 39 7f 87 94 e2 4c f2 0c f3 fe d2 e4 cc 34 c9 Data Ascii: 5V>bt2;".\!L#aDB0S,K['\|RN"p!3A$ g.SY"N8\|3ygfOio?PD%B,"J+PRIjW6!_r(++PfZW%jG/KR~9L4
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: ca 58 32 8c f1 39 4b 96 67 29 62 ef c9 33 90 84 a9 94 21 ce e0 49 c5 81 2d a0 9e e8 6a 72 5a 1c 4c 20 08 50 93 46 7e a1 26 13 73 f9 32 d1 0f 5f b5 cd db 6c f1 4c f0 d3 46 ea a1 cd 7a fa 61 86 dd 9c f3 6e b6 de 34 d7 25 1f 2e 80 8d 33 23 0e d3 e3 3a dd d1 a1 cf b6 43 27 63 a8 ea ca ac a4 84 00 82 00 79 6b 38 a9 87 28 51 c4 f3 e8 2a 50 95 28 c2 27 88 4b 89 c9 a0 64 80 a4 b6 10 3d c2 72 30 e6 b0 a1 13 de 42 b3 08 34 13 96 66 1e 16 48 9c 9a 72 33 f7 38 ac f0 27 ee 79 9e 67 ea 17 13 90 13 90 97 08 06 15 15 c4 df ba 02 7d 2f c7 29 73 d8 61 02 10 d0 dc a3 01 26 01 0f 29 64 0e 4d 2c 09 c8 4b 4a 1c 49 f1 74 44 f1 04 f7 19 ee 87 8c 25 4c e2 09 fd 42 fe 2d 4c f6 ce 22 7c ec f3 3e de 61 53 b5 f2 b9 6c f3 9a eb 9b 68 49 d9 5f 2e 91 24 fd 6a 23 3e 5a 4d fa da 2b 36 64 Data Ascii: X29Kg)b3!I-jrZL PF~&s2_lLFzan4%.3#:C'cyk8(Q*P('Kd=r0B4fHr38'yg}/)sa&)dM,KJItD%LB-L"\|>aSlhI_.$j#>ZM+6d
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 59 f5 7c 57 34 d3 a7 86 81 d0 ac cf 30 c0 be 28 32 ed 32 96 e5 a0 a5 31 09 4c db 24 d2 7c 4a 19 87 19 99 5e 05 b2 e4 e7 99 f8 90 93 8f b3 89 04 30 58 ac 03 b6 96 d6 5c b9 f0 ed c9 8f 91 40 80 48 80 da 91 32 4e 6e 5d 91 1b 42 61 6a 85 da be 43 6d b1 68 ec af 1b 14 a3 3c 08 3c ce 44 13 1a c1 0d 17 c8 05 4c 1a 28 1e c2 09 04 30 52 39 71 99 75 46 71 32 e5 3b 1b 65 86 4f b6 ba 40 00 94 60 15 13 b7 a0 5d 35 ec 28 cf b6 ba 2b f4 f0 75 66 6b 0c 6b 2d 98 37 f7 77 1a 61 f6 a9 fc dd ad ba 8e ec 09 99 e8 04 47 40 ac de 41 b3 c4 00 68 47 5c 78 71 b9 ee 13 f7 28 10 ae 55 5b 3c 48 dd 80 89 a1 01 d9 9b 20 a9 c8 b0 44 dc a3 e5 cb 20 d8 6f 8e 39 65 f6 a4 6a df 61 d2 cd b6 fb cc 04 cb b7 dc ec 69 f6 00 26 aa a1 97 0c 79 b9 e9 1e 00 3a a9 2d c5 57 dd a6 8c c0 33 07 cd 55 55 Data Ascii: Y\|W40(221L$\|J^0X\@H2Nn]BajCmh<<DL(0R9quFq2;eO@`]5(+ufkk-7waG@AhG\xq(U[<H D o9ejai&y:-W3UU
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 85 6e 32 b1 85 34 b5 69 e6 82 96 2c ac 33 46 35 62 6b 91 70 b9 d4 66 21 93 36 8a de e5 d0 f2 2c 90 b1 00 95 65 70 a1 95 a9 79 13 03 5b 3f 80 ca c5 73 0a c1 a9 08 3c db 87 10 58 c7 25 0e 4a 58 aa 8b 61 43 22 0b fc c7 96 db 26 83 1d 59 03 76 0e a8 ec 28 5b 40 a4 30 52 0a d1 3c da 5f 8e 44 c4 59 c6 50 84 89 44 c0 c0 43 50 b1 00 30 bb 51 2f de 98 9d 22 f5 73 0a db e5 9c 3a 68 d0 2c e6 82 73 7d 08 5a 00 ac 6d 49 4e 4b 15 89 63 62 5d a5 f9 b2 43 34 24 98 be e6 36 a4 38 8c c4 80 68 92 28 29 63 f1 aa 95 66 13 e5 34 73 b9 8d ac d6 98 2f 55 94 f3 20 97 89 74 da 1a e7 70 31 a0 58 29 ab 1c 56 78 01 b3 c9 88 c9 09 50 82 3f 95 21 81 19 e8 40 c9 80 6e 09 09 51 0b 1b e4 01 1a da 0e 2e 09 02 12 08 75 b2 ce 61 33 13 ee d5 bc 72 26 2d 2c 57 40 78 00 41 6a 3c 44 26 c8 6e 28 Data Ascii: n24i,3F5bkpf!6,epy[?s<X%JXaC"&Yv([@0R<_DYPDCP0Q/"s:h,s}ZmINKcb]C4$68h()cf4s/U tp1X)VxP?!@nQ.ua3r&-,W@xAj<D&n(
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 70 e5 42 53 d4 90 cd 46 c0 9f d0 44 19 00 7c d0 04 54 e8 72 c8 bb 9b 27 94 5c d2 b8 a0 03 b5 96 76 19 c0 a9 0a 2f 13 28 8f 2a 8b 3f 29 71 55 1d 3c a0 89 17 24 ac b9 85 f8 8e c4 e0 b8 b0 74 d2 89 7c 0b a2 01 b2 ba 61 52 68 57 ce f5 28 19 39 d2 b9 80 91 8f bb dd a1 a9 f0 f3 22 36 79 5a 7e d4 ff 00 68 84 75 43 13 71 fa 92 e7 59 f4 24 f1 f3 3b 25 65 d7 d3 3a 58 66 35 87 be 84 a2 5c 1b 1c 15 0b ab aa 15 50 55 45 d5 0a c1 59 51 54 38 dc ab 19 00 6e c8 66 a1 f0 ba e0 2f b8 5d 31 a2 a2 b3 aa d0 6c 08 02 ec 98 87 54 0c ae eb f1 f4 55 6c d9 d1 8a ba 7b a6 15 5b 15 ca ba 18 aa f4 5f c4 af d3 f4 f4 59 3a 1f 3a da a8 28 9d 1c 15 9d 5b c2 ac 98 8b a7 b2 a1 21 36 62 a8 68 83 55 54 27 6f c3 da 56 61 b5 50 bf 81 39 be f4 f7 7d c8 37 85 62 3a 8a b9 03 7a bd 36 84 e2 a8 77 Data Ascii: pBSFD\|Tr'\v/(*?)qU<$t\|aRhW(9"6yZ~huCqY$;%e:Xf5\PUEYQT8nf/]1lTUl{[_Y::([!6bhUT'oVaP9}7b:z6w
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1a bf 0d 9a 30 68 48 87 19 bf dc 47 2c 5a 3d 97 24 df b3 ec 26 00 16 b7 ea ac b1 e0 12 ab 9b 65 e6 cc b2 c5 8e a4 af 91 ac 88 94 73 6a 07 12 11 34 71 e6 ac b0 02 2f 43 01 5b 7e 7a 3a 52 8f 05 c0 df ce 9a 19 22 ce d2 ad bc f8 a3 1e f0 97 2e cd cc 7c e4 40 96 60 c0 01 ba 3c 91 c8 80 91 63 5f 57 dd 51 62 0c 8f 0f 80 28 e8 6a e9 ce 7a 71 2e 78 be ec c8 f3 6a 6b 7c 37 ef 10 e0 8e a6 98 a0 94 38 48 1e a2 fb 8d 5c b3 f3 4d 0a cb ab a4 35 b4 fc e8 f3 2c 82 5d dc ec 61 20 d2 4f 09 09 6f 1c 4d ee a3 51 27 f0 27 ca e7 72 ac 2b 81 3c 5f 55 56 3e 25 96 23 c5 4f b2 9a 46 be 68 0a b4 7b 3d fe aa 66 24 9d 89 9a bb 07 1c be aa 72 18 f8 be ca a1 1b d5 03 9f 20 5c 21 e5 b5 31 1f 42 bb 05 4b 6e fd 45 81 dd 65 5a 79 55 46 65 c4 e3 72 e0 97 e2 5f 4a bb 95 43 e3 56 a6 f5 b1 30 Data Ascii: 0hHG,Z=$&esj4q/C[~z:R".\|@`<c_WQb(jzq.xjk\|78H\M5,]a OoMQ''r+<_UV>%#OFh{=f$r \!1BKnEeZyUFer_JCV0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	62722	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/010.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:55 GMT Accept-Ranges: bytes Content-Length: 156123 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 25 f7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 33 3a 34 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: %ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:23:48
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: e9 f4 be 8f d2 f1 9f e9 65 be c3 4d ae 0e 7d fb cf b3 f7 df e8 b5 ac a9 fb db ec fd 37 aa ca eb ff 00 07 62 d0 eb 9d 29 d8 79 75 52 1f 69 c7 b9 9e 8e 2b 44 bd fb 9c ed e7 6b 9c df 4f e8 1f f8 bf 4a aa 2a a3 ed 2a 86 3e 4b 72 bd 16 d4 df b5 be d6 07 b5 ac 90 eb 03 7e 9f e8 2b 0e 7f e9 3e 85 bb 7f 99 5a f9 1d 53 26 ca 86 27 51 6e 2e 33 89 24 b6 d7 bb 70 8d a4 fa 74 63 39 f9 18 d7 7b db f9 f4 29 33 e2 89 94 64 00 f4 dd 48 9f 93 8b d3 c5 10 ac 72 f4 91 23 5f 4d fe af 29 5d 15 5d d4 0f 4c 65 c0 0b 81 b1 af 7b 5c d7 12 39 f6 3b f9 af 6b 7f 99 d9 fe 09 6c e2 f5 11 5f 4c 7b 6b 19 59 2f c0 69 19 15 e3 bd b5 d2 c6 c9 fd 25 8e 6d 36 df ea 7f dc 8b 1f 6a cf c8 b7 a6 f5 bb 89 cc 7b ab 0d 68 db 95 b8 5a fd 8e 01 bb 6f 91 4b ed 7e df ce f5 2c ff 00 05 fa 45 0a 73 2c e9 Data Ascii: eM}7b)yuRi+DkOJ**>Kr~+>ZS&'Qn.3$ptc9{)3dHr#_M)]]Le{\9;kl_L{kY/i%m6j{hZoK~,Es,
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: f4 54 e1 3e 8b 1a 6b 0e 13 1e f7 bf df 6f bb fd 23 b6 2a 2c cb c4 fb 3b a9 7d 4c 16 ee 0e 65 87 57 88 1f 98 ed 36 ee fe aa d6 b9 b8 fd 66 8a 6a b2 c6 e2 be 86 16 d1 e8 b8 58 f3 b4 cb db 77 aa 2a 7b bd 8f f6 fb 94 6a e8 34 8c 1c ba 6f c8 ae 1a f7 56 db 80 0c ac 5a d0 d7 b9 96 6f dd 77 aa df 6f da 19 57 ab 67 e6 7f 83 51 7b f1 e0 07 20 31 97 14 6e 31 97 11 f5 7c 87 d1 f3 7f 75 70 c7 22 6e 3e a1 5b 97 3a be a3 9d 6e 3d 9b ad 6d 65 a1 ad 73 9d bb de 64 7a 7f cd ee 7d 9e 9b 5b b7 6b bf 46 b4 f1 ee ca a2 db 6a 75 be ad b9 14 91 65 b9 95 91 bd 85 bb 03 31 36 7e 96 a6 6d 77 b3 fc 12 c0 b8 d7 45 ed af 18 3e 82 d2 1a c0 09 b0 39 d0 d9 d9 b8 33 e9 4f ee ad 4b 7a 67 53 be 90 6c c8 aa ab 5c 1a d6 d3 61 77 a8 e8 d0 c1 a5 b6 b2 bf 6f f8 25 24 f9 61 3a 02 03 86 b5 f4 eb Data Ascii: T>ko#,;}LeW6fjXw{j4oVZowoWgQ{ 1n1\|up"n>[:n=mesdz}[kFjue16~mwE>93OKzgSl\awo%$a:
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 34 34 38 2d 62 37 62 66 2d 64 38 61 39 37 32 62 33 62 37 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 39 64 64 62 33 30 63 2d 62 66 32 66 2d 63 35 34 64 2d 61 62 35 36 2d 39 30 34 30 64 34 30 33 63 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 63 66 65 37 63 31 2d 31 65 31 33 2d 35 32 34 64 2d 39 39 39 30 2d 33 38 31 66 62 31 31 33 61 36 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 63 63 35 63 38 65 33 2d 39 34 64 39 2d 64 32 34 34 2d 39 62 61 31 2d 62 36 65 62 36 34 66 65 39 38 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 65 36 31 38 33 62 34 2d 62 30 65 31 2d 61 33 34 39 2d 39 66 33 Data Ascii: 448-b7bf-d8a972b3b7e5</rdf:li> <rdf:li>xmp.did:19ddb30c-bf2f-c54d-ab56-9040d403c492</rdf:li> <rdf:li>xmp.did:36cfe7c1-1e13-524d-9990-381fb113a6be</rdf:li> <rdf:li>xmp.did:4cc5c8e3-94d9-d244-9ba1-b6eb64fe983f</rdf:li> <rdf:li>xmp.did:4e6183b4-b0e1-a349-9f3
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: d7 33 17 93 a3 f6 f0 ba 3a 74 71 6b 57 9f 64 39 c7 6e 5b 8e 7a 79 4e 67 a6 4e 77 e7 f3 ee bf 5f 2c da 94 07 a3 e5 b3 07 9f a3 16 0e ed cd 99 cc 64 46 d4 b6 ba e4 55 ea e5 4a b8 59 2d 63 04 58 12 ca c1 bb b1 6c 62 c6 da 40 75 21 83 09 54 58 5c 41 a6 d1 22 ca 8a a8 e0 48 68 32 5d 10 5a a0 aa e8 22 4d 86 35 60 9c 48 c8 30 b9 1e a3 1a 50 a6 68 d3 34 97 65 93 57 0e b1 ab ae 7f 33 2e 8f 2a ef 9c cf bf 17 43 1a 6e 9c 6d f3 eb 46 77 65 32 33 01 fb 39 bd 2e 3c dd cd e3 27 9e ba 23 81 9d 33 b4 50 15 5a f0 1d 77 8f 8e 9f 3f 5d 5c ed d8 fb f3 d5 d1 e5 68 e4 b0 0d f6 f0 99 a7 3f 7c 5d 80 57 4f 36 3b cb ba ac 1d 0e 1b 99 ba 28 94 9b 99 bc d2 32 fe af 98 6e ea a0 5b 04 9b 00 38 a1 1b 74 a4 97 4b b5 d6 b8 39 30 d0 2d d0 51 96 73 40 e5 31 ca b7 42 09 ab a3 99 99 0d 02 31 Data Ascii: 3:tqkWd9n[zyNgNw_,dFUJY-cXlb@u!TX\A"Hh2]Z"M5`H0Ph4eW3.*CnmFwe239.<'#3PZw?]\h?\|]WO6;(2n[8tK90-Qs@1B1
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 3f 66 f1 14 78 5a e0 ff 00 b0 13 58 17 10 ff 00 02 d3 6f a3 79 8d 4e 5a d4 f3 a9 d8 5c 86 1b 49 2a ca 22 2e 0a d9 b4 74 d8 5c 84 58 e4 b1 ac 10 47 93 5d 6a 14 ae 63 ba a0 5b d0 ca ba 05 93 04 cd 20 1e 3c 00 6d 41 0e 0c 39 00 93 19 41 88 75 21 84 27 24 cc 46 52 67 a9 b1 ae 25 96 38 35 dc a4 25 88 c7 e9 91 09 13 69 98 56 60 7d 04 2a 4c 7a 4e cd 43 c2 09 8b cc fa d6 19 65 6c 08 ac 13 06 d9 64 2c 6b a8 67 d6 cb 39 eb 55 0a 44 62 40 b0 92 fa 1d b9 90 a1 53 9f ad 8f 93 89 5b 91 01 10 95 8c 57 26 2d 9a 41 62 19 b0 95 06 c8 00 42 09 98 31 d3 68 d5 fe 28 96 29 4b 9c 4d 95 86 3e b9 99 fa 01 35 02 17 9e 44 c8 33 08 b1 db 63 88 b8 11 19 60 71 08 c4 20 e4 02 65 8a c6 57 95 60 ea 63 28 24 31 36 2a e2 7d a6 65 8f 88 41 fa 11 14 b0 8c 5a 16 68 18 e7 20 cc 64 d4 be 12 00 Data Ascii: ?fxZXoyNZ\I".t\XG]jc[ <mA9Au!'$FRg%85%iV`}LzNCeld,kg9UDb@S[W&-AbB1h()KM>5D3c`q eW`c($16*}eAZh d
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: af 32 e7 d0 90 51 51 82 b5 58 06 b3 0b b6 50 8f 20 57 86 15 2d 20 f5 1b 39 db f6 2c 60 5b 27 c9 83 24 31 22 5d c9 ed 7b 79 42 c3 5b 06 2e c6 20 0c 2d 04 aa 52 d6 2d 7c f6 a4 af a7 d7 29 ed 6a e5 b7 73 ca a9 e7 72 29 6e 45 4e 53 62 37 20 34 93 cd ec a3 a2 aa 6d ea 14 f4 22 b3 b5 1d 15 25 d5 53 cc 6c bb ba aa a8 6e 35 57 6e 7a dd 87 c8 bd 89 42 06 07 4b cc ab f0 87 57 8d 5a 10 50 4d 00 81 4c d4 08 14 98 54 42 44 c6 15 b6 23 00 42 09 81 32 32 19 9a a7 53 ea b0 c4 5a 41 36 52 a0 f6 28 07 a6 97 26 da b6 16 58 c7 fc b2 bb 0d 72 cb 03 90 32 00 c4 1a eb e7 27 cb 31 02 1c cd 86 4b 2c f6 03 05 93 71 8c 9c 2a b1 82 bb 58 35 2d 16 96 d9 68 61 3d 49 9d 26 b6 60 a3 e4 0c 4d 50 37 e3 97 6f 03 19 24 18 3c 0c 86 98 cc d4 e0 97 11 48 24 ae 22 d8 e2 27 59 49 e9 e3 b0 b7 1a Data Ascii: 2QQXP W- 9,`['$1"]{yB[. -R-\|)jsr)nENSb7 4m"%Sln5WnzBKWZPMLTBD#B22SZA6R(&Xr2'1K,q*X5-ha=I&`MP7o$<H$"'YI
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: fb 28 07 fe cd 91 28 38 09 50 86 ea 84 4b 7a ed 96 21 ac a7 c8 54 2a 7e 85 bd 58 fe bc b3 a2 da cf 2d b4 97 3d 54 88 ea dd 36 dc 29 6a af 45 d8 bb 61 89 22 ae 47 e9 b9 92 ea 2b b7 41 2b ab a0 be 40 3e d6 ca 85 db a2 ce ca 5b a3 96 b1 d0 d6 1c da e3 54 60 57 5d c8 e6 f5 80 ee f5 65 d0 5f 5b a5 8c 00 08 8d 30 65 b6 28 44 22 0b 8d 87 d9 43 73 0b ed 6a 95 32 a2 ab c5 15 de 6b 5e ab 23 35 97 0f 59 03 72 23 12 c5 54 56 96 58 5c a9 54 5d 57 27 39 0e 04 56 71 11 5a e8 9c 08 0d d5 0a ac 54 75 b6 e6 66 52 e6 53 94 a8 bb 69 6d 2c 01 4b 43 52 da 96 bd ca 58 75 28 e0 14 38 53 de 04 3d 3d 76 41 51 c9 57 30 2d d1 b9 af 2a 3f 42 b0 b7 81 2c 6e 8b 9d d3 ac 84 ae b3 0d 38 0c fc d5 aa db 59 3f b7 d2 d0 f2 db 60 af 9e b5 81 6b 43 bd 8a 2c b6 95 8d 77 95 46 68 94 a9 9e a5 ac Data Ascii: ((8PKz!T~X-=T6)jEa"G+A+@>[T`W]e_[0e(D"Csj2k^#5Yr#TVX\T]W'9VqZTufRSim,KCRXu(8S==vAQW0-?B,n8Y?`kC,wFh
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 09 ec 75 29 87 03 20 f0 f3 fe cd 8e e7 3b 36 bb 90 77 56 80 80 7c 65 40 cb df 4a 8a fe 46 b4 4b eb a0 c5 b7 fc d5 db eb ac f4 55 68 e2 15 15 fd 91 5f 45 bc c3 7b 2e 4f 60 74 08 7a 28 6b 7b 7a 19 69 0e 19 59 91 9a 9a 8d a7 9f 9a ba 6d ff 00 63 d5 1b bb b4 cd 7a fa 9e 9f 8e a6 a2 97 25 50 7e c0 5f c8 b5 36 e2 1b 41 94 10 c3 46 d7 ce 9d 03 a6 ab 18 79 fd 3a c8 6e 24 58 a0 88 f9 c9 d9 5f 0c ce 8c ca 54 cf 04 31 13 26 60 99 5d 36 da 6b e3 a6 a8 cf 61 03 51 3c 67 cc f3 82 c6 17 69 ed 71 39 78 7b 6e 5a eb 4e 65 c9 03 20 8c 09 e7 5e 8a 98 aa 75 b2 c3 70 36 75 f7 dd ce 12 cb af af 22 55 b7 af b0 07 f8 ca 8b ea 2c b0 07 b2 36 55 29 3a f3 5a f4 b8 4b 55 6a a9 af 36 d5 d2 04 be c1 ce ff 00 2c e7 a6 d3 80 4e 84 2a ad 67 a3 45 1c f6 1b 66 32 1d 40 18 19 a8 8c d3 53 5c Data Ascii: u) ;6wV\|e@JFKUh_E{.O`tz(k{ziYmcz%P~_6AFy:n$X_T1&`]6kaQ<giq9x{nZNe ^up6u"U,6U):ZKUj6,N*gEf2@S\
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 71 75 bd 68 01 aa 2c b4 9b 4f e5 51 61 59 69 94 50 05 ee dd 97 76 5f eb 4e 6b 70 1e 1f e9 ed 50 22 c3 f7 3b bb aa 41 ac 96 9b bf e4 44 c8 69 6b 63 14 e7 42 b6 04 fb 65 a9 31 22 f4 f3 22 31 55 a0 54 4e 45 d5 e1 e4 4e 0e af fb 72 de 5a bc 57 47 56 fa 12 84 75 c8 35 ca b9 76 70 a6 1c 49 8f 5a a2 aa e5 f5 aa 6e a7 1b 34 55 42 db b4 ea ef 20 23 6e 91 74 ae de f0 a7 8c 67 19 80 aa 33 ad c8 5c 1d 9e d8 22 06 ee 7a 77 7c c8 57 bb fe 84 f0 31 ce 28 47 8e de 1d d4 d1 37 5d bd 76 ab a2 b3 b7 4d bf 2f 95 5a 4b 5d 1f fc 77 a0 01 d4 e3 74 72 a0 e2 de 69 27 4d 83 8d 5e c5 57 f2 ea 54 6e 6c 4c 88 d5 c5 77 77 71 53 07 34 54 1f 7a aa c9 d3 c9 16 6b 4f 22 10 86 88 35 d3 99 df ee 27 15 75 f9 42 dd fe 29 db 1d 21 6a 47 d4 98 53 d6 ab b4 41 0b 2b 62 58 55 38 d5 e1 44 f0 c5 95 Data Ascii: quh,OQaYiPv_NkpP";ADikcBe1""1UTNENrZWGVu5vpIZn4UB #ntg3\"zw\|W1(G7]vM/ZK]wtri'M^WTnlLwwqS4TzkO"5'uB)!jGSA+bXU8D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	62723	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	733	OUT	GET /wp-content/uploads/2022/07/hotel-06-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:27 GMT Accept-Ranges: bytes Content-Length: 134484 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 1a a3 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 35 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:25:44
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 01 38 42 49 4d 04 02 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 02 01 01 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 02 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 44 00 00 00 00 00 10 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 Data Ascii: 8BIMp8BIM8BIM8BIM08BIM-8BIM@@8BIMD@@8BIM
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d Data Ascii: 2/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elem
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 5b 87 80 e6 05 a3 14 f2 64 b9 11 c6 46 d6 41 19 7a 39 de 83 48 7e 06 de 44 57 a6 14 39 5f 9b 84 eb 6b c9 99 ab 96 6a 34 ec a5 ac d9 bb 87 a5 b0 27 c9 6d a5 9a 19 bd 2b 99 32 de a8 65 c3 7a 81 9e d4 df 15 a6 6a c8 07 01 21 d8 b0 52 45 b7 e7 9b 1f 7b 26 b5 c0 36 b5 62 a7 d8 ce 89 7b 6b 1c b6 58 a5 cd df ac e5 e7 a5 4b 10 5a 1c ec 7d 8b 47 a8 a3 c1 bc 1c 3b 69 57 a5 38 64 37 69 3f 34 e9 87 6f b5 70 b3 d5 4a 07 cb 11 c4 29 cf 1a 45 04 22 36 47 08 71 f2 86 d5 8f 01 f0 cb 09 06 d6 81 2c 91 cc 4f 04 04 0a 7c 64 d6 97 02 b1 b3 93 5d 97 d4 8b c2 53 2e 70 09 67 65 d5 7a 2a 58 0c ab bd 52 6d dc e7 55 f4 ed 6b c9 47 ab 43 30 b4 c2 9c 69 7f 47 cc 46 47 b1 b1 e2 34 4c 75 bc f3 ed 98 ec 76 89 25 8a 9d 6a af 45 11 8a b0 e6 8a 71 2e 87 31 d5 cc 6c 5c b4 17 89 ad 8c e3 3b Data Ascii: [dFAz9H~DW9_kj4'm+2ezj!RE{&6b{kXKZ}G;iW8d7i?4opJ)E"6Gq,O\|d]S.pgez*XRmUkGC0iGFG4Luv%jEq.1l\;
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 38 f0 50 59 b2 7e d6 00 a8 8a c0 18 ec 0a bb 02 03 8c 73 51 1d 83 1c cf 10 79 2d 3f c1 83 fd 9b c4 27 31 78 00 0f 25 1e 27 80 1b c3 03 e5 f9 18 ac 70 c9 89 82 60 6e 31 8e 55 19 e1 5c 4f aa d6 33 11 47 16 6e 05 6c 46 26 0f 2a 9f ee 83 ed 33 cf c6 33 38 c2 3c 63 e0 13 0b 41 9f 8f f3 e2 13 f6 e6 67 e3 26 66 62 62 11 31 30 67 99 e7 e3 cf e8 c8 84 ca c7 96 fa 93 8f 82 4e 7e 90 af 22 c3 11 0e 22 b8 30 7f ab 8c 92 b8 8b f4 1e 62 83 80 06 5f c3 a1 10 0c 4b 4f 94 22 2a f8 15 92 38 07 0b a8 14 2a 86 3f 48 de 25 47 30 34 06 09 99 93 09 f9 1f 4f 13 94 cc f1 3c 7e 82 b8 1f 38 87 e0 83 08 20 e6 64 cc 42 3e 31 f3 5f d3 3e 4c 63 81 e0 cf f0 ad 2c 41 c9 86 65 6b f7 54 f9 18 01 72 a5 2b af 33 35 ac cd 66 32 e0 38 ca a2 e0 96 f0 58 18 0e 25 36 b1 8d 63 08 09 c3 d8 72 07 85 Data Ascii: 8PY~sQy-?'1x%'p`n1U\O3GnlF&338<cAg&fbb10gN~""0b_KO"8*?H%G04O<~8 dB>1_>Lc,AekTr+35f28X%6cr
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: f3 01 75 b9 fb 69 04 e5 82 54 8a d6 5a 89 1b 66 85 70 ec cc 28 cb 8b 2f 50 f5 dd 18 2a c5 6b cb 14 65 66 71 0d a8 45 57 a2 ab 3b 90 42 64 be a8 22 d2 d2 c3 b4 e6 9a 2f 63 56 be 62 d6 a8 0b 85 ae fe ee 8a c5 fd 8e dd d0 02 4f a8 e2 bd 0d 8b 45 1f d7 bb 1b 42 7f 56 dd 83 fa 9d e6 37 f5 2b f2 df d5 b7 0c bf a0 de a0 be 8e d2 47 5b 12 06 06 03 86 d1 ed 37 68 1b 36 b3 9e 97 5a bd 9d ac 92 2e ad c2 ad 7b 15 ea 5e b7 54 ce b7 a9 c6 ce 59 ed 59 e5 e5 2a c0 3b ec 11 4a ec 59 05 38 2a f5 a3 96 59 cc 89 da b0 3b 0a 3e ee be c4 6d 3e c1 95 f6 ba c4 09 a8 6c b1 0d f6 f1 a7 d6 b5 cb b7 35 ed 5e bf 62 ca ef b6 ad 7b 85 02 b6 d5 aa cf 5a 2b 59 8e 25 94 a8 0c 5b 11 ab 1c 15 a7 3e 25 2d b5 85 9e 56 b6 60 03 71 2c ae c3 cf b0 b7 22 58 08 41 20 f2 68 e8 19 0d 0a e7 5b 4d 68 Data Ascii: uiTZfp(/PkefqEW;Bd"/cVbOEBV7+G[7h6Z.{^TYY;JY8*Y;>m>l5^b{Z+Y%[>%-V`q,"XA h[Mh
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 52 92 ed f6 16 ac 2b 71 31 49 ca b0 58 ec d8 46 af 2c e1 4a d9 71 53 6f 12 6e 71 3d ce 8a 7c b7 f5 c4 22 ee f5 9f fe 56 a0 e0 3a ca 92 dd be c6 de 1a 6c 2c be c6 ba ba 8a 0f 6b 58 11 18 61 ab c0 bb 5e fa 4a db 55 cb af 6a d9 f7 54 42 3e 42 94 b5 b1 55 56 de fb aa f7 4e 83 14 ec 58 d5 d7 5a 6d e6 75 eb 75 f7 5b a9 a9 4d 15 ec 72 67 64 69 77 63 5d 2e 2e a1 95 6f d4 76 f6 53 6b af a8 c2 ea d5 d9 c1 cd 47 92 25 4c 92 c6 01 c8 00 9a 2d 76 02 bc 58 83 04 b0 5a ec 24 5b 72 52 0f 71 75 55 bf f6 0b 5a bd 1e d3 6d 26 e7 78 89 b3 57 f6 1d 9b 6c 1f d8 db db b1 bd 7e db 59 8c 68 6e d9 ab 6d 97 38 d9 d5 65 b6 58 7f f6 90 f8 04 e3 75 98 36 4e 33 88 a4 63 ed 21 78 81 e4 cc 00 09 62 48 c4 0a 00 66 50 12 da f3 94 24 b3 12 06 63 05 13 c9 62 d8 2e e7 8f 2d 95 ad af b4 01 7b Data Ascii: R+q1IXF,JqSonq=\|"V:l,kXa^JUjTB>BUVNXZmuu[Mrgdiwc]..ovSkG%L-vXZ$[rRquUZm&xWl~Yhnm8eXu6N3c!xbHfP$cb.-{
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d0 b6 5a b7 5b 36 f4 6d bd 07 5d 62 ca 6b b7 35 69 d1 65 5f f3 f5 8c fc 25 11 b5 ac c1 b3 61 15 0d 4c 6a 28 e8 0a 30 b7 d7 6e bd 1d 5b d8 9f f1 5e 2f 46 f6 45 fe ba f0 7f 5e ac a2 ff 00 5f d4 9f f0 7a e1 3f e2 75 66 7f c2 ea cc 5e 87 ad 10 74 3d 5c 1d 1f 54 27 fc 6e aa 7f c8 ea e7 fc 8e b2 7f ca eb 44 1d 76 80 83 47 48 41 ad a6 27 e3 e9 cd ce ea 9d 4d a5 fe cd 46 68 ef 59 3b 24 fe c7 d5 91 ad d9 75 bb 36 fa 69 9e 8a 27 e3 eb c3 af ad 3f 1b 54 cf c3 d3 30 f5 fa 06 77 d4 6b d0 dd 3f 5f a7 76 97 fc 9e b2 1e a3 ac 9f f1 fa b9 ff 00 17 ab c1 e9 3a c9 ff 00 0b ae 30 f4 1d 71 1f ff 00 3d d7 98 7f ae f5 e6 76 bd 5d 3a 55 6b 75 3a 77 d4 c7 8c 16 2e 76 2e af 63 67 b3 75 4b 31 e5 4f db d5 eb 63 53 ff 00 2f 30 18 0f c0 c4 e2 a6 0e 19 b4 a9 6a 6f b3 f2 2c af 83 d8 29 Data Ascii: Z[6m]bk5ie_%aLj(0n[^/FE^_z?uf^t=\T'nDvGHA'MFhY;$u6i'?T0wk?_v:0q=v]:Uku:w.v.cguK1OcS/0jo,)
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ac c1 9b 82 0f fe df 99 dc 51 c9 21 98 64 60 72 58 71 e4 74 e7 63 f1 3e 31 ae 6c 7f 85 8d 3b aa 66 1a af 47 4f 25 1c 99 40 96 a6 60 e7 1d 80 84 2b ad cd d5 b9 79 89 50 82 48 12 17 e8 dd dd a4 19 91 96 f9 29 77 49 41 b7 89 8f ec e8 c7 2f 34 79 69 53 c4 78 71 94 49 de bd b1 e4 1e cb 70 68 63 c6 38 69 04 da c6 f6 fd af 3f bc a2 c5 80 20 86 1e a9 a0 eb dd 3b 44 11 d2 f5 2b 62 b2 93 01 4a 80 67 d9 be 8a e0 70 32 7c 45 73 63 db f6 5f 33 f0 e9 10 b5 c0 15 2e 47 d3 bd 65 78 9f 1f 9f 11 4c 4c e9 fc be 35 60 13 32 37 bc ff 00 79 5b b2 f1 be 77 0f e2 53 e4 43 68 51 04 93 1a 3e e2 ef 50 e1 64 be d5 1c 3d d8 9c a3 76 fd fe 85 1c b9 49 cb 94 31 2e c3 7c 41 e6 70 31 6e f0 7e ef dd d1 39 1d f1 05 04 ae 45 e8 bf 41 b2 32 fb bc 5f 37 85 48 15 8a 66 18 78 65 db bb 5c 99 31 Data Ascii: Q!d`rXqtc>1l;fGO%@`+yPH)wIA/4yiSxqIphc8i? ;D+bJgp2\|Esc_3.GexLL5`27y[wSChQ>Pd=vI1.\|Ap1n~9EA2_7Hfxe\1
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 78 86 51 8c b8 d5 59 0d ac e9 bd 67 0f f6 74 de 2b 34 36 30 db a9 b2 1f 19 df 7c dd 0c 98 69 38 d9 c0 24 93 8b 26 28 ca dd 5c 98 f1 e2 4e bd 63 7f 0b 91 71 f8 6f 0f 8b 87 9f 39 90 87 39 2c f6 5f f1 33 78 8f b2 e2 56 3c 8f 72 3e 52 4a 4a 91 89 b1 0d de 3a e6 6f 7a ef 96 80 6d 23 43 1b 68 c7 97 4a 12 c0 2e 83 5d be ad 07 b2 e4 ca ad c9 75 ae 0e e3 2d 26 67 88 86 12 45 da 91 f5 1f ed 69 31 90 a8 31 0d d3 1a 65 d6 f7 e6 fc 4f b5 a0 7c 39 23 55 6c 96 ed d3 98 ef f6 49 75 28 18 c9 7c ad 72 e5 60 02 90 a2 dc 98 70 af cb e3 52 b3 1b b2 3c b1 92 20 01 4e ed 2a 80 68 62 03 7b 54 b9 71 13 8d b1 e8 e0 13 24 1d de 75 1c 6e ab 8d 32 69 c5 02 d6 c7 1f 11 28 0c c3 26 2c 79 90 b6 3c c9 0c d9 1f a0 d9 37 5f 87 89 fe 5d 13 9f 0b 36 20 60 ce ef 33 a0 dc 3f 75 58 d3 12 15 ca Data Ascii: xQYgt+460\|i8$&(\Ncqo99,_3xV<r>RJJ:ozm#ChJ.]u-&gEi11eO\|9#UlIu(\|r`pR< N*hb{Tq$un2i(&,y<7_]6 `3?uX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	62724	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	721	OUT	GET /wp-content/uploads/2022/07/001.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:22 GMT Accept-Ranges: bytes Content-Length: 117816 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 18 3e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 38 3a 32 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: >ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:18:22
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 03 a7 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 03 00 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 Data Ascii: numESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHT
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 39 33 33 37 38 39 45 33 41 45 43 37 38 39 31 41 44 34 43 31 30 37 30 32 46 31 31 35 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 34 30 46 44 43 31 33 45 45 38 32 31 39 38 33 42 35 31 42 42 38 33 33 43 30 31 38 41 30 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 41 42 46 41 34 42 43 32 41 37 33 35 38 37 32 42 38 41 45 43 46 42 33 30 38 46 46 33 30 41 3c 2f 72 64 66 Data Ascii: hop 23.4 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>3A933789E3AEC7891AD4C10702F1158B</rdf:li> <rdf:li>440FDC13EE821983B51BB833C018A077</rdf:li> <rdf:li>45ABFA4BC2A735872B8AECFB308FF30A</rdf
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 94 05 91 24 ac 89 25 72 94 82 24 92 24 d5 34 08 80 b1 00 00 09 48 66 81 ab e9 40 58 c4 c0 00 06 26 03 94 5c b2 92 96 6b 94 65 9b 27 17 2c 9c 5c b2 22 4a c4 0c 40 dc 41 b8 84 dc 1c 49 c5 ac 9c 48 9a 4a 59 11 2c 92 48 6a 2b 51 c4 8e b2 c8 ab 26 a0 24 d4 0b 26 40 2c 20 45 8e b6 b3 22 e5 91 10 91 10 90 88 62 06 85 60 02 0c 64 49 09 12 41 15 24 89 49 59 15 22 c8 a9 89 02 4e a0 4d 44 46 59 11 c6 ca 46 3d 31 53 56 45 82 00 23 10 30 06 d0 4a 50 72 ce 50 96 6c 9c 5c b2 71 16 64 5c ad c5 c0 00 00 00 03 41 27 17 2c 84 12 22 44 92 8d 49 45 59 28 a8 d9 28 a5 ac b2 0a e6 6a 2a c9 90 69 27 01 66 44 26 e0 4b 63 ad cb 37 17 2b 00 6d 10 da 15 89 c8 0c 00 62 18 25 20 8a 9a 48 a9 ab 22 48 22 31 12 92 b2 23 42 52 56 53 cf bb 8d e5 ef e8 c6 bd 48 a9 16 44 6a 85 21 22 49 22 18 Data Ascii: $%r$$4Hf@X&\ke',\"J@AIHJY,Hj+Q&$&@, E"b`dIA$IY"NMDFYF=1SVE#0JPrPl\qd\A',"DIEY((j*i'fD&Kc7+mb% H"H"1#BRVSHDj!"I"
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 89 fe e0 13 24 ea df bc 3e df db a8 fb 4f fc a1 fe 26 4c 53 85 29 a0 42 b4 82 27 5f bd 03 b5 12 11 f7 0c c8 3a fb 22 cf 00 e2 43 dc 0f db ee 50 24 21 ec 49 2c 14 dd 46 20 21 10 10 0c 80 04 74 25 14 c5 fe e6 2c e6 20 44 38 5d cd d6 c1 ef 1f b0 f4 0f b4 87 bc 7e cc ca 72 f6 72 51 81 26 43 b5 34 89 15 12 6c 1d a8 7d db a1 28 cb d9 ca aa 44 a2 02 9c a3 12 26 19 c9 51 62 01 51 fb 4a 2e bc 65 0f bb 3a 66 e8 c8 8e 80 7b 00 c4 b2 f6 20 c9 88 3d 02 9f dc 82 44 1c 01 28 a9 17 04 32 3d c4 88 c9 ff 00 72 72 c0 28 8f 76 4c 1a 28 87 56 56 57 f7 2c 51 2c 3b 8a 97 ba 00 aa c0 02 c9 19 19 d8 02 84 5c 4a 4c 5b f6 94 22 7b 62 e5 17 40 20 7d fe e3 a4 cb 01 33 23 10 c3 b5 10 bd 8a 3f 76 4c 80 53 fb 85 27 5e e9 ca 93 95 17 09 d7 8c 23 02 f1 81 43 a1 50 e9 60 78 b1 08 02 83 22 Data Ascii: $>O&LS)B'_:"CP$!I,F !t%, D8]~rrQ&C4l}(D&QbQJ.e:f{ =D(2=rr(vL(VVW,Q,;\JL["{b@ }3#?vLS'^#CP`x"
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ec e6 05 57 e4 e7 38 db 56 2d 77 4e be 63 66 c9 dd ae d9 4a ac d5 ce 32 c3 7d 3a 73 69 ae 59 63 3e 46 cf c3 3a ea 85 d7 6d bf 3d 30 ba dd 0a 51 99 03 0e 29 4a bc 30 c9 2a 63 87 34 bf 90 ed ae bd e6 35 1d d1 b2 7a f6 62 e3 eb db f2 dd 76 53 5e 41 aa ba 6e cf c6 d7 ab 97 b6 d9 4a 56 58 70 7c 77 6e 85 87 86 e3 71 93 2e e5 0a a7 33 9b 8f 9c ce aa 7c 77 f6 ae d5 d8 bb 57 6a 21 32 31 28 c5 18 b1 21 10 bb 51 08 c5 18 85 d8 ac 80 36 f2 bc 2c 77 46 9f 8c 4d e9 e1 78 fa 54 60 20 19 10 8c 51 08 84 c8 84 cb b4 2e c4 62 42 30 25 4b 35 33 47 8d c6 4f f1 39 65 6d 9c 34 64 4f 0b 6a bf 1f 21 6d 32 e3 34 85 45 02 89 4a 89 2c d1 b6 17 5d c8 72 b9 6f ab e4 bc ce 79 4f e4 5c 81 52 f9 75 37 d3 97 e4 bc 65 12 ff 00 b3 71 9a a1 0b 73 98 dd bf 74 eb 07 75 99 b0 ce db 62 79 0d 59 Data Ascii: W8V-wNcfJ2}:siYc>F:m=0Q)J0*c45zbvS^AnJVXp\|wnq.3\|wWj!21(!Q6,wFMxT` Q.bB0%K53GO9em4dOj!m24EJ,]royO\Ru7eqstubyY
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 22 08 51 f6 99 93 4b b8 f7 33 9c ba 67 96 ed fb 6d bd 15 c0 ff 00 ed 88 ba f9 18 69 85 02 c6 52 27 a5 7f e3 b0 c7 b4 97 8d 27 fd a0 fb 98 ce 63 35 23 45 9c 7e 93 e0 ba d3 b3 67 19 b4 4e ed 16 42 d8 db 0a 6e b7 3f e0 71 26 3b af d7 8f 90 b6 19 6b 9f 2b 54 a3 aa 9a 6c b6 f1 56 dc b3 6b f2 ed ae c8 d1 9f 47 87 20 a3 1f e7 4b 4e 9f cc 80 be 23 8c ff 00 4d ba b4 4e 2a cd b7 c6 79 ff 00 23 c1 a2 a1 76 da cf 1c 33 47 3c bf 1f 93 e3 25 2a a3 0c fd dc a6 1c d6 46 da 81 96 0e 37 92 c7 6e 7e 37 77 8f 2c e5 cc e2 b6 63 45 33 37 d9 82 ac 1a b9 ae 27 82 1a b5 71 38 65 5d b1 22 8d 1a 74 6b c9 c7 43 85 cf 44 29 cd 7d 94 5b 46 b9 f6 ea db 3a a7 6b 4a bb f4 f8 34 53 b3 66 ab 6a ae 9a e1 0a a7 9f 0f 2b aa b8 db af 91 f3 df 8a fa e3 ae db 75 ca fe 7a 02 9b 30 01 69 a7 60 8c Data Ascii: "QK3gmiR''c5#E~gNBn?q&;k+TlVkG KN#MNy#v3G<%F7n~7w,cE37'q8e]"tkCD)}[F:kJ4Sfj+uz0i`
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 40 01 1b 5b 40 bd 5b 8e ee a7 05 f1 42 b1 59 a9 26 af 0b bb 32 9d 42 62 1d 44 23 37 4d 57 57 50 42 8a 1a b7 0a de 12 ca ca ca ca ca d8 5b 00 4f c4 80 eb ec 43 69 39 3a 82 fe fa 6a 8d a8 f5 7f 17 6c 31 84 34 32 ba 71 74 e5 6e e4 38 33 e2 6f 4b 52 70 b6 0e 8b fb 87 90 47 1b 21 e2 67 08 cf 80 65 38 32 ae 9e 97 38 3a 05 e5 e1 a1 0d c6 c7 1b 60 8c 16 e0 ef 3a 0e 3f 9f b1 72 e0 6d 1a 62 8e aa 38 d1 5f ee 79 70 4e e3 b9 9b 2c 21 ec e8 0f cc e4 a1 cb 80 d4 92 f8 34 d1 75 e0 4f 07 7f 97 1c 72 4e 78 21 47 86 dd d5 4a 7d bd 2a c1 7a b3 fb 94 63 ea 38 51 48 a9 7f 06 7a d3 49 cd 5f 22 a0 a7 27 34 0b 93 05 bd a9 b9 d1 f0 ed 23 82 16 83 03 eb 49 53 c2 d2 8e 9f 17 b2 ad cd 6d 39 b3 0f c7 80 2a f8 ad e0 27 04 e3 cb 89 75 74 ee b2 57 14 35 c9 05 1f 44 dd 5c ab 95 24 d6 06 Data Ascii: @[@[BY&2BbD#7MWWPB[OCi9:jl142qtn83oKRpG!ge828:`:?rmb8_ypN,!4uOrNx!GJ}zc8QHzI_"'4#ISm9'utW5D\$
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 77 95 e3 c2 fa 62 19 a4 8e e3 ef 30 8a 5d 4a d4 84 36 f4 ab 70 68 a4 54 02 dd 45 a6 dd 26 6b d9 45 76 e4 2c e1 6d a9 21 25 89 bf 36 32 2a 4b 8f 2f cc a7 2f b7 89 ec 06 45 58 b2 7c 90 63 76 79 7a ba 1b 0a 06 23 26 37 38 18 f3 88 70 07 a6 59 d2 44 c6 9f 52 48 95 ad ce 09 79 99 ae 7a 5a 49 11 21 44 6f 4e 93 22 fb 6d bb 29 0a 43 e9 45 60 7b ca 5d 33 5e 6e 5c 24 ac 49 87 1e d9 13 6d 10 93 b7 bc fb ad d3 e5 93 5f b9 aa f4 5f f1 1d d0 88 94 b2 ed e2 6f 17 d4 c3 4c f4 b2 fa 51 25 3b 7e 0d b1 4d bc 71 8c 9b 71 20 bb 01 ec 95 84 00 e8 af b5 f5 fd ad 4d 2e e9 a4 9e 53 19 31 cd 29 62 33 ba aa a2 bf b3 8f 97 2f 52 84 bb 9d cd e6 8c 82 ab 09 c9 81 1f 79 d1 1e 2d 58 c2 09 5f 21 73 97 ec 0c 62 ae 24 b7 ea af 02 33 22 8e d7 1c 10 7c a9 5b 96 8b 47 32 3e e4 1b e9 da c8 cb Data Ascii: wb0]J6phTE&kEv,m!%62*K//EX\|cvyz#&78pYDRHyzZI!DoN"m)CE`{]3^n\$Im__oLQ%;~Mqq M.S1)b3/Ry-X_!sb$3"\|[G2>
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1e c0 7d 2e 1e 8d 2b 88 f4 9c 9d 36 65 6e 0c 05 a7 61 e9 7d 72 3e 35 0c 99 64 a4 78 91 8f 27 d5 78 5e 8b fb be 1c f5 be 9d 64 c5 37 4e b1 86 92 e0 00 c2 6c fe 4c 3b 7d ba ea 7f 75 1d 6a 18 89 89 91 b2 86 23 89 11 86 68 d3 f8 6e 92 46 92 56 a2 5a 45 8e c4 96 75 03 16 36 45 e6 c7 a6 9b de 12 48 d5 b2 07 20 40 52 3b c8 79 b9 17 1a e1 15 b8 79 09 1f d7 50 e9 12 04 99 70 26 fd 24 0a ed 06 ba 01 a7 2c a0 11 e4 fc d4 08 00 03 c4 50 55 c6 e4 d8 73 58 57 62 37 c5 20 a2 d2 45 c0 79 79 4d 71 18 fc 20 5a a5 66 25 b1 41 6b 92 6d 73 e4 1f 9a a3 fc 29 31 d4 25 65 94 b7 62 2e 25 53 87 79 e4 67 e4 ad a4 57 32 4d 3c c8 ab d9 c0 64 b9 be 3f 91 41 e2 03 29 ec bf 61 7f 3f ca a8 48 17 11 c0 4d ed 70 3a 9b ce aa b5 1a 5e c5 76 8f e5 51 7b 47 33 db 88 69 7e 8d 22 d8 5c 1d b2 df Data Ascii: }.+6ena}r>5dx'x^d7NlL;}uj#hnFVZEu6EH @R;yyPp&$,PUsXWb7 EyyMq Zf%Akms)1%eb.%SygW2M<d?A)a?HMp:^vQ{G3i~"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	62725	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	734	OUT	GET /wp-content/uploads/2022/07/hotel-009-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:30 GMT Accept-Ranges: bytes Content-Length: 477104 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 1c 5c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 38 3a 34 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: \ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:08:42
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 Data Ascii: mPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 87 c0 b7 41 f4 5b 5e df cc fe 73 d3 ff 00 09 fe 0d 68 7d 63 b8 b6 eb d9 5d 86 0b 2b ba c2 43 43 89 70 8f d2 e3 fd 0a 5c ca ad af d4 c5 67 e8 6c fe 7f fc 37 e8 aa f4 fc bb 44 e5 64 39 ee 16 48 ad db 83 e5 c0 8f 4f d6 13 eb b7 db fc cb bf f3 e7 f3 4a 3e 5f 20 30 8c b2 82 63 21 fa 3f 3f ab d5 03 c2 99 8a 24 42 b7 ea ff 00 ff d4 e7 99 fd 0e cf a5 f4 bf c1 fd 2e 3f ed 67 fd d6 fd c4 27 77 fe 73 86 f1 f3 ff 00 c0 ff 00 79 72 09 29 0f 5f 20 d2 1b 7d 4b d4 77 7f f3 dc 1e 7e 9f f6 10 3b 57 f4 7e 91 e7 e8 72 3f 9e ff 00 85 ff 00 d1 6b 9e 49 28 ff 00 2f b5 27 7f e5 d9 e8 2c fe 71 ff 00 1f ed 70 3f f0 3f f4 6a 34 ff 00 3e df 97 1f 0f f0 5f ca 58 29 21 2e 89 8e cf 47 5f 6f 8a ee ba 3f f4 6c 2f a1 fc dd 9c 7f c6 33 fd 7f a8 bc 89 25 5c ef f6 7e 61 b9 8b f8 be f1 9b fd Data Ascii: A[^sh}c]+CCp\gl7Dd9HOJ>_ 0c!??$B.?g'wsyr)_ }Kw~;W~r?kI(/',qp??j4>_X)!.G_o?l/3%\~a
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b7 63 aa 1a 2a f0 53 59 5f 83 8a 6c 0e 09 da 12 4f 3a 3f 66 08 38 3c a1 55 76 83 5d 53 1d c1 52 1f 62 c7 a1 66 3d 7a e2 9a a8 26 50 24 ac 5c f8 0a f2 67 aa 2b 2e 59 c4 49 4e 20 96 04 9f 1b 5d d0 ae 2a 41 a1 1a de f9 4c 9e 57 73 0c a0 64 22 1b 80 a4 84 24 df 15 6b 32 59 3d f6 27 d6 f9 ae dd 03 a4 3d 71 74 e9 e5 d1 06 42 47 47 be 32 62 c1 85 1c e0 b9 14 0a 20 eb 07 1f 8e 1c c4 5e 98 39 da 32 b3 f4 9c 40 da 6d 57 fd d0 ce 5c 7d 68 d3 3e a3 92 d2 f5 8a 57 33 16 4d fa 57 0a e2 e6 4b 6c fc 1b d6 9f 95 d0 39 9f 0f 19 ac 86 f6 03 b3 d3 ab 87 3d 00 b0 af 2c af a4 aa f1 bd 58 df a2 ce 64 dd cb 33 7e b9 09 18 7d 11 3a 3b 77 4d 83 ee 3c 54 4d 60 39 7e bb 15 fe 6d e8 5d 7e 95 e7 8f 1f 18 39 0e d5 f4 12 4e c1 d1 cb 78 76 4d f9 fb b6 9f bc c6 ce f9 36 bb f9 9d bc e4 ae Data Ascii: cSY_lO:?f8<Uv]SRbf=z&P$\g+.YIN ]ALWsd"$k2Y='=qtBGG2b ^92@mW\}h>W3MWKl9=,Xd3~}:;wM<TM`9~m]~9NxvM6
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 74 e9 bd 64 57 fa 59 fd 8e 5f 75 69 6b af 77 9c d1 99 e8 41 e9 d6 5a b1 52 e3 c8 be e9 99 ab f2 b1 95 ab cc ea a4 13 63 65 15 8b c3 57 22 7f cd 36 ec 7f 40 ef 93 7e cf 25 f6 fe 5e 90 d5 4c 6b 15 75 57 cf 3d c5 14 25 82 6f e2 2b e5 b3 c8 b8 26 a1 81 05 2c 8c b6 d6 89 68 98 d6 c9 69 91 d4 42 57 01 3e 8b 6f 16 d6 87 f3 37 f3 87 ad ab 59 6b d4 be 30 2a 4e aa f7 df 3b 6f ea 2f db 3c 6f e8 c0 f9 e9 72 30 84 c3 90 92 28 84 23 d6 08 44 f1 98 e4 c8 18 33 c3 c2 4a 9f 13 59 2d 48 f6 28 f2 a9 18 c9 72 21 8c 04 b2 63 da 22 3a a4 52 cb d1 cf 90 e9 d2 3c cf b9 f7 48 02 12 30 16 c8 9f 90 8d 3c 18 fa 42 f8 2b 62 5c 84 a8 85 78 29 a3 25 64 d2 96 c2 0e 49 f1 81 91 1d 4a 7a 01 08 02 fd 25 cd 02 0a 04 44 a6 70 44 5e 64 ba ed f2 2d e8 16 b5 04 5c d3 e5 66 a5 f3 ba d7 1d 9a e1 Data Ascii: tdWY_uikwAZRceW"6@~%^LkuW=%o+&,hiBW>o7Yk0*N;o/<or0(#D3JY-H(r!c":R<H0<B+b\x)%dIJz%DpD^d-\f
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 9a 43 17 d6 e2 3d d7 94 b3 e9 6e a2 d0 d3 a9 49 e3 e9 5b 75 ba c2 bb 4e c8 62 a3 81 8e 64 2d 52 b0 12 0f e4 be 2e 12 64 d5 19 66 23 0b 54 6e 4c f8 19 e8 9d cb f3 2f 56 3c eb bb 65 a2 af db 2a 8b 66 ad fb e6 6e e3 5f 7d 9a 8f b1 56 c9 c9 bb a4 bc 6e 8a 45 e5 59 78 fc fb 48 7e 63 7d a7 3a bf 71 b1 c5 66 4a 3d 22 89 dc 58 7a 5b 2b c2 de b7 b0 b4 3e 3c fe 8a f3 2a 97 68 bb a4 67 b6 d1 dc 62 44 b4 49 7a 15 6c 9a 6a aa 9d 64 42 c7 65 7b 5c 36 cd d4 c6 23 a5 72 6f 6b 4c 0d 76 10 aa 4f db f9 e3 d6 d0 37 8b 43 e5 69 51 a9 b5 f2 3f cd 68 4c c9 8b 37 cf 25 66 c3 3f 9a 06 2a 9c 2b aa fc 4f 15 ae 4c 4a 56 5e f4 b6 dd 9d 16 fe 2b ab 1b 95 ed ec 96 2a b6 04 9a d2 b6 8f eb 96 ef 9a 28 c0 8f 49 e9 b0 53 e5 7f ca 2a f2 ab bc de 06 cb 35 00 55 b0 c2 ce 59 5c c3 51 2c a1 cd Data Ascii: C=nI[uNbd-R.df#TnL/V<efn_}VnEYxH~c}:qfJ="Xz[+><hgbDIzljdBe{\6#rokLvO7CiQ?hL7%f?+OLJV^+(IS*5UY\Q,
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: dc 93 cf 28 ec 71 63 92 1a 2a 0a ec 30 05 0c e8 01 8b 4d 0a 28 08 03 0a 38 21 07 80 c6 7d 64 62 53 9d 80 c5 ac 20 4e d9 61 44 2f 6e 32 24 2e 5b 93 ed d1 ff 00 19 9b 91 7c fd f7 97 59 45 1e b9 b4 0e b9 cf c7 3f 0a 57 c9 51 19 cb 84 7d 6a 38 02 46 15 0c 2a 00 17 12 9c fb 81 cf b5 24 85 a7 3a 20 9e a9 e4 21 38 12 9c eb f3 d8 e7 6e 33 91 85 43 09 e3 3f a9 cf ac 62 1a c5 c2 42 cb d5 23 17 5e e3 78 a8 f9 f5 9c 53 44 84 a1 69 0b 65 0e 09 51 50 b0 d3 49 8e 1c 42 24 9b ea 47 5f 6f 51 ad 53 2f dc cf 6d 9a f6 6a 25 ce 88 8a bb a8 01 9d 86 03 cd cc 44 1a cc 87 7d 62 66 d9 ec f2 5a 63 59 d9 ac 51 2e 1f a1 46 18 6e 22 a5 10 76 38 76 59 b3 df a9 b1 5d 02 4c d8 d5 cd 4c 08 b5 bb d8 29 cb 1e 99 d9 10 d6 d9 55 8e aa d5 83 e7 5a 62 4c ad 89 87 13 26 eb 66 b6 56 6a d6 2c d3 Data Ascii: (qc0M(8!}dbS NaD/n2$.[\|YE?WQ}j8F$: !8n3C?bB#^xSDieQPIB$G_oQS/mj%D}bfZcYQ.Fn"v8vY]LL)UZbL&fVj,
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ed c6 d3 d7 3b 0e a5 ee 70 a7 a9 4a d2 41 f9 c0 93 89 e3 92 ef 18 09 5e 73 db 14 a2 b0 94 84 e1 4f 52 79 38 4f c9 70 e7 0a c0 46 1c 07 92 48 c5 02 ac 2a 4a 47 3c 86 d0 da 84 e7 b8 c4 f0 a0 7e 02 1d f9 5a f8 c7 5c 03 12 a2 43 64 3d 9f 1d 6f 56 99 82 4d 9b ed 8b 96 9f 92 e2 d7 1f ee 8c ec 6b 66 ea aa 58 65 b7 eb 52 53 b6 b0 97 45 8d 29 ac 1a e5 dc a9 0e bb ff 00 e6 66 f5 6f c5 45 ad 57 e5 c4 a6 6a 72 61 47 ee 5b ee 49 86 48 51 61 0e aa 29 5b 49 79 83 d9 34 0d 4a 55 ed 6c e8 10 60 95 3e ee bf 05 12 e0 b1 0d b6 82 5b 4a 72 d6 5a 23 b6 e5 22 d0 23 4c 6e 58 9d 19 6d 18 b6 b6 15 d2 a1 4d 6a d2 ce 04 70 eb 0e 25 a6 0a ed 12 a4 ae dc 44 72 96 f9 8b 46 dc b2 4b a5 bb 09 89 73 ed 59 13 9b ee aa 98 ab 60 56 3c e2 d2 24 a8 65 a3 2e 48 97 52 d3 b1 93 3d b3 21 b6 c9 61 Data Ascii: ;pJA^sORy8OpFH*JG<~Z\Cd=oVMkfXeRSE)foEWjraG[IHQa)[Iy4JUl`>[JrZ#"#LnXmMjp%DrFKsY`V<$e.HR=!a
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: a7 7b 61 47 21 28 57 04 a8 e1 e0 85 f0 a0 50 52 56 f8 c4 b7 fd 7e ce 0a 52 0e 00 a3 90 4f f7 90 4f 49 05 29 25 24 84 a7 9c 27 e1 43 ae 05 1e 14 39 c5 8e 4c c5 9e 12 94 0c 5a 8f 0a 57 da 3f fe 4a 8a 92 e2 49 08 17 b7 ea 82 f5 b6 d0 dd 6b 71 9e 32 91 6b 60 ca 58 b1 b1 91 02 be be 64 89 ec 46 8a 55 62 8a b8 6e aa fa e9 14 ef b9 b0 b4 87 6d ac c4 49 70 f6 a8 4c c6 fb 63 3e e3 48 42 31 d4 ab a3 9f d8 85 96 f1 4a 0e 8b 06 24 88 f7 3b 4c c7 de 8f bc c4 61 2d 2d 99 2d fd 9f 5b 68 79 38 b5 80 9b 7d 71 32 91 4a f0 93 1c b8 e1 c6 9f fb 4f e3 a5 26 52 54 85 45 87 16 4b 4a ad 64 07 2a d9 c9 20 32 95 3e ea 15 4b 2c 8c fa f0 a4 71 25 80 e2 53 93 a3 04 ab fe ec dc 18 cc ce 2e 49 7e 42 c3 09 31 4a 82 a1 29 79 5d 4b 1d e6 59 ba 85 52 d4 3d d5 97 1d b1 53 6f 38 fb 7c 95 36 Data Ascii: {aG!(WPRV~ROOI)%$'C9LZW?JIkq2k`XdFUbnmIpLc>HB1J$;La---[hy8}q2JO&RTEKJd* 2>K,q%S.I~B1J)y]KYR=So8\|6
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 59 68 c8 2e ce 2d a9 d0 b4 a4 09 c8 73 1f 88 90 1f 75 0b 1f 82 fb a9 52 9d 60 fd e5 45 56 4a 29 01 43 10 b5 20 ba e9 70 21 60 04 ac 8c 71 65 65 0d 17 57 f8 cf a9 6c ff 00 ea 5a 94 94 38 a5 14 80 a2 8c 65 a3 24 38 5c 68 94 a8 9e 9d 04 20 71 8b 06 8a 44 b4 30 b7 e5 a5 c5 c5 71 a5 e4 86 dc 79 2d a9 d4 07 5b fa d5 12 07 f7 2f 7d 99 0e a8 93 62 da 9b 0e 12 42 db 2b 68 0e 31 29 71 78 d4 17 de 5f f8 64 99 55 f2 22 64 18 6b 40 61 94 be 3f 0c ad 4a ae 59 2b 8a a6 f1 48 38 5a 2b 2a 64 9c 2d 2b 0b 6a 56 29 b1 c2 52 91 8a 1c 1e a9 27 91 91 f4 f9 ee e3 9a 7a 98 4f d2 db 2a 55 82 d2 57 39 f5 67 f3 84 f2 38 f9 09 c4 90 71 28 24 04 f3 91 b5 e9 8f 64 0a 16 63 e4 97 99 86 95 ed 8c 21 52 f7 27 72 5d bb f2 09 70 a8 28 f2 7b 12 39 e0 82 08 ea ae 07 f2 47 07 f8 c4 9e 31 2a c2 Data Ascii: Yh.-suR`EVJ)C p!`qeeWlZ8e$8\h qD0qy-[/}bB+h1)qx_dU"dk@a?JY+H8Z+d-+jV)R'zOUW9g8q($dc!R'r]p({9G1*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	62726	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	733	OUT	GET /wp-content/uploads/2022/07/hotel-10-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:28 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:36:32 GMT Accept-Ranges: bytes Content-Length: 497922 Content-Type: image/jpeg
2024-05-28 05:15:28 UTC	7957	IN	Data Raw: ff d8 ff e1 22 0c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 30 38 3a 35 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:08:54
2024-05-28 05:15:28 UTC	8000	IN	Data Raw: 87 eb 5b 57 eb 1f a5 fd 15 8c f6 7d a5 60 63 fd 61 ea f6 5f be a7 34 59 67 a6 ef 4d 8c 63 6b 16 54 19 e8 bf d1 b4 3e b7 5d 5f a7 ea d5 77 f3 9e aa b3 7e 65 bd 72 f6 db 9a 05 66 f0 03 ef 2e f5 5f 2d 0e 65 85 d5 59 e9 b9 94 b9 de 97 ad 4b 7d 37 ff 00 84 ab f9 a5 2c f2 00 75 3e 92 0f 15 03 c5 1f e5 fd 55 c0 d8 db 51 55 db cf 47 1e fe ad 9b 6b f2 6f 93 7d d9 6e 2f b7 27 69 0e 0f 77 f3 ae 6b bf c1 bf fe a1 8b 58 e4 75 1e a3 d3 e8 c1 cb 79 0f ca b9 b6 e1 3a d1 12 46 ea ed a4 ec dc f7 6d 7f a5 fa 7d 8c 7f e9 16 b7 4f e9 f8 9d 23 13 25 f9 16 3a ec 1e a6 e6 51 90 d6 6e a5 cc 63 5f eb 0a 9f 91 5b 5f fa 3b ff 00 98 b5 de 95 5e af e8 fd 2f e7 95 0e a1 93 83 80 32 32 ba 61 16 54 4b 1b 8b 92 f2 77 3d 84 97 bb 73 5e c6 7e 96 bd fb 1e dd 95 fa 5f f6 d2 86 5c 39 08 96 01 Data Ascii: [W}`ca_4YgMckT>]_w~erf._-eYK}7,u>UQUGko}n/'iwkXuy:Fm}O#%:Qnc_[_;^/22aTKw=s^~_\9
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 77 1e 9e 21 c5 2f fd 15 71 17 f2 8d 9f ff d2 c6 67 d2 27 c7 f2 ab 78 51 ea 92 74 1a 2a 8d e0 79 09 56 f0 81 1a 1e 5c 7f 82 cc e6 3e 49 79 53 24 37 0f 41 d2 c1 f5 1c e8 fc c7 7e 24 7f e4 17 51 85 ad 00 76 d3 f2 05 cc 74 b1 0f b0 81 20 88 f1 d0 06 ff 00 7a e9 2a ca c7 c7 65 6c b5 db 0d c7 6d 7a 39 da e9 b5 be c0 e4 ce 44 5c 6f c5 b1 23 e9 79 bf ac f8 b4 32 fa 9e c0 69 b3 36 d7 ba cb 98 f2 1c 19 43 07 b2 a6 06 fe 89 d6 bf d3 df f4 ff 00 eb 6b 9e be fc d6 61 bf 07 a9 e6 dc ea dd 2e 73 ac b8 9d a1 c4 b5 ae 6f da 4f a6 ea f6 fe 8f d0 b3 d4 5b 5f 5a fa a6 33 2f c2 7d f5 da c3 5b 6e 80 58 0e e9 2c b6 bb 29 3b 99 ea d6 ff 00 4b 77 ef fb 3f d2 2e 7b ab fa b9 8d af 03 0a f2 db 6f 1b 5d 49 a8 40 2d f7 5a f6 db b7 f3 a7 d9 ee 52 67 f7 4e 48 40 93 18 70 83 66 fd 3c 37 Data Ascii: w!/qg'xQtyV\>IyS$7A~$Qvt zelmz9D\o#y2i6Cka.soO[_Z3/}[nX,);Kw?.{o]I@-ZRgNH@pf<7
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 69 08 8b 12 ba 4f 46 ce 3c ea dc 65 6b 4e 07 ad 7f 36 d8 99 63 ef dc ea 3b 94 1a 14 a0 18 6c ef 90 cf a9 06 03 73 55 17 42 e7 47 fe 6e d0 63 e9 c1 a0 9b 9d 05 f9 7d a0 24 50 3c 68 ce bb 3c b2 fb 75 5d 9d ee 1f f2 ef 5d fc b1 ce 53 55 ae 40 83 26 db 19 65 ea ce bb 3f 6a aa b0 6a d5 7e 99 28 40 93 b3 63 96 e0 48 09 75 05 31 95 59 12 7a c1 c9 e6 ef 3a 87 96 b4 7d aa 5a e1 4d 61 d7 49 8f a0 56 13 3d ae 74 c3 47 56 38 82 d6 7c 64 ad 0a d8 d7 2b e3 15 d9 26 bf 4c 5e b4 ca b5 28 7b a1 ff 00 3b 6b e4 a5 8c 7e cb 3f 6e ab 2d 7e cb 53 bc 95 07 76 17 26 ea c5 96 48 96 da 66 6d 35 e5 b5 24 7b 22 e4 f2 df 3f 59 41 d5 fa ad 76 4a cb 15 ef 2d 70 c3 e9 ea 22 2e 90 e7 ee e7 2f 5b b4 ae ac 3a 9f d1 f2 3f 86 94 65 6c 80 ef ef 11 1e c8 38 0c 1b 99 a3 ef 71 ee ea f3 65 72 12 Data Ascii: iOF<ekN6c;lsUBGnc}$P<h<u]]SU@&e?jj~(@cHu1Yz:}ZMaIV=tGV8\|d+&L^({;k~?n-~Sv&Hfm5${"?YAvJ-p"./[:?el8qer
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 0b 05 2d 1d 3d 87 be 22 59 a5 92 70 88 8c b6 a3 ea 92 ac 73 03 6d 9d ae db a1 2c 02 50 9e 4e 90 b9 ab 59 9d 5c 9e 57 4c d1 60 69 6f bc 92 77 f4 ac ed 41 3a fd a0 77 6b 67 09 4c cd a5 92 bf c1 7e ae 4c ad 34 ba a1 15 b9 0c 77 05 b2 5d 58 f5 5b 06 e3 41 ad 00 57 c1 e6 46 0d 46 42 ce 4d ee a9 9d db c0 5f 03 39 15 4a 1b a5 3a f5 f3 e6 6c e4 36 d1 43 c7 4f ad e3 04 9a 14 3d f4 52 25 80 d8 6d d5 e6 4b 5e 85 46 12 d5 7e af 62 f4 95 31 92 85 09 e8 47 aa 25 fd 38 55 c5 7a 39 94 d1 d3 7d e6 e5 69 34 8a 97 90 35 c6 5a ee 68 1c 47 c6 50 5d 92 c4 00 97 c8 96 30 48 64 68 f3 62 d8 45 f2 cd 8e b0 8c bc e3 01 2e c2 42 3f 79 df 3c ef 5e f2 56 cc 2a e4 a0 fb b6 3e 7a e7 28 f3 e6 be 09 3e 3b a5 0a 23 d5 62 1a 3d c0 95 6d d8 02 3a 21 32 5b 7a 29 8e 10 cf 43 6c d4 54 59 44 77 Data Ascii: -="Ypsm,PNY\WL`iowA:wkgL~L4w]X[AWFFBM_9J:l6CO=R%mK^F~b1G%8Uz9}i45ZhGP]0HdhbE.B?y<^V*>z(>;#b=m:!2[z)ClTYDw
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: a0 13 73 dc ae 1c 93 03 96 82 a4 9e 2c 6a c7 83 05 9f 8e c1 1b e9 3f cd 26 a9 6c 8e c2 51 14 85 73 61 5d d1 4c 05 72 b5 f5 c1 9e 17 e5 a2 ae 1c c1 d8 d5 69 d9 23 64 30 56 3a d7 07 eb 1d ce f9 83 b9 79 28 e6 3d 60 40 9a 92 e4 ea 85 c7 19 58 10 2c ea 33 d8 50 96 34 8b 2a a4 ac 6a 1b d1 21 bd 65 06 82 ea 52 f7 4d c5 f4 97 43 06 5c c1 bc 16 17 c7 d3 8e e7 74 e1 2f 7e f4 07 3b f8 72 a3 34 1e 59 5f e6 62 3e 44 c2 23 f5 4a f8 1b 02 c5 cb a6 2a 32 ae 1a 11 ef 82 6c 0e 2b cf 37 cc 5f d6 ea 6b 76 e3 a6 2a 99 98 f3 87 d9 28 27 20 41 5d d9 96 9f ab 34 11 bf 48 4e e2 30 6b f0 a9 8d 23 7d f3 72 b4 39 bb 48 3b 1e 25 fb ea ea 1d a3 72 8b 97 7d 00 ba df 35 9c b8 d5 14 5b 70 d3 9f 6d 74 d6 2d 3b 09 90 2a ba 9d 6d 51 6a 71 a5 12 dd 41 5a dc 8c 5f 76 0c fe e4 8a fe 88 b4 35 Data Ascii: s,j?&lQsa]Lri#d0V:y(=`@X,3P4j!eRMC\t/~;r4Y_b>D#J2l+7_kv(' A]4HN0k#}r9H;%r}5[pmt-;mQjqAZ_v5
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 3d 84 9b 68 5d 35 02 d4 ed da 60 67 59 b2 d3 16 97 cc 39 1a 5c 90 f1 20 4e 6a 76 67 e3 8c 9d d0 7d 96 ac d8 d9 36 de a3 68 46 d6 9c db ac d1 eb 4b 01 ed a1 e1 48 f2 a5 9c 97 14 05 17 43 6d 7c fc 51 55 79 5c f6 79 27 0b 8b f1 95 8e 7f d1 7d b4 28 d9 b9 31 b6 9b 93 24 df 24 4e 15 4b 05 b2 70 eb 2b 42 30 4e 98 dc 50 71 7c d7 e7 95 4c d9 dd 26 52 0c 76 55 b9 b1 82 2d ad 8d 0c 0b 22 fe d2 33 43 3a 63 32 db d5 6e 56 35 a9 cb 8f 63 93 2c d2 3b 52 6e e5 33 2a c1 d7 a1 b9 5f 68 33 31 c6 5a 9b 95 f4 71 21 36 f3 0c 36 2e 57 7e ea b3 5f 1a 2b 3f b0 f3 2e b6 0d db 32 71 19 21 8e 64 de 34 e2 3c dd 84 75 e5 45 39 10 55 c1 e3 15 50 70 cd 4d 21 f8 00 bf ce 36 00 78 be 4b 8a aa b9 6e ff 00 b1 de 30 22 24 35 7a 10 92 0d 63 02 0d c7 57 1c 4a de 52 c1 97 45 99 0a 93 52 3c 47 Data Ascii: =h]5`gY9\ Njvg}6hFKHCm\|QUy\y'}(1$$NKp+B0NPq\|L&RvU-"3C:c2nV5c,;Rn3*_h31Zq!66.W~_+?.2q!d4<uE9UPpM!6xKn0"$5zcWJRER<G
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: fc 1c 34 e6 21 f1 90 c8 41 27 c8 29 18 df 99 2c 72 e4 51 10 c9 91 fc 5d 14 c1 e7 96 1e 46 9c 72 69 49 c8 d0 dd 01 6e 30 a6 3f 0c 5e c6 54 95 1e 84 5c f9 2a 67 92 e3 96 0d 37 96 0f 4e 7d aa a8 31 9e c9 9f f7 49 83 6a b2 71 fa a6 24 a3 b5 52 d1 c4 d6 d9 7f 23 52 94 57 9a b8 46 1f d8 da 6a 73 1f a8 0e b7 5a df bc 88 3d c5 0a d1 d8 c9 1e f6 52 64 ab 49 84 96 44 f4 4c 72 b9 a9 0c a6 b6 d7 09 af 78 0b 54 84 38 ed 7b 4c 8b 12 e4 da 95 66 b8 dc b7 d3 5d 6b 86 a0 7e be 4e ab 59 6e 14 22 03 72 bc 15 df da 83 10 aa 2d da 7a 54 da 58 96 ab 4b af 43 ad 45 61 85 5f d4 64 b2 c2 a5 a9 0d bd 46 0c 46 66 28 03 73 2b fd 4c bd 02 33 c3 22 ad b9 19 72 5f a8 ed ac 71 69 fb 1a c5 69 b7 90 a3 0d 05 1c 0b 12 a9 84 cc 62 b4 25 26 07 fe 09 e2 99 cb 7e 24 24 98 8a 89 96 50 e4 3d 26 Data Ascii: 4!A'),rQ]FriIn0?^T\*g7N}1Ijq$R#RWFjsZ=RdIDLrxT8{Lf]k~NYn"r-zTXKCEa_dFFf(s+L3"r_qiib%&~$$P=&
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: f6 bd a9 1a 3b ac 4b 96 cb 4f 0b ce 1c 29 8a e8 c7 12 d9 df 69 c0 15 c4 2f c9 1b e0 48 f0 c1 55 11 57 1e 25 15 0f 2f 22 14 40 7b 8f 17 9d 5f 22 3f 69 37 f8 99 1f 88 b8 6a 6b 00 d5 64 83 86 e0 a3 aa 18 cc 92 77 20 8f 91 7c 21 33 0d 64 a4 16 5f 44 89 1a 63 4a f9 34 83 15 04 d2 4c 50 90 a7 04 10 21 b6 eb 31 a2 38 aa bc 72 a7 e4 98 2e 21 a3 8f 36 19 69 76 11 18 8b 06 25 ab f6 d4 2d 59 3b 08 1d 71 e6 ab 99 60 52 2a 49 c7 d5 ef 64 a6 89 c5 69 86 f8 9f 4c 00 a4 f2 b3 1c 27 70 56 8c b1 6b 5c 3a e3 95 4f 34 f2 29 2a ae 58 c4 f1 c1 15 cf 24 e4 7e 30 89 5b c5 05 55 ba 9c b1 d6 d6 73 6e 38 ec a6 d0 5a 95 c4 7a b8 a6 c9 41 6d b6 d9 44 f8 27 c0 1c 36 bf 14 34 5c 44 e1 60 12 a3 90 94 95 c3 6d 45 14 79 5e 14 32 63 6d 9b 8a c7 0a 8c 22 62 c5 f2 c9 0d 13 79 c2 2e 26 5c a8 Data Ascii: ;KO)i/HUW%/"@{_"?i7jkdw \|!3d_DcJ4LP!18r.!6iv%-Y;q`RIdiL'pVk\:O4)X$~0[Usn8ZzAmD'64\D`mEy^2cm"by.&\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	62727	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:28 UTC	966	OUT	GET /wp-content/uploads/2022/07/011.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:59 GMT Accept-Ranges: bytes Content-Length: 802799 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 26 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 33 30 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: &@ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:30:16
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 00 e7 3f f4 5a 6a 31 7a 95 38 76 39 f4 b1 98 8f b4 5c f7 35 b1 fa 4b 0b 2b ad ac b1 ce 7b 9d ee a7 dd 56 f7 ff 00 83 b6 c4 c8 8b 31 36 75 d5 42 24 1b 6d f5 0a 5d e9 62 3c 56 1f 5c d8 d7 02 61 de e0 dd be 9f e6 7b 3e 97 fa 4f fc 11 73 9d 5e ac 6a ac f4 cd ed ad ae 70 73 00 6c ec 86 d3 fa 5a ff 00 35 ad 6e ed 9e 9f fa 2f e5 d6 ba 4e a9 d3 e8 cb c7 c3 ba eb 45 42 83 73 58 d2 d7 12 ed e2 bf 73 3d 26 fb 7d 17 33 7f bd 67 33 ea ff 00 4b 79 df 66 66 43 9f 03 7b 19 53 65 b0 df 77 e9 6d 77 bf 6f b7 6a 6f 31 93 18 99 8c a7 18 91 46 89 17 b7 65 0a ea 5c ee 9b 9d 5b d8 fa c5 06 d7 58 08 b0 30 3d ce b0 96 c1 67 ac d1 b9 8e da dd b5 57 fa 26 7f 2d 0f 1b a3 75 4a 85 cc 34 b6 a2 2c ad f5 3a fb 1a c1 0d 6e c6 d6 ef 52 c6 5f fa 36 b9 ff 00 42 bf 51 75 fd 39 fd 37 06 b1 5e Data Ascii: ?Zj1z8v9\5K+{V16uB$m]b<V\a{>Os^jpslZ5n/NEBsXs=&}3g3KyffC{Sewmwojo1Fe\[X0=gW&-uJ4,:nR_6BQu97^
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 7a 79 54 35 ee 30 d6 bd c2 a7 13 fb a1 97 7a 6e 72 16 47 d5 e6 7d 2a dd a1 e3 b8 fb d3 0c 66 3c 54 26 1f 33 77 50 ea 38 39 34 dc ea 5d 86 da 80 6b 99 b5 cf aa c2 46 db 4d be a3 b6 3f d6 fd d6 fb 3f d1 ae df a6 f5 c7 75 1e 9e da aa b0 db 86 36 39 85 c2 1d 51 66 ea 9b 85 6e cd de a5 8c 6f f4 6d bf a4 f4 3f 9f b3 f9 84 f9 3d 07 21 b3 b0 48 4b a3 61 bf 08 e4 31 c1 d4 32 c7 35 ce 6b 1d e8 87 b8 07 7f 38 ea b6 5b 6f fc 5b 5f b3 fd 22 30 07 88 0a a4 c8 f1 44 82 e9 74 9c bc 5c 0c ab fa 85 ec b1 8d 15 40 fd 13 9c 5d b4 ba cd be d6 3b 63 77 55 fa 47 bf d8 ca bf 71 1f a4 b5 8c c1 c6 60 35 e6 3e 9a bd a3 0e c6 d8 ca fd 6f d2 5b e9 3a b1 6b 9a fb 5e d6 55 eb d5 5e cc 7f e6 68 f4 eb fe 7b 23 af e3 b6 ce 8b 98 31 e2 a7 b8 31 a1 c0 b8 e8 fb 19 5d b5 9f de ae da 9d b5 eb Data Ascii: zyT50znrG}*f<T&3wP894]kFM??u69Qfnom?=!HKa125k8[o[_"0Dt\@];cwUGq`5>o[:k^U^h{#11]
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 4c fe dd 8f 09 79 2f 25 94 b0 97 92 f2 5e 4b 09 79 2d 92 c2 5e 4b c9 79 28 a1 20 f5 7b e3 e4 89 d0 c1 96 5b c5 91 1d 1a fe 7d f4 36 5f 33 60 c8 ef 83 8d 5b 4a 76 7f 36 6d b9 7c fd 7d 1e bd da aa 4b f8 8d d8 ec 8f 52 7a 62 9a 3b fa f4 26 b0 35 7f 8c 49 1f 3e 84 a4 ac 9f 76 c7 66 da ce c4 0f a0 60 8f 11 d6 91 aa cc 27 af fd 6f 5b 53 db 16 bb cd 8c 9e d3 d7 3c d1 ca 8e 30 b6 32 ff 00 90 37 5a d6 a1 4b 8e 63 cc d7 92 16 77 6c 91 c7 8d 71 e1 ef 49 53 cc 43 56 ac 42 d2 d9 2d 52 c2 59 4b e3 63 f2 c7 de ab bf dc f2 35 a9 f6 5e 6e 72 fc 5f a2 0d 95 d4 44 bf 62 c7 55 ef d1 35 0c f7 a9 d0 cb b6 54 cc ed bd 65 ef 09 9f be 2a 36 4d aa 85 26 a9 9f 81 e5 4b 90 cf 8b 7d 55 df cd be 7b 60 d7 4d 2b 30 4c 8a 46 ce b6 ac 2e c9 7c e3 56 13 1b 7f 58 fe 81 50 cc fa 0e 71 c4 9a Data Ascii: Ly/%^Ky-^Ky( {[}6_3`[Jv6m\|}KRzb;&5I>vf`'o[S<027ZKcwlqISCVB-RYKc5^nr_DbU5Te*6M&K}U{`M+0LF.\|VXPq
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: f7 b0 1f a9 bd e4 31 0a 3a 92 9d cf 3e d3 14 3c 53 21 22 5e d0 d9 29 e9 ec 44 86 49 60 71 28 4f 69 c6 80 79 b5 a6 86 21 6b b3 75 ff 00 d9 42 10 9c 4a c1 38 f2 40 53 94 92 85 a3 ee 82 b0 77 c1 5f 77 55 58 10 83 99 dd 60 d2 82 e3 96 c7 1c 30 a5 94 31 c7 01 48 de 71 94 55 2a 73 d8 37 ea ab 69 42 69 17 42 45 de 30 2d 45 e7 a0 6c 1f 2a ea 30 5c 8e bf b2 08 c4 e1 77 6c 69 08 4c 2f a2 b1 9e fe 51 7e cb c8 22 54 72 53 d5 c6 ca 7a 7b e6 7a 1d 07 d3 19 f8 04 d9 ee 29 02 53 09 93 bc 4b 40 86 ab bb f3 fe f2 c8 3f 42 68 fb c9 cc 33 be 97 98 4b 5e bf 7e 33 c9 79 2f ce 0f 13 1f 34 b5 4b c9 6c 97 92 d7 ab 6e f3 ba e9 1a 9f e6 9c 6f 4d c0 e7 aa 59 5e 77 5d 27 d1 9e 93 ca c1 17 1e 5e ff 00 48 de 12 f3 9b d6 ae e7 14 88 12 04 ba 40 9f 15 c2 b2 ae 3a cd 2c 51 f4 5a 74 4e be Data Ascii: 1:><S!"^)DI`q(Oiy!kuBJ8@Sw_wUX`01HqUs7iBiBE0-El0\wliL/Q~"TrSz{z)SK@?Bh3K^~3y/4KlnoMY^w]'^H@:,QZtN
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 2c bb a7 01 67 d4 d6 8e c2 3f d3 4d 70 1e 30 7c 55 f7 ca ba b3 ef be a2 8f 11 48 2f 08 cc 77 55 28 14 ee fc 84 6a b1 55 d3 14 49 33 92 f2 c2 7b 51 60 e2 47 0a 46 1e a1 34 13 24 4a 84 1d 9d 5b 73 47 62 da 81 62 02 de 11 36 35 40 b4 79 a8 fd ea 1e 48 fe f7 ca 2c a2 77 4a 74 2b 93 c7 c6 ae ca ba 1a 29 31 23 a3 1e 66 07 b0 19 e2 fe 66 49 49 b0 9a 52 fb 28 f5 43 f1 6f d5 2f af a2 64 e6 0f a0 f8 e3 a7 f3 b7 d9 50 94 e1 d5 97 b9 b4 d9 a3 53 be 0a f2 c3 ab fc f7 e8 8b f4 ab e0 aa 54 f2 9f 51 a8 0f 98 6d ac 43 c7 6e 6c 0f 75 78 e6 85 91 0a 25 a5 39 7b fb df 48 85 15 68 0a 4b 1e e9 5f ae 8e 3e c4 4c 73 a6 11 1d e6 16 76 28 e2 a2 16 96 74 4d b0 d6 15 ea a3 4b 7f 33 5c bd 24 06 23 c3 9c b6 cf 1a 51 e8 12 38 fe c5 59 10 bd 6c a7 21 75 c6 b7 8e 43 3c 26 bf c5 25 60 31 Data Ascii: ,g?Mp0\|UH/wU(jUI3{Q`GF4$J[sGbb65@yH,wJt+)1#ffIIR(Co/dPSTQmCnlux%9{HhK_>Lsv(tMK3\$#Q8Yl!uC<&%`1
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 5a 49 d0 bc 7d ef 25 1f 64 c7 07 50 d3 1a d6 f7 64 26 b6 53 36 14 6d 32 78 a8 2a b2 04 e4 1e 10 99 d6 37 b0 b9 f2 a7 37 4f 34 62 c8 70 cb 5d 01 51 bc 58 d4 a4 25 33 ce 2f 49 33 f3 29 52 74 3c 52 5a c5 cf 4d 33 92 fe 37 64 c4 9f cd 38 d1 ce 1f 4c fe e7 c2 ba 37 8d 35 67 71 92 2d d1 bc e6 b7 4d 48 d4 31 1f 71 0e d5 a8 be b8 71 64 2b ab fe 81 ec 8e c9 19 5a 4c 40 83 2c 7c 3d 38 1a 55 a5 7a ee d7 86 8f 85 f1 3c 0c 3c 20 05 89 31 e6 e3 37 7a 49 10 b5 de 33 8e 4c 33 79 c1 24 3b c2 c4 8b cc 3e 3b 60 79 00 bc ea 33 a3 f9 16 f1 b0 02 c8 80 b9 94 70 75 32 3d 75 83 47 d8 c8 74 34 13 c8 9d 51 49 fc f0 e6 41 b5 d4 b1 1c c6 29 31 17 09 01 14 44 0f 6d 6b 49 51 8f c5 75 8a 42 d4 26 82 b2 43 f9 a7 53 ce 29 40 32 a2 aa 65 73 1b 2a 86 ee 05 79 c3 21 e9 08 49 4c 4a 8c c7 8f Data Ascii: ZI}%dPd&S6m2x77O4bp]QX%3/I3)Rt<RZM37d8L75gq-MH1qqd+ZL@,\|=8Uz<< 17zI3L3y$;>;`y3pu2=uGt4QIA)1DmkIQuB&CS)@2esy!ILJ
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: cd 44 1c 8f 35 47 05 f9 95 75 8d 95 7d 36 51 29 d7 ba ca 62 02 56 c1 70 e2 5f e2 b0 48 5c fe 8a 0d 75 fa bc 84 81 2b 07 1c 89 e6 0d 1d 5b 4a 61 b2 5e 19 d7 2b df 87 16 9f 65 22 d6 71 df 53 4e 1f bd 08 a4 4e b3 9c 2c 89 b2 63 5c 81 2c d6 9a 5c f2 8a 51 1c f7 b9 e9 fe 37 2b bc c0 67 c9 27 23 96 02 c5 82 f6 d6 ac 43 22 b1 e4 41 b8 2d 45 17 fa fe a8 9c 7a aa 39 1e ee 2b 95 7f cb 54 45 e3 7f a1 55 ad 57 3d 10 8f 5f ab 62 a8 91 00 47 c7 56 39 5b 03 32 0c c3 cf 63 a1 8e 26 5d 55 2c c6 16 51 98 c3 b1 25 ab df 0d af 64 d8 84 25 7c 72 be ed 91 de 3c 8d 31 d1 57 cc 91 79 36 6e 41 10 39 04 f9 61 39 c4 68 70 85 36 6a 08 f9 16 23 12 f2 3c c3 d9 d7 b2 34 99 16 77 75 27 05 a8 33 cc cf 1a c1 aa 71 7d 9f 92 e5 33 21 a7 c8 32 81 df 26 64 72 56 33 62 41 95 67 2f 52 60 b3 71 Data Ascii: D5Gu}6Q)bVp_H\u+[Ja^+e"qSNN,c\,\Q7+g'#C"A-Ez9+TEUW=_bGV9[2c&]U,Q%d%\|r<1Wy6nA9a9hp6j#<4wu'3q}3!2&drV3bAg/R`q
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ad 7a 73 fd 3d 91 39 ec 8b c7 3d 89 c4 46 b9 05 ea d6 90 ea 35 01 d4 8b ec d5 e2 a2 3d 31 ea a2 12 38 e3 30 6c 8e b5 2e e2 49 0a 71 27 c4 f0 f7 56 99 65 c6 80 e0 44 33 43 78 d8 b1 e4 a2 63 a1 29 24 63 62 42 4a a4 14 77 0e d2 50 d5 6e 0f e1 d9 03 17 8f b5 2b df 1c aa 61 38 ea 3e 3c 9f 2a f8 4e 2a 2f f9 3e 9f 27 1d 1d ec 6a 1a 32 2b c7 14 ce 95 41 04 88 5c 5c 2f 79 31 83 35 ae a8 b6 0b 09 f7 71 84 d9 0d 2b 98 f7 71 b2 ed 51 7f 90 92 2e 25 e0 d3 83 b2 0a 71 ee 19 38 e9 a6 13 bf 9a 94 c7 32 ed 3d 63 db c7 98 b6 a2 34 ae 62 f2 5a c8 c0 3f ca 05 ff 00 e0 55 f9 13 e3 6a a2 3d cd e2 4c 23 52 21 7e 43 93 e2 3f 0e d7 03 84 31 d1 44 a7 21 05 2a 63 24 c5 14 29 63 95 13 c3 e2 3b e2 68 65 13 c4 83 30 4c 8e 68 c6 69 9a aa c1 18 5f 2b 0f 33 cc b2 39 8d 6d 84 66 f0 f3 5a Data Ascii: zs=9=F5=180l.Iq'VeD3Cxc)$cbBJwPn+a8><N/>'j2+A\\/y15q+qQ.%q82=c4bZ?Uj=L#R!~C?1D!*c$)c;he0Lhi_+39mfZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	62728	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	724	OUT	GET /wp-content/uploads/2023/01/0hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 09 Jan 2023 20:27:49 GMT Accept-Ranges: bytes Content-Length: 692099 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 22 2b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 31 3a 30 39 20 31 37 3a 32 36 3a 33 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "+ExifMM*(1!2i$''Adobe Photoshop 24.1 (Macintosh)2023:01:09 17:26:30
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: da c7 ff 00 3d b6 d7 3b dd 45 6d b3 d4 f4 d6 8e 47 49 e8 99 9b a9 ad b9 18 b9 0f 79 6b 2f b9 d2 d7 3c fd 0f 59 bb 7d 3f 4a c7 3f 67 ea ef f5 2a ff 00 08 9b 03 ea e7 53 66 59 ca c9 ae a7 56 d6 bc 0b 59 78 3b 9e 06 c2 e6 6c de ff 00 de af df fd 7f e6 d3 0f 33 03 8c fa 84 32 81 be 58 c6 1e e4 a3 fa 5c 3c 5c 1e af ef 32 86 ed bd 06 69 ad fd 0b 28 d9 9b 8a c1 ea 34 b8 56 db 18 e0 77 ba ad ef 76 d6 ed de cf f8 2f f0 9f e9 16 45 76 e5 d1 5d 38 59 bb f1 6b 63 a1 8c b0 39 d5 c9 1b b7 b0 39 cd a3 dd fe 92 ad fe c5 7e ab b2 69 b1 f9 34 b0 d3 6f aa ca ab dc e2 e0 08 dc 5f 2d f7 ee 6e c7 7f a1 ff 00 8a f4 95 bb 7a bf da 29 a2 8c b6 8c aa 5e 36 5f 0e df ba c1 fc d6 5d 47 6f a9 8b 73 1e fd bf a2 ff 00 8b 4d c5 cd 73 38 a4 0e 99 63 a5 ca 35 8f 2f ef 4b f9 bf 47 fe 93 59 Data Ascii: =;EmGIyk/<Y}?J?g*SfYVYx;l32X\<\2i(4Vwv/Ev]8Ykc99~i4o_-nz)^6_]GosMs8c5/KGY
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1f f7 5f a0 8d 2f 57 ff d2 c4 ce ea 63 24 58 31 4d 34 31 f6 39 b5 fa 7b 98 49 1e e7 5c cc 6a 3f 46 da 37 7b 59 b5 ac ff 00 b6 b7 d8 a1 8b 75 7d 3e aa ed 60 a1 f9 b6 7a 84 5c e6 b8 34 b1 85 8e f5 b2 eb c7 fa 55 54 e6 59 6d 7b 7f 5b ff 00 0d 6a 8d dd 11 f5 6c 7b 2a 6f a9 5b 1b 95 91 69 73 83 2b c7 2d 6f a4 d0 ca dc 7d 9e 91 63 bf 47 fa 4f e5 ac df b7 5d 65 ac a2 82 43 5e 36 d9 6b e1 8e 74 02 7d 4f 68 1b 2a ad bf 42 a7 7a bf e7 aa 30 8c 64 08 86 df a4 65 dd 04 d1 7a 46 f5 07 1b 6c c7 eb 4d 7b dc ff 00 a1 45 7e 9b db 27 6b fe d9 8b 5e 33 6a 7e cb 7d 9e 9d 96 3e eb 3d 25 43 a7 d1 87 d4 da e6 bb 05 8f a8 3d e4 33 1d de 93 f6 33 f9 e7 b6 f7 7e e3 7f 4a ff 00 67 e9 3f 45 5a a1 f6 b0 ca aa a7 29 ad b5 f8 e0 55 b3 d5 3e 99 00 ee 63 99 f6 47 b5 ff 00 a3 fe 62 b7 7a Data Ascii: _/Wc$X1M419{I\j?F7{Yu}>`z\4UTYm{[jl{o[is+-o}cGO]eC^6kt}OhBz0dezFlM{E~'k^3j~}>=%C=33~Jg?EZ)U>cGbz
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 68 55 19 c3 3c e1 c8 f3 93 f1 76 1c 81 a3 d1 9e 08 c9 30 b4 47 e4 3f 85 f4 8d ce e0 f5 2c 1b 18 ca a6 91 2c 6b 26 68 d5 d4 9c a8 e4 f6 66 ac 5d 60 d6 87 78 83 9c fd ba 47 e7 30 98 1c dd d8 99 15 4c 7a a8 fa ec c5 5a 6b f4 3a 5b 45 af d1 a1 10 af f4 8f 6c 47 07 9c 93 18 ba 27 cb 9b 12 5d db 75 57 43 cf 01 18 12 1a 1d 2e 24 79 19 b4 ef 39 b8 fe a5 fa e8 be 23 11 39 57 64 cf f0 da 9e a9 57 9e 71 72 95 3a 84 27 67 ce 73 1b 1f 1d 57 d3 b7 22 95 b9 dc e3 b4 bf a7 02 50 6a f0 e2 a1 52 34 5d 1c 1c 1a 7e f3 32 27 24 f5 5c c6 fc 58 5d aa 4a 76 1f 9b b7 cb f0 2b 05 2f c8 e1 52 e3 d7 9b 75 5c 81 02 4a 57 9c 5a b3 df 3e b7 a0 d2 a2 6b 2e 2c 51 94 33 5e 50 fb d7 2d 12 53 ed b4 bc 9a d3 c9 63 87 4b ce 0a 10 ae 43 26 b2 d3 dc fb 35 47 60 38 0a d5 98 fb ef de 63 db 28 d5 Data Ascii: hU<v0G?,,k&hf]`xG0LzZk:[ElG']uWC.$y9#9WdWqr:'gsW"PjR4]~2'$\X]Jv+/Ru\JWZ>k.,Q3^P-ScKC&5G`8c(
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 2f 79 f9 f7 3f 11 55 9a e3 eb ad 83 4a 51 7a c8 13 1f 99 3e be 43 f4 5d f0 89 6b 9b 3a a1 97 92 cd 4d 4e 12 ef e7 93 e4 13 d8 cf c3 b9 f2 0a 90 46 94 e9 ab d0 6c 4a e6 b6 df 54 8e e9 62 0f d5 38 aa 15 b0 81 f0 51 13 90 d0 49 bd cc 55 af 32 5f 2f ae 94 83 a1 9f a0 5a 4f 77 01 ff 00 cc 06 c5 be 58 81 e1 95 06 b8 97 e8 34 cd 9a dd 6c d9 5b 54 15 92 1d 0d 1a 9b 75 1d 92 5b fc 7d 84 e5 db 1b 27 9b 9f d9 de 13 63 e7 ab f4 42 bf 9c fd 0b 5c a4 d8 61 45 21 cf ec bf 23 a6 b5 fd 99 21 8b 00 b2 e4 23 21 4b c5 50 f1 58 27 fa e8 e0 54 6a cd ff 00 ca 54 b2 5b 2b 0f d0 6c 27 23 42 ef 17 4a d7 64 8f aa 41 a7 80 e8 36 9e 06 51 5c 43 8d 74 06 b4 6e fb 93 19 ff 00 44 b8 f6 6c dd 77 2d f8 0b a2 1e 0e a0 ca 34 8a cf 94 e7 76 21 b1 6d 3d e7 0a ff 00 3a ef e1 a9 33 11 66 d8 63 Data Ascii: /y?UJQz>C]k:MNFlJTb8QIU2_/ZOwX4l[Tu[}'cB\aE!#!#!KPX'TjT[+l'#BJdA6Q\CtnDlw-4v!m=:3fc
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 0d cd 1c ab 36 3d bc 77 dd c2 99 68 f6 2d 4d cc c8 d9 32 c6 9f 63 2f 10 79 60 87 46 ce fe 66 de 06 25 da e0 a3 17 cf 69 16 19 65 85 cd ed a5 ac 64 52 93 d0 33 7b f5 c8 8e 3f 3e 5b f2 a7 f4 7f 0e 29 60 da 14 8e 08 3b e7 9b bb 33 5b 7c 58 1f 45 ff 00 9b 44 b1 b3 b4 e2 6d 7e 77 6c 70 b4 22 a9 46 df 45 5d 39 d4 9c 46 38 f3 cd 8b 94 cd 7f d0 aa ca 1f d0 d4 f1 3b 6f 0e dd 95 18 f7 dc 8a 7a b0 99 71 ed 4b 87 5a bf 5e 27 8d cf a5 fc 51 06 c9 07 46 f5 2c d6 85 48 b3 ac ee 48 f3 23 e5 a2 dc 33 f5 21 9a 68 82 5c b1 5e fc 2e 50 de 1c af c0 e5 4b 4a 68 a6 62 0b 61 61 ae 6e 39 e0 39 fd 5d 2d 96 14 6b 3d 92 6a 98 ed 52 91 a7 91 08 a6 80 65 35 ff 00 92 7a db bd c4 87 53 4e 80 f1 9e a8 0e 65 b1 62 7f 37 df ad 40 f3 67 a8 06 8b c1 4a a2 53 cc 0e c9 36 4a 65 8e 45 2e 2a 1a Data Ascii: 6=wh-M2c/y`Ff%iedR3{?>[)`;3[\|XEDm~wlp"FE]9F8;ozqKZ^'QF,HH#3!h\^.PKJhbaan99]-k=jRe5zSNeb7@gJS6JeE.*
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: a4 b2 ba 7d f5 5d 4e 76 09 b6 fa 3d 64 bc 7f 38 ac 86 0e 17 2a a6 c2 ba a9 6c a4 29 91 ae 6a 48 56 8d 1e a5 72 e7 a0 0c fd 32 9a b2 96 5a c1 bb 1e 92 b8 2a 28 e8 04 62 89 e4 f9 92 88 3f 23 a8 d4 42 37 cb 87 3d 57 c8 aa f3 3d e8 a3 71 5a 50 34 6f 2c 85 40 b8 6b d2 38 fd 1e a0 35 81 ff 00 57 55 73 dd e7 5c 13 a0 fa cd a0 b5 36 4f 86 c7 a2 15 16 75 95 40 c9 8e c6 50 e7 68 ab a0 02 f6 b2 fa 76 a3 91 ed 6a 1b 2a fe 15 c1 92 82 50 2b 2b c5 2c 64 65 75 32 27 96 73 81 0c 65 11 5f e5 64 5f ab d9 4b 1d 84 bf ad 79 c0 b1 08 f6 2c 47 22 74 5e 4f 4b aa 89 5f eb 74 ec d9 b0 e6 00 ea e5 6c 61 c4 93 6b 71 25 e7 b6 a5 ae 74 8b 68 10 41 5f 5f 87 b4 99 33 9f e3 db 53 11 19 f4 f0 cf fb 79 20 0e 5f 05 11 15 a3 82 8a f3 ca 1c 69 30 ca d9 22 14 17 05 93 23 35 48 38 de 42 8c 69 Data Ascii: }]Nv=d8l)jHVr2Z(b?#B7=W=qZP4o,@k85WUs\6Ou@Phvj*P++,deu2'se_d_Ky,G"t^OK_tlakq%thA__3Sy _i0"#5H8Bi
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1d 2c 14 53 67 76 78 84 35 87 b0 96 52 2b ad 3a 66 96 f2 66 de fe 9e 96 e7 9f 76 1b 4b 9b 18 b3 3f f0 bd 57 ea 69 0c 13 96 bd 1c 79 81 45 f1 55 5d e4 a5 6b 9c 17 aa 79 25 8a 74 ff 00 af 81 a7 c7 6e 61 cf 8d 98 ea 76 0b 2b 3d ac 74 d2 44 94 a7 45 44 70 c8 9f 47 d6 47 63 7c 7b 1a ae 58 e9 f5 6c 86 ab 20 7f 8f 0e 49 48 93 4f f9 45 15 15 eb be e7 70 6f 13 ff 00 5a db c4 f0 9a b9 54 14 10 7b 2d 81 b4 73 21 4d 0c 9e 8b a4 24 c6 8a 13 15 0f 29 7e b5 f5 ae 99 2b 15 95 8b 56 35 72 7c 7d 5a e7 01 18 46 97 fe 7e 1c 4e 72 94 df 24 2a 8c 9e 1e 22 39 cb ff 00 c2 a7 d4 73 08 e4 29 84 a4 1e 97 97 8c 8c b6 ae 91 5a 41 1c 4a c6 c8 6b 9c ba a9 6c 78 6d ff 00 fc 8d 95 14 05 74 5c 7c 3a 6b 3b 5c a5 88 ec f0 71 2b df 5b a3 cd c9 9d 15 69 74 63 bb ab 14 68 2f 7c bf b3 06 8d 1b Data Ascii: ,Sgvx5R+:ffvK?WiyEU]ky%tnav+=tDEDpGGc\|{Xl IHOEpoZT{-s!M$)~+V5r\|}ZF~Nr$*"9s)ZAJklxmt\\|:k;\q+[itch/\|
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 92 1d cb bf 1c 79 2d 77 92 91 3e 3f e2 a8 63 b1 7c e8 57 c5 b2 8f 59 9d 4f c4 5e 3d fe be 0e de be 35 b1 29 31 10 8a 9c fe 24 37 cb d0 61 61 45 36 26 9a 35 dc 3b 32 ba 3d 9d 64 84 1c ba ed a5 60 e9 e1 f5 f6 57 0a db aa dd ca f0 f3 e4 1d 51 a9 e2 2a 33 c7 bb e1 c8 e4 f3 eb f3 e3 51 15 1c c4 54 00 d5 7c a0 e7 13 95 d4 55 83 70 cf 09 a8 f7 4a 90 34 fc 27 1c 7c dc ff 00 d9 65 b2 a0 c4 17 2b da 56 a9 91 d1 5e 84 22 b7 e3 57 cd eb 1f 65 a1 e0 24 0b 6c 73 f3 60 9c b5 62 47 8f 28 f7 37 3d 41 fa 24 1d 8b 9c d0 c5 42 3b 71 c8 99 71 63 4f c7 f7 0d b2 ed fa 89 90 9f c0 59 3a aa 9f 4d 65 63 b1 b9 e5 be ba c9 a2 b9 3c 94 22 6b be 87 93 cc ea 52 35 6b cc f4 55 2f cb 43 f8 9b e6 ba dc a8 1b 4c 7b 47 2a d3 4f 59 58 20 58 1c ad d6 d9 c7 b5 a4 93 ab b4 58 31 e0 36 c6 55 a4 Data Ascii: y-w>?c\|WYO^=5)1$7aaE6&5;2=d`WQ3QT\|UpJ4'\|e+V^"We$ls`bG(7=A$B;qqcOY:Mec<"kR5kU/CL{GOYX XX16U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	62729	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	725	OUT	GET /wp-content/uploads/2023/01/00hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 09 Jan 2023 20:27:52 GMT Accept-Ranges: bytes Content-Length: 660663 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 20 b8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 00 00 00 01 01 00 03 00 00 00 01 02 0d 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 31 3a 30 39 20 31 37 3a 32 36 3a 34 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 24.1 (Macintosh)2023:01:09 17:26:46
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ef 43 f9 da ff 00 a7 7d 2f e6 ae ff 00 5f f3 17 12 92 a5 97 f9 9c 9e 7f f7 4d 83 f3 45 ec 1f fc e6 4f 1f cc 55 f4 7f ad 4f f4 3f fb bf fe 87 ff 00 41 d5 7e 89 ff 00 6a 7f a4 ff 00 35 7f d3 fe 8f fc e6 3f f3 ff 00 fb b5 ff 00 09 e8 2e 5d 25 5e 7f cd cb c8 7f d1 59 d4 bd 6f 4d ff 00 c5 17 e7 7d 13 fc e7 f3 7c 9f a1 ff 00 75 ff 00 ef 8a 9f 5f ff 00 94 bf 33 e8 8f a7 f4 7e 93 bf a0 ff 00 dd 6f f4 7f f0 9e a2 e7 92 51 c7 fd d1 ff 00 52 8a 8f ca df ab f9 97 7f 35 fd bf e7 39 7f d2 ff 00 5f f4 6b 63 27 f9 ee 95 f0 af fa 9f 49 bf 47 f9 3f e8 bf ee af a2 b9 84 94 ff 00 e5 e1 fd e9 7f d0 4c 7f 4b f9 75 7a fe b9 fd 27 ab 71 fc f5 1f cd ff 00 3b fc cb bf f6 57 fe fe a8 74 0f a7 67 f3 9f 45 df cd 73 cf fd a7 fe 47 fd c9 ff 00 82 5c fa 4a 29 ff 00 37 97 fc 0f fd 27 05 Data Ascii: C}/_MEOUO?A~j5?.]%^YoM}\|u_3~oQR59_kc'IG?LKuz'q;WtgEsG\J)7'
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 88 90 e8 8f 0f a2 d5 09 12 32 91 34 41 3c 51 d3 e5 64 96 4f 4c 63 db f8 36 3e c7 7b 71 69 ce 35 b2 da 2c 3b 40 71 20 30 ee f4 9a e7 c3 aa b1 ad 7e cf d1 5b 5f e8 bf 9c ff 00 47 63 16 95 b8 78 2c af 27 36 ba 83 71 a8 73 a9 b7 1e b2 f9 2f d8 5f 53 9f 63 87 e9 b1 ee 7f a7 b1 8f b7 d5 ff 00 ae 7f 38 0e a0 dc 5c c6 37 33 17 25 94 be 96 b4 fd 85 c3 61 6e d0 7d d5 3e d7 6d b1 8e f6 fe af 8f ff 00 19 fa 3f d2 2d be 83 66 3e 2f 4d aa fc a3 5b 29 af 73 99 61 ac b7 f4 8f 2e b2 b3 7b 5f ef cb 75 56 b6 ab 19 b5 9b 3f 9b ae b5 4f 36 59 7b 62 67 8b 8b 8b 87 80 09 46 5e ad a3 fd 69 7f 5d 50 02 e8 55 55 da 4c 6c ab b3 72 36 d3 73 18 df 4d 96 e3 b9 82 1f 51 a1 ad f4 b6 c8 af d3 fd 1d 5f 4d 8d fc cf e7 2c f5 15 fc 8b ba 86 5f 54 c5 ad cf 9c 49 35 b0 56 1a db 2e 70 6b 32 ee Data Ascii: 24A<QdOLc6>{qi5,;@q 0~[_Gcx,'6qs/_Sc8\73%an}>m?-f>/M[)sa.{_uV?O6Y{bgF^i]PUULlr6sMQ_M,_TI5V.pk2
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1d 51 ec b2 fa 59 32 1b ea 41 e0 61 f7 5c 2c 84 e6 a6 72 dd 01 36 bf 8c 1f 17 f2 65 bf a9 16 45 66 1e fc dd fc 04 66 fb 33 9e 6a 03 3d 2e d5 59 46 36 e1 9f ac b7 57 9c ff 00 e1 61 75 57 26 4e c0 9d 65 14 2f ac e7 d6 77 d1 08 5d 6d 96 79 05 d3 af fd 44 bc 96 58 b7 ca f4 43 0f 4a 46 88 40 79 3a 61 79 f6 48 4d 88 80 b6 0f b6 21 2a c3 33 29 6a 6b ba 2d 74 81 e5 41 e2 cc 4d 9d 1e f5 74 76 43 26 fc 09 3a e9 fd c4 18 8c 5a bd d1 c5 e0 de 0c c9 0e 8b 64 f7 4a fa 5d b0 c1 9d d1 a8 19 61 2b 67 a7 5e 60 33 78 ad 8e ac 51 11 5c 96 f7 35 f4 2a 6c 59 96 e5 c3 b6 13 6f 61 3a e7 21 63 b4 4a 96 70 73 9e 95 a0 7c 71 d6 2e cd 22 d3 e4 57 a9 f1 e1 71 21 9d 46 be 87 80 f1 be ac 5e 8b e3 14 cb 6c 3f c7 bc fb 4b 9d bf 63 74 a2 3d 34 1c 87 a3 cf cd db 99 7c 58 9f 34 bd ea 13 f5 Data Ascii: QY2Aa\,r6eEff3j=.YF6WauW&Ne/w]myDXCJF@y:ayHM!3)jk-tAMtvC&:ZdJ]a+g^`3xQ\5lYoa:!cJps\|q."Wq!F^l?Kct=4\|X4
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d7 3b 59 a2 03 aa e7 24 0f 07 e8 c9 85 eb a6 58 ac 4b 20 27 34 c0 3a 86 65 d7 2b 52 1a 23 19 18 3a 8e b8 27 93 0d 16 5f 34 b6 e1 c6 cb 9c 72 28 ef 9e b5 be a5 42 3a ef 74 62 67 c6 c5 65 a4 de a1 c0 1a 95 9f 6c 44 32 b5 55 91 55 86 67 63 53 80 ff 00 74 26 58 50 b2 00 ed d5 4f ec 7e ab 99 4d 78 e9 68 59 bf 3f 37 73 c2 bd d8 4c a1 36 25 7d 6b a6 d2 e6 fd 67 68 b1 aa 99 44 3c 60 e4 19 d9 3f 6c b2 eb 7c 0c b6 f0 23 c3 48 91 6c c8 8a dd 44 8f a3 a9 72 08 50 a0 d0 88 4c 91 5b 79 b2 6b 44 10 3e 58 d5 9f da 40 bf 93 7f a6 39 1d 6d ae c0 1b 8c fb 58 69 c8 4d 6a eb 76 8e ff 00 d3 4f 3f b5 39 0d f9 3a 8f 9d 0b 37 ad 6e 18 09 9c ae 55 db 4c 92 75 d0 af d5 a8 52 fe b7 2b de 7a f4 be 47 92 83 c7 db a0 c3 b4 07 7f 6d f8 c7 42 f4 67 c4 b6 0c c4 d4 87 27 3b 74 39 52 f0 e9 Data Ascii: ;Y$XK '4:e+R#:'_4r(B:tbgelD2UUgcSt&XPO~MxhY?7sL6%}kghD<`?l\|#HlDrPL[ykD>X@9mXiMjvO?9:7nULuR+zGmBg';t9R
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b9 a9 d7 34 b3 16 94 fb 72 89 71 29 46 8a d5 83 da 6f 56 31 19 5b 48 9e d2 92 d5 5e d7 76 60 c4 8d 98 ae 78 75 55 63 3e b7 9a a2 67 76 a6 b8 f8 fc c5 da 5c 40 9f 40 45 e3 25 25 10 cd a2 fd 48 37 49 9a f3 6f 8c b3 aa 1c cf 12 ca 3d 5a 81 85 b3 1c 43 d4 3a f3 1f 27 3a 61 bd 21 c4 5e 6a a9 25 90 5d 61 87 b3 3a 7b 2a 7a 09 a3 b5 29 c7 02 a1 2b 15 ba 7e bc 10 bd 40 6e 29 12 3b 48 14 98 5f cb 54 ec d1 6c 43 5a 1f 4a 29 76 6e 37 a3 8e 8c a3 58 c9 39 4e 0e 46 9f 19 f0 95 2e ea 09 6d fe fb 6f d9 64 29 b3 d4 e8 4c 26 1b ab 7a 73 a5 cf b2 6d f9 a5 a7 1c be 60 34 38 a4 28 63 57 2a 51 4c f6 d1 01 89 6d 95 9e f2 db e2 88 4d b0 ce ed 1e 91 79 f2 f0 01 99 f7 82 4f d5 ae 64 36 dd 2b 5e bf 3f 9e 7e 8e c9 68 8c 6d d7 1e 43 f3 c7 df 21 a0 ee 1e a4 fd 06 f8 8a eb 16 9d 3e 76 Data Ascii: 4rq)FoV1[H^v`xuUc>gv\@@E%%H7Io=ZC:':a!^j%]a:{z)+~@n);H_TlCZJ)vn7X9NF.mod)L&zsm`48(cWQLmMyOd6+^?~hmC!>v
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 9b 8c 93 68 3e 3a 56 52 b8 7e b7 57 0c 69 28 98 93 35 27 c2 72 f0 ae ca 70 4c 44 e2 73 00 99 27 26 40 3e 53 f9 42 41 02 f1 c9 c8 a9 c1 e7 a0 26 f9 31 50 aa 1c c7 39 4d ec fc 86 71 ca 9a 26 15 c3 fa 0a 65 55 44 9b a8 a9 4c d1 4f 1c 90 4c 78 f1 70 e7 cd e4 53 51 42 8c 2d ec e5 21 2f a3 e2 35 c7 e6 f2 69 53 fe 14 2a a4 1e 27 28 b1 9c 3b 58 03 8d 14 ff 00 8d b0 ff 00 63 a0 00 2e d1 27 b9 c8 98 15 03 01 08 d9 75 c8 06 51 c1 dc cc 47 aa ec 5b 32 5d 02 95 a1 d5 28 48 4c 19 a4 2c 43 89 15 4d 23 14 dd 59 af 00 59 e4 d9 4c b1 b7 45 b9 20 3c 98 12 f2 46 e8 d5 54 54 3a 64 55 ba e1 f2 23 ec 99 0a 50 4f 85 12 0f 14 0f e0 48 23 cc 5e 69 64 8c 26 01 32 cd c8 05 fc 72 09 df 44 b7 78 8d fb 35 5a 3c 4c a1 55 32 a6 f0 62 2b ee 00 25 28 03 a0 2f 13 28 88 d0 2f 6e e0 dd 54 ac Data Ascii: h>:VR~Wi(5'rpLDs'&@>SBA&1P9Mq&eUDLOLxpSQB-!/5iS*'(;Xc.'uQG[2](HL,CM#YYLE <FTT:dU#POH#^id&2rDx5Z<LU2b+%(/(/nT
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 97 e5 12 97 d1 23 a0 22 df ea d5 16 28 bb 7c e9 e2 c5 8f 71 1c 97 20 a4 23 d2 95 84 ce 48 98 ec 43 4e 86 64 d2 be de 35 28 96 4a c9 96 d7 5c 50 2c 51 d0 2f 9a be 06 3f 22 51 56 14 dd 32 be e7 2c 1a 4b d7 1c c3 40 46 48 d6 dc b9 90 0b 87 c3 27 11 40 74 89 da 44 00 88 fa f3 d8 a6 03 3a 32 61 6e 8e 9a 76 dd 88 1c 8d d5 51 43 03 86 1f cb 63 09 54 33 72 24 57 17 26 e8 4b c7 2c ed 44 d1 30 97 8e 5d bb 7b 3a a4 8a 2a a2 dd 05 8e 8b 48 71 54 a9 22 a8 1a 12 35 14 85 d3 7f 26 8d 8f 30 19 d9 0e 55 0e 62 fa 3a 70 b7 85 8f f1 09 e6 12 4c ad fe 47 7c 5d b1 48 45 57 70 63 40 56 9c 1d c4 44 7a 48 ab 0e f1 14 1f b1 f2 98 5c 9f b6 06 b6 87 8b b9 55 d5 80 e4 38 e8 07 14 5c b9 55 63 a2 a0 79 8c 58 3d c1 f8 fc 59 45 fd 77 8e d0 76 64 92 07 02 98 b0 d0 64 08 d1 ab d5 14 76 8b Data Ascii: #"(\|q #HCNd5(J\P,Q/?"QV2,K@FH'@tD:2anvQCcT3r$W&K,D0]{:*HqT"5&0Ub:pLG\|]HEWpc@VDzH\U8\UcyX=YEwvddv
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d9 46 29 29 fe ad 83 b4 a0 a8 ae e4 ae 67 4f c7 01 12 18 5e 46 1d c1 54 a8 a8 75 5a 43 11 31 66 df e2 23 e6 52 62 fa 24 eb 26 d2 29 57 6e 5b a4 90 94 0c a0 17 9a 1d f5 e3 35 09 25 20 f2 3a a9 98 27 1e 1a d4 0c 6a 01 59 87 48 0b 67 b5 0a e0 2b 37 f8 ea 2e d2 22 ce ea 69 c7 a6 a2 04 f1 1f 5e 74 f1 34 24 58 b5 35 b9 65 9e 4e e5 f2 9f 31 5b c6 bb 7a ba 95 36 71 83 63 b7 b9 78 5b 12 6b 0a 55 76 2a 8b 5a 2e 90 dd 59 79 fb aa 52 ec ac f9 89 de c6 d5 22 20 c0 ef 8d 07 16 df 45 62 d9 79 08 eb 13 75 82 2e f2 56 aa 5a 13 46 6e bc c2 c2 f6 3c 6c d0 6d 92 9b 7e 9c 74 58 52 63 13 7a df 3d cf 5d c2 cb 58 62 92 8c 77 41 9c 7a 9b d8 0b aa 8f db 54 ae 93 c1 1f 1f 2e fa 5e 34 b1 28 95 14 d5 30 f3 c8 94 51 6e 50 29 7d 84 52 f0 9f 2a c2 43 20 d9 33 28 33 ab 18 a8 24 54 cd c5 Data Ascii: F))gO^FTuZC1f#Rb$&)Wn[5% :'jYHg+7."i^t4$X5eN1[z6qcx[kUvZ.YyR" Ebyu.VZFn<lm~tXRcz=]XbwAzT.^4(0QnP)}RC 3(3$T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	62730	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	978	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-05.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:02 GMT Accept-Ranges: bytes Content-Length: 132713 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 20 69 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 36 3a 31 30 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: iExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:06:100
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 6e bf d2 b5 9b bf 4b bb 67 a5 63 13 48 f4 9f 0d 65 6b a3 b8 d3 7d 9b 17 36 cb 2d 26 9f 4e c7 88 79 74 07 16 b4 01 b5 c5 cc f7 b9 8f 76 ff 00 4d df e8 7f 4b fe 16 a4 1b 5b 75 90 5a e7 d6 e7 49 73 4b 4e a4 7b 47 b1 e3 f3 f6 fd 24 f8 95 e7 db 99 bf 2f 3c b5 83 61 2d 76 25 60 fa 86 37 57 4f a4 71 eb fe 6f 77 e9 6f f5 bf e0 15 9e b4 6d 1d 58 e2 55 ea 3b 1c 55 53 9b 73 e4 4b 9e 1d ea fe 95 ad d9 ed 67 a3 ec fa 15 a8 65 8f d1 ee 5d c4 9a 67 86 4f 57 06 d2 02 cf 93 5a 9c 5b a3 76 43 cc 11 0e 97 16 c8 23 8d ac 23 f3 57 13 9f d2 19 d3 b2 9f 8f 90 0b ab 04 bf 1d cd 3f 4e b2 7d 96 35 d1 fc e3 3f c2 35 df 9e bd 0f a7 33 a4 fa 99 2d ea 81 cf 6b 7d 3f 42 1e f0 64 ef f5 36 ba bf 47 73 7f 9a 50 cb c5 c2 b4 66 10 fc 66 f4 e9 68 a1 b9 56 b1 af 2d db 5b ae d7 27 dd b3 d7 f6 Data Ascii: nKgcHek}6-&NytvMK[uZIsKN{G$/<a-v%`7WOqowomXU;USsKge]gOWZ[vC##W?N}5?53-k}?Bd6GsPffhV-['
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 50 c4 af 2c 86 fa 44 b8 b4 03 a8 00 fd 28 6f e6 b5 fe df eb ff 00 84 56 6f e8 59 d5 51 be c7 56 5a 18 1c 49 76 d2 27 56 b1 ed 77 fc 21 fc cf cf 54 6c ea 24 56 de 98 f6 91 b2 5a c7 96 16 b1 cd 87 58 f6 9f de b1 af 6d 8a 0c b9 c4 62 25 0f 57 aa 31 95 7e 88 93 77 97 e4 a5 29 4a 19 84 b1 9f 6e 72 c5 7e 9e 3c 90 e9 ea f9 d6 de 18 1c 43 5a c7 c1 05 ae f7 69 3f 45 ed 3b bd bb 9b fb 89 e4 3d c2 08 60 d2 03 a5 d2 01 f7 6b ef fc ff 00 ce df ff 00 6d 22 bd 9b 4b 2b 90 2c 63 43 9f 22 4f a8 7f 48 7d df 9e ea f7 57 53 50 4d 2f 0d 6e f2 1a c7 8e 75 80 67 67 d2 6e ed 8e 6e df a0 a6 8c 81 aa 3b b5 32 c2 50 b0 41 f4 ea 7f ab fa 3e a5 c6 87 69 f7 02 00 82 04 c8 10 1b 63 6b 1f cd 7f 25 54 8a c6 4d 0e 6b dd b5 cf b0 b3 74 9d 5e 27 4d 5b ed f5 03 98 f7 b7 fe 9a d5 e9 f8 47 2e Data Ascii: P,D(oVoYQVZIv'Vw!Tl$VZXmb%W1~w)Jnr~<CZi?E;=`km"K+,cC"OH}WSPM/nuggnn;2PA>ick%TMkt^'M[G.
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 04 ea 31 3a 02 65 d6 26 94 c1 9b 60 67 06 95 27 09 eb f9 3e d4 d5 d1 f6 68 d8 98 1c ab 88 30 38 5c c6 10 e0 09 5d 4f 1f 7a 4a 43 ad 68 00 f8 42 c0 c4 10 30 26 d8 83 1e 99 79 25 ee 78 e4 fb b9 3b 8f 5f 1d 5f 3f 1f a1 94 ad 63 91 43 01 41 ca 21 d0 23 e1 6e fc dc fa 3a ab 92 6b c0 60 41 41 22 31 20 07 99 ec fa 37 46 ed c8 4e 9c a7 85 59 d2 e6 c5 5f 59 2e ab 60 a4 9d 58 65 46 cb 96 aa ba c2 a5 65 26 78 b4 68 42 94 44 54 ae 59 b8 24 ce 31 3f 73 c2 f7 e6 9f 15 cd c4 60 e1 94 1d 8c 18 18 e5 08 c4 50 da 10 38 27 a9 84 2d 84 cf 85 cd 85 27 03 1c 6f 4b 93 d7 96 9e 0f bd c4 79 1e 97 3f ac 53 6d 5b 6c 0c 40 06 10 03 65 18 e8 f8 f8 74 c3 9f 44 65 02 94 6a 5b 40 94 d1 31 8d 35 8c f2 b4 be c1 07 bf 11 c3 db e6 9e 6d 15 b5 9a b9 5d 64 b2 d6 c9 2e ac a3 6d 62 ec d1 32 58 Data Ascii: 1:e&`g'>h08\]OzJChB0&y%x;__?cCA!#n:k`AA"1 7FNY_Y.`XeFe&xhBDTY$1?s`P8'-'oKy?Sm[l@etDej[@15m]d.mb2X
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 38 d7 37 54 bd 0e 5d 38 e7 6e 78 bf bd f3 3f 47 d7 1e 2f d0 fe 3b ac fd 8f 7e 39 ba 63 f6 3d f8 e6 3f 63 1f 8e e3 f6 3d f8 e6 3f 62 df 8e e3 f5 bf 9e f8 5d cb 7f 69 f5 1f 91 ec eb f5 b3 f9 1e eb cf f5 cf 83 f9 fd 8e 9f 65 4f 89 de 6e bf 71 2f 8c c9 f6 fe b7 e6 5b af 3f d4 87 e5 db ae 3f 56 3f 94 6d 4f d4 eb f9 3e 97 f4 f9 7e 6b b0 fd 27 8b e0 f6 6f df 9f cf f5 7d a1 f8 ac 9f 68 3e 33 4b f6 fd 5f 9f 6c df b9 f3 3e 67 6a 7d 1f a1 f1 99 7e cb d0 fc f7 1e f2 f8 7b 53 eb fc 1f 3b 59 f5 df 41 f9 8e 8f d1 3c cf 8e d1 ef f5 7c b6 e8 fa 3a 7c c6 c5 fb 8b 7c 0e e7 bf d0 13 e0 b7 5c 7e 9e bf 99 6d 4f d4 7e 57 e6 37 2e 9f 59 7f 8c dc 7a 7d 97 4f c2 6d 67 ef fb 3f 34 de af 1f ea b5 fc 97 37 f4 36 f9 8d e5 f5 fd 8f 6f c0 e9 3f 45 e5 f8 4d bc fd af ad f9 a6 df 3f d2 e1 Data Ascii: 87T]8nx?G/;~9c=?c=?b]ieOnq/[??V?mO>~k'o}h>3K_l>gj}~{S;YA<\|:\|\|\~mO~W7.Yz}Omg?476o?EM?
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d4 c0 b8 85 46 71 00 9a cd 60 49 81 35 26 14 f3 35 f1 af 8d 21 4c 0c 42 26 b9 98 cc d7 13 5c cd 4c 0b 35 98 80 43 0f b5 7f e1 01 84 fa 66 66 66 77 72 68 eb 32 88 4d 2a 59 f2 96 1a f3 5e ad 16 f5 58 ae ec 17 a8 6c 29 c1 4c ba f7 a8 5d f6 75 b0 fe 52 b2 57 d9 74 3d 8b 74 a0 f8 57 a9 50 1f 0c 80 b3 82 56 00 32 32 0b b3 4a d1 38 df e3 35 28 f5 b4 51 c4 7e 6d 13 e3 2c 20 94 3a c0 e0 b3 3b 29 5c 60 b1 62 3c c6 55 80 e2 68 95 87 40 61 6f 0c 08 01 c5 ac 0e e0 56 32 58 34 75 28 39 75 60 5b 3e 32 a3 33 f6 cc 1e c6 52 81 cf f1 eb 00 b4 7c 3b 9c 2c b6 b1 b6 33 10 89 95 cb 27 80 b1 0a 6a 30 84 d6 49 50 b6 13 46 c6 da f8 cd 75 2b 2f 0a 1b 2b a3 01 a9 56 3f c7 50 a7 aa 82 3f 5f 50 2a 24 b5 28 08 5d 8b 57 5e 16 b4 c3 2d 58 e3 ac 1b 2a 5c 52 73 59 9c 79 68 7f 0b b0 52 80 Data Ascii: Fq`I5&5!LB&\L5Cfffwrh2MY^Xl)L]uRWt=tWPV22J85(Q~m, :;)\`b<Uh@aoV2X4u(9u`[>23R\|;,3'j0IPFu+/+V?P?_P$(]W^-X*\RsYyhR
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 47 77 17 17 c8 b0 80 ad 45 8a 95 12 1a 80 58 d4 63 f6 2d 9b 07 54 2b b6 c9 94 a9 9e 36 19 a9 7d 43 59 97 d4 d5 1f ae c0 29 01 07 5b 52 ed 5e c5 9a c0 58 04 55 c8 e0 ca d6 e2 d1 59 41 15 95 62 b3 32 58 db 10 45 22 ac 97 d9 4a a0 55 54 72 4e 0a 83 59 04 a8 62 d8 55 e3 38 b0 61 80 76 4e 3c 1e 62 d1 1d 50 d8 e6 c4 64 7c b3 54 20 1a aa 5a c0 ab b5 a0 85 42 1d 83 35 f5 b3 35 95 30 0d 5d 2b 65 eb 71 ad 8a c4 e3 de d5 0b 61 f7 47 cc c7 92 33 08 c4 72 59 7a bb 3c eb 74 94 2e 31 32 63 79 86 8a 9a 0e bd 60 70 21 8a a1 47 a1 9f b7 7b ed f5 8c 60 f6 c7 8c e0 02 09 cc 03 cf 9c e0 6d ef 31 88 46 41 f3 06 21 b0 34 e5 6a e5 96 5b 64 b4 81 28 54 76 be b0 8d 5a 96 56 64 10 ea c0 30 52 9c 64 7c 04 2a 70 00 b0 8f f5 8c 8b 23 ba 10 ac d2 b6 60 7e 41 cd fa c5 02 d8 ce b7 15 28 Data Ascii: GwEXc-T+6}CY)[R^XUYAb2XE"JUTrNYbU8avN<bPd\|T ZB550]+eqaG3rYz<t.12cy`p!G{`m1FA!4j[d(TvZVd0Rd\|*p#`~A(
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: fe 2d e9 dd 4d 6c 99 1e 98 86 1f 30 2c 2b 07 72 d5 87 bb 66 4f 72 d8 3b 37 10 7b 96 ac 5e dd c6 7f 26 ec 2f 75 c4 fe 75 c0 ff 00 3a fc 55 df bd d4 77 2e 87 bf 70 9f f4 ae 10 fd 9d a2 0f b1 ba 0f b1 b2 7f d0 b0 43 f6 36 c1 f6 37 41 f6 2e 60 fb 0b 0c 6f b4 b5 49 fb 5b c4 1f 6f 6e 2b fb 5b 1d 8f d8 da 60 fb 0b 21 fb 1b 70 bf 63 71 2d dd b2 c9 cc cb 0f 6d d8 73 3b 35 96 3e dd 5e c0 ec ab 06 dd 86 1a ce fd 94 cb 7b 0f ad 1f 61 61 7a fe ed 8b f6 be dc 63 b2 7a 8e 3e ba d6 6b 3b d6 33 b7 5d b9 fa 7d da f8 8d 6c 40 16 33 2b f6 ae 2d ca dd ba fb e4 55 67 51 b8 df a3 57 f0 e3 f7 9a e6 1b df 3a 42 c4 b3 b5 f6 16 73 28 05 e9 be d6 b6 e0 dd 85 ab b6 7b 17 50 a4 43 5a d7 3b 1d d6 30 59 db a4 2f d9 76 33 5f 7b b4 c4 7d af 7c 11 dc fb 37 8b dd fb 10 5b bf dc 8d df ee 88 Data Ascii: -Ml0,+rfOr;7{^&/uu:Uw.pC67A.`oI[on+[`!pcq-ms;5>^{aazcz>k;3]}l@3+-UgQW:Bs({PCZ;0Y/v3_{}\|7[
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d7 15 d9 36 c1 24 2b 6d eb 26 d1 66 b6 1a ea b0 5b 28 b3 48 c9 b1 b5 90 1e d3 be 97 5b 34 bd 44 38 b0 05 b5 8f 6a e4 6b 75 95 3a b8 25 b6 0c 5b 3d 6e 6b aa 80 40 20 15 72 9f 75 12 4c 3f 27 a4 87 3c 62 81 67 29 ce e9 6a 75 9b 18 95 ae 05 06 32 4b 8b a2 cd c1 2d b0 e0 4c 7c 68 40 43 9d c5 30 d2 2d df 78 19 3d a4 02 07 e2 3e aa 09 68 bc db 65 5b cc d6 50 cd c1 6a 8b 42 59 bb 9b 8b 43 5a d4 94 b8 0f 4d fc c4 0b c1 37 8c d9 3d 4c 5d 01 41 e3 7a d8 13 de e1 e4 f6 71 2b 6c 98 99 c8 e2 40 70 01 06 4e 2c d2 ec f6 d1 70 1d fc e5 df 43 4f a9 80 16 c3 7b 97 fe 27 6b 13 24 c0 90 b3 1b ce 82 0d a0 e4 e4 c5 83 f1 43 41 16 11 37 c3 a9 16 27 01 ca 99 da 38 94 1b 30 de bb 01 e0 39 d6 e0 48 57 36 c3 6b 2d ba dd da a8 e1 70 0b 27 27 ad d2 41 6d 33 60 37 61 c5 b6 90 8e c3 8a Data Ascii: 6$+m&f[(H[4D8jku:%[=nk@ ruL?'<bg)ju2K-L\|h@C0-x=>he[PjBYCZM7=L]Azq+l@pN,pCO{'k$CA7'809HW6k-p''Am3`7a
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 79 c7 2d ee d5 c5 ca 4c 73 b9 34 ce 2e de bf 47 56 ac 01 55 a5 a5 bd 1d 36 86 7a 0a 7d 0d 2f 4b 02 90 61 a7 bd 28 ca fe 62 bd 5f b5 89 29 bd 79 34 c3 b2 75 1d e7 9a 8e 72 70 38 a5 6f ed 7b dd 5e 83 dd c2 b1 8d a8 cd eb 7e cb ce d3 f0 3b c6 5a df a4 e8 54 c3 82 13 02 89 d1 71 a1 d5 1f 78 10 2e e2 e2 c3 5c f1 e4 b8 f1 5b b2 d9 7a 58 55 e0 bd ca d5 e6 e1 5c 66 9f 25 3d a6 8e 09 02 cc 59 57 1a 58 5e 12 89 8b bb 57 9e 8b 10 0c 96 63 3e 9f 57 53 4f 12 5b 6d a5 d6 6e a7 ea e0 35 a8 87 14 9e 36 a7 ac 8b 4a 2d de 33 a1 08 2e 71 37 98 d3 79 ba ac ff 00 c3 89 cd e0 2e b5 25 bb ef aa c4 ea 8e 75 b3 71 65 d8 c0 69 16 0c 9c 4f 4b a4 89 41 21 a0 92 53 de 7b 38 98 05 07 1a 6c 6d 97 9c 87 4d 76 c3 2a e5 40 16 06 a0 6a 82 e6 df 85 6e f5 8b c4 74 4d 61 28 9c 6c 5d 9c 58 40 Data Ascii: y-Ls4.GVU6z}/Ka(b_)y4urp8o{^~;ZTqx.\[zXU\f%=YWX^Wc>WSO[mn56J-3.q7y.%uqeiOKA!S{8lmMv*@jntMa(l]X@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	62731	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	985	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:04 GMT Accept-Ranges: bytes Content-Length: 687611 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 28 91 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 39 3a 31 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: (ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:29:15
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: da e7 c3 cc 06 b8 39 ee b1 ae 60 7b 7f 3b 77 e7 3d 6b 0a 5a 46 bb 81 ec 21 b1 f3 da ac c3 2e 03 11 ea e9 fd 65 b3 c5 9b 88 d0 3b 9f dd 46 33 18 4c 8c 77 12 7c 48 fe e4 6a b2 1a ef f0 44 4f 89 07 f0 db b5 26 e3 b0 73 27 cc 36 11 a9 a4 40 d2 c8 f2 0d fc a9 c7 36 1e 92 ff 00 a4 b4 61 cd d8 ff 00 cd 70 fa 9f 47 a5 f7 32 f7 37 6b 1f 7c 33 71 24 1a f6 be cb 2b 7e d0 ef e6 9a 3f 77 e8 2c 8f ad 98 58 f5 b9 a2 9b 9a f6 81 ad 62 5c f6 9d b2 ef 51 e1 be 96 ca fd bb 3f eb 8b 6b eb 4b cb 9f 8f 5e 3b 08 b9 9b 83 2d 0e 3b 86 e1 ee 1e dd 9e 9f 1f 49 9e f5 c7 db 4d bc 3d b1 ed da e0 1b a8 69 3c 40 f6 b7 77 bf fe b6 b3 72 cf 19 94 c0 1a 7e f3 31 13 88 8d ee f4 d5 e5 b4 74 3a f2 30 eb ae b2 e6 1c 7b 71 09 0f dd 5c 7a 7e b3 d9 15 7a 76 ef 2d fb 13 eb f5 76 7f db cb 0f 01 df Data Ascii: 9`{;w=kZF!.e;F3Lw\|HjDO&s'6@6apG27k\|3q$+~?w,Xb\Q?kK^;-;IM=i<@wr~1t:0{q\z~zv-v
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b5 d7 5b 90 6b 8d 48 67 f4 76 69 ef 6b ec 7f a4 c6 33 fe 31 68 fd 51 c4 e9 ed c5 3d 52 ed f8 d9 b6 39 ec b4 06 6d de 04 3b d4 d7 e8 ee ff 00 09 e9 32 bf 52 ca d6 6d f9 58 de 80 a9 85 af c7 17 34 1c 86 9d c4 10 5a da 83 b6 fb ad ad fe af e6 7b fe 87 b1 75 5d 3f a9 5b 6e 33 00 7b 9a d0 3e 99 3a c1 fc e7 41 f7 6e 4c e4 41 32 26 ae bb d7 ab fa ff 00 a4 cf ce 55 44 1d 3b 6f fe 2f a7 85 7b 73 32 aa 60 b0 d6 fa da e3 ed bd f2 2b da 3f 3d cf f7 31 11 bd 41 a5 c5 8f 6f da 67 c4 46 a3 dd 2d fc ef 6a 94 b5 b6 1b eb b5 a6 f6 8f 68 7b 77 30 f7 fd ed 8c 7f f2 f6 a1 0c af 63 ad b1 de 9d a7 57 57 06 1f fb ae 71 fa 6b 50 08 c8 69 0f b2 ee da 04 98 9d 64 8e aa f2 6c c9 7e 45 0f a7 0f 1d be e2 d2 49 0e 3f 4b 75 74 fd 2f e4 ef 53 7e 37 ad 5c de fc 73 66 a6 46 a1 bd ff 00 9c Data Ascii: [kHgvik31hQ=R9m;2RmX4Z{u]?[n3{>:AnLA2&UD;o/{s2`+?=1AogF-jh{w0cWWqkPidl~EI?Kut/S~7\sfF
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 66 39 36 61 61 30 34 2d 34 37 62 65 2d 39 33 34 32 2d 62 31 34 65 2d 62 36 34 35 36 36 32 33 30 39 30 30 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 35 38 3a 35 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 62 63 34 66 30 65 37 64 2d 66 30 39 37 2d 34 39 32 31 2d 62 63 66 38 2d Data Ascii: stEvt:instanceID="xmp.iid:8f96aa04-47be-9342-b14e-b64566230900" stEvt:when="2021-08-12T20:58:55-03:00" stEvt:softwareAgent="Adobe Photoshop 22.0 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:bc4f0e7d-f097-4921-bcf8-
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b1 a4 a2 c8 fa 18 7c 92 a8 7d 01 4b 56 63 57 76 b0 4a 3b 4d 71 be ff 00 a6 d7 ea b6 3d fe 7a b4 49 c9 26 62 49 88 60 26 26 57 ee 6d f6 5e da fa 1a 2b 56 b5 9c 7a 2e 12 20 55 f3 94 ca 58 cc e0 17 54 49 9d b9 11 31 58 b9 e5 b5 cd ed 51 1a 2d eb 8c eb cb ef e7 2f a4 32 c7 20 bb 82 64 93 3a c3 0d b4 b4 8b 57 a7 ba f5 ed b7 f6 13 cd b9 41 e7 3b af a4 5d e2 3d 9b c8 57 d1 5f 8d 2f 1e 3f bd 67 f7 ad 0f ca 2d 07 1b bd 15 9d 67 8f be f0 60 5d 58 1f 5b 79 d6 a7 41 63 a3 72 57 7e cd a1 b6 a0 34 ce e9 37 f2 c3 d9 7d 8c 45 5b 0a dc 9f a0 6f 5c 38 0c 69 92 0d c8 40 75 45 fc b9 cb 00 da ed 89 7b c9 77 6a 93 d4 e7 2e 5c e8 88 35 ba ad 14 df f2 87 8e b6 5f a4 da 1d c0 27 2d e8 06 50 da 7a f4 2a 68 cc e9 a2 9e 2f a0 de 68 3f 9d fe d0 02 b9 0c cb 93 4a 21 a1 ee 36 92 e4 af Data Ascii: \|}KVcWvJ;Mq=zI&bI`&&Wm^+Vz. UXTI1XQ-/2 d:WA;]=W_/?g-g`]X[yAcrW~47}E[o\8i@uE{wj.\5_'-Pz*h/h?J!6
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: da c8 e4 e7 33 73 61 12 56 15 9f 8b ad f2 71 c4 5a 5e 7b 62 ed 19 61 db 7f 83 94 fa 18 7d 23 b0 50 69 04 89 95 86 b3 73 d3 29 ac 9c b5 6a 83 1b 11 61 27 cf 33 58 a1 62 5f af 75 27 37 1f 6c c6 f4 93 c3 ea 9b 40 4f 89 9d 27 e7 58 a7 10 ed f0 10 ab 0c 47 c0 bd 95 d4 e5 d0 b4 e2 55 2d 01 e2 47 6c d1 7d c8 6f 91 81 39 b6 85 e1 3d 33 80 9e 90 44 c8 94 2a b3 ab d9 e4 82 34 e9 84 39 6d ce 89 5b e8 a9 f3 cf f9 e1 ac 77 bc 48 f5 b2 9b 38 a3 12 5c bc 8b 94 d3 f1 fa 7d 3a 16 1c f8 e0 f7 5c be 4a 6d 9f 99 e8 33 da 1d b6 fa da b1 ca 84 c5 7a f3 ad 86 9c d5 c3 68 cd 78 bb 45 20 f8 c9 96 9e 62 57 4c 3d d9 9a 65 ed 1e 57 10 7c ae 2c e3 e3 94 50 dc 74 50 77 36 ed 3a 53 76 a7 65 25 dc 28 fa 04 2a 43 e5 7b 47 99 fd 62 ae aa 59 ab c1 35 17 5c 46 3b 49 36 5f a9 b7 98 1e ae 85 Data Ascii: 3saVqZ^{ba}#Pis)ja'3Xb_u'7l@O'XGU-Gl}o9=3D49m[wH8\}:\Jm3zhxE bWL=eW\|,PtPw6:Sve%(C{GbY5\F;I6_
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b8 b4 e3 a0 fd f9 30 4a 8d 65 77 dd fe c5 8e ba 10 26 4f 3c 8f 2b 18 0e ec 27 7a 43 58 6d b5 ef 53 17 0c f9 df e6 a4 f1 ea 7b 09 de e3 b8 ee c9 05 0e 2c 68 af 9a 1d 65 a5 e4 e2 ce 71 73 cb 0a 64 ad e5 98 8c d7 8d ca 93 2b b3 d6 e1 a8 55 78 35 13 69 91 20 b2 80 35 10 88 61 a3 41 24 41 6d 31 b3 bd 22 d7 71 31 2b d7 c8 ee ca 87 53 c2 09 30 84 57 37 1a 0c cd c4 b5 9e 2a f2 92 b9 ce 7f 07 dc 4a cc 59 c3 cf 0e 43 1a 3d 2b 08 ed 86 5c ca 78 e4 b5 0b b5 c1 52 8d 06 a2 37 3c b3 ac 4d 86 19 28 1c 4e e9 f2 6b aa c1 0f a5 ba 31 68 fe 4c a2 aa fd 9a fa 56 ed e9 8b de 9d 13 95 a3 ce 0f 5a 29 60 b4 97 d1 5f 62 b6 55 a6 d3 9a 7d e5 89 df 8c e1 48 5a e6 63 bc dd e8 95 1d ba 8e cb 4c 30 35 2c ca 8e 8b 02 13 f7 1c fa 76 b7 de c6 53 33 65 02 85 18 17 b3 bb ea f2 32 50 7d e8 Data Ascii: 0Jew&O<+'zCXmS{,heqsd+Ux5i 5aA$Am1"q1+S0W7*JYC=+\xR7<M(Nk1hLVZ)`_bU}HZcL05,vS3e2P}
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 42 6e f6 b4 7c ac 00 97 83 a0 97 7e 58 fa c4 e0 72 7a 0d bc 43 ce c4 46 a7 04 eb eb 12 82 d8 4b cb ab 98 1e ad 07 46 3a 3d 61 98 8b 5f c3 e9 35 6a cc 54 c3 f5 4e 7a 66 41 4d 30 fc af 72 ce fe d6 38 75 92 07 fa 39 db 85 28 4e 7b f1 fb e4 f0 34 7c 49 1d a5 9a a8 eb e4 cd 6d 91 c5 0d db 51 19 e6 9e 3e 71 cb 9d 8f f5 69 be 44 8b e6 52 37 c7 c5 72 69 d6 96 fc af 95 f5 7b 9f 29 e7 20 6d 3b e0 fe 97 a5 db 09 01 69 24 a3 64 ba 77 5c ae 29 8a c7 11 58 45 56 9e 9d 07 8f 8c 58 36 42 ae 9b 78 74 7d 3e 28 9a a1 19 25 0c 98 00 b9 26 04 9c 01 ad 8d 2a b7 9a 24 cc d8 0c ca ac 24 d8 b4 48 bd aa b9 48 66 a2 74 95 a9 71 ac ad 63 e4 b7 1a 93 d1 07 df 11 02 e5 84 90 90 a1 a9 7e e2 c0 27 62 02 45 71 1d cc c0 51 e3 03 50 70 8c 0c 3a 89 4b 0f 14 55 6b 96 5b fc b4 49 8a f1 03 46 Data Ascii: Bn\|~XrzCFKF:=a_5jTNzfAM0r8u9(N{4\|ImQ>qiDR7ri{) m;i$dw\)XEVX6Bxt}>(%&*$$HHftqc~'bEqQPp:KUk[IF
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 49 85 81 22 e2 ab f4 d9 44 06 51 19 32 b5 ec 96 b5 64 de b3 a5 24 0a d5 de cf 6c d5 68 29 e2 b7 4d a0 b2 2e 6c 63 a8 56 3a 59 b2 ab 3c 79 f2 94 6b 77 9e e2 ac 47 02 a2 9e 67 72 df 97 0d 21 40 05 e0 8f f2 11 b2 e4 68 a4 ec 00 7b 19 4b 2a 60 5c 44 53 74 d4 af c6 85 7f 24 4a 8e b7 a2 2b bb 5b 59 c4 4e 05 c3 42 b8 90 4e b1 a6 26 41 c4 bd 16 6a 1d e5 5b 60 ca 2b 96 e7 69 32 7b 0b 77 76 bb 8d 8f 0a 32 91 f4 9b 79 de 84 34 e1 5c b6 ae ba 33 b4 5b a6 29 ad 07 20 63 15 84 87 cc 6c 71 0e 09 b5 28 03 c2 80 16 69 51 30 7e 29 f0 ab 02 65 7e b8 9c c6 48 47 36 25 45 37 f1 3b 22 02 42 b8 ef 4d 6d a7 2c c7 75 32 28 31 73 3e b2 65 aa 4b 19 33 5a dc 15 ca 53 15 c0 4a 22 59 9a 4e a6 5a 30 08 85 67 e7 14 8b 8a d6 48 9f c3 57 4e aa 93 78 0b e3 54 62 d4 b0 aa 67 3b 52 dc 45 9f Data Ascii: I"DQ2d$lh)M.lcV:Y<ykwGgr!@h{K*`\DSt$J+[YNBN&Aj[`+i2{wv2y4\3[) clq(iQ0~)e~HG6%E7;"BMm,u2(1s>eK3ZSJ"YNZ0gHWNxTbg;RE
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: cc 2e 5d 57 a4 13 05 5c 1d 41 45 23 a4 9b 9a eb 99 35 1b 0f f1 ed 6c 96 73 94 63 5b aa 22 93 31 f5 32 27 a0 18 7e 4a e9 b8 84 74 b9 5c d6 cd e3 31 59 5f c9 8d 6e 59 2c 96 67 2e 7c 80 d4 72 4a 1a d9 4a 94 6a 84 23 19 86 a6 75 6d 91 5f 28 9b 3a 2e 58 a9 cc a6 ae 35 76 89 c1 03 90 c5 20 f0 09 9c 03 03 8e 1f fa 92 22 d3 89 ac 8c f4 c1 9a 27 35 35 f9 0c ad 76 16 e9 b6 6c e0 0e ea a7 5d 55 c1 a6 4a 56 e0 fe 54 4c 2d d3 31 f1 a9 c4 82 89 84 8a b6 74 9f 8a 0a 94 02 61 f2 28 a5 da 9b 3b 40 ad 51 d4 15 15 56 5d 65 58 2a 89 48 2d ff 00 54 99 79 14 51 f3 35 a1 15 bd 5d 72 dd 6f 54 35 4e 99 0a a1 a4 26 1a b5 4e cb b0 99 9d 33 3b 49 65 08 cc 54 c0 89 e3 1c a0 60 c6 ad d4 1c 6a c5 63 82 b1 c7 0c 3c 4a 60 9b 96 c9 8e 48 90 9c ba 66 07 2a cd 57 2a a4 6c 73 84 0d 4c 14 18 Data Ascii: .]W\AE#5lsc["12'~Jt\1Y_nY,g.\|rJJj#um_(:.X5v "'55vl]UJVTL-1ta(;@QV]eXH-TyQ5]roT5N&N3;IeT`jc<J`HfW*lsL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	62733	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	978	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-10.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:07 GMT Accept-Ranges: bytes Content-Length: 198506 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 2d cb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 37 3a 34 31 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: -ExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:07:410
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d1 55 82 a6 57 b7 fe b0 df e7 3d 4b 3f 71 47 9f de f6 a5 ec d1 c9 c2 78 3f bc 7c bf 97 1b 37 2d 1c 07 2c 46 6b 18 8c 87 b9 fa 5b 6f fe 37 fd 07 4b ab 64 bb 23 2f 1b a0 60 31 a6 9a da db 32 f7 6e d8 c6 47 e8 aa b5 cc f7 7b fd bf a3 dd fa 55 5b f6 37 53 f4 25 95 b9 c5 ae 6b 9b 8c d1 e9 b5 ef fc eb f6 d4 eb 31 ff 00 97 fa cb 6e fe 5a 31 cf fa c7 d3 2a 7d 38 d8 34 58 6a f7 e4 1a 37 34 fa 8e 0d dc 1c fb 18 ef b4 5e d6 bb f4 cf f5 7d 8a ae 4f d6 3e b3 5b c8 cb 60 6b db 1f a1 0e 97 41 d4 1d 93 bf 6b bf 32 cf 4f 62 c4 c1 3e 7f 95 89 8c 39 7f 72 53 97 14 e4 47 bb 29 9f ef e2 9b d0 e7 c5 f0 fe 72 51 94 b9 a1 8e 38 e3 c1 08 71 8c 1c 23 af a3 2e 37 4b 2f a5 64 9a 5e db ac 7d 81 f5 ed f4 ea 0d 63 c9 0d 77 f3 40 db 7b 2b c8 73 8f a7 5b bd 2f 4f fe 09 72 95 75 6e bd 4e Data Ascii: UW=K?qGx?\|7-,Fk[o7Kd#/`12nG{U[7S%k1nZ1*}84Xj74^}O>[`kAk2Ob>9rSG)rQ8q#.7K/d^}cw@{+s[/OrunN
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: f2 2d 2e bc ba d2 d2 c0 40 73 7d fb 9b ea bf f3 3d 46 33 fe d3 fa 9e a7 f3 55 fa 6a 18 e4 94 25 c7 8c 91 21 67 88 0f df 62 cb 8a 33 87 04 a3 70 34 08 3d 5e b3 0f ad 74 ec c6 39 bb 8d 2f 69 2d 71 74 f1 13 ea 3b f4 6d fb 3e df f8 5f 62 03 b3 73 f1 ee 6e 2d 64 64 13 ee 67 da db e9 bc d4 d3 fa 4b eb ca c7 2f c5 ca a9 8c dd ef fd 15 df f0 77 20 5d d7 b2 7a 5e 49 f5 fa 75 43 27 60 15 8b 1e d0 43 1c 3d f4 64 62 cb 9f b3 6f b3 65 bf f5 cf e7 16 56 15 b4 57 5e 45 ef d8 ca 83 83 99 8e c9 0c 78 73 da 1b 2c 6e f7 7e 8d cd f6 ed 62 b2 7e 29 9f db 23 86 42 80 f6 72 92 38 f2 f1 ed 29 42 1c 51 68 7f a2 b0 7b 9c 56 38 64 7f 59 86 ae 30 30 fd 18 e4 f9 e3 fd 67 7b a9 32 cb 8d 19 f8 ae dd 4b 9a 5c ca 76 6d b9 ec 70 75 56 39 b0 ed 8f ad de 9f f3 9f cf 7a ac f4 d7 3f 5e 3d e3 Data Ascii: -.@s}=F3Uj%!gb3p4=^t9/i-qt;m>_bsn-ddgK/w ]z^IuC'`C=dboeVW^Exs,n~b~)#Br8)BQh{V8dY00g{2K\vmpuV9z?^=
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: ce fe ef f5 be 47 ff d0 35 b4 e2 66 63 b1 cd 65 59 34 b0 36 ba 3d 59 db 59 fa 6c ad f8 d8 9e e7 dd b9 de ca f6 7f c6 fd 35 57 23 1b 3f a9 d0 fd b4 96 e6 b0 fa 4f 7e 43 2b ab 6b 5d ef 77 d9 58 e7 31 af df ed ff 00 b4 fe a2 15 56 f4 9c ab 83 1a eb 71 69 70 d1 cd aa cd e4 34 ee b3 6f a6 cb 3d 16 ef fa 5b ed f7 ff 00 a4 d8 98 bf a7 e4 bd c7 2a 9b ea d8 5a ca 48 79 af 21 f2 0b ec 7d 9e bc b5 b4 fb eb af db 4f fa 4f a1 e9 ad e0 08 d7 5d 3b 8d bc 37 8f f8 5c 2e 0d 4b a8 af cb f7 7f 97 14 1b 9d 2b 0f a5 66 e3 3f 1d f6 dd 75 ec 01 8f 75 6d 60 91 3b 86 c6 b1 86 ba aa 74 fa d6 fe 7a 2d 79 74 e3 56 cc 6b 72 d9 d3 9d 5d 50 69 df 4b 6c a9 d0 6a dd 65 90 cb 2c b2 ca fe 9f a1 fc c7 e9 14 7a ae 2e 0d 55 51 8b d2 2e 6f da 88 da dc 86 b9 f6 02 d6 e9 f4 b1 b7 35 9e a5 a7 f9 Data Ascii: G5fceY46=YYl5W#?O~C+k]wX1Vqip4o=[*ZHy!}OO];7\.K+f?uum`;tz-ytVkr]PiKlje,z.UQ.o5
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 9b b4 71 1e 36 cb 90 d0 48 76 5d bb e3 75 c7 76 b8 6c bc bb db e5 9c 76 59 69 19 80 65 a2 40 d0 53 0d 18 65 47 15 a1 a2 91 b1 a2 bb 89 a7 df cc 08 a8 41 8a 21 2a 9f 63 23 91 bd d8 66 17 a7 9f 36 eb 9d 7e ac 75 73 df ad dd 3c f5 99 e0 8e 9e 08 99 e0 8e 9e 4e 26 64 2b d6 90 ad bb 93 e8 8e 67 44 f0 a2 2d 01 1d 3c 11 d3 01 1d c3 02 74 f3 23 a7 82 bd 68 08 e9 e0 af 4c 85 7a dc 15 eb 70 f1 db f3 fe 83 e6 bd 4f 3d e8 70 34 7d 2e 77 0b 0c ed 94 45 e3 bb 92 bd 6e 6a bd 6e 08 28 cd 96 c2 55 ec fe 4e 9a 73 f9 bc 9b d3 4c 67 ee e5 ea da 36 8a 2e e0 61 f5 1c 4c 74 5d c0 4d 91 66 b9 c5 e5 2a a1 f4 b4 2a ef cf 8b 55 5e 1e a3 ae 22 a6 44 1e 5e 1d 36 07 a1 db cc 87 6b e5 ed 8e 0b c9 7a 0e 3e ac 9b bc 7d 73 c5 61 d2 e7 a2 22 d2 a2 76 31 87 cf ad 4a 1b 66 35 cb 35 ec 79 d1 Data Ascii: q6Hv]uvlvYie@SeGA!c#f6~us<N&d+gD-<t#hLzpO=p4}.wEnjn(UNsLg6.aLt]Mf*U^"D^6kz>}sa"v1Jf55y
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: e6 76 fa 26 cd 90 b7 5d 7d 26 8e a5 6f 2b d7 f4 1e 37 d8 e1 f2 d2 e0 67 3c 63 d3 e4 98 0b ba 17 34 65 49 4d 92 56 66 b4 b3 d9 a1 48 94 65 d6 86 9d f2 7b 78 fd 8e 9f ce 1f ed f3 bd 6a be 7e 9a e7 e8 76 bc 36 8c 1e af 2b 37 93 71 b3 98 9c 2a 68 67 6a 6c 66 bf 6c c5 00 4e a6 44 d9 13 45 6d 4b a4 e2 07 0a 27 4b 2b 42 5a 2f 30 82 6c 5f ce 6b d2 ba 1a f8 2c a6 98 35 9a ce ce d3 c8 b2 09 a7 af 2e a3 c2 46 0f 43 5f 29 b3 62 8d 6c 1e 4c f5 7a 2e 5b 1e c5 b1 d1 23 22 c3 99 20 50 4f 78 63 c0 45 6a 86 e7 42 db 21 57 e3 d5 4c fa 57 ab 02 3a b1 e6 de 4c c9 c8 d2 a0 78 56 74 3d 15 a2 84 de 2d 7a 97 a9 2a fe 0e 9d c9 7a f9 32 c6 b6 4e 76 af d7 21 84 ef 9b df ee f0 74 3b 93 a1 4c bd 8c 5c ae ac b2 c3 1d c1 7b 19 c0 9c cd 3d 86 71 52 67 57 73 29 bd 4b a6 c2 56 0b 2d c5 7d Data Ascii: v&]}&o+7g<c4eIMVfHe{xj~v6+7qhgjlflNDEmK'K+BZ/0l_k,5.FC_)blLz.[#" POxcEjB!WLW:LxVt=-zz2Nv!t;L\{=qRgWs)KV-}
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 98 20 c6 cf 89 0a 2e 3c 80 06 b1 b0 7d 16 32 18 81 ac d8 c7 5e 58 14 00 40 d4 c3 4d 8a 93 0c 8e 60 c6 4a ea e1 2b a2 e3 29 20 0c 20 8f 49 90 91 55 19 4b 31 f2 2b 48 0a 81 a2 75 8e ed 86 29 59 95 38 e6 91 95 e1 65 61 f8 19 bc 76 d2 fe da fd 76 33 5e c4 61 d6 36 80 59 00 65 50 40 e2 a4 ca b9 25 80 03 36 ce f3 79 b3 80 eb 09 f4 d7 a6 f3 98 38 88 32 5a a8 73 c7 32 15 0a e7 dc 9f 65 c2 70 1c 27 63 fe 1b 11 75 87 37 83 79 bd e6 bd 38 8d fb e7 be 00 db d1 c6 20 67 98 62 48 4b 33 03 86 c3 a9 0f b8 cc cc 73 cc 77 e7 e5 9f fe 48 c3 82 33 34 8f 16 d6 44 08 34 33 db 35 ac 85 0e 03 84 60 f4 39 a3 a8 e2 50 42 6f 0a ae 36 f9 28 18 3f 07 f2 75 e9 ff 00 01 41 04 01 9b f7 23 3c 7f b1 2a 4a a8 e2 cb a3 ed fc 09 f6 53 bc b1 21 e4 b0 33 07 2c 8c 25 3a 27 0b 30 af ef 80 68 c4 Data Ascii: .<}2^X@M`J+) IUK1+Hu)Y8eavv3^a6YeP@%6y82Zs2ep'cu7y8 gbHK3swH34D435`9PBo6(?uA#<*JS!3,%:'0h
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 23 58 a4 97 4b ef 9c 4e 04 c0 b8 13 02 7b f0 c0 80 64 a8 c1 aa 2b bb 5b 8c c2 6c 4c 25 0b d8 73 c7 b0 be 05 8c ce 4c b1 34 54 6f 98 4c 36 2b d8 c0 ba 1a cd 66 b3 59 af 4d 66 b3 59 ac d6 6b 35 92 9e 2a db 07 b4 99 52 08 a1 4e ce b4 71 29 ab 72 16 88 7f f8 51 8e 52 3a fd d7 17 6c 0b 45 1d 5e 06 90 aa f6 3d 4f ca 87 a6 96 a2 56 e8 4c 66 b1 fe 1a 3f cb 58 7d b3 8e 71 ce 39 2c 82 25 ec 04 7d 87 5f 34 9a 44 9e 52 d5 98 a4 2b 5e 2c 4a 35 9a 3a d3 57 ab 1c 32 3c ad d8 5d 8a 69 6b ac f2 c7 14 5e 27 96 59 40 b5 5d 54 35 a9 e1 37 2c 73 2e ca f2 c7 34 f5 69 53 af 5a 31 0b 2c 8d 25 aa cd 2c 55 a4 e7 70 22 c9 64 4b 25 f8 60 91 1a 51 1c 51 a7 1e 6c 80 a4 c2 44 7b 91 c3 12 96 9a d0 a3 5e 42 28 43 1b c6 b0 b9 6e 0a aa 0c 58 dc 15 56 48 9b d3 8e 6b 00 cb 12 49 24 bd 4a 08 Data Ascii: #XKN{d+[lL%sL4ToL6+fYMfYk5*RNq)rQR:lE^=OVLf?X}q9,%}_4DR+^,J5:W2<]ik^'Y@]T57,s.4iSZ1,%,Up"dK%`QQlD{^B(CnXVHkI$J
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 59 a3 1d 55 c7 89 8c 0e ea d5 d2 00 b5 7e c9 d5 56 0d f6 8e a9 98 fd 8f a7 dc df 68 a8 8b dc 5a b5 72 e0 24 14 24 b7 d7 bb 74 a5 07 f6 3d 6b 62 da eb c9 1d a5 75 56 b9 46 26 4e ce 95 8a f6 63 b0 d3 24 3e d7 29 3d 98 87 43 3e c2 18 6c 75 ff 00 65 7f 91 fd a5 63 9f d9 d3 38 bd ea 28 ec 67 a5 76 bd 7e bd 64 49 3a b0 f8 b4 00 56 eb 60 23 8c ab 14 dd 9d aa 93 47 f6 bb b1 c4 7e d8 ed 9f f6 a7 00 7d ba 65 cb 57 a1 96 56 8e 29 22 e2 97 72 bd 8e d3 ae 85 3e c5 dc 67 fd 93 b7 24 7d 9f b5 04 7d ab b5 11 7f db 3b 31 20 fb 5f 62 55 be d5 7c b3 7d 96 c6 cf d8 66 d4 7f 6b ec 20 5e a2 54 85 22 ed 09 5b 9d 95 8f 1f f5 7d 63 03 d5 75 f8 b5 b5 8d 05 72 1a 08 4f 64 24 ae 82 f5 9b 77 0d ca 56 21 4a 6d 3d b9 ec f5 4d 09 9e 80 78 a2 eb fa 05 4a af d5 c5 24 ed 4a 49 a6 bc 12 48 Data Ascii: YU~VhZr$$t=kbuVF&Nc$>)=C>luec8(gv~dI:V`#G~}eWV)"r>g$}};1 _bU\|}fk ^T"[}curOd$wV!Jm=MxJ$JIH
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ee ac d8 82 b7 62 85 97 b0 e1 3c 94 e2 54 17 63 59 ec 76 4a d0 9a 76 a1 8f a4 a5 39 99 ab 75 e2 4a a2 c4 31 74 55 5e 44 ea a8 44 2c 76 35 f9 88 e8 4e c2 af d5 a0 09 5b ae 30 d8 ab 46 34 59 aa 96 69 ac 8a 8b 22 78 cd 8e d5 72 56 ec e6 82 31 d8 c1 9d 75 59 1f 00 00 48 7d ac 4b c1 6c 3c 9d ad e8 fa f8 60 8f cb 3b ca 95 e0 68 4f 57 58 1e b6 8a 47 0d 94 8a 18 5f a8 e9 dc 5a a6 b5 61 ae e8 ca 3c 7e 4f 03 f8 84 40 d4 20 4e aa 26 e2 dc 5b 3c a9 e3 57 49 24 d4 42 06 68 e0 11 49 2a e7 04 46 93 c8 f1 43 1b a4 89 55 6b a8 78 e2 96 49 64 8a 39 64 f1 a5 3a 8f 6a c3 51 eb e3 1f 16 d2 08 5e 3f 1c b3 52 00 da 88 b7 5c b4 ec 02 94 a0 c0 b3 94 9e bc 75 a0 5b 10 e4 c9 2f 57 7a 9d f0 e1 2c 03 8c 82 44 0d b3 63 5a b1 6a 24 93 af b5 15 86 7a 75 ce 5f ee fe 1b ad d4 bd 8d 66 58 Data Ascii: b<TcYvJv9uJ1tU^DD,v5N[0F4Yi"xrV1uYH}Kl<`;hOWXG_Za<~O@ N&[<WI$BhI*FCUkxId9d:jQ^?R\u[/Wz,DcZj$zu_fX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	62735	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	726	OUT	GET /wp-content/uploads/2022/07/02-hotel.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:25 GMT Accept-Ranges: bytes Content-Length: 329098 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 2e ad 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 32 3a 30 39 20 32 30 3a 35 34 3a 30 32 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: .ExifMM*(1!2i$''Adobe Photoshop 23.1 (Macintosh)2022:02:09 20:54:02
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 76 3e 53 49 b0 b8 da ca 88 b1 c2 90 36 46 9e a7 1b fd 1d f6 6c 65 9e 97 bf fd 1b ea 59 9d 33 a4 dd 95 9b f6 73 67 a7 8a e0 6e c9 17 34 d7 b6 b6 b9 ac dd 55 db 1c df 52 d6 5b b1 ee f5 2b fe 73 f4 9f a1 50 a7 a8 e5 bf 3a ab af b8 d5 59 dc 7d 52 c0 e7 e5 80 5b ea b7 68 d9 87 55 94 fa 7e 9d 76 d9 ff 00 82 7b d7 53 d0 f1 5d 85 86 fb 5a 1c 2c bc b2 c2 6d 04 5b 5e e6 fe af 45 e2 ad ae c7 6d 4d df 7f f3 17 63 be 8f d1 7f 83 46 bd bb da bf 97 56 3c 58 fd c9 00 36 de 4e 81 73 d9 3b 62 ba ab 68 65 0c 2d 02 22 1b fa 37 3a c6 37 f3 6a a3 f5 5c ba fd 5b 19 eb 57 fb 8a b8 6e 4b b1 ae b0 6b b8 ef 6d 87 56 ec fd 2f f8 6f e6 3e 8b 7f ee 7d 5f cb ab fd 31 aa b5 f6 36 d7 62 35 d6 06 3b d3 fd 13 66 36 0d e4 38 d0 fc 76 7a 8e b7 d3 6b 99 b7 e9 d7 bd 2b 6f ae b7 d8 fb 1f b5 ec Data Ascii: v>SI6FleY3sgn4UR[+sP:Y}R[hU~v{S]Z,m[^EmMcFV<X6Ns;bhe-"7:7j\[WnKkmV/o>}_16b5;f68vzk+o
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: e4 e4 8c 70 eb 9a 5b 02 5a c3 67 00 9f de 55 ba 0f 51 7d d6 dc 2d b0 3c b4 c4 37 46 b7 5f cd 04 fe 7a e7 ba 8e 4d 17 64 33 1a 9c b6 db 65 8c 2e ab 1b 7e ed 00 36 57 fa 46 0d 9b 5c df fd 47 ea 20 e3 dc ec 5c bb 09 77 a0 ea 8d 2d 61 6e e3 bc 5e 36 31 9b 7d ee 76 ec 8a ee ad 4e 21 87 db 23 8c 12 74 e2 fd 18 70 fa f8 65 26 9c f9 ac e3 3c 6b 14 84 63 fa 17 eb c8 25 e8 e2 84 7f c2 7b 1e a9 86 32 aa 26 97 35 a5 87 7c 9e e4 0d 8d 6f f2 76 ff 00 e7 c5 c2 7e c4 c8 c5 ea 34 32 96 bd 8e af 0b 22 b7 da df 60 79 00 0c 5c 36 db f9 95 d5 e9 7f 83 5b 23 eb 26 65 12 dc 71 56 d0 e7 36 cb ee 73 85 4c 2c 12 fe cc fa 1f 49 ff 00 98 b3 2c ea c3 3b 20 fa 9d 45 b6 ec fd 23 1a c6 39 80 87 37 f3 dc d0 da 59 f9 be 86 f7 7e 97 d4 ad 67 4f 36 30 78 47 eb 38 4e 92 06 22 3f d6 f5 4b fe Data Ascii: p[ZgUQ}-<7F_zMd3e.~6WF\G \w-an^61}vN!#tpe&<kc%{2&5\|ov~42"`y\6[#&eqV6sL,I,; E#97Y~gO60xG8N"?K
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 8c ed db bd 3a e3 ed de b6 cf 6c 6e db b3 fa be 9e ef d6 3e cf ff 00 a3 12 4e bf 11 f2 ff 00 28 ad f6 8f fc ef f9 df ba ff 00 ff d7 e4 69 fa c5 76 23 db 00 3f 15 c2 2c a5 ce 04 38 c4 6c f5 36 bd fb 76 ef 40 e9 16 63 0b ae 19 59 03 0b 1e c7 87 b4 b4 49 7c 97 c3 2b 8d 95 ed 66 ff 00 7d 9f e0 bf d1 ae 9c 7d 46 e9 9a b4 97 b9 a0 fb 43 74 da 3e 8f e7 6e df b9 df 9f 67 fc 5a 90 fa 87 d3 bf d2 64 0e 20 45 4e 3a 7f 5a a7 2c 93 cf f2 a6 32 8c 78 e3 c4 35 97 0f 6f ef 71 27 18 9e 39 46 43 5a bf f9 df dd 6e b7 ab 74 6c 0a 5b 5d 25 ad 25 a6 d7 bd cd b2 c7 11 a0 0f 76 53 da cd 9e ef d1 b3 df e9 d7 fc b5 43 2b ae 61 5d 5d cd ba db 6d a7 68 3e 95 20 30 bc 91 b7 e9 3c bf 6b 19 e9 d7 ea 36 bf cf fc f4 7c 6f a9 38 b8 f6 fa b4 5f 9e 1d 24 fb 7d 2d ba 8d ae 6b ab 73 3d 37 37 Data Ascii: :ln>N(iv#?,8l6v@cYI\|+f}}FCt>ngZd EN:Z,2x5oq'9FCZntl[]%%vSC+a]]mh> 0<k6\|o8_$}-ks=77
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: d8 15 e8 8a c7 69 78 97 a4 a9 25 cc 07 30 9d b5 b2 70 39 00 a6 1b 9e ae 49 33 73 12 69 2a 83 05 6f 5e 54 fd f8 17 35 e4 2e 87 98 4b b3 57 a4 1b 03 77 81 97 00 fd 28 7b 56 17 4e 51 4e 46 b7 2b 15 55 62 86 39 39 95 9b 99 95 b5 5e f5 37 aa 98 4e c6 6d 32 f1 7a b2 76 b9 52 dd 5b c3 b9 a5 4f 9d 2e cd 41 ef 48 10 1f 20 a5 d0 99 b4 a3 9b 71 7a ed 4f cf cb 51 af ae 6d c2 b5 cf d3 3f 3b 52 7e 95 b3 b9 27 34 ae 24 bb a1 fa 1f 39 89 5a dd 62 4c 5d 6b 63 1d af 5b 1f 42 c4 91 d8 6b 73 5b ad 6e b1 26 b7 58 97 ac 9a dc b0 b7 c6 52 50 39 85 b4 5d 9e ca da 6b 1e f2 f9 b6 ec 25 8a 2d a8 c3 69 ca 31 f9 ac 81 dd 4e 9c 89 6d 26 e2 52 09 5b 5b ac ad 93 ac e7 12 9e ae 59 36 93 49 50 95 0e 6a d7 35 e5 4e e8 73 93 ba 1c f2 68 73 36 3d bb 4b d8 6e d0 32 c8 dd f5 b3 32 40 43 45 8a Data Ascii: ix%0p9I3si*o^T5.KWw({VNQNF+Ub99^7Nm2zvR[O.AH qzOQm?;R~'4$9ZbL]kc[Bks[n&XRP9]k%-i1Nm&R[[Y6IPj5Nshs6=Kn22@CE
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: cd 97 b2 05 3a 59 b9 4e 76 50 a2 67 d0 95 c8 44 78 4d e7 3d 8c 24 33 35 ef 9b a1 2f af 9d ff 00 09 e7 94 e5 2e be 71 0f 1b 68 24 ae ae 4e 85 85 f6 71 b4 43 c6 ea 4d 83 11 f3 0e f6 47 4e 53 8d e1 bd 8e 3f 69 96 dc 5c 8a aa 65 ce 94 e8 49 06 ad c7 b0 2c 1a ba 6b da 6b 8c 7a 4c 9d 1f 9b aa a1 8d 8c b6 d5 e5 ee 9f 4e 94 7b 23 26 d9 d2 f9 f6 bf cb 97 75 16 b9 b5 2a 75 b3 3c 2a a9 f1 86 b3 ae df 74 fa 87 67 32 f7 2c d4 b3 b7 5c c1 ce 7a 03 8a a6 e4 be 75 82 36 c0 ac d8 25 ab 23 9e 5f d1 45 d5 73 42 d8 0f 95 74 d2 d7 88 fa 02 ef 92 e9 11 3a 2b e8 2f 0b d2 dd 94 97 d7 cc 9b d4 4d 46 54 07 5d 43 ce 6c 3e 99 28 ca 47 15 36 e7 75 e5 e8 01 b5 40 f6 a8 b6 6d 2b 7b 54 9f d3 49 fc 85 7d 25 d5 38 5b 06 ec 4e ac b7 ee b2 cd c9 cb 7c ee ce 7b da 4e 20 fd 19 cc 67 39 cd 14 Data Ascii: :YNvPgDxM=$35/.qh$NqCMGNS?i\eI,kkzLN{#&uu<tg2,\zu6%#_EsBt:+/MFT]Cl>(G6u@m+{TI}%8[N\|{N g9
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 39 9a 26 c7 b6 d5 1e c6 1d 19 2d 65 0e 34 de 4d a5 a6 8e da 5e 7c 6b e7 59 22 d0 1d 97 6d ab 9d 6a ce 63 f1 c6 77 88 85 95 37 06 e3 69 7a 80 7c 27 cc 85 5c 59 4d f5 ba c0 e5 c1 d4 35 84 86 10 d4 d3 6c 08 a5 c6 30 88 da 6e 81 6a 55 0d 75 56 19 66 02 c6 80 60 ce c6 2c a7 66 ac 7b 68 41 8b 52 66 41 80 1c 6b ba 67 6a e6 82 2b c0 3b 47 4b ac 0c b7 74 dd cd f4 3d 07 07 4f 01 70 b2 af d0 89 b6 42 d5 f3 5e cf 9d 58 76 13 d8 80 e2 99 cd fa b6 4c 1a c9 9d 73 8b 3a bd 75 65 e5 ea 64 b5 ae bc ac 63 68 ed c9 40 0d 6f c8 5b 2a c2 b7 45 1a 66 76 ac 04 a7 35 ab 56 44 ae 7e e3 c8 3c 5d 95 b5 db 4d ea 62 33 72 61 96 d5 8e d6 e9 d1 5c da a6 cd 0b 5a 33 cb 8b 48 86 4a bb b3 89 46 31 6d e6 af 9c a8 c1 65 c1 70 bf 57 98 01 98 96 a5 5d e4 cb ac 21 2c 5e 88 69 86 da 19 a5 57 52 Data Ascii: 9&-e4M^\|kY"mjcw7iz\|'\YM5l0njUuVf`,f{hARfAkgj+;GKt=OpB^XvLs:uedch@o[*Efv5VD~<]Mb3ra\Z3HJF1mepW]!,^iWR
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 11 76 51 71 51 bf 3f e4 4a 25 17 2b 0d 04 47 65 b9 92 6f 16 27 20 c5 6b 22 49 72 a2 93 89 e7 e2 c9 3c aa bb 07 d9 84 2c 8c 59 9c 12 2c 10 03 fc 39 ee 4e 1e 1a d1 98 c8 22 58 88 22 e3 9a d8 a5 e4 3f cf 3f e7 95 95 94 0a ca 71 25 72 28 26 0f 8c 29 21 05 7a 30 0c 7e 0b 16 10 08 65 37 c2 73 32 8b 56 11 08 84 51 45 15 8f 8c 20 10 6a 63 32 84 58 15 d3 4a 95 a8 f9 45 12 b2 89 ff 00 1c a0 e5 ec c0 64 e9 b2 a6 49 e3 2b 9a e4 8b 91 28 94 f5 3c ee 4c ac e7 3a 68 9c d6 96 64 16 61 31 c7 33 3b 02 3b 6a 57 87 06 b8 84 24 25 3b 2e 26 32 17 15 95 84 58 51 18 50 b9 4b e5 48 3c d6 18 1f e8 67 fc 72 b2 b3 fe 18 45 a3 e0 14 0a cf c1 44 22 d0 83 02 f5 85 eb 5c 16 13 9a 9c d5 84 e6 a2 d4 42 28 fc 80 9a d4 d8 ca 81 9e 5e dc a8 99 84 02 90 78 70 c2 21 39 12 b3 f0 16 56 51 4d 0b Data Ascii: vQqQ?J%+Geo' k"Ir<,Y,9N"X"??q%r(&)!z0~e7s2VQE jc2XJEdI+(<L:hda13;;jW$%;.&2XQPKH<grED"\B(^xp!9VQM
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: c9 cd 1e c3 5f 9a b7 5a 36 b6 c5 69 0c b1 09 18 1c e9 1e a1 7f 15 24 a3 01 e9 ce ca 31 87 08 e2 f2 19 85 23 07 06 8c 8a c3 cd a9 03 58 e3 93 19 e2 62 f6 17 48 e0 d4 c9 1a e7 06 f8 e4 d2 64 77 80 8f c3 5a e0 9c 49 69 67 14 df 0a 29 4e 64 98 e5 c4 94 1a d5 19 70 60 73 91 76 7e 0b 18 e5 c8 27 91 86 86 a3 80 bf 91 45 85 02 42 c8 2b 24 11 22 1c 42 e4 0f c0 68 41 98 47 25 70 ca 20 85 82 84 64 ac b4 2e 5c 8b 72 8c 98 0d c9 74 f2 b7 10 58 e2 72 30 1f 95 60 12 ab b3 c5 9a 79 0c e0 03 48 2d 92 5e 22 66 30 41 ac 38 6b 8f 8e 5c 4c 92 64 39 a1 c7 f4 de 5d 05 50 04 b0 16 a6 bb 22 db 00 35 80 71 8b c2 b3 e5 b2 57 2e 5e a2 1a c9 1c d3 1b 01 16 5a 31 14 8f 00 3c 05 21 24 73 76 58 32 1c cf 0c 8f 2a 08 40 2f 89 80 39 d8 3e cc 01 70 b0 c6 f0 e2 f6 82 9c d7 72 8d 57 fc dc 61 Data Ascii: _Z6i$1#XbHdwZIig)Ndp`sv~'EB+$"BhAG%p d.\rtXr0`yH-^"f0A8k\Ld9]P"5qW.^Z1<!$svX2*@/9>prWa
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: e6 13 69 b1 34 b8 b5 0e 69 8c 7a 10 c6 a5 63 23 0c 90 cd 24 8f c4 75 8f 37 71 e2 25 01 ad a9 c2 30 f6 97 06 00 13 9a a6 c0 60 7f 15 19 e2 9e ee 31 e5 cf 12 38 b0 88 f0 d6 37 0a 46 90 c9 4f 24 c9 30 e7 9e 4a 26 17 06 b4 67 91 e4 d2 39 97 1c cc e2 00 c2 73 bf 90 7e 51 20 27 b4 67 07 8c 67 2d 31 35 e2 17 78 33 b8 29 32 f2 e8 c8 11 cc 11 39 4f ce 58 d6 02 24 00 bd 9c 9a e9 8e 63 c6 78 b9 e1 cc 2d 4d 7e 4f 95 7a c1 2e 69 21 02 9c 53 32 bc 26 92 0d 59 b0 a7 66 04 ae 7e 19 29 91 95 ce 19 2d 76 38 fe b6 5f 24 8c 0e 9e 11 23 a4 a9 20 31 48 23 36 ef 36 44 d8 c3 cb 75 6d 2c 3a e6 a3 55 81 08 f0 63 b1 2b 19 ea ca 65 28 8a 6d 18 81 ad 4e 22 64 f4 85 86 95 82 d4 e9 a5 23 2e 51 bd cd 50 59 e2 e9 ae 7f 37 4c e2 bf 5e 42 85 19 70 20 91 a8 c8 e2 3f b2 68 6f f3 90 b2 a4 9c Data Ascii: i4izc#$u7q%0`187FO$0J&g9s~Q 'gg-15x3)29OX$cx-M~Oz.i!S2&Yf~)-v8_$# 1H#66Dum,:Uc+e(mN"d#.QPY7L^Bp ?ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	62732	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	990	OUT	GET /wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:10 GMT Accept-Ranges: bytes Content-Length: 182826 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 21 45 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 39 3a 30 38 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: !EExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:09:080
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 98 d8 12 0a 03 4d 98 93 5f 4e 35 65 55 55 63 29 f5 91 63 ea 3e 97 a6 c1 ea 39 d5 8f 4f d4 6b be 85 7b fd df a6 af f9 df 4a da d3 75 03 d4 6c 77 a7 81 e9 54 5b fc d3 46 e6 3d c5 c3 d4 b1 b4 db 66 c6 fe 97 de da bd df a7 66 fa 7f 47 fc ea 7a 5b 4d 54 be 9a ec 7d ac b1 b3 61 7b 58 0b 05 6e de 5d 7d ce 3b be d1 6b 9b 6f e8 bd 4f df a6 a4 16 e4 d5 7d 6c 75 ed 7d 4d b1 bb 22 8a 8b 5b 5d 95 b3 71 76 db 7d 4b 1d 65 ed f4 f6 3e 8f dc f4 ff 00 4f ea a2 2c 9e 20 38 c8 ee 25 2f 4f f7 7f c7 44 b6 d8 0e bb ea cf 1e bc f7 30 fd a4 3a fb c8 ad b5 3e b7 96 39 9f ce d9 b9 f8 ce 14 d5 eb d2 d1 be cb 2c ff 00 b8 fe 9d 3f a7 b3 d3 52 67 d9 71 9a 77 58 fb 6d 68 16 b6 d7 34 99 8f 67 b7 1d 8c b3 e9 ed ff 00 0c cb 32 7d 9e a7 fc 5c 5f 6b ef 69 7b 05 d4 62 b5 c5 95 90 d7 12 eb 24 Data Ascii: M_N5eUUc)c>9Ok{JulwT[F=ffGz[MT}a{Xn]};koO}lu}M"[]qv}Ke>O, 8%/OD0:>9,?RgqwXmh4g2}\_ki{b$
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: fb 4d 65 ff 00 67 16 59 50 cb 73 ac c4 c8 15 ba d7 00 0f aa ea 8b 5c 1b be b6 5f fa 3c 77 b7 d2 ab 67 e9 3d 0b 2b 4a 44 9b ab d3 fe e7 fb bc 48 3c c4 00 d0 de 97 fc b8 9b 59 df 58 9b 91 fc c3 da 37 32 cf 4d d7 b0 fa 4d 15 87 bc fa 4c 6b 6b 73 d9 6b 7f 49 5b 2b d9 b2 ef e7 56 5b 2b 73 59 f6 bc b7 3c e4 b4 96 3b 1c 34 39 a1 a4 36 c6 b7 7c bf d5 de f6 7a 96 7f 82 af f7 fd 44 26 b5 94 e0 7a d6 5c cc 92 25 c0 58 cd cf 00 3b d4 a1 ec da 1a c6 58 ea de ff 00 51 af fd 33 fd 1f a1 f4 10 69 66 41 b9 fe b5 0f c9 61 64 b1 ae fd 10 05 ae f5 37 59 6b 36 37 66 cd fb ff 00 7f 62 78 80 f5 57 95 fe 94 bf bb c7 c2 d1 cb 9b 24 c8 12 f3 02 37 c1 fc bf bc 9b f6 1e 4f a5 1b 6f df b7 d3 9f 6f d1 f5 37 44 ce ef e6 bf c2 ff 00 e8 b4 90 ff 00 6a 75 2d d3 b2 cf 53 76 ed bb 9b cc 6c Data Ascii: MegYPs\_<wg=+JDH<YX72MMLkkskI[+V[+sY<;496\|zD&z\%X;XQ3ifAad7Yk67fbxW$7Ooo7Dju-Svl
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 80 d0 c3 1a 50 86 26 c2 0b 4d 81 65 2d 76 66 c4 8e a8 9e 73 ba 09 25 08 56 da a4 b1 34 5a 68 8c 15 d8 30 55 61 07 24 11 4b a8 04 c4 18 32 0c 44 90 01 f4 98 33 81 4d 6d 67 3e a5 f4 09 0d 8b 90 45 36 50 53 45 6a 82 79 e7 a5 5a 29 34 0f 88 a1 38 17 1a 28 11 86 35 4d 15 81 04 95 60 c3 cc c9 6c 5d 92 68 17 8d 4a 8d 6a b5 a9 69 34 48 05 4a 50 88 30 94 40 eb 41 4b 7d a2 0d 76 55 a6 6c 8a 29 a2 b9 0a a2 b1 41 90 5a 0a c4 93 a0 60 85 4a a6 19 67 b1 6a bc c5 2f 45 e6 b4 f4 0a a9 8c b4 90 9a 9b 16 2c 4e ae 6a 4a 10 90 46 99 16 49 dc ab 0a 97 05 50 ec 61 4c 80 34 cb 42 63 69 83 65 72 c2 ec 41 b1 22 d3 a9 22 3d 17 9a 35 a0 53 11 a6 65 31 b8 90 48 71 2c e5 94 1a 4e 96 4a b9 2b 51 52 2b 1b 4c ec 22 77 2a d8 44 99 23 80 05 96 93 95 21 62 35 27 6a 11 3a 0b 95 05 b2 26 a2 Data Ascii: P&Me-vfs%V4Zh0Ua$K2D3Mmg>E6PSEjyZ)48(5M`l]hJji4HJP0@AK}vUl)AZ`Jgj/E,NjJFIPaL4BcierA""=5Se1Hq,NJ+QR+L"w*D#!b5'j:&
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 96 5c 77 72 2d dc f5 31 17 13 75 ea b5 f8 fe d6 7b f6 79 c9 2c e3 5e 9f 3d 2f 5e 9e 5d c0 97 8f ef 73 19 d7 e7 17 4f 84 d7 ba 11 9d 9d 1c b5 d2 e2 75 15 ec dd c3 7e 17 d5 ea f9 8f 4d 8f 56 9c b9 f9 f8 4f 4f 3e 94 ce 7a fc de ed 1a 61 cf ce 49 ea 9c fe 83 8d d4 5a af b9 8f 9f cf 9f 08 04 3d 4c 8f 67 3f af 2f d6 a3 9b e8 3c 7e bc c0 9e 7d 68 9e 5f a8 ae c8 e6 e6 ee aa 33 cd db c6 bc 37 de a5 91 a2 14 9d 7a ad 19 36 de 19 97 98 eb ec d5 f1 99 97 47 4c 0a 3a ca 66 9d fc 53 e5 d1 5d 39 cd a2 fa 39 9d 95 51 b3 32 47 c8 ef f3 b5 ad 9a f6 79 f7 2c db e4 f5 bb ea 74 38 bd 15 5c 5c fb 83 4e 4e 0b bb 1e 7f a5 eb cf b3 a2 e5 1e af c4 f5 39 37 eb 65 ca ac 8c fd 5e cf 3d 15 bf 92 4b 4d 38 fa 7c d9 9c 47 9b 4f 4d f7 a9 0b e3 ce 71 7b f7 53 cb 7e cc 17 48 d6 8d 62 eb 73 Data Ascii: \wr-1u{y,^=/^]sOu~MVOO>zaIZ=Lg?/<~}h_37z6GL:fS]99Q2Gy,t8\\NN97e^=KM8\|GOMq{S~Hbs
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 90 1b 6d 9f 1f 82 a0 10 a7 35 b3 a6 cd 11 8a 9b 20 eb 08 de 2e c6 06 3a d7 9d 1d e8 10 10 1c 25 c0 46 3a d6 c9 8c 9c 08 46 6f 44 36 16 d9 61 b0 34 00 0a c4 a2 80 ca 01 1e 73 5a 21 48 3a 19 ea 33 58 a9 b3 a2 30 92 06 d8 e0 04 17 07 02 0c 28 a4 fc 60 e7 c5 9e 87 66 20 42 c6 30 80 33 64 81 19 d6 80 c2 bb 2a a7 0c 7e 02 6b 0a 8c 1a 18 49 24 f9 c0 bb cd 62 c6 76 50 28 55 3a 08 34 23 1b 11 31 0d 5d ce 0a ac 33 f1 5b 7f 01 df c0 e7 05 76 d9 ac 4e 7e 3b 1c 15 5f 62 bb 0c 30 9c 30 9d 1a cc 73 e2 3a 68 09 3f 01 c1 5c e1 ae 48 15 88 c3 5d f5 f8 ef a3 59 88 15 88 c5 81 c6 7c 0d 8b 5c 8c 30 12 7e 03 9f 8a 76 6b 1d 0a ec 30 57 c1 01 38 20 20 18 a4 05 62 66 c3 5b c1 81 86 2c 0d 82 1d 03 11 c5 84 ec 42 db 30 13 82 16 07 f1 b6 3e 16 07 fb 9a 59 fd d5 31 83 b3 4c e7 f7 54 Data Ascii: m5 .:%F:FoD6a4sZ!H:3X0(`f B03d*~kI$bvP(U:4#1]3[vN~;_b00s:h?\H]Y\|\0~vk0W8 bf[,B0>Y1LT
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 33 9b 38 08 cd eb 09 38 4e 78 cf f4 77 84 1c 18 1b c7 b9 19 b1 9b 18 40 d9 d6 78 c2 30 6f 5b 3a f7 6d 7b e7 b9 cf 63 87 db 34 e7 08 39 e7 34 75 ea 70 1c f1 9a 23 1a 58 d5 63 65 91 35 84 66 bc 1c 07 ca 0d 61 d6 30 d3 5f e8 54 e7 ad 2e 9f 3e f6 69 4e 32 8c 3e d9 ec 70 b1 c2 73 d8 0c 27 3c e0 07 3c e7 9c df 8d 8d f8 fa 6b 47 c6 00 33 4b 81 57 00 18 40 f5 d6 fe 9b 39 b3 80 9d e8 e6 8e ce f3 ce 0d 1c 20 8c 27 0e 78 cf 3a 1f 6d 36 0d ef f9 e7 8c 93 b2 f0 58 e7 fe cb d8 b9 d0 ab 33 4b 0e c6 7b 0c d8 cb 17 a1 ab 2f ee bd 7b 71 dd e7 7e c3 49 07 6f bc 1e 2e 07 46 cc 39 5b f6 d9 6c 75 2b 59 8e d4 5b 19 ec 30 93 87 67 01 c2 b8 41 fa 6c e7 b6 06 39 ed 9e e7 03 1c 0c 75 ef e7 dc 6f d8 68 30 d2 b7 86 de 8e f0 0c f1 9a cf 51 b5 50 72 ff 00 7e bc 28 2d 5b bb 35 cf d9 63 Data Ascii: 388Nxw@x0o[:m{c494up#Xce5fa0_T.>iN2>ps'<<kG3KW@9 'x:m6X3K{/{q~Io.F9[lu+Y[0gAl9uoh0QPr~(-[5c
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b1 95 79 cb 7b ca aa a9 1f ac d0 90 3e 37 01 a1 5c 48 e4 70 d2 47 1b 34 cd ed f2 b8 c4 8c 06 29 19 65 52 0b c8 5b 03 3e 04 21 ff 00 ec df c7 2e c4 0d 2e 49 04 6b 20 57 04 47 26 8c 84 62 11 ec bf 21 53 ec ab 1f c2 e4 c7 33 2a d0 bb 30 86 b3 c6 0a 06 30 f3 ee 48 57 9d 62 73 f8 3f f6 8a b2 20 f8 06 46 a0 13 11 41 1c 69 b2 f0 0c 3f 8d 9e ce 30 d9 95 70 5e 0b 8d d0 4d ff 00 66 3d 4f 4d 86 7f 67 67 6d d0 b6 d8 f3 c8 f8 b2 c6 01 b2 08 f8 cb 91 5d ce 0a a9 8b 5a 3c 11 a2 8f 18 0e 6b 34 73 ce 6f 3c e1 75 0c 26 d4 8a 85 b3 6a c6 19 d2 62 be fe 90 c5 62 47 09 14 60 18 11 c4 42 43 f1 d6 21 22 20 b4 41 a4 f6 52 f2 ca 9e 8b 23 69 e4 db 09 d2 32 d2 2f c6 20 80 bc b1 d5 09 3c 95 3d d4 aa 32 a0 39 a9 30 49 26 d9 66 91 fd 22 55 8c 09 13 52 33 19 21 50 f2 80 b1 ba 33 fe 44 Data Ascii: y{>7\HpG4)eR[>!..Ik WG&b!S3*00HWbs? FAi?0p^Mf=OMggm]Z<k4so<u&jbbG`BC!" AR#i2/ <=290I&f"UR3!P3D
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: c4 9b af 24 f5 c5 3c 92 6a 0e 79 46 9d d5 e5 5b 95 7a 15 39 13 34 a6 9f 3f f3 29 a9 78 61 e7 c2 d0 9e 47 3e 35 ee f4 47 17 9b 79 1b ba 79 7d b4 e3 c0 e9 5f a1 6e 2e 9f 31 d2 27 0e 9b 00 7e 42 7c f6 78 3c cb 8d 2f 06 a3 99 61 68 96 4e 48 96 af 2a 87 4e 9a cb 4e 8b b2 45 15 78 89 ae 87 bd fd 67 66 ad e6 e4 f3 6b 4d d0 b6 4d 6a 71 5f a6 91 21 16 ed 24 56 3f 5d 9a bc f8 d7 2f c1 35 58 ab 2d 21 cc 1d 4b b1 2f 26 39 7a 6e b7 a6 29 5c 28 e6 88 9e d4 33 c7 ce 86 8c d0 42 37 f4 3e 30 cc e2 40 49 21 54 e0 03 37 fe 0d 92 da 8a 12 9d 20 f3 16 f0 a4 90 85 d8 88 c9 6f 50 09 23 60 0c f6 18 4a e3 24 42 65 2d 9b de 13 81 c1 c0 06 78 db bc 71 e0 0d b4 46 cd 0c f7 00 fd fe 92 a1 64 87 dc 2b a9 64 bd cc 36 d5 d6 73 63 f6 6e 80 86 47 8e 4b 10 dc bb 4a 59 13 b3 d4 8a 5e 5f 42 Data Ascii: $<jyF[z94?)xaG>5Gyy}_n.1'~B\|x</ahNH*NNExgfkMMjq_!$V?]/5X-!K/&9zn)\(3B7>0@I!T7 oP#`J$Be-xqFd+d6scnGKJY^_B
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ea dd 5e 64 55 ed 49 61 4c 70 46 72 a3 fa c7 c9 89 6e 53 b1 5e 47 b1 72 8b c1 5f f5 c8 e4 7e b7 c5 73 d1 e2 8e ac e2 c4 eb 72 b8 e8 b4 73 c5 72 0b 0b 27 b2 3a 7b 63 a8 56 99 8f b5 2b cf 5e 78 2c fa 55 bd 3c 62 d8 b3 31 7e 8f 27 93 32 53 a0 2b 48 b6 1c 9b 7d 37 9e bf 32 6b 15 df b1 3d 69 5a d5 3e ad 87 e4 f3 a5 92 cd be e4 dc 48 b9 9d de df 4e c4 95 2c 5b 11 d4 a1 1c 57 bb 10 45 46 a5 2e a5 d9 a3 45 e8 0b 15 8f 2e e2 b4 24 db bf d2 33 d7 b7 62 78 63 82 94 79 7a f7 5e 66 7e 2d 59 2b 41 05 42 69 73 ec 48 6d ad 79 fa 53 71 a2 ae 93 35 2b b3 55 fd 80 c3 7e ea 09 b2 9f 25 2d d7 e1 f1 e6 86 fd da 31 7c 97 ad 56 ea 41 15 6e 8d da 3c ae 5c 1e fd 7e b3 d3 87 a4 66 b3 97 ab c5 f2 c1 55 c5 5e 5b cb f9 bd 6b dd 29 07 2e 49 0c 16 6c 75 e5 e6 f3 6b cf 46 3e b7 22 af 46 Data Ascii: ^dUIaLpFrnS^Gr_~srsr':{cV+^x,U<b1~'2S+H}72k=iZ>HN,[WEF.E.$3bxcyz^f~-Y+ABisHmySq5+U~%-1\|VAn<\~fU^[k).IlukF>"F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	62734	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	979	OUT	GET /wp-content/uploads/2022/07/photel-mobile-01.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:13 GMT Accept-Ranges: bytes Content-Length: 262566 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7957	IN	Data Raw: ff d8 ff e1 27 e1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 32 3a 31 30 20 31 38 3a 32 32 3a 33 34 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: 'ExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:12:10 18:22:340
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 1c 76 db 53 05 a6 36 6e 79 f4 eb 6f a6 e3 ea 5a ef e7 3f 99 aa d7 ff 00 39 fe 8d 45 23 fa bb 34 2c 0d 3e 61 c5 ff 00 74 b2 64 70 6c 3d 5f 2c 4f 73 e0 e9 d8 3a 7d 9d 27 ec 9d 53 2c e2 33 22 d1 90 6f 1b 33 1d bc b6 2a 6b 2b c7 6b 5f 4e 37 a7 fb f9 1e bf b3 d2 f4 7e 9a e7 e9 7d 82 ab 98 1d 63 ad b1 bb 03 da e7 06 bd 8d 3b ec 2e 90 df d1 7a 6c ff 00 09 fc df f3 8b 53 34 7e cc bf 2f a6 fd 91 af b4 3c 6e aa df 51 c5 86 3f 57 73 0e ea 1e cc 9f 4d ff 00 b9 fc df f8 2f f0 49 fe af 31 8e ba fa 36 9f 56 da dd 45 b6 34 01 e9 d0 f8 6d ef dc 5d b7 7b da ef b2 33 f4 1b 3f 4b f9 e9 ba 63 84 a5 46 87 a8 df fc e9 2d 24 63 c7 29 10 44 63 ea d7 fa bb fc a9 f0 09 ab 10 6f c3 63 cd c4 6c 2e b0 8b 5a 5c d1 a5 6c a8 37 7e 35 8d 67 ab 6d 7f ce 7f 85 fe 6b f4 97 47 d5 b1 f9 6c c3 Data Ascii: vS6nyoZ?9E#4,>atdpl=_,Os:}'S,3"o3*k+k_N7~}c;.zlS4~/<nQ?WsM/I16VE4m]{3?KcF-$c)Dcocl.Z\l7~5gmkGl
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 74 df b9 c5 a7 1f 35 a2 05 9c 6e 8f cc bb f7 bf ae b3 be b3 dd 60 ea 38 d8 98 e0 86 e1 e2 d6 d0 f0 76 86 19 df bd cf da e7 57 b7 65 4f f6 28 c9 fd 66 31 db 8a 67 fc 11 c1 ff 00 a9 1b 23 d7 8b 26 bb 88 c6 ff 00 bc 78 bf ee 1f 64 cb b9 d4 56 0b 1a 5f 61 30 d6 34 12 7c 78 6a e2 3e b0 f5 9a 2d bc 87 54 c6 5b 53 1c 48 10 db 4b c7 d1 dd 5b c3 32 2a ff 00 80 bf fe db 5c b7 5b fa df d5 73 c3 18 fc d7 36 a6 b2 b3 63 85 6d 16 be c6 81 ea fb aa fd 13 29 7b ff 00 31 d6 fb d9 fc e2 cf cb ab a8 74 71 e9 55 90 5b 5d ad aa eb d9 59 2d 21 d6 01 7d 0e c8 87 0d ce 67 fd b7 bd 4b 3c dc 40 46 37 03 2e ff 00 35 47 76 ac 79 33 66 52 90 3c 3b 70 fa be d7 d0 be ae 75 37 e6 e7 d9 63 f4 6e 26 38 a6 db 9e 40 6c b4 bf 26 cb de d0 77 ec af 1e ea d8 cd 8c ff 00 8c 7a dc c2 a9 99 96 b3 Data Ascii: t5n`8vWeO(f1g#&xdV_a04\|xj>-T[SHK[2*\[s6cm){1tqU[]Y-!}gK<@F7.5Gvy3fR<;pu7cn&8@l&wz
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 34 37 34 46 31 45 30 34 41 43 46 45 30 43 37 38 35 46 39 38 43 43 43 43 31 37 31 31 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 36 64 35 61 31 33 66 2d 61 37 35 36 2d 65 38 34 66 2d 62 64 65 64 2d 64 64 31 64 31 37 61 65 64 62 35 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 Data Ascii: /> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>A7474F1E04ACFE0C785F98CCCC1711BB</rdf:li> <rdf:li>xmp.did:26d5a13f-a756-e84f-bded-dd1d17aedb5f</rdf:li> </rdf:Bag> </photoshop:DocumentAncestors> </rdf:Description> </rdf:RDF>
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 02 00 00 00 18 10 cc 64 00 08 44 c0 00 44 d8 10 18 11 0c 00 11 80 07 27 45 26 cd c1 08 0c c0 0d 49 80 48 89 a3 0f 29 fc 7f da 74 3f 3f 7a 3e bc 33 3b 3b de 5d f2 dd d9 4a c1 a2 b4 2c 73 75 69 47 d7 cb 99 ec e2 61 e6 c1 2d 31 d4 f5 d9 de f7 2a af e8 9c 55 4d 24 bb 2c f6 b7 cb b2 c7 2d 18 73 17 49 ce f4 f0 49 4d e5 52 0b 52 b7 55 40 17 aa be 63 d0 71 ac e7 5e 7c 57 d8 e4 cd 74 73 49 9b 48 34 d4 4a c8 2a b7 c7 a7 65 8f 45 07 4f 35 16 98 3c 9d de 5d 2a 6a 50 44 ac e0 74 61 62 b3 f4 6e fe 4e df b7 95 2c 4b 49 61 00 11 01 30 80 c0 80 c0 0c 0c 08 02 58 40 00 01 30 80 00 00 00 00 18 00 5c d0 04 b4 4c 20 30 35 4b 54 40 1a 49 2a 4f cb 5f 25 f6 75 fa e0 b9 d7 45 c9 d1 8d ed e6 bd e3 de 17 4a cb 74 f2 5d 4e f0 6b 9e be 66 74 e9 51 b7 3d 3d e2 f0 fa 1e 1a 6a 32 72 ea Data Ascii: dDD'E&IH)t??z>3;;]J,suiGa-1UM$,-sIIMRRU@cq^\|WtsIH4JeEO5<]jPDtabnN,KIa0X@0\L 05KT@IO_%uEJt]NkftQ==j2r
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 7b 97 af 8c 78 ff 00 45 a9 e8 e2 9d d1 8f 26 f9 df 77 d2 3f 53 f2 d7 8d a9 51 34 41 c1 f3 ed 63 cb e9 ef 7e d7 8f 13 5c a3 5c f2 2e 5e ee a1 b7 1e 40 ca 6c 55 3c b4 e5 75 bc 4e f3 de cb 61 0a c8 69 69 0d 26 86 a9 21 89 14 61 ad 3b 18 a7 66 aa 74 54 b6 fc 3f e2 74 d8 0f 47 13 37 3c e8 ae d9 a7 d1 b3 9c 5e 97 72 4d ee 9a f2 f4 bd 09 e6 71 d2 ed 74 77 78 ba 7b 6e 1e 7c b7 5e cf 69 5d c3 ce e3 c8 79 97 9a e8 ba 0e 93 2b e9 ed ae c7 23 a7 98 9a d3 4c d7 4c ea f4 79 8d 34 b6 cb 3c cf 46 91 5d 6b 79 71 ae 84 31 24 39 d4 21 ae 58 28 13 ea 75 43 e9 d7 67 b4 74 0d 72 d5 e9 9b 44 5a b6 a6 00 6a 6b 39 cf d5 9c 1e e3 5e 6a 59 7a 73 4b 0b 8c c7 4f 1d ae b2 a2 dd e4 eb e6 be 2f d0 47 e9 c0 b1 bc 0f 0f 67 ac 3e 97 e6 ca a1 15 26 06 8e 6d be 55 be 37 a1 d5 7d 4e 6a 1d b1 Data Ascii: {xE&w?SQ4Ac~\\.^@lU<uNaii&!a;ftT?tG7<^rMqtwx{n\|^i]y+#LLy4<F]kyq1$9!X(uCgtrDZjk9^jYzsKO/Gg>&mU7}Nj
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 5b aa d7 67 d3 d7 71 ed 71 8e 74 bb e3 99 d6 aa ba 51 39 91 9b 9b 3a 39 39 e2 7a b2 b5 cd d2 e8 ba 27 89 e8 60 bd af 3b 41 35 b2 f2 79 e8 7d 7e b9 30 b6 3e 77 1b de 9f 7e 98 2f c2 dd a9 95 2e 02 06 c4 b2 a4 d8 47 91 86 e3 89 a6 32 1c c7 c5 e3 c8 fa 5b 25 47 7b f9 0f 0d b8 be 6d f4 1e a2 6b 7a cd b7 af df 9e c6 30 cf 6f d1 71 cf 8c 9c e6 0b ae 8d e1 5d b6 38 64 fd 7d 73 7e ae d8 4e 97 79 8e 71 a2 2e 31 3a 3f 85 c1 79 df 55 5e 9f 5e 3f 9e 1e e5 aa ad d6 6f af 5d b7 06 0f 22 bf ae db e9 d6 18 69 3c ac b2 9e 9e f5 1a dd 8e 1b 65 7a 4e c1 96 1c fe f4 bc f3 f9 ba 57 89 e6 9b d6 17 66 e5 84 72 ef a2 ef a9 d2 ab 29 d9 64 aa 37 73 62 ef f3 76 1c fc b4 3a eb 75 ce ea fa ee 2d e3 d1 7e 7f 3b 1b 9e 65 ed 76 4e 8d 74 59 6b ae e3 e6 e2 1e ac c4 d0 9d 2d d9 97 14 cb 9a Data Ascii: [gqqtQ9:99z'`;A5y}~0>w~/.G2[%G{mkz0oq]8d}s~Nyq.1:?yU^^?o]"i<ezNWfr)d7sbv:u-~;evNtYk-
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: b8 82 ce ef 8f 22 28 88 4e 6f 81 75 7f 91 57 ac df 29 19 89 69 41 93 90 54 a0 15 e6 01 7b 44 a9 8d 73 1d 14 df 1a ad 6c 48 55 f8 0b 9a c7 96 18 2c 4b 61 e4 27 1e b3 7f b5 bd dd 1f b2 2b 38 5e 45 07 7a 20 ee 9c 30 9e ee c1 0e a4 22 dc 26 f6 41 38 77 43 dc 80 56 f2 12 19 59 b9 7b 5c 41 2e 24 a6 48 e6 ac ad c1 c2 a8 3f 19 db e5 14 47 b0 f5 65 1f e2 c7 4c 22 30 09 09 b1 90 0b 70 be 47 04 08 22 4c 00 67 4d 7f 92 2e 57 a4 f0 6c 2c 54 41 13 13 90 d1 85 8c 88 b0 9d 90 1b 69 e0 1b 4e 7a 91 8e 71 20 81 f1 b4 8f c8 26 3c 91 25 87 f9 08 72 59 23 1a 23 c1 53 c0 7c a3 80 bc 56 bd 2b 08 64 be 2d 63 80 36 bc 09 d9 c8 c9 16 11 6a 98 7e 31 b3 bc 7e c8 fa 01 41 cb 2a b9 52 38 61 ee ec 10 e8 0f 42 3a 07 27 7b f5 dc 3f f0 a2 cc bf d0 06 56 e1 ff 00 f3 d5 18 63 3f 28 e1 2b 28 Data Ascii: "(NouW)iAT{DslHU,Ka'+8^Ez 0"&A8wCVY{\A.$H?GeL"0pG"LgM.Wl,TAiNzq &<%rY##S\|V+d-c6j~1~A*R8aB:'{?Vc?(+(
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 01 8e 42 f6 45 12 85 be 2d 32 2f 75 2d e7 b5 f5 ac b6 60 46 57 8a c2 7d 86 b5 3a d3 93 25 73 85 88 84 82 4a 6f 0c a6 cc be 06 87 00 c0 13 67 31 af 9b 28 f8 b8 48 c2 d4 1e ac d5 2f 46 56 b1 f3 38 bd 0a b3 39 41 aa 99 e2 b6 a1 b1 98 99 80 f9 00 4d 93 2e 18 44 76 0c 08 af 1e e4 64 f8 f9 0b 65 c2 2a 53 9c 10 49 7e 72 d0 30 8c 0d 26 38 bc 55 86 b8 81 ad 0f 4d 85 ac 1e 00 38 00 8e 4a 67 bc ad 0d 6f c4 40 fd a6 17 34 33 25 a0 a8 d9 80 e7 00 9e 3f 18 ac b0 90 40 04 2b 13 32 27 44 f0 f6 cb 10 29 a0 b5 de 7e 49 f1 87 0a ee 31 be d5 61 20 a5 f8 4c d1 84 46 7d 58 f5 df 77 81 96 e0 0a 39 25 c3 36 4e 01 d6 3c cc 96 1c c2 e7 39 c5 90 0f 20 e6 62 9c ac 62 93 61 90 67 78 2d bd 23 63 fc 9c 62 7b e2 79 b2 f4 cb 81 4d 6b c9 34 60 49 65 81 45 74 b4 8b 46 42 ca af 91 0d 50 5f Data Ascii: BE-2/u-`FW}:%sJog1(H/FV89AM.Dvde*SI~r0&8UM8Jgo@43%?@+2'D)~I1a LF}Xw9%6N<9 bbagx-#cb{yMk4`IeEtFBP_
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: a3 f0 bc 73 25 67 e1 d2 b7 0e 3f d1 01 d0 7b a6 b3 00 b4 84 5c 50 ee 9d 84 e7 90 9a fc ac ab 07 09 aa 2c f9 7f 6c 2c 26 e1 1c 84 d9 5d 87 48 5c 9c 09 5f db 01 77 40 9c 7c 85 61 4b 17 83 1a 13 d9 de 36 2f 3c 0c 3b 00 14 d7 94 1e ee 99 41 c9 85 39 fd ac 7b a1 e9 c7 4b 2a 20 73 1c 78 71 4e 47 a8 3d 08 ef 11 ed d0 85 ad 6f 7b 0e c4 67 d0 7b 2a 23 11 5a 39 7b 3b 3e d0 c1 01 10 b0 b0 b0 b1 d3 0b c5 78 ac 23 d3 0b 0b 0b 0b 08 00 83 48 01 99 4e 8d 3a 16 01 27 b9 6e 53 40 52 b4 64 b7 b4 ad 00 09 42 9a 3c a0 14 4c 2d 44 2c 2c 94 08 08 c8 02 2c 4c 67 70 48 58 44 a6 b8 ac 04 18 b1 85 e2 13 d8 13 46 48 fc 51 71 72 12 76 ce 11 ee b2 41 f3 71 45 fe 22 39 72 83 b0 7e 5f 35 37 40 56 7d 19 58 4f 19 41 37 dd c9 e9 dd 0a 05 35 dd 18 3a 13 d3 5e dc 32 fb b1 1f 4c f4 77 b4 2d Data Ascii: s%g?{\P,l,&]H\_w@\|aK6/<;A9{K* sxqNG=o{g{*#Z9{;>x#HN:'nS@RdB<L-D,,,LgpHXDFHQqrvAqE"9r~_57@V}XOA75:^2Lw-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	62736	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:29 UTC	721	OUT	GET /wp-content/uploads/2022/07/005.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:29 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:46 GMT Accept-Ranges: bytes Content-Length: 69483 Content-Type: image/jpeg
2024-05-28 05:15:29 UTC	7958	IN	Data Raw: ff d8 ff e1 11 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 30 3a 35 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: BExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:20:55
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 3b 00 7c 96 f4 42 5e 8a 28 74 a7 91 dd 38 73 7e 28 3c b7 82 0f 41 37 a0 ac cb 52 f6 a3 f7 b5 a7 96 f0 2d 6f 41 2f 43 c9 5a f6 a4 1a 4e a0 13 f2 4e fb d0 ee b7 ee de 6d 4f 43 c9 2f 43 c9 5b da 7b 82 3e 49 16 f7 82 8f de 82 be ee d4 f4 3c 92 f4 7c 95 bd b1 c8 4e 1b f8 72 97 de 42 3d 86 a7 a3 e4 97 a2 7c 15 cd 9e 3f 34 2b ed a3 1d bb ae 78 67 80 3c 9f ea 33 e9 bf fb 28 9e 64 01 64 d0 0a f6 2f 41 ab 58 d5 e4 aa e6 64 63 e2 55 eb de 4b 69 11 ba c6 82 f0 d0 7e 8b df e9 cb b6 2c fe af d7 6c b0 ba bc 0b d9 87 53 1a 0b f2 ee 69 24 97 7f 82 ae 86 d6 fb 59 67 e7 b2 df 52 af f0 9f f0 76 ae 31 f6 62 db 6b 86 43 cd ef 78 79 c9 b4 ed 01 81 ed 2d f7 b0 3b fc 27 bd 8f bb d2 b7 f4 8a b6 4f 8a 44 0f d5 7e b3 7f 54 75 aa f0 66 87 22 4f cf e9 f0 ea f5 df f3 8f 16 27 d9 ce cf Data Ascii: ;\|B^(t8s~(<A7R-oA/CZNNmOC/C[{>I<\|NrB=\|?4+xg<3(dd/AXdcUKi~,lSi$YgRv1bkCxy-;'OD~Tuf"O'
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 2e 5f a5 fa 13 f0 34 52 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5f a5 fa 68 ce 07 ec e8 27 2b 37 e9 7e 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 c6 70 a1 b6 24 8f 24 cd 60 e2 c6 e5 cb 97 2e 5c b9 72 e5 fa 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 1f 51 46 d8 f2 50 00 f8 17 0a 99 e3 68 54 ca 32 bd b7 e9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e5 cb 97 2e 3e a0 07 d9 88 57 17 e5 f8 20 b1 55 00 9a 27 37 e4 4d 7a 54 e2 0c e0 b3 c6 b0 e4 b3 c4 b3 c2 27 86 78 4c f0 b4 f1 34 f1 b4 28 d2 8c a3 28 ca 69 4d 3e 61 63 2e a7 90 5f 39 66 2b d9 e5 39 ce 6d 03 12 06 90 3c e7 70 ea Data Ascii: ._4R.\r.\r.\r.\r.\r._h'+7~.\r.\r.\r.\r.\rp$$`.\r\r.\r.\r.\rQFPhT2r.\r.\r.\r.>W U'7MzT'xL4((iM>ac._9f+9m<p
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 69 91 5d b9 4c f7 f8 04 34 d7 30 c1 d1 c4 3c a0 eb f6 58 7e 86 e4 7e 87 60 94 e9 f5 d0 14 c2 df af d4 72 ff 00 5e 01 db ad be 4c bc 2b 14 cb 92 e6 ad 06 a4 1f 21 33 99 27 3d 4d 67 a5 94 e5 34 c1 5c 1c 33 cd 95 b3 59 a0 5d 43 96 11 3b 04 05 ed b2 96 d8 81 a7 6e 1e c1 50 bf 63 9a 8d bb 38 6c a7 a7 91 99 f5 12 fc 60 32 a8 a4 c4 52 70 e2 ec ca 83 65 78 a5 1e 2b 86 72 75 ac 99 8c 24 99 fc 08 47 79 aa 82 dc 80 5b e4 8a f9 b9 26 d4 2b 08 34 24 82 5c 2b 12 39 32 a3 97 30 37 cb 31 11 d8 d5 ce 41 4f cb 03 fe 2f e6 e7 20 25 c2 0d b8 22 13 53 c9 47 2e cb 2a e5 b0 d2 32 03 19 2a 3a 7c 1c c1 9a 75 3a ac 3b 5d 26 c5 82 b4 f2 a8 61 a0 a5 d4 40 e6 99 cc 06 5d 47 73 1b 58 34 f9 73 ca 5d 15 d6 67 b0 8a c1 c7 89 0c 09 73 80 94 23 54 79 87 5b 7e c1 4f ac eb 28 6e 8f 54 47 ea Data Ascii: i]L40<X~~`r^L+!3'=Mg4\3Y]C;nPc8l`2Rpex+ru$Gy[&+4$\+92071AO/ %"SG.2:\|u:;]&a@]GsX4s]gs#Ty[~O(nTG
2024-05-28 05:15:29 UTC	8000	IN	Data Raw: 2a 97 b4 dc 1e cd 1b 3d 91 c9 76 b8 dd 87 ac 6f 5f 3f fc 54 d3 7b 5f 69 4a d2 18 de 22 31 dd bc 30 0f 65 1f e6 7f e2 3b 57 db 7c 2a 56 8c 09 a2 06 f1 16 39 08 9f d1 f5 72 7f 77 4e cc aa cc 84 95 24 de 22 6c b1 62 fe ea 78 7f a8 fb 2a 9b 86 e4 04 02 c4 0c 73 1f 69 2e 4a be d3 87 0d 18 4f 6c 71 23 69 22 b1 b9 6b 65 ff 00 88 c7 ad e1 fa 58 fe cf d6 7a 59 e9 d2 14 e2 ab 80 ab 3b 95 b5 a3 c5 ff 00 a8 fc cf a2 ec de b3 87 ff 00 88 a1 1f 68 90 4e d2 80 72 50 1d 91 13 aa 89 7a ef 64 9f 0b aa fb 49 28 c0 cd 22 64 a4 20 38 e3 2b 8f 45 c4 7f e5 fd a4 dc 3a 3d 9f 84 91 38 b8 79 24 19 76 8b df 8b c2 89 32 ea 93 7f ae 99 3e f2 92 44 69 2d 8f 5a c0 85 7d 9b dc 26 6e 9d 70 24 22 27 25 50 48 ab 86 22 4c 62 9e 4e d1 eb 78 9b de 87 de f5 bd 55 2f 66 96 5b 4f c6 c0 04 2f 93 Data Ascii: =vo_?T{_iJ"10e;W\|V9rwN$"lbx*si.JOlq#i"keXzY;hNrPzdI("d 8+E:=8y$v2>Di-Z}&np$"'%PH"LbNxU/f[O/
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b6 35 d5 81 f2 5e 3a da a6 fa dc 36 0d 7a 2c 18 b1 f1 5a c2 b0 bb 58 8b 5e df 59 eb 59 94 2f 74 37 ee 51 b4 e2 42 3b c2 38 69 e6 c8 9d 67 c4 a2 c2 36 8d 47 2d ee 3c d6 91 70 7a b3 26 67 99 d0 c7 f4 d7 72 8a 3c 41 79 6c 46 c1 e2 bd 6f 64 13 be 03 5d 05 59 0e 2d c8 c0 ee e4 3b d9 ab 09 11 a4 51 c8 03 66 a7 d9 c9 bf 56 59 4a bf 22 b8 c5 88 f2 68 12 57 9f 67 27 ce a0 09 d4 f2 d8 e3 7f 29 a8 94 25 c1 d1 94 d9 83 78 8d 15 14 42 d1 78 a0 e4 07 91 c4 df ab 29 12 ad b6 74 5b e6 bd 18 cd e3 94 8b 8d aa da 7f 32 85 a4 3c 36 d8 92 6f 10 6f d1 57 5a 2c d2 e2 9b 40 0c 03 7b b5 e2 35 7a 43 32 0d 4a 17 5d d7 07 c4 fb ca 40 89 90 b9 bc 68 08 7c 4e f3 71 a7 c7 bf 7a c6 35 93 b3 e2 45 c8 ca 74 61 6e 83 f6 7e d2 f5 73 b7 9d d5 75 f8 5d 93 ab 4a b6 60 6d d6 d5 6c 8f ea 5b d5 Data Ascii: 5^:6z,ZX^YY/t7QB;8ig6G-<pz&gr<AylFod]Y-;QfVYJ"hWg')%xBx)t[2<6ooWZ,@{5zC2J]@h\|Nqz5Etan~su]J`ml[
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: df 51 57 ef 36 df 90 50 d7 e4 ad 2c 2d cf a5 70 df be d8 45 62 dc 87 51 d1 3f 32 b3 81 c1 3d f2 9b 29 fa 7d 3a 79 2e b0 c9 6c 8b 2f 44 9f 1a 3e 85 28 21 40 be 24 9d 9a f8 39 3c 94 25 68 52 61 d1 28 d9 47 7f 76 cb 9f 67 cd 28 7e 52 21 02 91 76 46 7b ad bc 39 30 dc e1 d3 32 b2 2c 62 d7 b3 3f 0c d8 ef c7 24 71 ff 00 79 41 54 c4 41 20 74 d9 6d df a7 5a 98 7f 7b 57 8e 35 b4 84 12 24 7c ad f6 6b 1c 13 37 1e 3f 67 4d a0 c5 94 10 26 2c 78 97 df e1 4a 9c 57 87 89 ed 65 a2 14 af 67 6b df 71 0e 5b 32 75 ec dd a7 ad 8d fa 1f 69 4a c8 5e e6 c5 88 4d 55 7d 64 72 cb 0f f8 14 96 93 03 c8 1d 64 37 07 bd e3 cc fc 2e f7 ec e1 8a 80 25 9d 8d c9 40 1e 24 f6 d2 49 c6 e2 76 7e 87 57 44 c5 23 95 b5 d5 71 33 c6 31 3d e4 d2 47 1f 4f 1f 4b d7 45 44 89 5c c3 b1 78 65 02 3a b1 e8 e3 Data Ascii: QW6P,-pEbQ?2=)}:y.l/D>(!@$9<%hRa(Gvg(~R!vF{902,b?$qyATA tmZ{W5$\|k7?gM&,xJWegkq[2uiJ^MU}drd7.%@$Iv~WD#q31=GOKED\xe:
2024-05-28 05:15:30 UTC	5525	IN	Data Raw: 17 21 a5 c5 80 a1 c9 f2 d5 f1 27 b8 b5 b2 df 2d 6a 45 f9 8d 5b 78 73 05 1f c7 b9 5b b7 d7 65 c8 1b 6b 51 6f d7 95 12 d6 52 36 b1 1f c3 5b a6 f5 dc ee 56 95 63 90 61 b2 d5 60 1a dc ec 00 a2 92 82 a4 73 fe ef e8 bd f6 d7 35 05 63 b3 96 ae a6 f5 a5 bf 5e ca 04 81 7e e7 e8 db 5a ec ab 6a 6b 6b 29 ee 8d 3e 8d 58 b1 61 dd d7 eb 55 ca 21 3c f8 af f0 d5 82 e0 3c 43 85 eb ab 90 fc 8e 2f f4 e2 ab 05 0c 79 c9 18 d7 58 c2 fd c1 a5 69 6f 94 56 a6 b1 75 17 e4 75 00 30 fa b5 94 7d 6c 63 95 2f 9a 8f 69 17 f8 75 ac 98 9e 61 bc 6b 6e 43 fc f4 05 ac 2f af 25 5d 6f 7b 73 16 ab b6 a0 6d b8 23 e7 46 d5 a6 9c c2 fa d0 e1 87 32 58 6e ad da ac 20 92 fc ec b8 91 f4 92 b5 89 54 f7 5d 57 93 c1 c9 ea ea 85 b5 b9 c7 09 07 d6 ab bc 6c a7 61 2a a6 b1 06 c7 65 c8 37 f9 8f 58 99 6c 7c 65 Data Ascii: !'-jE[xs[ekQoR6[Vca`s5c^~Zjkk)>XaU!<<C/yXioVuu0}lc/iuaknC/%]o{sm#F2Xn T]Wla*e7Xl\|e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	62738	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/002.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:31 GMT Accept-Ranges: bytes Content-Length: 92130 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7958	IN	Data Raw: ff d8 ff e1 22 e5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 39 3a 30 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: "ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:19:00
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 10 3f 05 14 a1 13 b0 a6 51 32 00 bd 5a bd 76 ea 2e fa dd 7d 8e b1 c2 9b ad a1 fe b0 1c 8f 4e 97 57 ee 77 e6 7e 72 f5 de 9c da ed c1 ab 69 fc de 7c d7 8e e5 b2 9c 8c bf 4c 54 eb 1f 60 6b 0b b6 f3 b3 65 4f db 67 b7 73 59 ec 6f d2 5e b7 d1 1c 29 c4 ad a4 e9 03 95 4b e2 71 81 c5 01 3a a0 35 07 c1 97 10 26 33 ae f6 d9 fb 33 e7 9f ce fe 09 2b 5e bd 69 2c 1f 6b 94 fd ee bd ff 00 05 b5 27 ff d0 f3 e3 91 64 7a 21 8d a9 ae f6 83 b0 07 10 7b 1b be 92 b1 5b ad c9 78 a1 d9 4e a7 0c 43 5f 63 81 f4 9a 47 d0 17 36 af a1 56 ff 00 de 5a 39 5d 2f 0d af 70 19 14 3e a9 83 37 30 11 f1 73 9d b3 fb 6c 4f 57 46 c1 ff 00 b9 94 0b 00 90 05 f2 f0 0f 1b 5d 50 f7 37 f7 37 ef 55 25 cc e1 89 a9 1a 90 fd 1a b9 5f 93 36 80 7f 39 1e 13 de 5c 3a 7e eb d5 74 ef b6 f4 fc 4c 6c 76 b3 ed cc 65 Data Ascii: ?Q2Zv.}NWw~ri\|LT`keOgsYo^)Kq:5&33+^i,k'dz!{[xNC_cG6VZ9]/p>70slOWF]P77U%_69\:~tLlve
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 45 cc b2 ef d1 b6 bb ff 00 49 fc e2 31 aa 00 8b ad e8 7f e8 ac e3 96 9d 6b 40 8f 10 e7 64 d1 55 43 6e e3 63 e5 a1 bb 4c b0 35 8d 6c d8 cb 07 f8 4b 9d f9 9f b9 fa 4b 12 cb bd f6 16 e3 dc d9 ae 91 be c9 30 6c d0 6c 0f 78 1f 9a cd bb 15 de a1 9b d0 f2 8b 43 30 69 e9 ed af 46 8c 47 bc 3d cd 3a ed c8 7d ff 00 69 65 9f f1 db 3d 45 51 ac e9 d6 b9 cd a2 9b 5c f8 36 39 ce b4 38 06 e9 2e 73 7e ce c6 ed f7 27 d8 d0 90 74 ea af bb 48 9d 25 13 f5 6c d5 89 d3 1b 97 40 ea 99 4d f4 1e 5a 6f 7d 64 81 b0 b7 de d6 43 3e 97 b9 8c b9 ed a6 eb 51 b2 f3 5a 2b 8e 93 bc f4 e6 ba 37 09 97 58 d0 5c f7 d9 ea 97 7d 0a 3d be ef f8 cf f0 ab 67 ea e7 d4 bc 3e b1 d1 f1 73 ec cb b9 99 17 1b 5a 58 58 1e d6 bd ae 76 33 76 7b ea 73 9b b2 ba be 9a b9 81 f5 1f 07 2f 09 99 0c cc aa eb 2c 31 ea Data Ascii: EI1k@dUCncL5lKK0llxC0iFG=:}ie=EQ\698.s~'tH%l@MZo}dC>QZ+7X\}=g>sZXXv3v{s/,1
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 4b d8 e3 65 e3 4d fa ad 1e 23 a7 27 ab 9f 90 ad 3d 87 17 cf d5 a9 ec 0e 35 98 d7 76 ae 74 26 b0 53 9b a5 6f 27 65 1a 97 11 25 cf d5 97 6e 35 be 1b 31 74 b3 33 97 a1 85 6b 9d d4 05 ce 8c ea 53 59 b4 db b0 c1 97 6e 27 09 d9 54 cb ee c7 7e 4f 2f 4b 12 ef 58 0c ba 39 31 ce ce c6 79 4f 93 9d 5f 43 9f da fb 7f 39 ed 3c 4b 58 67 a3 25 96 99 dc 8d 55 76 d5 9d 49 4b c9 70 76 4a dc b6 12 a6 2e a6 e0 e1 68 84 25 db 4e 7b f3 db 2c a1 7f 4e 49 d8 f0 ab 5d 36 4d 67 d1 26 ce 38 ed 95 55 2c 4c ee 55 c8 dd 9e d6 55 4c 6d 55 69 d9 ac 4b d2 79 ce 74 9e b2 ff 00 1d df 39 71 a3 4a f3 a9 d3 9f 78 8c af ef cb e6 eb ee e2 97 1f 57 99 a7 53 74 b9 6e 5b b0 f5 54 6c ea f9 0b 6b d6 53 cd e9 72 d7 02 5d c8 2c f8 fd 68 a6 2c 7a f1 cf 46 69 c7 7e b1 45 fd 1a 5c f8 52 e9 e8 d7 2e 16 9e Data Ascii: KeM#'=5vt&So'e%n51t3kSYn'T~O/KX91yO_C9<KXg%UvIKpvJ.h%N{,NI]6Mg&8U,LUULmUiKyt9qJxWStn[TlkSr],h,zFi~E\R.
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ed 0f ae 70 49 9c 8e 4c 1c 71 94 10 ba ce 6b 03 02 57 f4 92 50 f7 31 58 30 23 28 44 51 0c 30 8f b4 b0 ea 26 3a 11 8e 98 c1 30 fe 36 20 94 fe a6 8d ea 47 63 e8 3d 4e 67 69 c6 00 31 81 14 60 fb 8c 01 62 65 2e 31 6a 85 2b dd 4f e9 02 31 ec 46 21 fd 00 64 fe 50 43 33 0b 4c f4 3e 9f 80 a3 bf 02 c7 13 13 81 c6 3a 09 5e 32 7d 1b a1 00 c1 d8 e2 60 c5 03 1c 44 c4 18 13 8c c4 f5 00 97 7c 08 7f 46 70 39 c2 d3 91 c2 2f dc 3d 20 e9 8f a3 1d b1 d0 09 83 d3 1d 47 63 59 cb fe 78 30 67 8f 13 38 18 09 95 b7 dc 6d 87 bc cc cc 5f d4 de aa b9 86 b3 06 26 44 23 30 30 c0 80 e2 02 41 ac e6 37 e8 2c 08 c4 c1 88 86 05 c4 02 63 e8 c1 9c 5a 7b 6d 15 49 9c 5a 70 81 21 49 ed e6 7b 6b 38 2c e0 b1 94 08 9f 69 2e 9d 01 10 b8 13 dc 13 94 0e 60 39 3e 81 81 cf dd 30 d0 e6 73 20 16 c8 30 66 Data Ascii: pILqkWP1X0#(DQ0&:06 Gc=Ngi1`be.1j+O1F!dPC3L>:^2}`D\|Fp9/= GcYx0g8m_&D#00A7,cZ{mIZp!I{k8,i.`9>0s 0f
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: d7 80 fa e4 3d 96 a2 05 bb ba 8c 86 d7 b7 e4 6f 39 0a e4 94 d5 e5 9b 42 d8 9f 1f ed 5a d8 b7 12 0e 08 94 ea 6c 6c 0d 7d 2d 9a ec d8 1d ec 8d eb 04 54 05 48 c4 13 47 c7 d9 b9 2e d4 a7 58 dc 57 24 c4 d7 b5 d6 b5 04 56 ed 55 eb e5 b7 08 5f 29 be c4 6e ed bc 1b 7b 16 1f 7e ff 00 77 dd b9 9d 19 8b 1d 87 f6 96 be 52 d5 fb f5 f5 9e e6 ba ca a8 5a 98 ad db 15 f0 b8 89 a8 92 d5 61 61 87 d1 41 e3 c8 a9 b1 41 12 b5 18 24 b1 55 24 98 91 bf 54 da aa ea 95 d4 c4 66 a9 fe 41 62 cc af 66 9d 5f 22 db b5 dd 45 fa b6 5a 97 d4 f4 db 80 ea 44 a4 57 b3 43 d6 41 aa cb 28 7a b6 ab b6 a0 ce d6 db b1 ce bd 2d 9f 6d 51 ab 7a ad af 93 aa 2b 37 f2 1b 8d d6 6b 69 87 a3 45 19 28 7d 8a 6b 96 5b 5d 86 c5 65 9f 75 95 78 b0 12 c1 62 fc df 2b 72 8d 1b d7 8f 89 f1 ba 23 69 ac 09 59 d2 f2 e6 Data Ascii: =o9BZll}-THG.XW$VU_)n{~wRZaaAA$U$TfAbf_"EZDWCA(z-mQz+7kiE(}k[]euxb+r#iY
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 91 8d db 36 0a 3b d7 c4 cb ee 6a e2 ec f9 24 ad 3c f6 f2 4a 3c fd 8e 17 ce 54 62 f9 4d 27 22 dd 2b 26 d5 3a c2 8b 3c 76 be 94 bf da b0 a3 71 1d 8c fb a0 4b 20 aa e9 6a 32 2d 3c cc d6 e4 66 bd 72 b1 80 b1 66 61 30 c2 d1 ae 51 1a e5 02 cd 8e 50 3c b9 45 d4 57 b1 65 4d b5 b3 6e cd d9 82 c7 58 2d 47 a3 4e e6 46 42 31 d7 10 01 28 ff 00 c1 be f3 5d ba ce 2f 2e ca 93 4d 3d e6 23 1d 7d 67 10 27 69 46 ad fb 12 ea 2d a1 a1 32 c6 12 c3 87 b3 f8 fd af a5 a1 fc 63 c2 6c aa 7f 12 f0 42 27 f1 bf 0b 41 ab c9 6b ea b0 d9 a6 eb cd e6 da 57 51 76 63 78 a5 68 7c 62 85 1e 38 2a 3f 8b db cf c0 d8 e3 ad 53 d7 36 34 b9 9a ec 7d 77 37 a2 59 76 c1 75 50 aa 76 6d 36 3d 77 d8 ab 56 c5 de f9 3d f3 33 30 a6 70 c4 c3 cf ba 0e 50 66 6d 1f fa cb c5 9b 59 10 55 aa a4 d3 a1 e2 97 6e 93 fc Data Ascii: 6;j$<J<TbM'"+&:<vqK j2-<frfa0QP<EWeMnX-GNFB1(]/.M=#}g'iF-2clB'AkWQvcxh\|b8*?S64}w7YvuPvm6=wV=30pPfmYUn
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ca 59 f3 76 6e 2f c7 cd 25 68 c0 91 8d 19 11 2b ab a6 97 b1 6a 2f a6 84 be 0b ac c1 73 06 0c 8f 44 ee b1 ca 7e 2c 96 4c e4 be 94 2f b5 12 5c eb 30 7b 4f 6f b4 e5 64 93 ea dd c0 49 f4 99 f1 2b 69 4e 6d d4 64 b3 ae 0c 52 e6 0b 0c c5 31 85 06 0b 62 bd 65 d6 88 e0 cb 1f 01 3f 68 da 7c bc da 6e a9 28 c5 32 74 32 e8 b3 e0 c3 d3 6a 62 99 d7 1c 0b 70 2c c4 a9 74 59 e8 ce ab d7 26 69 76 cc e9 bd 3e ba 61 fc 2e 74 5d d3 3c 2c f0 d6 b8 2f ae 5e 9b 96 d3 83 1a 73 4b 26 60 88 f8 4b a9 2c a4 ba 8d 0e 48 8c e9 c4 d6 eb 5d 97 c0 24 98 94 e7 55 dd 2d e1 2d 49 77 d1 bb b0 ec d3 04 c1 8d a4 4a 47 9a 78 57 a5 b8 49 89 ea b5 6e 4b 27 43 ec a3 d1 3a 62 33 56 a7 e0 a0 4b a9 ae 0d e9 8d 16 d4 cc fe 87 4d 26 49 67 dc 7e 44 d6 17 98 8a 5d 22 ca 38 69 be 14 32 c4 34 4a e8 25 17 54 Data Ascii: Yvn/%h+j/sD~,L/\0{OodI+iNmdR1be?h\|n(2t2jbp,tY&iv>a.t]<,/^sK&`K,H]$U--IwJGxWInK'C:b3VKM&Ig~D]"8i24J%T
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 18 9c d6 90 1c 8c 4a a7 26 a8 87 08 09 0c d3 db a6 c5 a3 5b 11 9a 94 7c 43 44 5e e1 a2 11 9d c2 59 30 9c bb 51 8c a7 23 d6 98 93 da 85 97 dd 05 c2 07 91 a2 29 99 46 d5 a0 f3 ce 4a 32 95 5e 85 11 91 a8 e4 26 74 81 c3 a5 10 69 b3 94 93 82 d4 16 b8 e0 71 e4 33 3d dc 13 9e 52 8f 21 85 d8 98 90 68 e1 04 27 6c d6 38 14 65 30 e4 e6 10 c4 db 8d 76 39 42 53 9c 5c 52 31 91 68 c0 7d 19 28 8b 72 d6 73 39 23 6e e4 75 44 e0 73 05 4a dc a9 28 16 29 c5 24 31 e7 e4 d2 5a 17 ed 50 4b 29 c7 b9 e2 fb 7f c4 46 32 0c 46 21 09 c0 b1 1d 84 7a b2 4e 03 4f 31 b1 0d 01 f4 d5 18 5e de 1c d9 7d 15 18 5d 9b d8 1d de 94 0c 18 84 d9 12 80 6a 05 0f 2b 6c 70 ef 15 28 4a 2d 71 e8 56 9d 44 81 43 13 8a 30 94 c0 6c 93 40 bc 8e 4b 0a 8a a2 64 1b 62 9d c9 86 d2 1a 21 42 46 b2 d5 8e c5 3b 4c f2 Data Ascii: J&[\|CD^Y0Q#)FJ2^&tiq3=R!h'l8e0v9BS\R1h}(rs9#nuDsJ()$1ZPK)F2F!zNO1^}]j+lp(J-qVDC0l@Kdb!BF;L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	62737	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/003.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:39 GMT Accept-Ranges: bytes Content-Length: 224843 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7957	IN	Data Raw: ff d8 ff e1 35 4a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 31 39 3a 34 31 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 5JExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:19:41
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 1c 97 67 31 96 5b f9 b8 35 0a d9 1f f8 76 ea 87 e8 ff 00 e2 71 9f eb 7f a4 42 ea 3d 57 ed 3d 4a fc ba de f0 49 35 d6 e6 1d ae 15 0f 63 43 6c 3f 43 d5 fe 75 db 19 fe 11 51 f5 18 c1 ed a2 b1 1f bd 2f 3f f4 ff 00 45 bb fe b4 a7 e5 f9 59 c7 14 78 e4 78 a5 eb c9 5a 4a 59 32 7a 8f ab f4 78 7e 5f 4b 3e 5e 62 3c 44 44 0a 8f a6 37 a8 e1 8f fd 26 c6 4f 52 b3 2d ed de e6 ed a8 11 55 4c 0d 6d 55 37 f7 6a a4 03 e9 ff 00 9f ea 3f f7 d0 4b af 74 10 43 03 be 89 73 c0 24 1d 3d ac 1b ac ff 00 c0 d5 ee 90 c3 99 f6 9a ac 2f b0 80 d2 da da 04 06 fb cb bd 3a db b2 9f cd f7 d8 ef 62 0f 58 e9 9f b3 3a 8b f0 c3 da f2 18 dd ee 69 07 e9 7e 63 9c df a3 cf e9 3f 3f fc 1a 92 33 c6 32 1c 20 08 c8 0b af ea ff 00 29 2c 90 99 80 c9 76 25 f6 ef c2 d7 89 da 4d b5 38 b6 b0 df 74 c1 01 d6 0d Data Ascii: g1[5vqB=W=JI5cCl?CuQ/?EYxxZJY2zx~_K>^b<DD7&OR-ULmU7j?KtCs$=/:bX:i~c??32 ),v%M8t
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 00 00 1a 38 42 49 4d 04 0c 00 00 00 00 33 dc 00 00 00 01 00 00 00 83 00 00 00 9f 00 00 01 8c 00 00 f5 f4 00 00 33 c0 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 9f 00 83 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 09 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: 8BIM33Adobe_CMAdobed"?
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 75 84 38 16 d7 60 da e7 5e db 77 bb f4 6f f4 ee fd 17 e8 ff 00 44 85 d4 fa 95 99 3d 47 2f 22 a3 fa 3b ee b2 c6 d6 e0 d7 b6 1c 7f c1 b6 c6 d9 f4 5c ab 7d a4 ed fa 0d 02 0c ec d2 41 e6 43 bd 4f 67 ef 31 48 31 f1 c2 88 ae 21 a8 ed 6b 0c 80 91 a3 74 7e 67 bb cb c0 bf af 61 54 f6 38 51 d6 7a 49 b3 18 82 1a d1 68 67 f3 4e 6d 84 3f d2 73 b6 fa cc f6 fa 5f ce ac ec 07 dd 8d d4 6d 6d 95 1a 32 1d 5b 9c ea 0c 87 36 da 08 cf ab f3 1b fc e3 71 ad 6d 7b 7f d2 22 7d 56 ea 42 cc 9c 5c 8b 6e 6d 43 21 ac c7 b6 d7 c0 68 bf 18 06 33 d5 b3 f3 7e d1 87 e9 ed 40 ea 7f 58 72 87 58 a7 ed f4 8c 71 d2 f2 1e 6c 15 32 5c 36 97 45 4d c8 b9 db 9d 45 ec d9 bf e8 33 65 9f cd 28 e3 8e 39 b9 7c 98 e7 a6 5c 77 18 fe ec c7 fe 83 34 4e 53 c7 9a 13 8e b8 a7 44 f7 8c bf f4 28 b6 be b3 63 e3 bf Data Ascii: u8`^woD=G/";\}ACOg1H1!kt~gaT8QzIhgNm?s_mm2[6qm{"}VB\nmC!h3~@XrXql2\6EME3e(9\|\w4NSD(c
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 63 38 65 33 2d 39 34 64 39 2d 64 32 34 34 2d 39 62 61 31 2d 62 36 65 62 36 34 66 65 39 38 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 65 36 31 38 33 62 34 2d 62 30 65 31 2d 61 33 34 39 2d 39 66 33 32 2d 30 32 62 39 61 31 35 62 32 61 36 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 39 43 43 38 38 39 39 43 30 46 33 31 31 45 39 42 36 30 42 45 41 33 44 37 44 39 45 41 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 62 66 33 30 38 32 37 2d 31 38 34 31 2d 66 39 34 66 2d 62 64 66 62 2d 32 66 36 66 32 31 66 38 61 31 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 62 36 30 66 61 31 2d 66 63 33 39 2d 61 Data Ascii: c8e3-94d9-d244-9ba1-b6eb64fe983f</rdf:li> <rdf:li>xmp.did:4e6183b4-b0e1-a349-9f32-02b9a15b2a6d</rdf:li> <rdf:li>xmp.did:59CC8899C0F311E9B60BEA3D7D9EA07B</rdf:li> <rdf:li>xmp.did:6bf30827-1841-f94f-bdfb-2f6f21f8a1fb</rdf:li> <rdf:li>xmp.did:76b60fa1-fc39-a
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 85 05 7e 7d a6 84 38 9b 40 a0 9e 2c b0 56 50 43 3c 01 de 54 ea ac cc a9 1f 9e 8e f9 1e c9 1b 04 d6 9a 74 48 4c 1a 85 49 7b 41 77 20 a3 17 e8 b6 a1 30 26 12 76 20 e0 64 6a 16 d5 d0 b2 41 4f bb 41 c1 f1 82 ad c4 88 20 2a 4b a3 6b c6 74 a1 02 5c d5 6c 14 b5 1b b1 ae f6 b5 61 74 ae 17 66 c3 82 96 7e e3 a0 f9 b7 02 5b 48 65 bc 02 1e 8d 33 46 16 5a c0 04 60 b3 20 6e a6 21 a0 3a c0 53 a3 4a 0c c5 b7 c3 ab 7d c7 91 e6 ce 3d ce 1b 9b 1c 69 a0 35 b1 23 78 77 1e c9 ad 41 a3 af 0f c9 d3 03 66 c5 95 a8 2c 53 23 2e 10 e5 bd 32 32 e1 f9 d4 9a e5 e3 bd 81 7a 60 b6 59 d0 e0 6c 4e 38 4b 75 2f 23 65 00 9c 15 63 3a 14 5e d8 92 36 41 c8 0e f4 61 17 cf 16 5d a9 52 86 6b 5c 1a 71 f4 1b aa d6 48 dc b7 8c 02 a2 96 27 0a a0 23 34 1e d0 17 61 ec 53 7f 4e c2 99 19 6a 2d 36 2a 16 ce Data Ascii: ~}8@,VPC<TtHLI{Aw 0&v djAOA Kkt\latf~[He3FZ` n!:SJ}=i5#xwAf,S#.22z`YlN8Ku/#ec:^6Aa]Rk\qH'#4aSNj-6
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 95 b6 ce a0 a9 91 36 2a 4c c1 bf a2 78 19 db c8 2a fb 15 e4 74 c7 90 31 57 fd 15 ce 39 25 89 fd 66 76 5c b6 c1 85 52 ad 0f 35 19 cb 78 3e 1c 72 18 46 c7 12 32 13 e5 19 18 4b 2a 02 e5 58 90 c1 6b ef 73 4c 35 1f 29 31 99 b1 21 12 09 29 c9 cc 21 66 95 c4 0a 6c a2 64 93 07 1b d6 0c 7f f1 8b 2c 9f d6 9f f9 b7 8c d8 5c 74 3a ab 60 b8 f9 39 35 3e 79 f5 e4 5c 52 35 af 03 ce 7b 06 89 fd a5 7d 2b c8 da 08 ee b5 89 55 89 f9 10 c4 e0 38 4e 83 2f 22 ca 41 0b 81 49 67 d8 29 2b 2b 3b 12 dc 79 06 99 95 cc 8c b8 1f 96 71 d0 47 1a e6 d1 24 76 37 17 22 32 69 3d a4 9d 18 9e 3d 0f 86 fc 45 f9 b3 fe 14 ff 00 cf 59 c4 68 1e 25 d0 ee 09 84 8b fd 12 12 31 db 36 71 48 27 7b 54 27 72 4c 48 30 fe ea 80 63 6c 18 4b 2a 89 00 11 37 21 33 6a 39 21 1c 75 83 3f 03 8b 1c 4d 6d e2 60 c0 e0 Data Ascii: 6Lxt1W9%fv\R5x>rF2KXksL5)1!)!fld,\t:`95>y\R5{}+U8N/"AIg)++;yqG$v7"2i==EYh%16qH'{T'rLH0clK7!3j9!u?Mm`
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 9a 3f f1 19 28 d3 7c 6c 61 03 35 8a 38 a9 38 3c b2 8c 27 40 ae cb 7e 57 37 84 eb e5 f5 81 b6 b8 cc 76 34 42 10 16 65 00 f9 c8 4f c4 ad b6 f3 91 ff 00 84 c4 00 ac 0e 72 3c 9f f2 7e 37 9b fe 94 24 80 4e e6 5d ac 47 ca e4 e3 c7 f4 0f ce f7 84 f9 5c 40 75 31 f1 b3 87 78 bf 83 f8 27 e7 88 20 b7 ea bf 96 4f 21 7c 0c 98 e0 27 03 68 b5 8f 05 88 c5 72 4a 91 c6 53 b6 d6 71 f2 d8 7e 4e 6c e0 3f 28 74 db 18 be 70 2f 17 5f cc c7 f5 d0 c0 46 fe 17 f2 5b c9 39 18 18 3c e4 ad b6 f8 de 13 f1 ac d6 06 23 09 27 13 f3 23 7e c5 8e 91 c7 19 0f eb a2 48 56 cd 0d 1d e0 fc ab e9 58 83 85 b1 5b 0f f8 fc 9c de 0f 8d e6 f3 79 19 c9 47 91 92 c8 36 75 fd 4b 8b e0 33 85 1b ff 00 f2 51 e0 fe 4e f3 ce 12 4e 79 cf db 3c e7 9c f3 9b 39 ac 0a 77 ac 40 08 23 47 58 46 30 c2 3e 06 7e 73 78 49 Data Ascii: ?(\|la588<'@~W7v4BeOr<~7$N]G\@u1x' O!\|'hrJSq~Nl?(tp/_F[9<#'#~HVX[yG6uK3QNNy<9w@#GXF0>~sxI
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: c9 a6 79 18 f8 cf d9 cd 7a e5 48 0b 5a 23 24 8e d7 20 91 30 85 27 f1 9e 1b 19 34 43 62 4a 50 b4 9c b1 39 b6 56 aa bc a6 ec 96 28 c5 a7 b0 cc bf a2 ca f5 da 0b 2a 05 aa ab 2e 47 33 a3 11 15 a8 d5 a4 af 24 92 ab a4 14 a6 91 6b d7 82 13 3c b0 26 09 15 d0 48 25 47 85 aa ce 00 73 d7 4d 15 b8 4d 4b 35 a7 30 2f a9 56 34 88 fb 00 82 cd d5 86 3e ee f2 84 ff 00 a1 42 a2 e7 43 2a bc 90 24 73 2d f9 23 eb 65 7a d5 12 f5 33 8c 95 ed 2d 9e 87 46 2b b7 e9 88 a7 ad 3b 52 92 4a cf 72 90 b2 7a bb 4e 25 48 23 b6 8f d1 a5 78 9b bd 7e 33 4a 65 3c 8e ab 1a b1 59 ad d9 25 39 fd 90 76 ed 32 bf 39 64 49 05 5b 36 ab 63 d0 b3 6e b2 33 43 25 b8 d1 42 27 0b 7d d5 0f 54 b1 11 03 45 7a 29 24 8a 68 fa ce b5 66 12 cd 3f 5e 2e f6 f6 d6 68 ad 2c 51 59 76 a8 29 d8 ea 20 49 2d c5 49 e4 bd d9 Data Ascii: yzHZ#$ 0'4CbJP9V(.G3$k<&H%GsMMK50/V4>BC$s-#ez3-F+;RJrzN%H#x~3Je<Y%9v29dI[6cn3C%B'}TEz)$hf?^.h,QYv) I-I
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: eb 25 aa 4c 63 0c 04 e2 58 b3 18 96 f3 b3 09 27 dc 91 02 34 ca 56 c4 ca 01 0e aa e5 4c e9 c8 43 32 91 29 01 85 82 c0 a3 92 20 9e 40 2a 59 08 b4 c0 c1 5e b2 e1 78 d4 75 f7 ab 2c 37 ec 7d ab 12 7d 99 25 99 8c 12 1b 96 78 47 5e 63 3c 62 c4 79 d9 5d 6a d5 da 73 1c 21 eb 29 b4 23 6a f5 66 48 24 ec 6c 44 6c 1e c5 e5 ce 85 cb e5 88 12 42 3f 94 8a 57 a3 34 8f 62 e5 9b 13 5a b7 62 ea d6 4d c7 02 f3 4e 97 ae b0 5a f7 5f 12 19 16 ba c5 2d aa bd 72 3c ad 21 ff 00 9e ab c5 59 94 12 fc d9 8e 84 c2 59 ec 2d 49 9b 05 19 ce 0a 53 e7 d0 94 e2 f5 ef a3 d7 c8 c0 51 74 cf a2 e7 3f 8f 42 7e 8c 78 68 42 49 a3 10 c1 4e be 7d 48 81 6a b1 ec d6 50 23 ac 4b 1a 71 67 d6 88 91 5e 22 1a b7 24 35 5b 66 ae 34 0e 09 8a 4e 3e b7 c6 ae db fa db cf a2 a7 1a ac 60 1a aa 4f d7 2b 9e 86 18 6b Data Ascii: %LcX'4VLC2) @*Y^xu,7}}%xG^c<by]js!)#jfH$lDlB?W4bZbMNZ_-r<!YY-ISQt?B~xhBIN}HjP#Kqg^"$5[f4N>`O+k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	62739	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/004.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:41 GMT Accept-Ranges: bytes Content-Length: 195079 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7957	IN	Data Raw: ff d8 ff e1 2f c1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 30 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: /ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:20:16
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 47 8b fb 91 97 fd 06 ff 00 33 03 ef 1f a3 6f a7 e4 61 9e ac 1d d3 da c1 5e 56 f6 3e 1a 03 0d bb 77 50 e3 e9 c6 e6 b7 1d 97 7a ee ff 00 08 ab 99 77 4e af 07 12 9f 52 c6 b8 e2 d9 6b 9c da ea 6b 68 75 b5 d4 d6 d8 f1 fa cd ce 6f a7 6d 8d af 7b 16 05 2f 6f 4b ca 6d c6 bb 3e c8 6c 65 94 36 c2 01 86 3f f5 8d 9b 7f 9f c6 ca c5 b3 63 f7 ff 00 84 ab d5 5d 37 4f 7b 73 db 65 b4 b7 7d 74 64 d8 5b 65 a6 01 f5 1a db 6d 73 59 21 cc f5 3e d4 ed b6 ff 00 e8 b5 36 2e 73 16 08 c7 1c cc b8 4f a3 88 6b 08 89 70 7e 94 bf c4 60 94 09 23 86 8c ae ff 00 97 f8 ef 31 76 06 70 e9 14 59 06 d6 64 d0 eb d8 c6 06 ba 7d 0a 4b e1 cd 76 c7 6e af dc fd 8f ff 00 86 fe 71 1f a6 66 0e 97 7e 13 ef d9 91 81 7d 6c 61 79 69 78 0e 6f e9 7d 6a 99 0e fd 66 bf 52 df d1 7a 7e a5 15 ff 00 2e db 56 ae 55 Data Ascii: G3oa^V>wPzwNRkkhuom{/oKm>le6?c]7O{se}td[emsY!>6.sOkp~`#1vpYd}Kvnqf~}layixo}jfRz~.VU
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: fd 6d 3d 47 f7 59 d0 d2 6f 7f 4d 2f 0f b1 86 ca f2 ee 7b a5 8d 63 4e d7 54 c7 3c 39 d4 d3 bc 6f d9 f4 fd 5f e8 57 e2 a0 5a 31 ef c5 c8 c7 ca a9 e3 a7 62 c1 fb 63 cf bd af 7b b6 fa 9b 5d b9 ff 00 ce 3b f9 a6 fa 56 b1 9f d2 2a f5 ec fd 28 f2 f1 b6 5b 91 6e 33 ed b3 0c 5d bb a8 d0 19 fa 60 7e 87 db 2a 73 b6 3a e6 5d f4 fd ff 00 e1 1f fa c5 1f 98 f5 6e 6b 5e ca f2 bd cc c6 71 23 1a a6 c7 ba 07 a4 e7 31 ef f7 7a 9f e9 ad ff 00 ac 54 fc 8a 16 cc 25 ee 40 5e f4 3f ab c2 7f ee 5a 72 f4 12 3f b6 32 8a 11 9b 77 4f 77 d9 ba 81 0f 63 58 06 25 95 98 6d 81 df e1 3d 51 fa 3d f6 b7 f9 eb 2e f5 ab b2 af 7d 74 7d a5 19 f9 ce b2 a1 6e 76 a2 c0 5b 4e 24 02 43 44 bd bf a2 74 be ac 7a ac 6f ab b5 af fb 4d df e0 bd 04 9f 4e fc 6f b2 65 83 63 ac 78 db 8f 4b 07 ea c0 89 1c 7f 33 Data Ascii: m=GYoM/{cNT<9o_WZ1bc{];V([n3]`~s:]nk^q#1zT%@^?Zr?2wOwcX%m=Q=.}t}nv[N$CDtzoMNoecxK3
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 11 92 32 1c 5f 5b ff 00 ba 60 8e 18 c4 89 01 2d 3b bc 3f 44 83 95 d4 a9 31 39 34 b6 e6 e9 c9 a9 d6 63 db ff 00 42 ca 57 27 d5 40 19 55 08 9d d4 80 de e4 ed 7d b5 37 fe 8b 17 43 85 90 31 f3 b1 72 09 8a cb ac a6 e3 e0 cb 84 6f 77 f2 19 6b 2a 73 9e b6 7a 1d b7 e1 e0 3d d8 b5 e3 d7 94 cc 8b aa b3 29 cc 16 5a 1a 1d ea d2 c6 be c3 b1 8d db 7e ff 00 a0 a6 31 bd 19 a2 69 e3 fa 7e 2f 5a 78 68 a7 13 2a e6 9e c2 9b 5e 3e f0 c5 a7 6f 41 fa cf 93 43 ab 67 4a cc 97 0d 26 a7 37 5e 7f 3f 6a e8 72 7a ef 53 6f f3 fd 61 cc f2 16 b5 9f f4 6b da a8 d9 d6 a9 79 fd 2f 52 b2 df 2f 52 db 3c fe 8b 37 25 c3 e2 ae 2b e8 d9 ff 00 9a ff 00 59 ef 97 0c 07 b0 0e f6 ba a6 7f d5 5a 3f ea 52 6f d5 0e b2 4c 5c fc 4c 71 dc db 90 d1 1f f6 d8 b5 66 3f a8 e1 17 92 4d b6 f8 82 c7 9e db bf 3f 6a Data Ascii: 2_[`-;?D194cBW'@U}7C1rowksz=)Z~1i~/Zxh^>oACgJ&7^?jrzSoaky/R/R<7%+YZ?RoL\Lqf?M?j
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b3 d9 1a da 64 d5 0b 94 19 30 59 49 73 fa e0 cb 99 b2 56 f2 cb a4 8e 89 55 47 cd a5 32 88 1b 9d dc 6d 54 b9 bb b3 32 76 f1 f5 96 36 33 37 e3 0c d5 b5 03 08 1b eb a8 1d 10 b2 cb 62 79 7b 89 2a c3 e8 f2 ae 4d fa 6e 7b 4b 3a 65 4d 0c f8 8d 31 da d8 50 bc ab 1e a4 e7 ed e5 69 c3 a0 28 ee 6f dc e6 ce 76 93 ad a6 a4 e9 01 c5 db 47 97 45 f0 74 52 b4 3d a4 19 cd 29 a0 83 57 db a7 99 ad c5 de 7b c1 e7 4f be 3d 83 e8 39 1b f2 55 cf 6f 5e 6e df 96 e9 f9 0d 21 ca af 91 9d ee 7b 29 fc f4 71 29 28 2e 17 0f 34 9d b7 33 6d 55 a3 27 78 ec 9f 21 45 5d 8a b9 59 62 ea ab c7 b6 1a 74 58 e1 7f 0e 42 c2 34 89 15 76 ec ce 6e bd 35 83 91 d0 df f3 59 7d 02 b5 a5 b7 cb ef 64 39 b0 5c 05 40 07 24 9b 5d 36 33 66 f6 ab 0c 66 15 66 d3 e1 d1 70 14 2d 6d 85 b5 df 56 4e 5e ae 66 b2 ee ff Data Ascii: d0YIsVUG2mT2v637by{*Mn{K:eM1Pi(ovGEtR=)W{O=9Uo^n!{)q)(.43mU'x!E]YbtXB4vn5Y}d9\@$]63fffp-mVN^f
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 6f f4 6b 38 31 21 1b 66 33 a0 0e be 87 37 fa 35 9a cd 7e 8d 66 b3 58 3e a7 ed fa b7 a3 fd 4d 8c d9 cf 3f 4d 0c 4d 6b 58 df 6d 0c d7 d3 ce 68 e6 f3 91 ce 43 36 3f 46 bf 48 fa 9f b7 e9 de 7e e0 f8 de 6c 66 f3 7f 4d fe 8d e6 bf 52 fd f0 82 73 5f ab c0 cd 78 c2 73 96 06 1f 5d 7d 0e 0f af ed fa c7 f4 40 f2 cb b3 a3 fa f7 9b c2 7e 9b 19 b1 9e 73 8b 67 10 09 fa 9f a7 9c e5 9c b3 79 ad fe 8f db fa 07 ef fa 75 9a c0 35 fa 38 8c e2 b9 c0 61 41 9c 33 86 70 c2 83 38 2e 2a a8 cf 1b 3f 7f d9 be c7 fa 3b 39 cb 37 f4 18 47 f4 37 fd 01 f6 cd 7e 93 ac f6 66 dc e6 8e 71 19 c5 70 85 ce 39 f9 66 d8 61 6d e1 fe a8 27 09 39 e7 fa 7b cd e6 cf d1 7e df a4 9d 61 db 67 db 37 fd 03 e7 0f d3 7f 4d 9c f3 fa 8e 0c 5c 3f ac fe 9d e6 f3 79 bc 43 e4 fe 96 f3 9c 74 37 9b 1f a0 fd 09 ce 43 Data Ascii: ok81!f375~fX>M?MMkXmhC6?FH~lfMRs_xs]}@~sgyu58aA3p8.*?;97G7~fqp9fam'9{~ag7M\?yCt7C
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 94 3a 50 af 5e 29 a3 b9 55 16 2f 89 2b 47 1c 71 c9 5e fc b2 db 9a 62 8d 5d e7 12 ac 51 2c 4e ed 0c e2 ad 65 86 cc 17 15 9a d4 2f 96 29 ef 22 71 13 d6 bc 00 2f 05 a5 6a f2 46 d1 b4 d2 9a f0 43 1a 80 ac 2c 8b 21 a2 9d 26 56 ad 2b 1a 35 21 85 2d cf 25 59 22 9e 2b 90 cb 0f 16 9e 30 72 27 e0 d1 5d 0c 2e 9f ce 28 e5 7c 8a b8 50 b1 90 2b c4 35 a0 b9 cb 58 65 de 3c ac 71 e5 27 19 d5 44 f6 ce 96 40 d1 de 9e c4 34 fa bb 92 cd 1d 8e cc 4b 63 ad d0 1d d3 83 95 e2 87 d1 f0 62 68 a4 eb 1b 8a bd 9a a6 76 b0 d3 4b 6a 2f 87 5e 40 56 d7 38 d2 88 67 8a ed f7 57 eb 06 e4 b5 3f 31 61 4b b4 55 a3 68 e4 aa 63 8e 39 2c 57 88 4c a6 59 ad 54 7a 82 22 72 09 c1 a8 8b 08 86 41 d8 55 99 60 8e c5 66 eb ac fb 21 82 5e ab b5 9a be ac 5a 0b 4a b4 12 16 92 02 67 82 b2 06 12 cd 23 55 23 9c Data Ascii: :P^)U/+Gq^b]Q,Ne/)"q/jFC,!&V+5!-%Y"+0r'].(\|P+5Xe<q'D@4KcbhvKj/^@V8gW?1aKUhc9,WLYTz"rAU`f!^ZJg#U#
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: d6 c8 d0 fc 4b 86 25 ad 71 23 f9 b1 c8 b3 59 67 68 63 f5 c7 d9 da e2 90 cc 60 8a c4 b3 a3 0b 0d 0c 71 58 a7 0d 69 16 b3 a3 c9 6a 44 bb 6a 0b cc 83 27 39 20 ff 00 27 4a ee 62 bb 5c 01 27 86 5d 86 a7 25 88 92 58 63 9a 19 a0 e2 6b d9 21 61 a0 24 68 1a 9f 2b 13 cc 92 99 e5 c8 6d 0b 8b 3d 72 4b 2c 91 3d 58 e5 b2 12 38 20 99 66 4a f3 bd cb 10 f6 56 12 48 9c a9 c7 0b c4 a0 18 79 3c 71 92 c9 08 02 cc 5c a5 9e 42 a0 01 bc 70 54 f3 e5 84 71 c4 5e 44 a0 09 34 84 57 95 cf c2 51 bc 80 83 37 61 a0 23 42 d9 dc 82 2f 49 1a c5 4a 44 32 19 9b 6d 41 55 a5 20 49 17 5a ba aa a3 52 5f 8c ad 7a 68 cd 6a e2 1c a7 ff 00 af 65 58 40 cc cd 4b a5 69 03 3d 99 da ed db 9e 98 7a b6 e7 9d 94 c1 53 55 ea f5 f1 08 8d 0a bc 26 a3 4c 29 ab 1d 55 68 67 ac e6 94 72 cf be be 3e 2b 72 60 91 c7 Data Ascii: K%q#Yghc`qXijDj'9 'Jb\']%Xck!a$h+m=rK,=X8 fJVHy<q\BpTq^D4WQ7a#B/IJD2mAU IZR_zhjeX@Ki=zSU&L)Uhgr>+r`
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: cc 71 64 ae 52 d0 dc 50 23 70 ac 09 8f b8 aa df 32 bc 76 12 dd 8a 21 ee 75 e1 40 ec 4e aa 55 8e 34 5a 11 2b dc ed 54 86 b0 8c 2d 7a b8 c8 61 76 6a 53 c9 48 c9 dd 4e c3 aa 9e ec d1 75 6b 37 be 09 a4 ed 27 35 62 12 f7 2a 45 1f e3 b1 6d 9a bf 23 62 8a 24 96 e2 09 07 5f d7 bb 11 4c 67 73 14 b1 d4 a7 19 d4 15 94 60 ac 33 dd 2c 77 16 15 65 f8 e3 05 61 9f 1c 60 80 6b d0 32 c7 38 cc 0c 92 a7 a4 67 a4 6a fc 40 51 6b 3a bb 7a cf c3 a9 4a d7 c8 83 82 a3 5e 92 39 6d f6 11 8f 54 31 2f ab be 8b fc c1 df 8f 52 dc a1 14 a3 6b 92 5b a4 24 f7 27 11 5d a5 15 28 f9 4e 45 6d 00 61 ec 55 84 0f fd dd 6f 8e c2 28 63 45 35 63 59 7a f8 42 f5 f2 eb 94 6a 00 0a cd 97 a0 f5 75 55 2e 76 d6 24 8a 25 58 ac c1 a3 d9 c2 21 96 09 24 82 49 76 b3 d5 04 bf 7e ad cb a9 61 25 08 dd b6 06 84 51 Data Ascii: qdRP#p2v!u@NU4Z+T-zavjSHNuk7'5b*Em#b$_Lgs`3,wea`k28gj@Qk:zJ^9mT1/Rk[$'](NEmaUo(cE5cYzBjuU.v$%X!$Iv~a%Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	62740	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	987	OUT	GET /wp-content/uploads/2021/12/Vista-aerea-02-1536x1151.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 10 Dec 2021 20:23:27 GMT Accept-Ranges: bytes Content-Length: 642018 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 83 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 Data Ascii: JFIFHHExifII*,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.1634
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: c9 16 6a 96 f7 d4 c8 8e e4 7e 35 5c 7e 98 d5 88 e7 a7 4c 35 54 b2 2a f6 c4 6b c9 fd 7c 6a a8 00 91 ee d7 5b 99 4f 07 0d 9e e0 0d 06 75 9d 47 5b 1c eb be 15 99 63 27 2a b2 8c 30 1f 96 bb fa 8d fd c3 7f 5e da ab 1a e0 15 32 4b 23 67 f1 48 72 75 d9 61 b8 63 c7 19 3e 34 68 16 c9 9a 70 4e 17 3c 79 3e 75 cf ac 70 06 72 49 e7 51 14 93 19 60 71 8e 3e fa e3 95 00 8f eb ae a3 b9 16 7d 52 31 8e df 9e bd f5 c8 ee d9 ff 00 6d 54 2c 47 ce 35 e6 47 60 39 3e 34 6a 80 d9 73 d7 dc 3f 16 47 7c fc 6b c6 94 00 08 62 da a9 ea 05 fe 6c f3 f3 ae c4 aa 00 00 31 f9 24 eb 8e b2 d2 b6 e8 c6 7b 77 d7 a9 29 e0 30 f3 c6 35 57 d4 dd c6 3e c3 07 5e c6 dc 1e 71 ce 35 da 3a cb 6d 29 c6 4f 03 5e 09 9c 1f 6e 00 f9 d4 0c aa ed c9 60 33 8c 03 c6 bd d8 14 60 12 07 dc e7 5d 67 26 4d bc 80 0e 48 Data Ascii: j~5\~L5Tk\|j[OuG[c'0^2K#gHruac>4hpN<y>uprIQ`q>}R1mT,G5G`9>4js?G\|kbl1${w)05W>^q5:m)O^n`3`]g&MH
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ea 6b b3 4a b4 d3 7d 21 94 9c ef 07 0a 14 79 23 e7 bf 1a 6f ea a4 fb 47 29 04 a1 ac a5 8e a2 24 8e 87 d0 59 95 53 d4 38 1c e7 dc 7b 6a f5 1c 92 db c4 d3 41 44 ab 86 67 8e 43 21 1b d5 7e c3 82 31 f3 f1 a8 2b ef 36 db 93 fa f2 6f 89 d5 42 a0 62 76 ab 0f 38 fd 73 8d 2b d6 5f a3 e9 8a 8a 88 a5 51 3b 2b a9 da 84 8c 86 04 fa 80 03 80 a4 8c 63 be 8f ca e6 ea 03 a9 9a 45 b6 ff 00 68 2d 04 a2 b6 8c 64 80 c0 f7 1b fb 63 3e 3b e3 44 a9 6a 29 ae 69 e9 6c fa a7 89 9b 2f b7 69 03 c2 9f 8c 67 f5 d6 3f 51 d5 b6 7b bf d0 25 4d b2 67 a8 70 ad 81 32 aa a8 c1 1b 09 1f cb ce 40 ef ab d1 f5 34 54 d2 54 d5 af ef 0d f4 f0 c6 25 8d 64 c8 11 8f 69 03 3c 96 1e 4f 8d 53 e4 92 d3 41 e4 69 b5 96 fb 7d 28 9a 6a f5 89 e3 f4 c4 4d 0b 36 72 54 f0 73 df 3a f6 aa cf 49 2c 0a 8a d0 d3 bc 7b Data Ascii: kJ}!y#oG)$YS8{jADgC!~1+6oBbv8s+_Q;+cEh-dc>;Dj)il/ig?Q{%Mgp2@4TT%di<OSAi}(jM6rTs:I,{
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 93 62 4d 1d 52 a4 a0 ed 00 3b 6e 23 9f f0 08 c6 a1 66 15 79 2e 91 28 e0 b4 60 ee 3c 00 09 24 79 c0 c6 3e e7 49 10 f5 05 58 96 9e a2 86 61 49 55 0b 23 ec 46 c0 45 23 3b 48 ff 00 4f 24 67 45 1e ba 6b f4 28 d1 5d a5 a6 64 c8 74 24 21 1c e7 6e 40 f9 ff 00 3a a4 3c 8a 55 24 75 36 1a 9a be 92 db eb 2d 44 f1 c7 1a 2a ed 8a 0f 71 da 46 41 6f bf fe 35 6a 07 59 29 16 b6 28 23 99 64 c1 49 a3 ca b4 40 77 c8 3f 96 3f 5d 2a d1 59 6e cc 5a b6 3a 99 22 c7 0d 34 81 65 52 73 d8 e3 fd f4 cd 1d d1 ad 91 41 47 5f 3f d4 cd dd 67 11 ed 51 9f 95 1d c7 6e 34 65 e4 c6 11 e4 d6 83 d1 1a 48 60 90 66 38 a0 ab 2a d1 47 13 a1 3e a2 9f c5 9c 79 c7 3f 96 ad c9 69 99 92 79 61 57 8d 67 8c ca d8 fc 31 90 39 50 0f db fa eb b9 2a 1a 68 0c 90 44 b5 8a a7 f1 44 36 98 cf 63 9c f8 39 d5 59 aa ee Data Ascii: bMR;n#fy.(`<$y>IXaIU#FE#;HO$gEk(]dt$!n@:<U$u6-DqFAo5jY)(#dI@w??]YnZ:"4eRsAG_?gQn4eH`f8G>y?iyaWg19PhDD6c9Y
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: d7 29 aa e4 69 9e 43 ee 18 23 3f fc f3 ad c9 b9 53 5d 13 da 3e 97 76 4a e4 90 38 27 51 24 dc 70 78 f3 a9 a9 95 da 90 72 7b 86 6c 11 c8 19 d1 4b 28 b5 53 c5 53 2d d2 92 2a 80 57 10 a3 ee 52 5b 8c ed 23 80 46 7c e9 a7 3e 31 b4 80 bb 22 ac b3 dd a9 69 d6 4a ba 49 95 15 77 ae ef f4 11 9c e3 c8 fb ea d5 86 8e 86 aa 9a 49 5e 8e a2 b6 aa 25 67 31 24 e1 15 97 19 c0 03 24 9c 7c 68 84 fd 6a 2e 71 4f 68 ac 72 29 4e 12 9a 68 c8 dd 16 07 b4 1c 8f 90 01 3c 71 9d 0e a0 af 5b 2d ad 69 20 32 24 ee cd 34 a5 3e 40 c6 33 f0 3b eb 3c 67 91 a6 a6 b6 3e ac 73 b5 f4 b5 b9 ec eb 35 55 35 cf e8 f6 fa fe 8b 0c 3e dc e7 03 9d dc 7e 5a bb 6a a0 e9 e8 28 31 4e 9e ac 12 c8 e5 16 b5 73 ea f1 95 29 db 68 c7 7c f7 3a ce 4f 53 d6 25 54 55 b4 d3 4a d5 a8 30 ac e4 b1 c7 23 fa 7d b4 46 a6 fb Data Ascii: )iC#?S]>vJ8'Q$pxr{lK(SS-*WR[#F\|>1"iJIwI^%g1$$\|hj.qOhr)Nh<q[-i 2$4>@3;<g>s5U5>~Zj(1Ns)h\|:OS%TUJ0#}F
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: c6 9a 6e b3 52 d9 29 a1 b6 a5 3c 35 94 6c 9e a2 19 48 69 14 1e 4a b7 6d 74 92 5a 41 e8 fa c9 77 79 69 9e 67 4c 56 2e 18 b3 8c 39 5e 00 c1 1f ae 80 de 2e f2 5c 6a 36 be 14 ab 9c 1c fb b1 f7 d5 7a 8e a9 a8 55 30 45 85 44 f6 ae de c0 0f 03 4c 34 17 7a 0b ed be 3a 5a fa 68 5d d5 49 59 11 40 90 31 1f 3d f5 15 17 0f b5 1d ca c0 b0 3c 82 2c 65 8e 3c 00 33 a3 1d 1d 75 34 b5 b2 86 58 e5 95 f3 12 12 99 e3 b9 3c f1 f6 d0 ea da 58 22 8d 45 33 c9 20 04 02 c5 86 d2 7e 31 dc 6b 8a 7a 7f a1 9e 66 49 44 8e b2 26 76 f8 52 3b e7 c7 90 74 d2 4a 71 0f b1 f3 f7 9c 69 48 ef 58 a4 d1 39 28 23 64 02 34 3f 9f 70 3f b7 3a 12 6e 96 8a 4a 0f 56 9e d9 71 a5 8a 29 0b a5 44 44 98 95 fe 40 c6 31 f6 27 40 ee 57 3a 50 16 91 a5 0a 88 a7 3b 58 95 61 f6 3d f3 9d 05 8a e3 51 56 eb 4a 2b 25 0b Data Ascii: nR)<5lHiJmtZAwyigLV.9^.\j6zU0EDL4z:Zh]IY@1=<,e<3u4X<X"E3 ~1kzfID&vR;tJqiHX9(#d4?p?:nJVq)DD@1'@W:P;Xa=QVJ+%
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 13 9d ae 48 c7 bb 1e 34 92 c5 4a d1 dc 86 7a 4a 0b 0c cd b2 9c 53 cd bb 22 49 2a 8e e6 6e fc a6 78 1f db 54 59 2a 68 e6 a8 4b cd c1 d6 de 70 90 c9 00 ca b9 39 e0 03 ce 71 a5 fa 30 95 b5 4d 4c cf 8a 99 1f db b0 67 f3 00 ea cd ca fd 59 4b 49 15 a1 e2 11 fa 0e d8 67 5c e7 9e 08 cf 63 f7 fb e8 fc 2f 97 76 33 2d dc 0f fc 31 55 0b 2d 15 42 41 2a ef 49 64 f6 b9 3e 55 bb ff 00 4d 7b 6c 95 e2 b8 3a 7d 4a fa 12 83 2a 52 96 f7 39 e4 e2 36 e4 02 3e 0e 35 4a db 75 7b 95 24 b6 7a d9 73 04 c7 72 bb b7 fd 37 1c 83 93 f7 d4 76 aa 4a b9 ad 82 25 a7 a6 71 14 a6 54 a9 8c 86 92 9d 95 b9 2e 07 3b 0e ba 50 a8 d3 ec 01 28 fa 9e 39 91 73 eb 42 98 c3 3a 8d cc 87 f9 4f e5 f2 35 4e eb 54 93 c5 25 5c 92 19 eb a4 f6 31 3c 70 47 07 23 1c a9 1f df 5e d0 2c b3 dc a7 96 99 54 7a 67 7c 88 Data Ascii: H4JzJS"InxTYhKp9q0MLgYKIg\c/v3-1U-BAId>UM{l:}JR96>5Ju{$zsr7vJ%qT.;P(9sB:O5NT%\1<pG#^,Tzg\|
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 93 73 21 1e d9 31 80 da a4 b2 e4 e0 0c e3 f9 b4 c7 77 84 57 46 97 1a 70 9b 5f 3e ac 0b e1 b1 cb 01 f7 ef 8d 2d 99 15 5f da a4 03 fd b5 b2 04 d8 7f a6 2c b0 5f 65 71 3d 62 52 a4 3c b9 50 59 dd 7f ed 1e 4e 9a ea bf 64 57 4d d1 bd ae b2 2a ca 49 48 f7 4c 3d 09 51 4f 92 1b 8d 28 58 28 25 82 33 79 9e cf 5f 57 6d 8b 2d f5 10 bb 44 a8 e0 f0 db c0 3c 7e 5a 9e 4e a3 a8 ae 9e 59 a5 96 a2 a5 0c a2 46 8e 49 89 3b 47 60 4f 73 f9 ea 53 52 e5 f5 63 29 24 b6 36 5f bf 64 ad 47 02 49 47 5f 14 6d 80 65 5a d6 c6 0f ca ba f0 47 d8 e3 4a 17 de 91 b9 74 e4 49 3d 6c 54 f2 52 3c 9b 12 a2 9e 71 22 31 ef ce 39 19 fb e9 b6 c9 fb 4e 96 96 78 a3 a9 b7 ac d1 cc 02 b3 ac ee cf 8f 9c 1c 83 a3 0f 79 fd 9e dc aa 67 79 ad 93 30 9e 40 f9 54 c0 66 ff 00 57 a7 90 46 3c f8 d4 e3 39 ad 48 66 93 Data Ascii: s!1wWFp_>-_,_eq=bR<PYNdWM*IHL=QO(X(%3y_Wm-D<~ZNYFI;G`OsSRc)$6_dGIG_meZGJtI=lTR<q"19Nxygy0@TfWF<9Hf
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: e3 42 8d 4c 67 97 e8 53 dc 24 aa 18 0f 8e e3 b6 40 04 f9 d2 92 ca 21 72 54 1c 63 c1 c6 9f 5f ac 8d f6 09 ed 97 3a 19 64 13 44 0e d5 7f fa 8c bf 84 b9 1c ed ce 0e 06 91 ee 76 8a db 3b 40 95 a9 83 34 5e b7 b4 64 6d c9 1c f1 c6 b5 f8 f2 75 c7 26 99 3c 91 bd a1 af a6 ef b1 cb 40 d4 99 71 58 ea 41 91 10 70 83 9d c4 fd bc fe 5a 2b 7d be 5b e8 e9 e2 68 6a e1 ae aa 60 1e 47 82 52 9e 8b 63 6e 78 e0 9c 7e 83 48 76 ca c6 b6 c9 eb c6 e0 b1 5d b8 04 e7 9f 1c 77 d4 ae 1a a5 e5 56 46 04 13 b8 e0 ed 5f 24 68 cb 0c 79 7f 03 a9 be 3a 1c ad 5d 6e 5e 45 47 08 90 a9 dd 11 03 dd db 1c 91 c6 7e 0e af 25 5d d6 3a 51 70 a5 8a a2 38 a4 73 ea 44 87 73 02 7c 93 f8 89 f9 27 4a 76 ab 24 d4 51 47 5d 39 98 c8 c3 f8 51 c0 84 ec 6c 02 37 e7 b6 34 e3 6c b8 54 5e ed de ad 39 58 29 a3 0e f5 Data Ascii: BLgS$@!rTc_:dDv;@4^dmu&<@qXApZ+}[hj`GRcnx~Hv]wVF_$hy:]n^EG~%]:Qp8sDs\|'Jv$QG]9Ql74lT^9X)
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 79 36 cb 5d 4b 11 2b bf bc ea 06 79 ff 00 bb ed fa e8 3d 67 ed 1a 5b 25 ae a1 58 19 ea 83 bc a5 dc 61 84 65 8e 36 af f8 ce bd 47 e4 41 24 c7 4d d1 9d fe d1 3a 06 4e 98 0c d4 f4 ed 32 3e 4e e9 98 48 02 f8 23 b7 23 4a f6 c7 fd d6 51 61 48 83 a6 cc 12 81 9d cb 63 3c fe bc 01 ad 52 9f f6 c2 d5 f3 c1 05 c6 8a 9e 4a 67 c2 8f 6e e2 41 1c 83 9e d9 e0 76 f3 a3 bd 35 d2 dd 2d 5e f5 9f 4d 6a 86 0a 92 85 a0 82 a2 10 24 89 c7 b8 32 83 e0 1c 63 5d f2 c6 7f 57 a1 5a bd 8a 9f 4d 55 d3 d5 35 42 e5 76 8e 6b a3 46 56 2a a1 14 e5 e1 46 1c 81 ed 20 1d 26 d7 f4 85 45 e2 76 ab b8 5f 4c f2 48 01 91 de 8a a0 96 f9 cf b7 5a af 50 5b 6a a4 a5 8a e4 25 9e 58 e5 00 bc ce a3 70 71 c3 ab 01 db 90 71 a1 50 d6 6d 84 27 ae 59 47 1f 9a ff 00 e7 48 a1 1c 6e d2 28 b1 da 31 ae ae 17 1a 4a c8 Data Ascii: y6]K+y=g[%Xae6GA$M:N2>NH##JQaHc<RJgnAv5-^Mj$2c]WZMU5BvkFV*F &Ev_LHZP[j%XpqqPm'YGHn(1J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	62741	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	956	OUT	GET /wp-content/plugins/elementor/assets/js/image-carousel.9399f19d95d7300cbc2e.bundle.js HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	267	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 929 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:15:30 UTC	929	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 32 36 2d 30 35 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 22 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2e 2f 61 73 73 65 74 73 2f 64 65 76 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 68 61 6e 64 6c 65 72 73 2f 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /! elementor - v3.21.0 - 26-05-2024 /"use strict";(self["webpackChunkelementor"] = self["webpackChunkelementor"] \|\| []).push([["image-carousel"],{/**/ "../assets/dev/js/frontend/handlers/image-carousel.js":/!**************************************

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	62742	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/006.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:48 GMT Accept-Ranges: bytes Content-Length: 91817 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7958	IN	Data Raw: ff d8 ff e1 16 89 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 31 3a 32 31 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:21:21
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 1d 38 42 49 4d 04 0c 00 00 00 00 15 1b 00 00 00 01 00 00 00 83 00 00 00 9f 00 00 01 8c 00 00 f5 f4 00 00 14 ff 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c Data Ascii: NonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIMAdobe_CMAdobed
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 70 68 6f 74 6f 73 68 6f 70 3a 36 33 31 38 64 65 37 30 2d 35 36 62 63 2d 65 30 34 37 2d 61 64 64 30 2d 34 39 39 64 36 37 30 37 62 37 64 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 36 64 35 66 64 37 2d 36 63 66 63 2d 30 34 34 38 2d 62 37 62 66 2d 64 38 61 39 37 32 62 33 62 37 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 39 64 64 62 33 30 63 2d 62 66 32 66 2d 63 35 34 64 2d 61 62 35 36 2d 39 30 34 30 64 34 30 33 63 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 63 66 65 37 63 31 2d 31 65 31 33 2d 35 32 34 64 2d 39 39 39 30 2d 33 38 31 66 62 31 31 33 61 36 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 Data Ascii: photoshop:6318de70-56bc-e047-add0-499d6707b7d5</rdf:li> <rdf:li>xmp.did:136d5fd7-6cfc-0448-b7bf-d8a972b3b7e5</rdf:li> <rdf:li>xmp.did:19ddb30c-bf2f-c54d-ab56-9040d403c492</rdf:li> <rdf:li>xmp.did:36cfe7c1-1e13-524d-9990-381fb113a6be</rdf:li> <rdf:li>xmp.d
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 59 e6 4f b3 27 93 a7 a1 27 2f 77 0c 1b e9 39 4b d7 39 71 d9 e8 9e 76 e7 71 86 46 fc db 23 1e 8e 79 ad a3 a5 cb 1a 67 ac 6d 86 12 36 91 97 54 6d 5d 47 2e 59 bd b9 e5 b4 ba 92 e5 9d 39 9d 9d 51 cd b6 6a 34 8a 27 4c c9 8e c9 8e 6e ae 79 d4 eb 9e 64 9d 58 e6 e9 b8 9b 36 c7 0a a6 a2 4d 6f 14 9a 61 58 af 5e de 6f 6c 72 e7 de ac e2 ea ad 4c 31 de 8e 27 d9 2b e7 e9 d3 67 32 ee 79 71 4f 5a 31 ac 30 ae 97 cd d1 2f 6e 5a 79 fa cf 4e 39 f3 d7 a3 a7 9f 15 ec af 23 ab 2e ac 16 95 94 d6 86 4b 5c 6b 73 96 e2 73 e8 a3 92 b4 d4 e7 5e 90 71 77 64 8c 99 35 be fe 75 c7 6e bc 5b e6 f6 f3 8a 5c 6a 16 a7 43 e3 0e b7 cb a1 ae 99 cc 6f 7e 76 47 a8 fc 7a 5f 57 3e 57 67 5c f2 6c 3d b8 a8 d9 66 59 58 b4 46 d9 68 54 75 d1 c7 d1 b1 9b 98 f6 97 1d f3 d2 26 6b 1a 87 8d ea 56 97 58 d6 2f Data Ascii: YO''/w9K9qvqF#ygm6Tm]G.Y9Qj4'LnydX6MoaX^olrL1'+g2yqOZ10/nZyN9#.K\kss^qwd5un[\jCo~vGz_W>Wg\l=fYXFhTu&kVX/
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b6 6a d8 d8 e5 86 c5 50 5b 54 6d 91 06 c5 5c 6c df 66 2b b5 5b 1c 89 6d b4 d4 a7 6a cc be db 3d 5a d6 71 2c d6 67 ca e1 93 61 14 b6 d2 e4 de 23 b3 31 33 1d 08 87 e8 1d ce 0e 78 46 50 26 21 fc 75 24 c0 22 82 4f ca b4 ca 76 39 0e 69 3e 45 70 de b0 b1 2d e7 48 1d 48 6b 55 41 b8 06 3b 38 51 b2 f9 2e ae 0d 8c b0 6d 10 ab b4 61 d9 24 be d6 27 9e c8 d6 87 52 3b 81 98 44 c4 51 df 1c c9 5c 10 20 10 08 04 0b 02 c0 b3 84 e1 38 19 c0 ce 26 04 33 8c e3 02 c0 b0 24 15 98 2a 33 c4 61 ae 1a e1 ae 14 85 21 58 56 15 9c 4c e1 0a c2 b0 a9 9c 4c e0 c6 78 cc f1 99 fb 08 ca 4c f1 18 2a 95 52 d9 b2 8b 61 d7 75 0e 04 0a c6 78 2d c7 81 e3 57 0a 99 c1 a0 ad cc f0 b9 86 87 10 a1 07 11 10 b3 0d 02 21 d3 33 e0 c1 a4 00 3a 6b 0e a2 88 d4 00 0d 4a 27 01 16 92 41 ac 00 09 10 13 3f 9c cc Data Ascii: jP[Tm\lf+[mj=Zq,ga#13xFP&!u$"Ov9i>Ep-HHkUA;8Q.ma$'R;DQ\ 8&3$3a!XVLLxLRaux-W!3:kJ'A?
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 6e d3 e5 aa f0 90 5d b1 1a dd e7 71 5d 84 58 d5 bc 6d 5a 6c 03 53 59 a7 c2 a8 0a d5 05 46 c0 65 7a f9 75 6b c4 7e 24 3d 4a c5 6a f1 4f 36 bd 61 76 34 6c b4 3e 81 63 76 9e b8 1b d5 5d 61 d9 7a 62 6f ea d8 9c 41 9f 3b 59 56 cd 96 b0 d7 ec 47 1f 2e b6 c0 f8 d6 23 d9 a9 eb 31 51 d6 28 1f 4e 97 3b 16 56 c7 66 cb 83 b3 52 d4 b3 dc 03 62 5b bf a5 5b b7 b4 f5 b6 32 6c 7a 96 0b b9 ea e2 ec fa fb 67 3d 70 3c d5 81 f2 e8 cb 37 af 60 af eb 01 46 ab 16 a8 70 6c d7 48 b7 6a b9 6a b5 7c 8d a7 eb ad 89 ea f4 96 1d 11 58 b2 8b 8d 47 fb 75 8d f2 4c af 5f d8 41 af 72 05 6b c8 7b 96 a0 76 1e d0 76 69 58 cd eb 1c d3 76 b2 0f 92 98 16 55 80 f9 29 e5 63 63 71 61 72 96 74 76 96 a6 c5 52 eb 2e 41 5e cb 2c 3b 0e 23 6e ee 06 4d bf 60 22 ec 6b b4 3f d6 99 e6 d1 ae 3e fa 18 77 35 21 Data Ascii: n]q]XmZlSYFezuk~$=JjO6av4l>cv]azboA;YVG.#1Q(N;VfRb[[2lzg=p<7`FplHjj\|XGuL_Ark{vviXvU)ccqartvR.A^,;#nM`"k?>w5!
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ee 67 78 66 41 e9 df 00 9e 84 f7 c0 c7 13 30 66 08 9f 88 26 08 80 09 81 38 98 47 40 d2 b7 00 d7 62 19 53 88 1d b3 e5 01 94 a8 9e 41 8e 78 0c c0 b0 3c 9b 96 22 95 10 10 10 58 ab 60 b4 81 5d 81 48 b9 40 36 a4 16 0c 12 0c c8 56 21 4c e4 42 64 e0 29 30 08 48 c1 33 b9 99 04 81 da 7f 03 38 c1 c0 18 9f c9 ce 66 3a 11 da 76 c1 51 0d 62 3e a5 2e 2c f5 80 c7 d6 de ae 2e cf 86 26 ee a3 93 f1 9a 36 bd 2d 3e 21 03 e0 36 52 bb c2 29 74 2d b6 30 bb 6f 5a 7f 63 49 9c cd 80 5a b5 9f 98 20 7e 50 85 11 ec a3 2b 66 b2 47 f6 14 86 d7 d9 47 0f 65 ad 1e a5 65 c0 98 80 18 41 cf 5c 0c 60 4c 76 27 a0 03 3d e6 48 80 98 70 27 69 80 60 00 c2 31 31 88 04 24 e6 1e c1 2d e3 29 dc 55 29 b6 8d 05 a8 c0 32 03 9c 42 79 42 c6 0e e4 00 27 12 c7 00 a2 d4 bc 51 02 85 ab b0 a5 e7 85 d5 9d 19 27 Data Ascii: gxfA0f&8G@bSAx<"X`]H@6V!LBd)0H38f:vQb>.,.&6->!6R)t-0oZcIZ ~P+fGGeeA\`Lv'=Hp'i`11$-)U)2ByB'Q'
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b4 92 63 3e 2c 48 63 23 cf 5c 53 32 31 36 fc 4a 86 4f 10 d6 30 80 64 22 db c3 51 e2 a2 f3 ae 90 01 b1 02 1e 31 7d 62 d8 f3 a7 34 44 a4 63 23 a8 86 a7 f8 68 db 38 da 06 93 27 aa 0c d2 ba 8c 41 0d c8 94 51 94 c1 2d a1 c3 20 e6 13 ae c9 1e 66 ff 00 fc c4 d0 cb b4 1a 81 68 27 bb 62 33 10 e2 d1 b8 b5 f7 61 66 fa 7f cb 8b 3b 87 97 f3 16 f8 96 c0 43 92 b7 8c 22 46 00 93 6f 49 02 f7 51 9e 96 8e d2 be 02 b2 c2 82 84 72 33 33 10 73 be 43 30 88 3d a8 a6 2c 18 92 0d 37 87 35 01 49 4a 3c b9 30 1d 38 2e 34 60 dc 68 d4 f4 ee 8a 72 4c 5d 87 1b d9 3c 88 da 8b 1b a4 30 67 0c 3a 4b 07 62 41 a9 1d 64 24 38 91 34 2d 8a 78 82 06 25 bb e8 90 0e d2 22 89 11 a8 01 bf af fc b4 01 89 ad 5e 24 48 75 10 05 86 2e 03 0a 7b d2 92 ba 32 31 38 00 09 92 df 96 d1 2d 48 5e 78 04 44 ae 46 44 Data Ascii: c>,Hc#\S216JO0d"Q1}b4Dc#h8'AQ- fh'b3af;C"FoIQr33sC0=,75IJ<08.4`hrL]<0g:KbAd$84-x%"^$Hu.{218-H^xDFD
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 90 03 4b 4c f8 d0 10 96 59 97 38 37 6e 4a 91 80 6e 4c a0 7b 92 57 0c a1 28 e9 34 4f 1c 90 78 18 77 f7 13 f9 26 24 60 04 23 2e d4 66 b7 a8 79 92 ee e5 a3 64 8e c6 15 fe 16 66 fa 6b 65 22 71 dc 3d ec ac c4 23 2c bc d0 75 da d1 ed 4d 35 b7 13 80 70 56 fc 6b a0 17 1d d9 ad fc 86 3a e2 07 89 11 64 80 d7 bb 20 9a 70 12 9e d0 dd bb 50 68 e5 c7 60 7e fa 68 80 40 d0 c5 38 c9 81 8f 08 32 ed e5 af c9 90 1a f7 53 47 2a ed 64 ce d3 d9 8a 26 41 a5 a1 a6 65 f0 2b 4c 9a 42 96 bc be 35 43 18 be 80 ed d8 5b b0 05 f4 0b 8f 7b 31 53 26 9a e3 28 8e b5 f2 4d 3c a9 96 c1 84 62 3f 9a b7 af 8b eb 90 3d d9 49 3c 85 c4 6b 32 5b bf 4e 78 77 8f 89 07 8c 62 4e 0e 59 34 73 62 3d df ef aa 4c 36 8d d8 c4 78 96 f6 5e 5c fd e2 64 7b 30 82 61 08 08 9e 48 97 c0 98 42 24 1d 73 6f 02 73 94 41 Data Ascii: KLY87nJnL{W(4Oxw&$`#.fydfke"q=#,uM5pVk:d pPh`~h@82SG*d&Ae+LB5C[{1S&(M<b?=I<k2[NxwbNY4sb=L6x^\d{0aHB$sosA
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: d3 e6 e6 1c cd 82 04 2a 64 cb 84 fe 29 27 88 19 7e a8 f8 d3 91 95 31 ef 06 fe 4a fc bc 86 fd e2 79 0c b8 f0 66 4a 1d f5 bc 72 c8 db 31 35 48 65 7a ad 54 11 88 d6 ff 00 0c 93 47 36 12 3a ae 29 a4 0b eb 06 5e 04 f1 9c 87 04 e6 b7 3e a2 63 87 7b be 89 f2 cb 68 79 dc ff 00 bb 40 cb 26 04 9d 4e 4f 56 29 f2 e1 36 18 01 12 3b 33 57 79 4e fa 73 24 2b d4 4d 99 28 44 e3 4c c9 4b a1 f2 f2 d3 89 4e 41 a9 11 7f f2 fe 5d e8 0c d8 cb 74 34 60 61 1e c4 af bd 06 c8 cc 8c 41 76 a0 af 4e f5 bd f4 53 3c 99 13 bd da dc 4f 2c 9c d8 9d 32 04 77 b7 10 10 8c ab 4b af 17 37 23 e5 dc a4 f9 d3 c9 96 21 8d e7 f7 9b a8 c0 e6 c7 32 52 c7 32 43 cb 98 e6 58 8c e1 f3 a2 0e 04 1c ce c2 1e 56 4e 60 89 34 8c 63 64 4b ff 00 d3 bd 19 e6 89 0b 71 cb 19 3f ea dc ad 8e 4e 6c a4 ce 0d 8d d8 b9 3c Data Ascii: *d)'~1JyfJr15HezTG6:)^>c{hy@&NOV)6;3WyNs$+M(DLKNA]t4`aAvNS<O,2wK7#!2R2CXVN`4cdKq?Nl<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	62743	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/009.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:53 GMT Accept-Ranges: bytes Content-Length: 96144 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7958	IN	Data Raw: ff d8 ff e1 1b fc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 33 3a 31 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:23:17
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 60 00 00 00 01 00 02 00 60 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 Data Ascii: WhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM``8BIM&?8BIM8BIM8BIM8BIM8BIM'
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: d6 f4 d2 36 3a ca b6 3a 5d af 00 f0 4f d1 73 5b fb cd 51 2d 2e 0d 6b 4b 43 bf 37 58 1f d5 73 a4 ff 00 9e 93 ab 7d 4c 3b 5c db 09 d4 9a 8c e9 f9 fb bf 39 3c 01 a0 ea 8d fc d7 05 81 9b 9b f4 83 4f bb b1 8f e4 15 01 16 ed aa c2 58 d7 96 b6 47 03 5f fa 09 cb ef 7d b0 e6 41 2d d4 d9 ed 00 0e 3e 9f fd f5 49 cc a5 9b 80 87 98 8d ce 76 9a ff 00 a2 6b 7e 8e df de b7 fe db 4e 14 0e a4 7d 53 42 ab 6f 24 f6 5b 53 dc 40 96 35 83 65 60 99 24 34 46 f7 68 9c bd cc 60 a8 fa 66 5b c0 00 bb 5f cd 75 91 ff 00 43 72 01 75 9b 0f b4 49 03 e8 9e 3f 76 7f 39 2d f2 f9 6b 7c 86 84 6b f9 bb 53 38 45 77 5c 3c 13 32 c6 b6 5e 09 92 c0 d6 81 02 07 f2 9b f4 5d f9 be d4 0b 5c f6 39 8c 74 6e 03 b7 07 f3 bd bf bd f4 93 97 3d ac 3b 40 21 de 00 90 08 fa 3f 47 f3 93 ee 78 6b 4d 80 b8 6a 2b d3 Data Ascii: 6::]Os[Q-.kKC7Xs}L;\9<OXG_}A->Ivk~N}SBo$[S@5e`$4Fh`f[_uCruI?v9-k\|kS8Ew\<2^]\9tn=;@!?GxkMj+
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 47 66 ba 72 4f a1 73 97 8b 1e ce 2e 9e 45 fa 99 7a b5 c8 75 bf 2c e1 ae cc 4e 4b dd f4 b8 46 eb ac e0 d3 a9 e6 70 be de 68 27 bb 3e f8 e2 af 43 3b 79 36 b8 4a 5b 3d ce 79 df 97 74 bc f6 d4 cc 5d 07 3b ec c6 39 df 56 7a 9c f5 d3 56 70 be b2 b8 8e b9 d6 79 b5 d2 ce 7c ba e2 b9 4d 56 e6 6f a9 e5 c8 ba b1 d4 cd 56 ba 99 ba ac a3 79 8c df 44 f3 df 97 a7 79 c0 ce f3 85 db da f8 83 b5 f1 15 da f8 99 d8 f8 c3 b0 e4 76 f5 9c a1 d4 73 33 a1 62 eb 59 81 69 c2 cd d7 36 78 c5 4d 78 2d 54 d7 3c d3 97 cf 34 27 88 b5 ce bb ce b1 3f d5 f9 cc 37 e5 f9 fb 49 3f 81 d4 8b 33 73 5a 45 d6 31 b4 6f a6 6a ce b5 5b 7f 57 2a 2d fa 03 6f 79 4c 68 00 36 89 14 d9 87 2d ee 62 e7 ac 9a 8d 09 6b 9f 63 2c 34 b3 37 3a a4 8e a0 a3 3d 0c 5e 6e 90 80 0b 18 88 ac 35 17 25 b9 5c cf 70 79 da 93 Data Ascii: GfrOs.Ezu,NKFph'>C;y6J[=yt];9VzVpy\|MVoVyDyvs3bYi6xMx-T<4'?7I?3sZE1oj[W*-oyLh6-bkc,47:=^n5%\py
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: b6 9c 35 56 0c 3e cb 62 99 1d 74 32 cc 10 19 9f 3b c9 18 0e 22 bd 2e 5c 21 4c f8 d2 00 16 12 23 05 61 c5 44 f6 ce 42 30 53 2c 09 c8 4b 5b e6 27 c9 0e a2 7c 83 f3 a9 52 a5 4e 22 70 10 e6 21 ce 14 33 8b 41 ce 1c d5 86 dd 24 20 e5 ae 67 2e ab e8 53 a5 8a 8f 83 11 0e 59 cf 85 22 e6 04 0a d3 8b 4e 0d 38 19 f1 99 f1 cf 8a 7c 33 e1 9f 04 fe 79 fc d3 f9 a7 f2 cf e4 9f c8 67 f1 99 fc 66 7f 1b 4f e3 69 fc 6f 3f 91 ff 00 cd 50 88 44 a8 25 42 b0 2c 22 11 2a 05 80 4a 95 2b ff 00 07 50 89 52 e5 cb f4 a8 04 af fc 49 12 bd 6a 57 fe 36 bf fd 21 5f fe 1a 1b fd 13 e9 72 ff 00 dc 28 2b c8 97 2b ff 00 1d 50 89 66 03 fe 5a 84 89 e2 57 fb 9e 25 cb 94 6a 8c 04 c0 47 f8 fc cb 9e 0c a1 2f fd 4b fc ca dc e1 52 e7 2a 9f a9 7e 00 12 8c b3 39 7f 87 94 e2 4c f2 0c f3 fe d2 e4 cc 34 c9 Data Ascii: 5V>bt2;".\!L#aDB0S,K['\|RN"p!3A$ g.SY"N8\|3ygfOio?PD%B,"J+PRIjW6!_r(++PfZW%jG/KR~9L4
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ca 58 32 8c f1 39 4b 96 67 29 62 ef c9 33 90 84 a9 94 21 ce e0 49 c5 81 2d a0 9e e8 6a 72 5a 1c 4c 20 08 50 93 46 7e a1 26 13 73 f9 32 d1 0f 5f b5 cd db 6c f1 4c f0 d3 46 ea a1 cd 7a fa 61 86 dd 9c f3 6e b6 de 34 d7 25 1f 2e 80 8d 33 23 0e d3 e3 3a dd d1 a1 cf b6 43 27 63 a8 ea ca ac a4 84 00 82 00 79 6b 38 a9 87 28 51 c4 f3 e8 2a 50 95 28 c2 27 88 4b 89 c9 a0 64 80 a4 b6 10 3d c2 72 30 e6 b0 a1 13 de 42 b3 08 34 13 96 66 1e 16 48 9c 9a 72 33 f7 38 ac f0 27 ee 79 9e 67 ea 17 13 90 13 90 97 08 06 15 15 c4 df ba 02 7d 2f c7 29 73 d8 61 02 10 d0 dc a3 01 26 01 0f 29 64 0e 4d 2c 09 c8 4b 4a 1c 49 f1 74 44 f1 04 f7 19 ee 87 8c 25 4c e2 09 fd 42 fe 2d 4c f6 ce 22 7c ec f3 3e de 61 53 b5 f2 b9 6c f3 9a eb 9b 68 49 d9 5f 2e 91 24 fd 6a 23 3e 5a 4d fa da 2b 36 64 Data Ascii: X29Kg)b3!I-jrZL PF~&s2_lLFzan4%.3#:C'cyk8(Q*P('Kd=r0B4fHr38'yg}/)sa&)dM,KJItD%LB-L"\|>aSlhI_.$j#>ZM+6d
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 59 f5 7c 57 34 d3 a7 86 81 d0 ac cf 30 c0 be 28 32 ed 32 96 e5 a0 a5 31 09 4c db 24 d2 7c 4a 19 87 19 99 5e 05 b2 e4 e7 99 f8 90 93 8f b3 89 04 30 58 ac 03 b6 96 d6 5c b9 f0 ed c9 8f 91 40 80 48 80 da 91 32 4e 6e 5d 91 1b 42 61 6a 85 da be 43 6d b1 68 ec af 1b 14 a3 3c 08 3c ce 44 13 1a c1 0d 17 c8 05 4c 1a 28 1e c2 09 04 30 52 39 71 99 75 46 71 32 e5 3b 1b 65 86 4f b6 ba 40 00 94 60 15 13 b7 a0 5d 35 ec 28 cf b6 ba 2b f4 f0 75 66 6b 0c 6b 2d 98 37 f7 77 1a 61 f6 a9 fc dd ad ba 8e ec 09 99 e8 04 47 40 ac de 41 b3 c4 00 68 47 5c 78 71 b9 ee 13 f7 28 10 ae 55 5b 3c 48 dd 80 89 a1 01 d9 9b 20 a9 c8 b0 44 dc a3 e5 cb 20 d8 6f 8e 39 65 f6 a4 6a df 61 d2 cd b6 fb cc 04 cb b7 dc ec 69 f6 00 26 aa a1 97 0c 79 b9 e9 1e 00 3a a9 2d c5 57 dd a6 8c c0 33 07 cd 55 55 Data Ascii: Y\|W40(221L$\|J^0X\@H2Nn]BajCmh<<DL(0R9quFq2;eO@`]5(+ufkk-7waG@AhG\xq(U[<H D o9ejai&y:-W3UU
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 85 6e 32 b1 85 34 b5 69 e6 82 96 2c ac 33 46 35 62 6b 91 70 b9 d4 66 21 93 36 8a de e5 d0 f2 2c 90 b1 00 95 65 70 a1 95 a9 79 13 03 5b 3f 80 ca c5 73 0a c1 a9 08 3c db 87 10 58 c7 25 0e 4a 58 aa 8b 61 43 22 0b fc c7 96 db 26 83 1d 59 03 76 0e a8 ec 28 5b 40 a4 30 52 0a d1 3c da 5f 8e 44 c4 59 c6 50 84 89 44 c0 c0 43 50 b1 00 30 bb 51 2f de 98 9d 22 f5 73 0a db e5 9c 3a 68 d0 2c e6 82 73 7d 08 5a 00 ac 6d 49 4e 4b 15 89 63 62 5d a5 f9 b2 43 34 24 98 be e6 36 a4 38 8c c4 80 68 92 28 29 63 f1 aa 95 66 13 e5 34 73 b9 8d ac d6 98 2f 55 94 f3 20 97 89 74 da 1a e7 70 31 a0 58 29 ab 1c 56 78 01 b3 c9 88 c9 09 50 82 3f 95 21 81 19 e8 40 c9 80 6e 09 09 51 0b 1b e4 01 1a da 0e 2e 09 02 12 08 75 b2 ce 61 33 13 ee d5 bc 72 26 2d 2c 57 40 78 00 41 6a 3c 44 26 c8 6e 28 Data Ascii: n24i,3F5bkpf!6,epy[?s<X%JXaC"&Yv([@0R<_DYPDCP0Q/"s:h,s}ZmINKcb]C4$68h()cf4s/U tp1X)VxP?!@nQ.ua3r&-,W@xAj<D&n(
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 70 e5 42 53 d4 90 cd 46 c0 9f d0 44 19 00 7c d0 04 54 e8 72 c8 bb 9b 27 94 5c d2 b8 a0 03 b5 96 76 19 c0 a9 0a 2f 13 28 8f 2a 8b 3f 29 71 55 1d 3c a0 89 17 24 ac b9 85 f8 8e c4 e0 b8 b0 74 d2 89 7c 0b a2 01 b2 ba 61 52 68 57 ce f5 28 19 39 d2 b9 80 91 8f bb dd a1 a9 f0 f3 22 36 79 5a 7e d4 ff 00 68 84 75 43 13 71 fa 92 e7 59 f4 24 f1 f3 3b 25 65 d7 d3 3a 58 66 35 87 be 84 a2 5c 1b 1c 15 0b ab aa 15 50 55 45 d5 0a c1 59 51 54 38 dc ab 19 00 6e c8 66 a1 f0 ba e0 2f b8 5d 31 a2 a2 b3 aa d0 6c 08 02 ec 98 87 54 0c ae eb f1 f4 55 6c d9 d1 8a ba 7b a6 15 5b 15 ca ba 18 aa f4 5f c4 af d3 f4 f4 59 3a 1f 3a da a8 28 9d 1c 15 9d 5b c2 ac 98 8b a7 b2 a1 21 36 62 a8 68 83 55 54 27 6f c3 da 56 61 b5 50 bf 81 39 be f4 f7 7d c8 37 85 62 3a 8a b9 03 7a bd 36 84 e2 a8 77 Data Ascii: pBSFD\|Tr'\v/(*?)qU<$t\|aRhW(9"6yZ~huCqY$;%e:Xf5\PUEYQT8nf/]1lTUl{[_Y::([!6bhUT'oVaP9}7b:z6w
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 1a bf 0d 9a 30 68 48 87 19 bf dc 47 2c 5a 3d 97 24 df b3 ec 26 00 16 b7 ea ac b1 e0 12 ab 9b 65 e6 cc b2 c5 8e a4 af 91 ac 88 94 73 6a 07 12 11 34 71 e6 ac b0 02 2f 43 01 5b 7e 7a 3a 52 8f 05 c0 df ce 9a 19 22 ce d2 ad bc f8 a3 1e f0 97 2e cd cc 7c e4 40 96 60 c0 01 ba 3c 91 c8 80 91 63 5f 57 dd 51 62 0c 8f 0f 80 28 e8 6a e9 ce 7a 71 2e 78 be ec c8 f3 6a 6b 7c 37 ef 10 e0 8e a6 98 a0 94 38 48 1e a2 fb 8d 5c b3 f3 4d 0a cb ab a4 35 b4 fc e8 f3 2c 82 5d dc ec 61 20 d2 4f 09 09 6f 1c 4d ee a3 51 27 f0 27 ca e7 72 ac 2b 81 3c 5f 55 56 3e 25 96 23 c5 4f b2 9a 46 be 68 0a b4 7b 3d fe aa 66 24 9d 89 9a bb 07 1c be aa 72 18 f8 be ca a1 1b d5 03 9f 20 5c 21 e5 b5 31 1f 42 bb 05 4b 6e fd 45 81 dd 65 5a 79 55 46 65 c4 e3 72 e0 97 e2 5f 4a bb 95 43 e3 56 a6 f5 b1 30 Data Ascii: 0hHG,Z=$&esj4q/C[~z:R".\|@`<c_WQb(jzq.xjk\|78H\M5,]a OoMQ''r+<_UV>%#OFh{=f$r \!1BKnEeZyUFer_JCV0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	62744	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/007.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:30 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:50 GMT Accept-Ranges: bytes Content-Length: 200102 Content-Type: image/jpeg
2024-05-28 05:15:30 UTC	7957	IN	Data Raw: ff d8 ff e1 30 7b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 32 3a 30 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 0{ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:22:05
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: a0 c0 32 35 d4 1f 6c 79 f3 ee 56 31 ab b2 fb eb aa b6 fa 8e 90 d6 56 35 24 93 0c 68 8f a2 aa 35 e3 6c 4c cf d2 77 69 fd c6 ad df aa 94 3f ed 39 19 7a 87 e1 50 eb ea 69 88 0e 3e d6 17 34 8f 7f b7 7b ff 00 e0 d4 92 2d 2c 50 b2 ec cb 5d 75 18 f5 b9 cf af 1d 90 5c 44 17 3a 61 d6 3a 7f 3d df f6 df ee 2d 0c a2 18 d7 38 09 db a0 68 f3 54 ba 58 75 b6 1b 9c 34 3a 89 d4 90 26 35 3f ca f7 22 e5 5a 5d 6f a6 24 00 7d d0 a0 94 b7 2e 80 8d 50 1d 1e 57 ac 59 83 7f 57 c8 7e 5b 99 5b a9 2c aa b2 f2 01 63 1b 5b 6f f5 98 e6 ed df 63 af b3 e8 3f fc 0f e8 bf 45 fa 35 cb f5 ca fa 78 cb 79 e9 8e 02 9e 36 d4 41 12 00 fa 0d 73 dc f6 fb bf 71 d6 2d 2e b1 8f d4 2f ea f9 36 df 87 6b 8b ec 2d 68 65 56 39 ae 63 46 ca 76 ec fe 73 f4 6c 6a cd b7 a1 64 10 1e dc 7b de e3 3e a5 5f 67 b0 38 Data Ascii: 25lyV1V5$h5lLwi?9zPi>4{-,P]u\D:a:=-8hTXu4:&5?"Z]o$}.PWYW~[[,c[oc?E5xy6Asq-./6k-heV9cFvsljd{>_g8
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: ae cf f0 9f a4 51 c7 0c 48 37 60 1d 77 f5 2e 33 23 a8 d1 d8 3d 67 1c 83 b1 c5 b3 01 ae d9 ed d7 74 ed d9 ee 6a 4e fa c0 dd e4 d0 0d bb 5b 05 8f 68 63 04 fb 65 ee 67 bd ff 00 4b da e5 82 d7 cb 8b 1d 24 10 01 98 10 3f 92 d7 0f 24 e6 ca 5a ef 4d ac 60 16 7b 98 1a e9 78 d7 6e df df fa 49 ff 00 77 c7 e2 56 7b 93 3b 37 f2 3a 86 6e 40 06 cb cb 2b 24 02 ca da 19 24 43 7c 37 bf 6b 7f 94 a1 8f 7d 8c 69 34 dc ea 4e df cd 2d 04 77 61 df fd 6f dc fd 2a a8 e7 d4 ed fb 61 db 04 bd c0 19 9e ee 6b 9d ec 49 cc c5 7b 4b ab 6e fb 04 11 73 de 74 3f ca fc c5 27 0c 6a ab 4f 20 b3 88 dd d9 bf 36 ce eb 76 ed 91 b7 74 4f a6 7e 96 ed fe b7 d2 fe 73 7f b7 7f fe ac 49 56 d9 74 4c 99 fe bb 39 98 d9 fe be f4 91 e1 8f 86 f7 fd aa b9 78 f6 7f ff d0 25 bf 5c b3 69 6d 39 16 63 be bc 7b 1d Data Ascii: QH7`w.3#=gtjN[hcegK$?$ZM`{xnIwV{;7:n@+$$C\|7k}i4N-wao*akI{Knst?'jO 6vtO~sIVtL9x%\im9c{
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 2b f0 f3 de d6 75 1d e2 dc 77 b5 ee 60 69 0f 32 76 96 ec 73 1c c7 7a cc 77 b2 bf d0 7e 92 9f f8 45 77 17 a2 b3 d5 14 d6 f2 31 7d 40 eb 03 5e dd a1 9e ff 00 4d 99 4e c5 76 e7 66 7b 7d 1f b3 ff 00 37 5f fd 72 a5 0c b3 ca 18 c4 65 23 1c 83 e6 9f 0f 10 9f f7 57 83 23 2e f1 ec ed fd 5c a6 de 99 6e 55 6f ad ce c7 24 bb 1d d6 38 93 ed 68 74 9d a1 d4 ef bf 6f a9 bd cf ab d9 5d 7e 97 e9 3d 4a d6 9d a7 a6 5b 51 7e 66 2d 04 08 75 af bd ac 71 00 90 6d 73 9c e6 bd e8 5d 2a bb 72 7d 47 5c c2 2b 75 00 36 c7 01 ea 11 1b 0b 5c c8 6b 77 3b 6f ab fe 12 9f f4 95 fe f8 f1 fa 9f 4e b1 db ab 79 db 5c 97 17 54 43 60 02 f1 f4 be 93 b6 37 7e d5 6f 91 f7 32 60 39 0c 22 25 72 e1 23 f4 bf ad 2f f0 93 22 01 11 27 7e ee 67 d6 1a 71 3a 75 0d 6d 77 32 9c 3b 6e 79 b6 88 7b 9e 58 06 d1 4d Data Ascii: +uw`i2vszw~Ew1}@^MNvf{}7_re#W#.\nUo$8hto]~=J[Q~f-uqms]*r}G\+u6\kw;oNy\TC`7~o2`9"%r#/"'~gq:umw2;ny{XM
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:30 UTC	8000	IN	Data Raw: 8a 07 56 d0 15 1c d6 9c c1 38 01 7b 09 bb 3d 9c dd 27 5e 0c e9 3e 8c 39 19 bc da e9 8f a7 a7 28 a4 0e 91 0f 7e a9 7e 0f 4e 7e 84 2e da 43 da ce 45 c9 7e 5c da de 77 29 dd 73 ce b7 cf 5a 38 6f 2d d1 0f 8a dd d3 84 f1 2a 16 8e e0 ac 75 e5 da 62 ac ac db 93 2b 09 be ab 40 b5 51 d0 ce bb 59 db 17 ad c5 d4 b4 30 63 24 20 7c 44 11 84 0b d3 39 b8 ba 28 a4 4c a1 43 1a e1 ac b2 84 c2 9a 61 32 43 2e 5e ea 83 c6 da cd ae ab 49 31 68 4a 19 35 f3 33 b4 90 f6 58 fb 2c 0d 2c fd 0d e6 92 ca 90 12 d7 d9 93 08 5b 2b 05 83 60 4b 67 33 d2 d7 23 ce 75 a3 b3 20 51 a8 62 dc d0 d0 b9 6a 6a 05 db 78 d3 7a d8 1e a3 08 11 2b 63 b9 d3 1b 0a 5a d2 ec a2 e8 bd 25 71 ce d3 a3 a6 7e 4d cd 05 6a dd 3b 1f 55 b6 59 e2 80 14 25 85 82 97 a3 c0 cb 40 d0 e7 49 4d 7c 51 ed 1b e2 e6 4c c3 3d c0 Data Ascii: V8{='^>9(~~N~.CE~\w)sZ8o-*ub+@QY0c$ \|D9(LCa2C.^I1hJ53X,,[+`Kg3#u Qbjjxz+cZ%q~Mj;UY%@IM\|QL=
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 36 cc 7b 51 2c a9 a4 56 20 48 99 24 48 42 a1 70 14 ab 82 33 96 b0 fe c1 3c 66 b7 9a d1 8c 9c 2c 30 58 8c 62 b0 60 c0 82 c9 cb 3d 03 3f d0 89 33 96 48 bc d4 ae b3 79 af 95 c6 fe 07 f3 f0 54 13 e7 35 bc 68 b0 2a e0 0a 40 00 63 f9 0a bc 71 8b 06 85 7c 49 1e cb a1 2d 01 76 c7 4d 08 58 a8 27 c3 b7 15 8e c6 ce c6 0f 38 77 af 67 90 d2 86 47 05 89 de 30 19 1c cb a9 2d aa e4 96 e2 45 8e 65 95 38 a8 0a 50 e2 b2 b6 7e 31 e3 0d fc 0e 01 8c 7c ff 00 91 fc 3c 67 21 86 65 c0 e0 e7 31 9c 80 01 b7 f1 ad fc 6f 00 d8 28 40 96 2d 98 a0 70 4d 6f 2b 1c 63 35 e2 50 73 d6 46 40 ac 00 cf 18 4e 10 4e 2e c0 52 d9 23 85 50 41 67 70 83 88 71 b9 21 96 5b 52 2c 7f 6c 13 0c ce a8 ce 38 89 34 75 fc 4f 93 f0 4e 13 f0 d8 14 68 28 df 15 50 64 55 c0 a4 31 7d 15 72 c5 75 ad 0c 32 22 e2 4b b5 Data Ascii: 6{Q,V H$HBp3<f,0Xb`=?3HyT5h*@cq\|I-vMX'8wgG0-Ee8P~1\|<g!e1o(@-pMo+c5PsF@NN.R#PAgpq![R,l84uONh(PdU1}ru2"K
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: da c1 2a 18 38 b4 35 24 cb 3d 95 4a 79 2c f2 dd 48 fb 1b 08 ad 3c 62 39 7b 0a 50 c8 7b 7b 93 4c dd 9c 9e a5 e7 c8 f5 88 e9 0d 06 68 20 05 24 79 66 99 23 8a 47 36 16 b4 45 ec fa d4 5f e4 65 04 59 68 2a 59 8e 76 89 62 fb 0a e8 d2 21 c4 48 99 6a 30 8c 3a 4a 1f 84 f1 85 57 64 8a d2 33 4a 64 27 d1 61 b2 38 df 10 ef 1a 3b 21 8c 76 13 1e c2 28 5f 5c 8a 8a f3 b3 08 c8 e2 31 e4 64 05 58 90 cf 9c b2 24 91 20 fe d5 cb 54 99 23 97 d9 56 38 ea a5 71 35 ca 45 22 4e ba 5b 49 1f 53 7d d0 bb c6 c2 5f 3c 98 e2 b3 ab 00 8d 21 e6 31 e3 8f 15 78 60 20 16 91 59 ba f1 d6 05 b7 d5 57 08 a4 88 d8 46 ed 35 49 03 94 96 23 17 56 25 ad 3f 5f 35 73 0e e5 95 11 15 d6 5a 7c 2f 23 3d 9e 4a a0 b0 db c9 ac 05 b2 32 46 12 da 33 63 f6 97 e1 c6 ee e1 45 bf 23 49 3a dd 0f 52 2e c6 d3 44 dd 84 Data Ascii: 85$=Jy,H<b9{P{{Lh $yf#G6E_eYhYvb!Hj0:JWd3Jd'a8;!v(_\1dX$ T#V8q5E"N[IS}_<!1x` YWF5I#V%?_5sZ\|/#=J2F3cE#I:R.D
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 12 d3 a9 63 62 02 d1 da 00 58 99 d9 bd cc 1a 2b a1 44 1d 8c 91 bc 96 94 c9 3d b6 9e 5a ce ce b6 bb 59 6a dc b1 6b 9d 39 6c c8 cb 0d 69 6e 4b 77 a3 9e 38 a5 91 91 2e dd 92 71 1a b9 4e da 18 ab d8 ad 4a 2b 52 d8 e9 12 bc 52 33 c6 cf 30 e2 d2 90 dd 75 9b 51 4f 66 cb c3 2b f6 30 59 87 b0 96 cb d8 ae f1 a9 a9 66 a4 85 3a de be e4 3d 6d 53 ee 48 60 79 eb f5 22 58 26 f5 88 d5 89 c1 b6 64 dc 68 a0 b0 84 17 5e b5 7d 0b 1d 79 e9 df ee a6 49 7b 04 7e 05 ee b4 8e 67 fd 44 d2 83 2d 97 93 23 45 51 15 e3 5d 3e cd d9 9b af e4 82 e4 20 d8 7e aa ca 1b 15 67 a8 f2 c9 cc 0a e5 cb 41 0a 86 a7 04 98 dd 6c 03 0d 5e 0c 25 d4 6d 33 30 58 e4 38 b5 ac 72 74 94 39 43 bd b9 c5 23 09 7c e2 01 f2 70 10 06 d9 b3 41 47 fb 14 07 69 23 c6 df fa f7 23 9a 26 8a 45 0c ac b2 03 9f 9c d1 04 8d Data Ascii: cbX+D=ZYjk9linKw8.qNJ+RR30uQOf+0Yf:=mSH`y"X&dh^}yI{~gD-#EQ]> ~gAl^%m30X8rt9C#\|pAGi##&E
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: f6 c4 61 8d a5 91 21 95 e6 52 20 8a 44 57 8b 13 b4 94 67 de ac ab 35 d1 34 06 67 e3 d5 5e af 6a 2b b4 2a a4 d2 c0 b1 4b 4a 29 ea 75 f5 27 b0 af 2a 0b 90 ca f5 2a 22 d7 9e 69 6b b3 ac 27 eb 40 90 58 a1 7e d7 63 7a 24 63 6a 2c 8a dc 87 3f f6 db aa 8b b3 9a 34 b1 12 1c ea 61 95 25 64 ab 12 59 af 1c 80 ce 98 1f cc 67 c0 1b c3 c4 e7 15 19 5e 67 2b 42 47 f5 4b 4a 38 ec 44 2c 1c ee 6b 46 6d 34 84 1e bc 8a c6 69 aa 98 9e d8 9c 77 42 ac 56 12 e0 0c d7 21 dc 96 d0 a7 b2 ba d3 fe c2 b7 d7 af 62 4a c2 1b 7c 32 bf a5 40 aa 82 3b 12 bd 66 59 5d 72 4b 01 83 5a 90 24 76 a4 26 66 e6 88 e7 12 43 85 7d 86 bc 42 21 b8 9b 23 16 38 33 3c 99 18 e0 35 28 c5 20 10 64 42 67 2a 1e 56 05 f8 f2 11 aa 98 8b 87 8a 79 e4 35 04 cb 25 c4 8c 4e 74 c6 35 1a 89 77 9a 00 79 d1 d8 03 5a 20 e2 Data Ascii: a!R DWg54g^j+KJ)u'"ik'@X~cz$cj,?4a%dYg^g+BGKJ8D,kFm4iwBV!bJ\|2@;fY]rKZ$v&fC}B!#83<5( dBgVy5%Nt5wyZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	62745	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:30 UTC	721	OUT	GET /wp-content/uploads/2022/07/008.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:52 GMT Accept-Ranges: bytes Content-Length: 206875 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 31 0c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 32 3a 35 30 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: 1ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:22:50
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 26 04 5d 9d 29 15 75 37 08 3b d1 b6 eb ac 16 b8 d7 5d ae 61 de c6 b5 db 5f 7b 6c f5 18 dd f7 ee c9 f4 7d 4a ff 00 9f f4 ae de ab de ce ad 9e da af a1 b6 98 24 65 60 34 c5 95 b6 9f a5 7e 33 5c 1a ff 00 b2 ec 7f e9 ab 6f f3 9f e8 bf d1 cb eb 67 48 be bf d6 45 0d a5 99 82 bb b2 6a 73 c0 3e ab bd 56 32 f6 d2 1d ea 51 5b 6b 7e e6 d4 f7 d9 ff 00 0f fa 44 7c 1c ac 0a db 55 d0 d1 98 d6 b4 97 87 92 69 6c 06 52 fc 6c 80 77 fa ae b2 96 59 7d bf cd fa df a3 f4 7e 9f a8 c9 40 44 8c d2 1e e7 19 f5 08 c4 71 55 6d ff 00 a1 a0 8a 91 bd 01 e8 13 51 d4 72 30 7a 7b f3 71 58 71 dd e9 39 8d ae db 86 e6 86 7e 91 db aa f4 ef b6 cf f4 d5 ef fb 27 ab 8f 56 fa ff 00 56 a7 f4 97 b2 1b d3 b1 ba 86 5e 47 55 c9 a3 2e cc cc 5a 45 98 62 3d 13 63 45 79 15 b9 be e6 ee df e9 d5 b7 6f e8 ff Data Ascii: &])u7;]a_{l}J$e`4~3\ogHEjs>V2Q[k~D\|UilRlwY}~@DqUmQr0z{qXq9~'VV^GU.ZEb=cEyo
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 61 77 b6 fb 6b d8 d8 73 7d b5 fa 96 b6 af 5a f6 37 e8 31 fe b7 e8 90 db 9d d5 ad bc 13 9d 94 48 0e 20 9b ec 1c 0f a4 cd 8f 55 dd d3 b0 b2 4d 87 28 36 c1 73 fd 66 1c 72 45 8c 0f 6b 25 ef 74 3a 8d ae fe 73 63 fd 4f fa d3 fd 96 db c7 6d 4e 60 f4 f1 df 8e 36 3c 56 36 ee 67 b7 f9 14 4d 8d fa 5f a4 a9 fe 9d e9 0e 73 16 39 1c 72 89 1c 24 c4 c8 01 2d 7f e9 ca 2b 00 27 50 56 bf 3b ab b9 c7 7e 7e 58 68 89 02 fb 07 6f e4 bd 3d 39 fd 62 a0 cf 47 3f 2c 18 12 c6 dd 61 1c 78 17 39 ab 29 f6 e6 f4 dc a0 de a1 60 b7 1f 24 b9 d4 e4 37 5d bf ba ef 4f e9 57 4b d9 b1 fe 87 e6 7f 9e ae e4 75 dc 5e 9c cf b3 50 e3 6d af 68 17 d8 c0 22 b6 b9 9b 5c ca ed 6b fd f7 7b be 9f f8 3f e6 ff 00 4a a7 39 a2 71 71 e3 88 c9 7b 01 d5 55 a9 b2 53 37 3f ab 07 b9 ff 00 6f cb 24 8d 1d f6 8b 04 7f Data Ascii: awks}Z71H UM(6sfrEk%t:scOmN`6<V6gM_s9r$-+'PV;~~Xho=9bG?,ax9)`$7]OWKu^Pmh"\k{?J9qq{US7?o$
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 03 13 1e c6 e3 e4 b1 f7 62 bd af be f6 ba c3 ea 8d a5 af 73 4f a2 ea fd 5a f1 ec db fa 5d fe fd 96 7f a3 5c fd dd 33 a1 51 6e c6 ec 2c a9 df 6a b8 54 f2 01 a2 c6 b1 f5 7a 57 39 96 6f dc df d1 7a 7e b7 e8 aa 7d fe 9d 57 59 6a b2 33 40 4c e2 84 25 c5 20 38 a7 c3 c5 8f fe 97 a5 32 89 bb 3b 5b 74 66 d9 89 fa 06 b9 ad 6b 5b a3 5e 49 20 1f a2 79 f4 dd f4 fd 3f f5 7a a2 eb f2 a9 63 dd 75 ce 35 b3 77 b1 90 0b 5a 3d ce c6 f7 ba cf 59 ee 69 fe 77 fe d3 7f 37 ea 56 b0 9d 9a eb 8b b1 85 4e 38 ad 25 8d 34 82 d7 ec dc e2 c6 9d de ed 8f f6 7e 8f f9 1e a2 83 3a a5 cc 70 75 af 37 8d bb 7d 2b 1c e0 01 67 ef 40 da f6 b5 fb 3d 2f fb e2 64 b9 33 7a 57 88 ad ff 00 ef 58 f2 48 1d b4 7a 3a 2d 65 b9 18 ef 63 cb 69 b5 cc 67 a5 b5 ae 70 24 11 8e fb ec 1e ea 36 4f d1 af d4 ff 00 00 Data Ascii: bsOZ]\3Qn,jTzW9oz~}WYj3@L% 82;[tfk[^I y?zcu5wZ=Yiw7VN8%4~:pu7}+g@=/d3zWXHz:-ecigp$6O
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 57 ec 2b 11 e6 9a 2c b8 9c 78 d6 4a ba 0f 5a c1 43 45 47 f9 1f 60 2b 32 86 78 32 e3 12 15 1d 9e f6 4d 20 4f 04 b9 67 6b 44 d6 25 82 c5 aa 70 fa c3 bd 00 5d 0b d0 ee 19 d6 01 e0 3e 87 e0 7a 23 d2 d3 71 93 b2 41 71 d6 3d 66 fe 4f d4 c5 01 39 47 21 07 26 1e 13 32 95 91 34 01 2b a7 a1 37 bd b2 e6 30 82 75 62 7c 1f da 8f 27 73 c0 ea 96 c6 28 19 d3 12 42 31 50 b4 7c 9a 51 4a fd 72 fe 49 bd 6c 02 4c 11 b2 da a9 24 d3 2e a4 51 83 b3 e7 7b 65 db 64 f1 db 6c a9 57 74 91 a3 73 e6 7d 2a ed 4c 7d 8a 56 78 bd 2a 1c e2 8b ca 70 6b 5a 2f 35 36 6a 04 30 3d 1a d2 57 6b 7e 75 ca 77 9b 66 09 dc d3 1b cc b1 48 75 09 1c 0b 46 c6 00 c1 89 c4 71 19 bf 2a b9 c2 cd f2 f4 c5 ac a6 75 e9 aa 91 98 f6 e5 a7 81 01 84 7d a2 2b a5 68 c7 03 6c 18 e9 4d 10 0b 14 cc 40 1c d8 6a 2f 18 51 d1 Data Ascii: W+,xJZCEG`+2x2M OgkD%p]>z#qAq=fO9G!&24+70ub\|'s(B1P\|QJrIlL$.Q{edlWts}L}VxpkZ/56j0=Wk~uwfHuFq*u}+hlM@j/Q
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: db 3f 1b 18 19 49 70 1b 19 0b 2c 67 c4 7f 88 9d 58 16 18 f2 a8 0f bd 85 d8 e3 ac 3f 81 21 03 47 89 84 30 12 2c 68 b6 4b 60 f0 ce c1 d5 54 ed 19 72 75 1a af 21 38 51 58 f0 00 eb 1f 65 58 10 54 1d a2 ef 04 5e 5e 00 19 c7 84 de 30 c3 9e 31 34 44 b2 27 16 ff 00 d0 21 1c 46 80 2c 37 24 68 41 19 19 1a 3f f5 72 c7 11 f5 9e d2 a0 b9 21 0b 6d 89 e1 ec 91 32 36 da 99 7f 64 75 25 48 20 eb 6d bc 28 09 08 06 4a e5 b3 f4 39 a8 d5 a5 39 10 0d 81 01 66 88 68 21 d2 ba f1 1b c5 de 1d 0c 8c ec 70 53 81 46 16 09 88 ea 4c b2 79 0d bc 88 8d 49 f8 7d 83 ac 3a d6 c9 56 55 39 c1 40 d6 b0 ae b0 1d c6 74 b9 ec f2 a4 10 49 e2 a8 87 18 1d 46 e0 33 c8 03 b3 29 0a e8 32 59 19 b1 86 0c 8e 42 0b be 81 72 4e 3b 61 8c e8 02 8c 4a be 2e c1 42 41 f1 9a 20 4a 4a 0d 73 c4 77 5c 0e 64 55 7d af Data Ascii: ?Ip,gX?!G0,hK`Tru!8QXeXT^^014D'!F,7$hA?r!m26du%H m(J99fh!pSFLyI}:VU9@tIF3)2YBrN;aJ.BA JJsw\dU}
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: ac b0 87 9d 94 ac 91 15 97 c8 8a 34 6b f6 53 af eb 72 c4 11 fa 20 eb e6 78 a2 86 52 cb 35 9a d6 aa 5e fb 4b 52 67 b5 0f 69 4d 95 8a 95 62 47 1a 56 c4 98 85 56 3b d7 0c ec 14 6f 8f 92 30 ae 8a c6 e7 16 07 70 51 c6 02 32 0b 4f 0a ac f2 b3 c4 b5 ea 2f 2b 10 bd 5e b6 79 ed 35 08 61 eb ec bf 18 21 ec 56 af 5e 6e de f5 c7 66 25 92 d4 75 d6 34 87 ee d7 ab d7 4f 60 41 d5 26 41 5e ac 2d 25 94 af 1c e0 c8 d0 2f 1b 9a 40 1e 3c bf 21 55 35 c1 c5 ff 00 c9 68 32 89 6d 7d 1e 52 db 92 ad 2a b7 ac cf 27 61 5e fd c8 20 eb 6e 45 61 ea 76 f5 de 53 2b b2 96 88 2b e8 57 ea fd a2 f2 bd 5b 95 0c 72 ad df 52 cf d7 23 bd 79 80 33 58 11 8c 61 a0 ea e7 28 fe a6 25 ac 98 b6 60 c3 34 6c c1 55 da d5 e5 ad 8a 24 b1 24 51 30 ce d1 1d 6d 98 9c 86 54 19 d2 bb a2 76 f3 34 36 2a d2 47 6b d3 Data Ascii: 4kSr xR5^KRgiMbGVV;o0pQ2O/+^y5a!V^nf%u4O`A&A^-%/@<!U5h2m}R'a^ nEavS++W[rR#y3Xa(%`4lU$$Q0mTv46Gk
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 09 a7 2a f1 ba 22 8c 16 66 11 4d 35 8b 19 29 af 0c 10 fb 5a 46 1b 6d 1d 45 03 49 8f 13 21 e6 42 af 10 28 4a c9 6a eb 10 ad 35 2b 6f d7 48 62 bf 7e 46 af 56 42 cb 0c 77 a2 48 e4 75 9a 5e 90 c8 6d 32 5e ca af 3d c9 1f ae 05 2a 75 f2 fb 64 a3 03 21 86 79 ef 58 e8 65 96 2e da 9d 84 97 a3 85 2c cb 24 32 a4 df e3 aa b2 d9 ea 84 36 62 48 91 3b 5a 35 ec d5 ec 5c 41 6a 9a 5e b1 1c b0 c9 92 47 bc 24 93 fd 9c 5d f2 71 b2 3c 8e 3a 1a 38 17 00 d6 0d 1c 84 03 2f 32 23 ae ec eb 1a aa d7 92 29 55 a0 5b 2b 8d 73 9c 73 4a 48 3b 39 ac 19 ac d1 1f 1a c0 32 1a f2 4c 6a 2c f0 dd a7 7e b4 52 cf 6e cc b8 61 69 eb c7 05 98 cd 8e aa cc 76 69 75 50 ab b5 56 af 60 de b0 99 52 0e ba db cd 7e 9c 11 f6 95 ea 45 94 6d 49 00 92 ad 83 0f 59 6c 49 67 b1 b9 3b 65 c8 ee c9 23 21 52 17 02 e7 Data Ascii: "fM5)ZFmEI!B(Jj5+oHb~FVBwHu^m2^=ud!yXe.,$26bH;Z5\Aj^G$]q<:8/2#)U[+ssJH;92Lj,~RnaiviuPV`R~EmIYlIg;e#!R
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 18 66 49 44 5c 5a 64 f5 34 ab 04 e9 2b c4 b5 de e9 59 0c 6c 54 c9 04 fb f7 c3 5a 64 04 09 1d 5f 1a 56 2a 90 bb 9a b1 45 56 28 cd 7b 6f 3d 13 36 59 af 6a 9c 7d 15 48 ad b4 b4 24 a8 f5 ef 85 ec 24 d8 4b c2 79 52 75 db 50 95 72 fb 2c d6 9b 90 ca ee 16 62 97 dd e0 b8 63 b1 73 ae b4 8d e9 98 c7 4a eb 52 9a 4f f6 0e b4 63 ff 00 b0 f5 cc bd 95 ea d6 f2 05 42 20 8c f2 8a 25 e3 de 41 23 5c 5a f1 0a 2c 1c 62 1e 21 ca 91 46 ac 2d 2d 3a 29 5e b5 a6 48 0d f8 3e b3 75 73 92 fd 84 c7 e9 1b 7a ae bd bd 49 14 41 66 c4 e9 21 69 6d 3b c6 29 3b 49 1d 56 9e 35 92 48 c1 69 90 b3 40 be ed 13 10 40 d1 5a 95 6c 3c d2 ce 8d 49 38 ca d3 99 ab a4 50 89 aa 2c 51 47 34 af ed 66 31 97 96 19 2d 4f 34 09 34 d3 24 f1 f5 91 21 b7 72 85 aa cb 4a eb d4 af 1f 67 66 c3 a5 f9 56 58 ae c6 cf 67 Data Ascii: fID\Zd4+YlTZd_V*EV({o=6Yj}H$$KyRuPr,bcsJROcB %A#\Z,b!F--:)^H>uszIAf!im;);IV5Hi@@Zl<I8P,QG4f1-O44$!rJgfVXg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	62746	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	721	OUT	GET /wp-content/uploads/2022/07/010.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:55 GMT Accept-Ranges: bytes Content-Length: 156123 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 25 f7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 33 3a 34 38 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: %ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:23:48
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: e9 f4 be 8f d2 f1 9f e9 65 be c3 4d ae 0e 7d fb cf b3 f7 df e8 b5 ac a9 fb db ec fd 37 aa ca eb ff 00 07 62 d0 eb 9d 29 d8 79 75 52 1f 69 c7 b9 9e 8e 2b 44 bd fb 9c ed e7 6b 9c df 4f e8 1f f8 bf 4a aa 2a a3 ed 2a 86 3e 4b 72 bd 16 d4 df b5 be d6 07 b5 ac 90 eb 03 7e 9f e8 2b 0e 7f e9 3e 85 bb 7f 99 5a f9 1d 53 26 ca 86 27 51 6e 2e 33 89 24 b6 d7 bb 70 8d a4 fa 74 63 39 f9 18 d7 7b db f9 f4 29 33 e2 89 94 64 00 f4 dd 48 9f 93 8b d3 c5 10 ac 72 f4 91 23 5f 4d fe af 29 5d 15 5d d4 0f 4c 65 c0 0b 81 b1 af 7b 5c d7 12 39 f6 3b f9 af 6b 7f 99 d9 fe 09 6c e2 f5 11 5f 4c 7b 6b 19 59 2f c0 69 19 15 e3 bd b5 d2 c6 c9 fd 25 8e 6d 36 df ea 7f dc 8b 1f 6a cf c8 b7 a6 f5 bb 89 cc 7b ab 0d 68 db 95 b8 5a fd 8e 01 bb 6f 91 4b ed 7e df ce f5 2c ff 00 05 fa 45 0a 73 2c e9 Data Ascii: eM}7b)yuRi+DkOJ**>Kr~+>ZS&'Qn.3$ptc9{)3dHr#_M)]]Le{\9;kl_L{kY/i%m6j{hZoK~,Es,
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: f4 54 e1 3e 8b 1a 6b 0e 13 1e f7 bf df 6f bb fd 23 b6 2a 2c cb c4 fb 3b a9 7d 4c 16 ee 0e 65 87 57 88 1f 98 ed 36 ee fe aa d6 b9 b8 fd 66 8a 6a b2 c6 e2 be 86 16 d1 e8 b8 58 f3 b4 cb db 77 aa 2a 7b bd 8f f6 fb 94 6a e8 34 8c 1c ba 6f c8 ae 1a f7 56 db 80 0c ac 5a d0 d7 b9 96 6f dd 77 aa df 6f da 19 57 ab 67 e6 7f 83 51 7b f1 e0 07 20 31 97 14 6e 31 97 11 f5 7c 87 d1 f3 7f 75 70 c7 22 6e 3e a1 5b 97 3a be a3 9d 6e 3d 9b ad 6d 65 a1 ad 73 9d bb de 64 7a 7f cd ee 7d 9e 9b 5b b7 6b bf 46 b4 f1 ee ca a2 db 6a 75 be ad b9 14 91 65 b9 95 91 bd 85 bb 03 31 36 7e 96 a6 6d 77 b3 fc 12 c0 b8 d7 45 ed af 18 3e 82 d2 1a c0 09 b0 39 d0 d9 d9 b8 33 e9 4f ee ad 4b 7a 67 53 be 90 6c c8 aa ab 5c 1a d6 d3 61 77 a8 e8 d0 c1 a5 b6 b2 bf 6f f8 25 24 f9 61 3a 02 03 86 b5 f4 eb Data Ascii: T>ko#,;}LeW6fjXw{j4oVZowoWgQ{ 1n1\|up"n>[:n=mesdz}[kFjue16~mwE>93OKzgSl\awo%$a:
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 34 34 38 2d 62 37 62 66 2d 64 38 61 39 37 32 62 33 62 37 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 39 64 64 62 33 30 63 2d 62 66 32 66 2d 63 35 34 64 2d 61 62 35 36 2d 39 30 34 30 64 34 30 33 63 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 63 66 65 37 63 31 2d 31 65 31 33 2d 35 32 34 64 2d 39 39 39 30 2d 33 38 31 66 62 31 31 33 61 36 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 63 63 35 63 38 65 33 2d 39 34 64 39 2d 64 32 34 34 2d 39 62 61 31 2d 62 36 65 62 36 34 66 65 39 38 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 65 36 31 38 33 62 34 2d 62 30 65 31 2d 61 33 34 39 2d 39 66 33 Data Ascii: 448-b7bf-d8a972b3b7e5</rdf:li> <rdf:li>xmp.did:19ddb30c-bf2f-c54d-ab56-9040d403c492</rdf:li> <rdf:li>xmp.did:36cfe7c1-1e13-524d-9990-381fb113a6be</rdf:li> <rdf:li>xmp.did:4cc5c8e3-94d9-d244-9ba1-b6eb64fe983f</rdf:li> <rdf:li>xmp.did:4e6183b4-b0e1-a349-9f3
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: d7 33 17 93 a3 f6 f0 ba 3a 74 71 6b 57 9f 64 39 c7 6e 5b 8e 7a 79 4e 67 a6 4e 77 e7 f3 ee bf 5f 2c da 94 07 a3 e5 b3 07 9f a3 16 0e ed cd 99 cc 64 46 d4 b6 ba e4 55 ea e5 4a b8 59 2d 63 04 58 12 ca c1 bb b1 6c 62 c6 da 40 75 21 83 09 54 58 5c 41 a6 d1 22 ca 8a a8 e0 48 68 32 5d 10 5a a0 aa e8 22 4d 86 35 60 9c 48 c8 30 b9 1e a3 1a 50 a6 68 d3 34 97 65 93 57 0e b1 ab ae 7f 33 2e 8f 2a ef 9c cf bf 17 43 1a 6e 9c 6d f3 eb 46 77 65 32 33 01 fb 39 bd 2e 3c dd cd e3 27 9e ba 23 81 9d 33 b4 50 15 5a f0 1d 77 8f 8e 9f 3f 5d 5c ed d8 fb f3 d5 d1 e5 68 e4 b0 0d f6 f0 99 a7 3f 7c 5d 80 57 4f 36 3b cb ba ac 1d 0e 1b 99 ba 28 94 9b 99 bc d2 32 fe af 98 6e ea a0 5b 04 9b 00 38 a1 1b 74 a4 97 4b b5 d6 b8 39 30 d0 2d d0 51 96 73 40 e5 31 ca b7 42 09 ab a3 99 99 0d 02 31 Data Ascii: 3:tqkWd9n[zyNgNw_,dFUJY-cXlb@u!TX\A"Hh2]Z"M5`H0Ph4eW3.*CnmFwe239.<'#3PZw?]\h?\|]WO6;(2n[8tK90-Qs@1B1
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 3f 66 f1 14 78 5a e0 ff 00 b0 13 58 17 10 ff 00 02 d3 6f a3 79 8d 4e 5a d4 f3 a9 d8 5c 86 1b 49 2a ca 22 2e 0a d9 b4 74 d8 5c 84 58 e4 b1 ac 10 47 93 5d 6a 14 ae 63 ba a0 5b d0 ca ba 05 93 04 cd 20 1e 3c 00 6d 41 0e 0c 39 00 93 19 41 88 75 21 84 27 24 cc 46 52 67 a9 b1 ae 25 96 38 35 dc a4 25 88 c7 e9 91 09 13 69 98 56 60 7d 04 2a 4c 7a 4e cd 43 c2 09 8b cc fa d6 19 65 6c 08 ac 13 06 d9 64 2c 6b a8 67 d6 cb 39 eb 55 0a 44 62 40 b0 92 fa 1d b9 90 a1 53 9f ad 8f 93 89 5b 91 01 10 95 8c 57 26 2d 9a 41 62 19 b0 95 06 c8 00 42 09 98 31 d3 68 d5 fe 28 96 29 4b 9c 4d 95 86 3e b9 99 fa 01 35 02 17 9e 44 c8 33 08 b1 db 63 88 b8 11 19 60 71 08 c4 20 e4 02 65 8a c6 57 95 60 ea 63 28 24 31 36 2a e2 7d a6 65 8f 88 41 fa 11 14 b0 8c 5a 16 68 18 e7 20 cc 64 d4 be 12 00 Data Ascii: ?fxZXoyNZ\I".t\XG]jc[ <mA9Au!'$FRg%85%iV`}LzNCeld,kg9UDb@S[W&-AbB1h()KM>5D3c`q eW`c($16*}eAZh d
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: af 32 e7 d0 90 51 51 82 b5 58 06 b3 0b b6 50 8f 20 57 86 15 2d 20 f5 1b 39 db f6 2c 60 5b 27 c9 83 24 31 22 5d c9 ed 7b 79 42 c3 5b 06 2e c6 20 0c 2d 04 aa 52 d6 2d 7c f6 a4 af a7 d7 29 ed 6a e5 b7 73 ca a9 e7 72 29 6e 45 4e 53 62 37 20 34 93 cd ec a3 a2 aa 6d ea 14 f4 22 b3 b5 1d 15 25 d5 53 cc 6c bb ba aa a8 6e 35 57 6e 7a dd 87 c8 bd 89 42 06 07 4b cc ab f0 87 57 8d 5a 10 50 4d 00 81 4c d4 08 14 98 54 42 44 c6 15 b6 23 00 42 09 81 32 32 19 9a a7 53 ea b0 c4 5a 41 36 52 a0 f6 28 07 a6 97 26 da b6 16 58 c7 fc b2 bb 0d 72 cb 03 90 32 00 c4 1a eb e7 27 cb 31 02 1c cd 86 4b 2c f6 03 05 93 71 8c 9c 2a b1 82 bb 58 35 2d 16 96 d9 68 61 3d 49 9d 26 b6 60 a3 e4 0c 4d 50 37 e3 97 6f 03 19 24 18 3c 0c 86 98 cc d4 e0 97 11 48 24 ae 22 d8 e2 27 59 49 e9 e3 b0 b7 1a Data Ascii: 2QQXP W- 9,`['$1"]{yB[. -R-\|)jsr)nENSb7 4m"%Sln5WnzBKWZPMLTBD#B22SZA6R(&Xr2'1K,q*X5-ha=I&`MP7o$<H$"'YI
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: fb 28 07 fe cd 91 28 38 09 50 86 ea 84 4b 7a ed 96 21 ac a7 c8 54 2a 7e 85 bd 58 fe bc b3 a2 da cf 2d b4 97 3d 54 88 ea dd 36 dc 29 6a af 45 d8 bb 61 89 22 ae 47 e9 b9 92 ea 2b b7 41 2b ab a0 be 40 3e d6 ca 85 db a2 ce ca 5b a3 96 b1 d0 d6 1c da e3 54 60 57 5d c8 e6 f5 80 ee f5 65 d0 5f 5b a5 8c 00 08 8d 30 65 b6 28 44 22 0b 8d 87 d9 43 73 0b ed 6a 95 32 a2 ab c5 15 de 6b 5e ab 23 35 97 0f 59 03 72 23 12 c5 54 56 96 58 5c a9 54 5d 57 27 39 0e 04 56 71 11 5a e8 9c 08 0d d5 0a ac 54 75 b6 e6 66 52 e6 53 94 a8 bb 69 6d 2c 01 4b 43 52 da 96 bd ca 58 75 28 e0 14 38 53 de 04 3d 3d 76 41 51 c9 57 30 2d d1 b9 af 2a 3f 42 b0 b7 81 2c 6e 8b 9d d3 ac 84 ae b3 0d 38 0c fc d5 aa db 59 3f b7 d2 d0 f2 db 60 af 9e b5 81 6b 43 bd 8a 2c b6 95 8d 77 95 46 68 94 a9 9e a5 ac Data Ascii: ((8PKz!T~X-=T6)jEa"G+A+@>[T`W]e_[0e(D"Csj2k^#5Yr#TVX\T]W'9VqZTufRSim,KCRXu(8S==vAQW0-?B,n8Y?`kC,wFh
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 09 ec 75 29 87 03 20 f0 f3 fe cd 8e e7 3b 36 bb 90 77 56 80 80 7c 65 40 cb df 4a 8a fe 46 b4 4b eb a0 c5 b7 fc d5 db eb ac f4 55 68 e2 15 15 fd 91 5f 45 bc c3 7b 2e 4f 60 74 08 7a 28 6b 7b 7a 19 69 0e 19 59 91 9a 9a 8d a7 9f 9a ba 6d ff 00 63 d5 1b bb b4 cd 7a fa 9e 9f 8e a6 a2 97 25 50 7e c0 5f c8 b5 36 e2 1b 41 94 10 c3 46 d7 ce 9d 03 a6 ab 18 79 fd 3a c8 6e 24 58 a0 88 f9 c9 d9 5f 0c ce 8c ca 54 cf 04 31 13 26 60 99 5d 36 da 6b e3 a6 a8 cf 61 03 51 3c 67 cc f3 82 c6 17 69 ed 71 39 78 7b 6e 5a eb 4e 65 c9 03 20 8c 09 e7 5e 8a 98 aa 75 b2 c3 70 36 75 f7 dd ce 12 cb af af 22 55 b7 af b0 07 f8 ca 8b ea 2c b0 07 b2 36 55 29 3a f3 5a f4 b8 4b 55 6a a9 af 36 d5 d2 04 be c1 ce ff 00 2c e7 a6 d3 80 4e 84 2a ad 67 a3 45 1c f6 1b 66 32 1d 40 18 19 a8 8c d3 53 5c Data Ascii: u) ;6wV\|e@JFKUh_E{.O`tz(k{ziYmcz%P~_6AFy:n$X_T1&`]6kaQ<giq9x{nZNe ^up6u"U,6U):ZKUj6,N*gEf2@S\
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 71 75 bd 68 01 aa 2c b4 9b 4f e5 51 61 59 69 94 50 05 ee dd 97 76 5f eb 4e 6b 70 1e 1f e9 ed 50 22 c3 f7 3b bb aa 41 ac 96 9b bf e4 44 c8 69 6b 63 14 e7 42 b6 04 fb 65 a9 31 22 f4 f3 22 31 55 a0 54 4e 45 d5 e1 e4 4e 0e af fb 72 de 5a bc 57 47 56 fa 12 84 75 c8 35 ca b9 76 70 a6 1c 49 8f 5a a2 aa e5 f5 aa 6e a7 1b 34 55 42 db b4 ea ef 20 23 6e 91 74 ae de f0 a7 8c 67 19 80 aa 33 ad c8 5c 1d 9e d8 22 06 ee 7a 77 7c c8 57 bb fe 84 f0 31 ce 28 47 8e de 1d d4 d1 37 5d bd 76 ab a2 b3 b7 4d bf 2f 95 5a 4b 5d 1f fc 77 a0 01 d4 e3 74 72 a0 e2 de 69 27 4d 83 8d 5e c5 57 f2 ea 54 6e 6c 4c 88 d5 c5 77 77 71 53 07 34 54 1f 7a aa c9 d3 c9 16 6b 4f 22 10 86 88 35 d3 99 df ee 27 15 75 f9 42 dd fe 29 db 1d 21 6a 47 d4 98 53 d6 ab b4 41 0b 2b 62 58 55 38 d5 e1 44 f0 c5 95 Data Ascii: quh,OQaYiPv_NkpP";ADikcBe1""1UTNENrZWGVu5vpIZn4UB #ntg3\"zw\|W1(G7]vM/ZK]wtri'M^WTnlLwwqS4TzkO"5'uB)!jGSA+bXU8D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	62747	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	941	OUT	GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js?ver=8.4.5 HTTP/1.1 Host: www.campobahia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.campobahia.com/hotel/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	270	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 26 May 2024 20:37:03 GMT Accept-Ranges: bytes Content-Length: 321251 Vary: Accept-Encoding Content-Type: application/javascript
2024-05-28 05:15:31 UTC	7922	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 38 2e 34 2e 35 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 32 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 32 31 2c 20 32 30 32 32 0a 20 2a 2f Data Ascii: /** * Swiper 8.4.5 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2022 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 21, 2022 */
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 28 63 6c 61 73 73 65 73 2e 6d 61 70 28 63 20 3d 3e 20 63 2e 73 70 6c 69 74 28 27 20 27 29 29 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 61 72 72 61 79 46 69 6c 74 65 72 28 74 68 69 73 2c 20 65 6c 20 3d 3e 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6c 61 73 73 4e 61 6d 65 73 2e 66 69 6c 74 65 72 28 63 6c 61 73 73 4e 61 6d 65 20 3d 3e 20 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 63 6c 61 73 73 4e 61 6d 65 29 29 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 20 20 20 20 7d 29 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 61 74 74 72 28 61 74 74 72 73 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 69 66 20 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 74 79 70 65 Data Ascii: (classes.map(c => c.split(' '))); return arrayFilter(this, el => { return classNames.filter(className => el.classList.contains(className)).length > 0; }).length > 0; } function attr(attrs, value) { if (arguments.length === 1 && type
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 70 72 6f 70 73 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 2e 63 73 73 28 7b 20 77 69 64 74 68 3a 20 27 31 30 30 70 78 27 20 7d 29 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 74 68 69 73 2e 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 63 6f 6e 73 74 20 70 72 6f 70 20 69 6e 20 70 72 6f 70 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 5b 69 5d 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 20 3d 20 70 72 6f 70 73 5b 70 72 6f 70 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 Data Ascii: props); } else { // .css({ width: '100px' }) for (i = 0; i < this.length; i += 1) { for (const prop in props) { this[i].style[prop] = props[prop]; } } return this; } } i
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 0a 20 20 20 20 74 72 69 67 67 65 72 2c 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 20 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 24 31 2c 0a 20 20 20 20 6f 75 74 65 72 57 69 64 74 68 2c 0a 20 20 20 20 6f 75 74 65 72 48 65 69 67 68 74 2c 0a 20 20 20 20 73 74 79 6c 65 73 2c 0a 20 20 20 20 6f 66 66 73 65 74 2c 0a 20 20 20 20 63 73 73 2c 0a 20 20 20 20 65 61 63 68 2c 0a 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 74 65 78 74 2c 0a 20 20 20 20 69 73 2c 0a 20 20 20 20 69 6e 64 65 78 2c 0a 20 20 20 20 65 71 2c 0a 20 20 20 20 61 70 70 65 6e 64 2c 0a 20 20 20 20 70 72 65 70 65 6e 64 2c 0a 20 20 20 20 6e 65 78 74 2c 0a 20 20 20 20 6e 65 78 74 41 6c 6c 2c 0a 20 20 20 20 70 72 65 76 2c 0a 20 20 20 20 70 72 65 76 41 6c 6c 2c 0a 20 20 20 20 70 61 72 65 6e 74 2c Data Ascii: trigger, transitionEnd: transitionEnd$1, outerWidth, outerHeight, styles, offset, css, each, html, text, is, index, eq, append, prepend, next, nextAll, prev, prevAll, parent,
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 77 69 64 74 68 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 63 72 65 65 6e 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 6e 64 72 6f 69 64 20 3d 20 75 61 2e 6d 61 74 63 68 28 2f 28 41 6e 64 72 6f 69 64 29 3b 3f 5b 5c 73 5c 2f 5d 2b 28 5b 5c 64 2e 5d 2b 29 3f 2f 29 3b 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6c 69 6e 65 0a 0a 20 20 20 20 6c 65 74 20 69 70 61 64 20 3d 20 75 61 2e 6d 61 74 63 68 28 2f 28 69 50 61 64 29 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 2f 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 69 70 6f 64 20 3d 20 75 61 2e 6d 61 74 63 68 28 2f 28 69 50 6f 64 29 28 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 29 3f 2f 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 69 70 68 Data Ascii: width; const screenHeight = window.screen.height; const android = ua.match(/(Android);?[\s\/]+([\d.]+)?/); // eslint-disable-line let ipad = ua.match(/(iPad).OS\s([\d_]+)/); const ipod = ua.match(/(iPod)(.OS\s([\d_]+))?/); const iph
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 65 6e 74 73 41 6e 79 4c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 69 6e 64 65 78 2c 20 31 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 65 6c 66 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 6f 66 66 28 65 76 65 6e 74 73 2c 20 68 61 6e 64 6c 65 72 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 69 66 20 28 21 73 65 6c 66 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 20 7c 7c 20 73 65 6c 66 2e 64 65 73 74 72 6f 79 65 64 29 20 72 65 74 75 72 6e 20 73 65 6c 66 3b 0a 20 20 20 20 20 20 69 66 20 28 21 73 65 6c 66 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 29 20 72 65 74 75 72 6e 20 73 65 6c 66 3b 0a 20 20 20 20 20 20 65 76 65 6e 74 73 2e 73 70 6c 69 74 28 27 20 27 Data Ascii: entsAnyListeners.splice(index, 1); } return self; }, off(events, handler) { const self = this; if (!self.eventsListeners \|\| self.destroyed) return self; if (!self.eventsListeners) return self; events.split(' '
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 62 4b 69 74 54 72 61 6e 73 66 6f 72 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 73 2e 72 6f 75 6e 64 4c 65 6e 67 74 68 73 29 20 73 6c 69 64 65 53 69 7a 65 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 73 6c 69 64 65 53 69 7a 65 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 53 69 7a 65 20 3d 20 28 73 77 69 70 65 72 53 69 7a 65 20 2d 20 28 70 61 72 61 6d 73 2e 73 6c 69 64 65 73 50 65 72 56 69 65 77 20 2d 20 31 29 20 2a 20 73 70 61 63 65 42 65 74 77 65 65 6e 29 20 2f 20 70 61 72 61 6d 73 2e 73 6c 69 64 65 73 50 65 72 56 69 65 77 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 73 2e 72 6f 75 6e 64 4c 65 6e 67 74 68 73 29 20 73 6c 69 64 65 53 69 7a 65 20 3d 20 Data Ascii: bKitTransform; } if (params.roundLengths) slideSize = Math.floor(slideSize); } else { slideSize = (swiperSize - (params.slidesPerView - 1) * spaceBetween) / params.slidesPerView; if (params.roundLengths) slideSize =
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 70 61 72 61 6d 73 20 3d 20 73 77 69 70 65 72 2e 70 61 72 61 6d 73 3b 0a 20 20 20 20 63 6f 6e 73 74 20 7b 0a 20 20 20 20 20 20 73 6c 69 64 65 73 2c 0a 20 20 20 20 20 20 72 74 6c 54 72 61 6e 73 6c 61 74 65 3a 20 72 74 6c 2c 0a 20 20 20 20 20 20 73 6e 61 70 47 72 69 64 0a 20 20 20 20 7d 20 3d 20 73 77 69 70 65 72 3b 0a 20 20 20 20 69 66 20 28 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 6c 69 64 65 73 5b 30 5d 2e 73 77 69 70 65 72 53 6c 69 64 65 4f 66 66 73 65 74 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 73 77 69 70 65 72 2e 75 70 64 61 74 65 53 6c 69 64 65 73 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 6c 65 74 20 6f 66 66 73 65 74 43 65 6e 74 65 72 20 3d 20 Data Ascii: params = swiper.params; const { slides, rtlTranslate: rtl, snapGrid } = swiper; if (slides.length === 0) return; if (typeof slides[0].swiperSlideOffset === 'undefined') swiper.updateSlidesOffset(); let offsetCenter =
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 70 65 72 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 63 6f 6e 73 74 20 70 61 72 61 6d 73 20 3d 20 73 77 69 70 65 72 2e 70 61 72 61 6d 73 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 6c 69 64 65 20 3d 20 24 28 65 29 2e 63 6c 6f 73 65 73 74 28 60 2e 24 7b 70 61 72 61 6d 73 2e 73 6c 69 64 65 43 6c 61 73 73 7d 60 29 5b 30 5d 3b 0a 20 20 20 20 6c 65 74 20 73 6c 69 64 65 46 6f 75 6e 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 6c 65 74 20 73 6c 69 64 65 49 6e 64 65 78 3b 0a 0a 20 20 20 20 69 66 20 28 73 6c 69 64 65 29 20 7b 0a 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 73 77 69 70 65 72 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 77 69 70 65 72 2e 73 6c 69 64 65 73 Data Ascii: per = this; const params = swiper.params; const slide = $(e).closest(`.${params.slideClass}`)[0]; let slideFound = false; let slideIndex; if (slide) { for (let i = 0; i < swiper.slides.length; i += 1) { if (swiper.slides
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 73 69 74 69 6f 6e 45 6e 64 0a 20 20 7d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 6c 69 64 65 54 6f 28 69 6e 64 65 78 2c 20 73 70 65 65 64 2c 20 72 75 6e 43 61 6c 6c 62 61 63 6b 73 2c 20 69 6e 74 65 72 6e 61 6c 2c 20 69 6e 69 74 69 61 6c 29 20 7b 0a 20 20 20 20 69 66 20 28 69 6e 64 65 78 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 20 20 69 6e 64 65 78 20 3d 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 70 65 65 64 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 20 20 73 70 65 65 64 20 3d 20 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 70 65 65 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 72 75 6e 43 61 6c 6c 62 61 63 6b 73 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 20 20 72 75 6e 43 61 6c 6c 62 61 63 Data Ascii: sitionEnd }; function slideTo(index, speed, runCallbacks, internal, initial) { if (index === void 0) { index = 0; } if (speed === void 0) { speed = this.params.speed; } if (runCallbacks === void 0) { runCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	62749	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	721	OUT	GET /wp-content/uploads/2022/07/011.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:37:59 GMT Accept-Ranges: bytes Content-Length: 802799 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 26 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 33 30 3a 31 36 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: &@ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:30:16
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 00 e7 3f f4 5a 6a 31 7a 95 38 76 39 f4 b1 98 8f b4 5c f7 35 b1 fa 4b 0b 2b ad ac b1 ce 7b 9d ee a7 dd 56 f7 ff 00 83 b6 c4 c8 8b 31 36 75 d5 42 24 1b 6d f5 0a 5d e9 62 3c 56 1f 5c d8 d7 02 61 de e0 dd be 9f e6 7b 3e 97 fa 4f fc 11 73 9d 5e ac 6a ac f4 cd ed ad ae 70 73 00 6c ec 86 d3 fa 5a ff 00 35 ad 6e ed 9e 9f fa 2f e5 d6 ba 4e a9 d3 e8 cb c7 c3 ba eb 45 42 83 73 58 d2 d7 12 ed e2 bf 73 3d 26 fb 7d 17 33 7f bd 67 33 ea ff 00 4b 79 df 66 66 43 9f 03 7b 19 53 65 b0 df 77 e9 6d 77 bf 6f b7 6a 6f 31 93 18 99 8c a7 18 91 46 89 17 b7 65 0a ea 5c ee 9b 9d 5b d8 fa c5 06 d7 58 08 b0 30 3d ce b0 96 c1 67 ac d1 b9 8e da dd b5 57 fa 26 7f 2d 0f 1b a3 75 4a 85 cc 34 b6 a2 2c ad f5 3a fb 1a c1 0d 6e c6 d6 ef 52 c6 5f fa 36 b9 ff 00 42 bf 51 75 fd 39 fd 37 06 b1 5e Data Ascii: ?Zj1z8v9\5K+{V16uB$m]b<V\a{>Os^jpslZ5n/NEBsXs=&}3g3KyffC{Sewmwojo1Fe\[X0=gW&-uJ4,:nR_6BQu97^
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 7a 79 54 35 ee 30 d6 bd c2 a7 13 fb a1 97 7a 6e 72 16 47 d5 e6 7d 2a dd a1 e3 b8 fb d3 0c 66 3c 54 26 1f 33 77 50 ea 38 39 34 dc ea 5d 86 da 80 6b 99 b5 cf aa c2 46 db 4d be a3 b6 3f d6 fd d6 fb 3f d1 ae df a6 f5 c7 75 1e 9e da aa b0 db 86 36 39 85 c2 1d 51 66 ea 9b 85 6e cd de a5 8c 6f f4 6d bf a4 f4 3f 9f b3 f9 84 f9 3d 07 21 b3 b0 48 4b a3 61 bf 08 e4 31 c1 d4 32 c7 35 ce 6b 1d e8 87 b8 07 7f 38 ea b6 5b 6f fc 5b 5f b3 fd 22 30 07 88 0a a4 c8 f1 44 82 e9 74 9c bc 5c 0c ab fa 85 ec b1 8d 15 40 fd 13 9c 5d b4 ba cd be d6 3b 63 77 55 fa 47 bf d8 ca bf 71 1f a4 b5 8c c1 c6 60 35 e6 3e 9a bd a3 0e c6 d8 ca fd 6f d2 5b e9 3a b1 6b 9a fb 5e d6 55 eb d5 5e cc 7f e6 68 f4 eb fe 7b 23 af e3 b6 ce 8b 98 31 e2 a7 b8 31 a1 c0 b8 e8 fb 19 5d b5 9f de ae da 9d b5 eb Data Ascii: zyT50znrG}*f<T&3wP894]kFM??u69Qfnom?=!HKa125k8[o[_"0Dt\@];cwUGq`5>o[:k^U^h{#11]
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 4c fe dd 8f 09 79 2f 25 94 b0 97 92 f2 5e 4b 09 79 2d 92 c2 5e 4b c9 79 28 a1 20 f5 7b e3 e4 89 d0 c1 96 5b c5 91 1d 1a fe 7d f4 36 5f 33 60 c8 ef 83 8d 5b 4a 76 7f 36 6d b9 7c fd 7d 1e bd da aa 4b f8 8d d8 ec 8f 52 7a 62 9a 3b fa f4 26 b0 35 7f 8c 49 1f 3e 84 a4 ac 9f 76 c7 66 da ce c4 0f a0 60 8f 11 d6 91 aa cc 27 af fd 6f 5b 53 db 16 bb cd 8c 9e d3 d7 3c d1 ca 8e 30 b6 32 ff 00 90 37 5a d6 a1 4b 8e 63 cc d7 92 16 77 6c 91 c7 8d 71 e1 ef 49 53 cc 43 56 ac 42 d2 d9 2d 52 c2 59 4b e3 63 f2 c7 de ab bf dc f2 35 a9 f6 5e 6e 72 fc 5f a2 0d 95 d4 44 bf 62 c7 55 ef d1 35 0c f7 a9 d0 cb b6 54 cc ed bd 65 ef 09 9f be 2a 36 4d aa 85 26 a9 9f 81 e5 4b 90 cf 8b 7d 55 df cd be 7b 60 d7 4d 2b 30 4c 8a 46 ce b6 ac 2e c9 7c e3 56 13 1b 7f 58 fe 81 50 cc fa 0e 71 c4 9a Data Ascii: Ly/%^Ky-^Ky( {[}6_3`[Jv6m\|}KRzb;&5I>vf`'o[S<027ZKcwlqISCVB-RYKc5^nr_DbU5Te*6M&K}U{`M+0LF.\|VXPq
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: f7 b0 1f a9 bd e4 31 0a 3a 92 9d cf 3e d3 14 3c 53 21 22 5e d0 d9 29 e9 ec 44 86 49 60 71 28 4f 69 c6 80 79 b5 a6 86 21 6b b3 75 ff 00 d9 42 10 9c 4a c1 38 f2 40 53 94 92 85 a3 ee 82 b0 77 c1 5f 77 55 58 10 83 99 dd 60 d2 82 e3 96 c7 1c 30 a5 94 31 c7 01 48 de 71 94 55 2a 73 d8 37 ea ab 69 42 69 17 42 45 de 30 2d 45 e7 a0 6c 1f 2a ea 30 5c 8e bf b2 08 c4 e1 77 6c 69 08 4c 2f a2 b1 9e fe 51 7e cb c8 22 54 72 53 d5 c6 ca 7a 7b e6 7a 1d 07 d3 19 f8 04 d9 ee 29 02 53 09 93 bc 4b 40 86 ab bb f3 fe f2 c8 3f 42 68 fb c9 cc 33 be 97 98 4b 5e bf 7e 33 c9 79 2f ce 0f 13 1f 34 b5 4b c9 6c 97 92 d7 ab 6e f3 ba e9 1a 9f e6 9c 6f 4d c0 e7 aa 59 5e 77 5d 27 d1 9e 93 ca c1 17 1e 5e ff 00 48 de 12 f3 9b d6 ae e7 14 88 12 04 ba 40 9f 15 c2 b2 ae 3a cd 2c 51 f4 5a 74 4e be Data Ascii: 1:><S!"^)DI`q(Oiy!kuBJ8@Sw_wUX`01HqUs7iBiBE0-El0\wliL/Q~"TrSz{z)SK@?Bh3K^~3y/4KlnoMY^w]'^H@:,QZtN
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 2c bb a7 01 67 d4 d6 8e c2 3f d3 4d 70 1e 30 7c 55 f7 ca ba b3 ef be a2 8f 11 48 2f 08 cc 77 55 28 14 ee fc 84 6a b1 55 d3 14 49 33 92 f2 c2 7b 51 60 e2 47 0a 46 1e a1 34 13 24 4a 84 1d 9d 5b 73 47 62 da 81 62 02 de 11 36 35 40 b4 79 a8 fd ea 1e 48 fe f7 ca 2c a2 77 4a 74 2b 93 c7 c6 ae ca ba 1a 29 31 23 a3 1e 66 07 b0 19 e2 fe 66 49 49 b0 9a 52 fb 28 f5 43 f1 6f d5 2f af a2 64 e6 0f a0 f8 e3 a7 f3 b7 d9 50 94 e1 d5 97 b9 b4 d9 a3 53 be 0a f2 c3 ab fc f7 e8 8b f4 ab e0 aa 54 f2 9f 51 a8 0f 98 6d ac 43 c7 6e 6c 0f 75 78 e6 85 91 0a 25 a5 39 7b fb df 48 85 15 68 0a 4b 1e e9 5f ae 8e 3e c4 4c 73 a6 11 1d e6 16 76 28 e2 a2 16 96 74 4d b0 d6 15 ea a3 4b 7f 33 5c bd 24 06 23 c3 9c b6 cf 1a 51 e8 12 38 fe c5 59 10 bd 6c a7 21 75 c6 b7 8e 43 3c 26 bf c5 25 60 31 Data Ascii: ,g?Mp0\|UH/wU(jUI3{Q`GF4$J[sGbb65@yH,wJt+)1#ffIIR(Co/dPSTQmCnlux%9{HhK_>Lsv(tMK3\$#Q8Yl!uC<&%`1
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 5a 49 d0 bc 7d ef 25 1f 64 c7 07 50 d3 1a d6 f7 64 26 b6 53 36 14 6d 32 78 a8 2a b2 04 e4 1e 10 99 d6 37 b0 b9 f2 a7 37 4f 34 62 c8 70 cb 5d 01 51 bc 58 d4 a4 25 33 ce 2f 49 33 f3 29 52 74 3c 52 5a c5 cf 4d 33 92 fe 37 64 c4 9f cd 38 d1 ce 1f 4c fe e7 c2 ba 37 8d 35 67 71 92 2d d1 bc e6 b7 4d 48 d4 31 1f 71 0e d5 a8 be b8 71 64 2b ab fe 81 ec 8e c9 19 5a 4c 40 83 2c 7c 3d 38 1a 55 a5 7a ee d7 86 8f 85 f1 3c 0c 3c 20 05 89 31 e6 e3 37 7a 49 10 b5 de 33 8e 4c 33 79 c1 24 3b c2 c4 8b cc 3e 3b 60 79 00 bc ea 33 a3 f9 16 f1 b0 02 c8 80 b9 94 70 75 32 3d 75 83 47 d8 c8 74 34 13 c8 9d 51 49 fc f0 e6 41 b5 d4 b1 1c c6 29 31 17 09 01 14 44 0f 6d 6b 49 51 8f c5 75 8a 42 d4 26 82 b2 43 f9 a7 53 ce 29 40 32 a2 aa 65 73 1b 2a 86 ee 05 79 c3 21 e9 08 49 4c 4a 8c c7 8f Data Ascii: ZI}%dPd&S6m2x77O4bp]QX%3/I3)Rt<RZM37d8L75gq-MH1qqd+ZL@,\|=8Uz<< 17zI3L3y$;>;`y3pu2=uGt4QIA)1DmkIQuB&CS)@2esy!ILJ
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: cd 44 1c 8f 35 47 05 f9 95 75 8d 95 7d 36 51 29 d7 ba ca 62 02 56 c1 70 e2 5f e2 b0 48 5c fe 8a 0d 75 fa bc 84 81 2b 07 1c 89 e6 0d 1d 5b 4a 61 b2 5e 19 d7 2b df 87 16 9f 65 22 d6 71 df 53 4e 1f bd 08 a4 4e b3 9c 2c 89 b2 63 5c 81 2c d6 9a 5c f2 8a 51 1c f7 b9 e9 fe 37 2b bc c0 67 c9 27 23 96 02 c5 82 f6 d6 ac 43 22 b1 e4 41 b8 2d 45 17 fa fe a8 9c 7a aa 39 1e ee 2b 95 7f cb 54 45 e3 7f a1 55 ad 57 3d 10 8f 5f ab 62 a8 91 00 47 c7 56 39 5b 03 32 0c c3 cf 63 a1 8e 26 5d 55 2c c6 16 51 98 c3 b1 25 ab df 0d af 64 d8 84 25 7c 72 be ed 91 de 3c 8d 31 d1 57 cc 91 79 36 6e 41 10 39 04 f9 61 39 c4 68 70 85 36 6a 08 f9 16 23 12 f2 3c c3 d9 d7 b2 34 99 16 77 75 27 05 a8 33 cc cf 1a c1 aa 71 7d 9f 92 e5 33 21 a7 c8 32 81 df 26 64 72 56 33 62 41 95 67 2f 52 60 b3 71 Data Ascii: D5Gu}6Q)bVp_H\u+[Ja^+e"qSNN,c\,\Q7+g'#C"A-Ez9+TEUW=_bGV9[2c&]U,Q%d%\|r<1Wy6nA9a9hp6j#<4wu'3q}3!2&drV3bAg/R`q
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: ad 7a 73 fd 3d 91 39 ec 8b c7 3d 89 c4 46 b9 05 ea d6 90 ea 35 01 d4 8b ec d5 e2 a2 3d 31 ea a2 12 38 e3 30 6c 8e b5 2e e2 49 0a 71 27 c4 f0 f7 56 99 65 c6 80 e0 44 33 43 78 d8 b1 e4 a2 63 a1 29 24 63 62 42 4a a4 14 77 0e d2 50 d5 6e 0f e1 d9 03 17 8f b5 2b df 1c aa 61 38 ea 3e 3c 9f 2a f8 4e 2a 2f f9 3e 9f 27 1d 1d ec 6a 1a 32 2b c7 14 ce 95 41 04 88 5c 5c 2f 79 31 83 35 ae a8 b6 0b 09 f7 71 84 d9 0d 2b 98 f7 71 b2 ed 51 7f 90 92 2e 25 e0 d3 83 b2 0a 71 ee 19 38 e9 a6 13 bf 9a 94 c7 32 ed 3d 63 db c7 98 b6 a2 34 ae 62 f2 5a c8 c0 3f ca 05 ff 00 e0 55 f9 13 e3 6a a2 3d cd e2 4c 23 52 21 7e 43 93 e2 3f 0e d7 03 84 31 d1 44 a7 21 05 2a 63 24 c5 14 29 63 95 13 c3 e2 3b e2 68 65 13 c4 83 30 4c 8e 68 c6 69 9a aa c1 18 5f 2b 0f 33 cc b2 39 8d 6d 84 66 f0 f3 5a Data Ascii: zs=9=F5=180l.Iq'VeD3Cxc)$cbBJwPn+a8><N/>'j2+A\\/y15q+qQ.%q82=c4bZ?Uj=L#R!~C?1D!*c$)c;he0Lhi_+39mfZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	62748	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	733	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-05.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:02 GMT Accept-Ranges: bytes Content-Length: 132713 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 20 69 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 36 3a 31 30 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: iExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:06:100
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 6e bf d2 b5 9b bf 4b bb 67 a5 63 13 48 f4 9f 0d 65 6b a3 b8 d3 7d 9b 17 36 cb 2d 26 9f 4e c7 88 79 74 07 16 b4 01 b5 c5 cc f7 b9 8f 76 ff 00 4d df e8 7f 4b fe 16 a4 1b 5b 75 90 5a e7 d6 e7 49 73 4b 4e a4 7b 47 b1 e3 f3 f6 fd 24 f8 95 e7 db 99 bf 2f 3c b5 83 61 2d 76 25 60 fa 86 37 57 4f a4 71 eb fe 6f 77 e9 6f f5 bf e0 15 9e b4 6d 1d 58 e2 55 ea 3b 1c 55 53 9b 73 e4 4b 9e 1d ea fe 95 ad d9 ed 67 a3 ec fa 15 a8 65 8f d1 ee 5d c4 9a 67 86 4f 57 06 d2 02 cf 93 5a 9c 5b a3 76 43 cc 11 0e 97 16 c8 23 8d ac 23 f3 57 13 9f d2 19 d3 b2 9f 8f 90 0b ab 04 bf 1d cd 3f 4e b2 7d 96 35 d1 fc e3 3f c2 35 df 9e bd 0f a7 33 a4 fa 99 2d ea 81 cf 6b 7d 3f 42 1e f0 64 ef f5 36 ba bf 47 73 7f 9a 50 cb c5 c2 b4 66 10 fc 66 f4 e9 68 a1 b9 56 b1 af 2d db 5b ae d7 27 dd b3 d7 f6 Data Ascii: nKgcHek}6-&NytvMK[uZIsKN{G$/<a-v%`7WOqowomXU;USsKge]gOWZ[vC##W?N}5?53-k}?Bd6GsPffhV-['
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 50 c4 af 2c 86 fa 44 b8 b4 03 a8 00 fd 28 6f e6 b5 fe df eb ff 00 84 56 6f e8 59 d5 51 be c7 56 5a 18 1c 49 76 d2 27 56 b1 ed 77 fc 21 fc cf cf 54 6c ea 24 56 de 98 f6 91 b2 5a c7 96 16 b1 cd 87 58 f6 9f de b1 af 6d 8a 0c b9 c4 62 25 0f 57 aa 31 95 7e 88 93 77 97 e4 a5 29 4a 19 84 b1 9f 6e 72 c5 7e 9e 3c 90 e9 ea f9 d6 de 18 1c 43 5a c7 c1 05 ae f7 69 3f 45 ed 3b bd bb 9b fb 89 e4 3d c2 08 60 d2 03 a5 d2 01 f7 6b ef fc ff 00 ce df ff 00 6d 22 bd 9b 4b 2b 90 2c 63 43 9f 22 4f a8 7f 48 7d df 9e ea f7 57 53 50 4d 2f 0d 6e f2 1a c7 8e 75 80 67 67 d2 6e ed 8e 6e df a0 a6 8c 81 aa 3b b5 32 c2 50 b0 41 f4 ea 7f ab fa 3e a5 c6 87 69 f7 02 00 82 04 c8 10 1b 63 6b 1f cd 7f 25 54 8a c6 4d 0e 6b dd b5 cf b0 b3 74 9d 5e 27 4d 5b ed f5 03 98 f7 b7 fe 9a d5 e9 f8 47 2e Data Ascii: P,D(oVoYQVZIv'Vw!Tl$VZXmb%W1~w)Jnr~<CZi?E;=`km"K+,cC"OH}WSPM/nuggnn;2PA>ick%TMkt^'M[G.
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 04 ea 31 3a 02 65 d6 26 94 c1 9b 60 67 06 95 27 09 eb f9 3e d4 d5 d1 f6 68 d8 98 1c ab 88 30 38 5c c6 10 e0 09 5d 4f 1f 7a 4a 43 ad 68 00 f8 42 c0 c4 10 30 26 d8 83 1e 99 79 25 ee 78 e4 fb b9 3b 8f 5f 1d 5f 3f 1f a1 94 ad 63 91 43 01 41 ca 21 d0 23 e1 6e fc dc fa 3a ab 92 6b c0 60 41 41 22 31 20 07 99 ec fa 37 46 ed c8 4e 9c a7 85 59 d2 e6 c5 5f 59 2e ab 60 a4 9d 58 65 46 cb 96 aa ba c2 a5 65 26 78 b4 68 42 94 44 54 ae 59 b8 24 ce 31 3f 73 c2 f7 e6 9f 15 cd c4 60 e1 94 1d 8c 18 18 e5 08 c4 50 da 10 38 27 a9 84 2d 84 cf 85 cd 85 27 03 1c 6f 4b 93 d7 96 9e 0f bd c4 79 1e 97 3f ac 53 6d 5b 6c 0c 40 06 10 03 65 18 e8 f8 f8 74 c3 9f 44 65 02 94 6a 5b 40 94 d1 31 8d 35 8c f2 b4 be c1 07 bf 11 c3 db e6 9e 6d 15 b5 9a b9 5d 64 b2 d6 c9 2e ac a3 6d 62 ec d1 32 58 Data Ascii: 1:e&`g'>h08\]OzJChB0&y%x;__?cCA!#n:k`AA"1 7FNY_Y.`XeFe&xhBDTY$1?s`P8'-'oKy?Sm[l@etDej[@15m]d.mb2X
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 38 d7 37 54 bd 0e 5d 38 e7 6e 78 bf bd f3 3f 47 d7 1e 2f d0 fe 3b ac fd 8f 7e 39 ba 63 f6 3d f8 e6 3f 63 1f 8e e3 f6 3d f8 e6 3f 62 df 8e e3 f5 bf 9e f8 5d cb 7f 69 f5 1f 91 ec eb f5 b3 f9 1e eb cf f5 cf 83 f9 fd 8e 9f 65 4f 89 de 6e bf 71 2f 8c c9 f6 fe b7 e6 5b af 3f d4 87 e5 db ae 3f 56 3f 94 6d 4f d4 eb f9 3e 97 f4 f9 7e 6b b0 fd 27 8b e0 f6 6f df 9f cf f5 7d a1 f8 ac 9f 68 3e 33 4b f6 fd 5f 9f 6c df b9 f3 3e 67 6a 7d 1f a1 f1 99 7e cb d0 fc f7 1e f2 f8 7b 53 eb fc 1f 3b 59 f5 df 41 f9 8e 8f d1 3c cf 8e d1 ef f5 7c b6 e8 fa 3a 7c c6 c5 fb 8b 7c 0e e7 bf d0 13 e0 b7 5c 7e 9e bf 99 6d 4f d4 7e 57 e6 37 2e 9f 59 7f 8c dc 7a 7d 97 4f c2 6d 67 ef fb 3f 34 de af 1f ea b5 fc 97 37 f4 36 f9 8d e5 f5 fd 8f 6f c0 e9 3f 45 e5 f8 4d bc fd af ad f9 a6 df 3f d2 e1 Data Ascii: 87T]8nx?G/;~9c=?c=?b]ieOnq/[??V?mO>~k'o}h>3K_l>gj}~{S;YA<\|:\|\|\~mO~W7.Yz}Omg?476o?EM?
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: d4 c0 b8 85 46 71 00 9a cd 60 49 81 35 26 14 f3 35 f1 af 8d 21 4c 0c 42 26 b9 98 cc d7 13 5c cd 4c 0b 35 98 80 43 0f b5 7f e1 01 84 fa 66 66 66 77 72 68 eb 32 88 4d 2a 59 f2 96 1a f3 5e ad 16 f5 58 ae ec 17 a8 6c 29 c1 4c ba f7 a8 5d f6 75 b0 fe 52 b2 57 d9 74 3d 8b 74 a0 f8 57 a9 50 1f 0c 80 b3 82 56 00 32 32 0b b3 4a d1 38 df e3 35 28 f5 b4 51 c4 7e 6d 13 e3 2c 20 94 3a c0 e0 b3 3b 29 5c 60 b1 62 3c c6 55 80 e2 68 95 87 40 61 6f 0c 08 01 c5 ac 0e e0 56 32 58 34 75 28 39 75 60 5b 3e 32 a3 33 f6 cc 1e c6 52 81 cf f1 eb 00 b4 7c 3b 9c 2c b6 b1 b6 33 10 89 95 cb 27 80 b1 0a 6a 30 84 d6 49 50 b6 13 46 c6 da f8 cd 75 2b 2f 0a 1b 2b a3 01 a9 56 3f c7 50 a7 aa 82 3f 5f 50 2a 24 b5 28 08 5d 8b 57 5e 16 b4 c3 2d 58 e3 ac 1b 2a 5c 52 73 59 9c 79 68 7f 0b b0 52 80 Data Ascii: Fq`I5&5!LB&\L5Cfffwrh2MY^Xl)L]uRWt=tWPV22J85(Q~m, :;)\`b<Uh@aoV2X4u(9u`[>23R\|;,3'j0IPFu+/+V?P?_P$(]W^-X*\RsYyhR
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 47 77 17 17 c8 b0 80 ad 45 8a 95 12 1a 80 58 d4 63 f6 2d 9b 07 54 2b b6 c9 94 a9 9e 36 19 a9 7d 43 59 97 d4 d5 1f ae c0 29 01 07 5b 52 ed 5e c5 9a c0 58 04 55 c8 e0 ca d6 e2 d1 59 41 15 95 62 b3 32 58 db 10 45 22 ac 97 d9 4a a0 55 54 72 4e 0a 83 59 04 a8 62 d8 55 e3 38 b0 61 80 76 4e 3c 1e 62 d1 1d 50 d8 e6 c4 64 7c b3 54 20 1a aa 5a c0 ab b5 a0 85 42 1d 83 35 f5 b3 35 95 30 0d 5d 2b 65 eb 71 ad 8a c4 e3 de d5 0b 61 f7 47 cc c7 92 33 08 c4 72 59 7a bb 3c eb 74 94 2e 31 32 63 79 86 8a 9a 0e bd 60 70 21 8a a1 47 a1 9f b7 7b ed f5 8c 60 f6 c7 8c e0 02 09 cc 03 cf 9c e0 6d ef 31 88 46 41 f3 06 21 b0 34 e5 6a e5 96 5b 64 b4 81 28 54 76 be b0 8d 5a 96 56 64 10 ea c0 30 52 9c 64 7c 04 2a 70 00 b0 8f f5 8c 8b 23 ba 10 ac d2 b6 60 7e 41 cd fa c5 02 d8 ce b7 15 28 Data Ascii: GwEXc-T+6}CY)[R^XUYAb2XE"JUTrNYbU8avN<bPd\|T ZB550]+eqaG3rYz<t.12cy`p!G{`m1FA!4j[d(TvZVd0Rd\|*p#`~A(
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: fe 2d e9 dd 4d 6c 99 1e 98 86 1f 30 2c 2b 07 72 d5 87 bb 66 4f 72 d8 3b 37 10 7b 96 ac 5e dd c6 7f 26 ec 2f 75 c4 fe 75 c0 ff 00 3a fc 55 df bd d4 77 2e 87 bf 70 9f f4 ae 10 fd 9d a2 0f b1 ba 0f b1 b2 7f d0 b0 43 f6 36 c1 f6 37 41 f6 2e 60 fb 0b 0c 6f b4 b5 49 fb 5b c4 1f 6f 6e 2b fb 5b 1d 8f d8 da 60 fb 0b 21 fb 1b 70 bf 63 71 2d dd b2 c9 cc cb 0f 6d d8 73 3b 35 96 3e dd 5e c0 ec ab 06 dd 86 1a ce fd 94 cb 7b 0f ad 1f 61 61 7a fe ed 8b f6 be dc 63 b2 7a 8e 3e ba d6 6b 3b d6 33 b7 5d b9 fa 7d da f8 8d 6c 40 16 33 2b f6 ae 2d ca dd ba fb e4 55 67 51 b8 df a3 57 f0 e3 f7 9a e6 1b df 3a 42 c4 b3 b5 f6 16 73 28 05 e9 be d6 b6 e0 dd 85 ab b6 7b 17 50 a4 43 5a d7 3b 1d d6 30 59 db a4 2f d9 76 33 5f 7b b4 c4 7d af 7c 11 dc fb 37 8b dd fb 10 5b bf dc 8d df ee 88 Data Ascii: -Ml0,+rfOr;7{^&/uu:Uw.pC67A.`oI[on+[`!pcq-ms;5>^{aazcz>k;3]}l@3+-UgQW:Bs({PCZ;0Y/v3_{}\|7[
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: d7 15 d9 36 c1 24 2b 6d eb 26 d1 66 b6 1a ea b0 5b 28 b3 48 c9 b1 b5 90 1e d3 be 97 5b 34 bd 44 38 b0 05 b5 8f 6a e4 6b 75 95 3a b8 25 b6 0c 5b 3d 6e 6b aa 80 40 20 15 72 9f 75 12 4c 3f 27 a4 87 3c 62 81 67 29 ce e9 6a 75 9b 18 95 ae 05 06 32 4b 8b a2 cd c1 2d b0 e0 4c 7c 68 40 43 9d c5 30 d2 2d df 78 19 3d a4 02 07 e2 3e aa 09 68 bc db 65 5b cc d6 50 cd c1 6a 8b 42 59 bb 9b 8b 43 5a d4 94 b8 0f 4d fc c4 0b c1 37 8c d9 3d 4c 5d 01 41 e3 7a d8 13 de e1 e4 f6 71 2b 6c 98 99 c8 e2 40 70 01 06 4e 2c d2 ec f6 d1 70 1d fc e5 df 43 4f a9 80 16 c3 7b 97 fe 27 6b 13 24 c0 90 b3 1b ce 82 0d a0 e4 e4 c5 83 f1 43 41 16 11 37 c3 a9 16 27 01 ca 99 da 38 94 1b 30 de bb 01 e0 39 d6 e0 48 57 36 c3 6b 2d ba dd da a8 e1 70 0b 27 27 ad d2 41 6d 33 60 37 61 c5 b6 90 8e c3 8a Data Ascii: 6$+m&f[(H[4D8jku:%[=nk@ ruL?'<bg)ju2K-L\|h@C0-x=>he[PjBYCZM7=L]Azq+l@pN,pCO{'k$CA7'809HW6k-p''Am3`7a
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 79 c7 2d ee d5 c5 ca 4c 73 b9 34 ce 2e de bf 47 56 ac 01 55 a5 a5 bd 1d 36 86 7a 0a 7d 0d 2f 4b 02 90 61 a7 bd 28 ca fe 62 bd 5f b5 89 29 bd 79 34 c3 b2 75 1d e7 9a 8e 72 70 38 a5 6f ed 7b dd 5e 83 dd c2 b1 8d a8 cd eb 7e cb ce d3 f0 3b c6 5a df a4 e8 54 c3 82 13 02 89 d1 71 a1 d5 1f 78 10 2e e2 e2 c3 5c f1 e4 b8 f1 5b b2 d9 7a 58 55 e0 bd ca d5 e6 e1 5c 66 9f 25 3d a6 8e 09 02 cc 59 57 1a 58 5e 12 89 8b bb 57 9e 8b 10 0c 96 63 3e 9f 57 53 4f 12 5b 6d a5 d6 6e a7 ea e0 35 a8 87 14 9e 36 a7 ac 8b 4a 2d de 33 a1 08 2e 71 37 98 d3 79 ba ac ff 00 c3 89 cd e0 2e b5 25 bb ef aa c4 ea 8e 75 b3 71 65 d8 c0 69 16 0c 9c 4f 4b a4 89 41 21 a0 92 53 de 7b 38 98 05 07 1a 6c 6d 97 9c 87 4d 76 c3 2a e5 40 16 06 a0 6a 82 e6 df 85 6e f5 8b c4 74 4d 61 28 9c 6c 5d 9c 58 40 Data Ascii: y-Ls4.GVU6z}/Ka(b_)y4urp8o{^~;ZTqx.\[zXU\f%=YWX^Wc>WSO[mn56J-3.q7y.%uqeiOKA!S{8lmMv*@jntMa(l]X@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	62750	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	745	OUT	GET /wp-content/uploads/2022/07/img-destino-praia-768x935-1.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:10 GMT Accept-Ranges: bytes Content-Length: 182826 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 21 45 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 39 3a 30 38 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: !EExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:09:080
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 98 d8 12 0a 03 4d 98 93 5f 4e 35 65 55 55 63 29 f5 91 63 ea 3e 97 a6 c1 ea 39 d5 8f 4f d4 6b be 85 7b fd df a6 af f9 df 4a da d3 75 03 d4 6c 77 a7 81 e9 54 5b fc d3 46 e6 3d c5 c3 d4 b1 b4 db 66 c6 fe 97 de da bd df a7 66 fa 7f 47 fc ea 7a 5b 4d 54 be 9a ec 7d ac b1 b3 61 7b 58 0b 05 6e de 5d 7d ce 3b be d1 6b 9b 6f e8 bd 4f df a6 a4 16 e4 d5 7d 6c 75 ed 7d 4d b1 bb 22 8a 8b 5b 5d 95 b3 71 76 db 7d 4b 1d 65 ed f4 f6 3e 8f dc f4 ff 00 4f ea a2 2c 9e 20 38 c8 ee 25 2f 4f f7 7f c7 44 b6 d8 0e bb ea cf 1e bc f7 30 fd a4 3a fb c8 ad b5 3e b7 96 39 9f ce d9 b9 f8 ce 14 d5 eb d2 d1 be cb 2c ff 00 b8 fe 9d 3f a7 b3 d3 52 67 d9 71 9a 77 58 fb 6d 68 16 b6 d7 34 99 8f 67 b7 1d 8c b3 e9 ed ff 00 0c cb 32 7d 9e a7 fc 5c 5f 6b ef 69 7b 05 d4 62 b5 c5 95 90 d7 12 eb 24 Data Ascii: M_N5eUUc)c>9Ok{JulwT[F=ffGz[MT}a{Xn]};koO}lu}M"[]qv}Ke>O, 8%/OD0:>9,?RgqwXmh4g2}\_ki{b$
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: fb 4d 65 ff 00 67 16 59 50 cb 73 ac c4 c8 15 ba d7 00 0f aa ea 8b 5c 1b be b6 5f fa 3c 77 b7 d2 ab 67 e9 3d 0b 2b 4a 44 9b ab d3 fe e7 fb bc 48 3c c4 00 d0 de 97 fc b8 9b 59 df 58 9b 91 fc c3 da 37 32 cf 4d d7 b0 fa 4d 15 87 bc fa 4c 6b 6b 73 d9 6b 7f 49 5b 2b d9 b2 ef e7 56 5b 2b 73 59 f6 bc b7 3c e4 b4 96 3b 1c 34 39 a1 a4 36 c6 b7 7c bf d5 de f6 7a 96 7f 82 af f7 fd 44 26 b5 94 e0 7a d6 5c cc 92 25 c0 58 cd cf 00 3b d4 a1 ec da 1a c6 58 ea de ff 00 51 af fd 33 fd 1f a1 f4 10 69 66 41 b9 fe b5 0f c9 61 64 b1 ae fd 10 05 ae f5 37 59 6b 36 37 66 cd fb ff 00 7f 62 78 80 f5 57 95 fe 94 bf bb c7 c2 d1 cb 9b 24 c8 12 f3 02 37 c1 fc bf bc 9b f6 1e 4f a5 1b 6f df b7 d3 9f 6f d1 f5 37 44 ce ef e6 bf c2 ff 00 e8 b4 90 ff 00 6a 75 2d d3 b2 cf 53 76 ed bb 9b cc 6c Data Ascii: MegYPs\_<wg=+JDH<YX72MMLkkskI[+V[+sY<;496\|zD&z\%X;XQ3ifAad7Yk67fbxW$7Ooo7Dju-Svl
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 80 d0 c3 1a 50 86 26 c2 0b 4d 81 65 2d 76 66 c4 8e a8 9e 73 ba 09 25 08 56 da a4 b1 34 5a 68 8c 15 d8 30 55 61 07 24 11 4b a8 04 c4 18 32 0c 44 90 01 f4 98 33 81 4d 6d 67 3e a5 f4 09 0d 8b 90 45 36 50 53 45 6a 82 79 e7 a5 5a 29 34 0f 88 a1 38 17 1a 28 11 86 35 4d 15 81 04 95 60 c3 cc c9 6c 5d 92 68 17 8d 4a 8d 6a b5 a9 69 34 48 05 4a 50 88 30 94 40 eb 41 4b 7d a2 0d 76 55 a6 6c 8a 29 a2 b9 0a a2 b1 41 90 5a 0a c4 93 a0 60 85 4a a6 19 67 b1 6a bc c5 2f 45 e6 b4 f4 0a a9 8c b4 90 9a 9b 16 2c 4e ae 6a 4a 10 90 46 99 16 49 dc ab 0a 97 05 50 ec 61 4c 80 34 cb 42 63 69 83 65 72 c2 ec 41 b1 22 d3 a9 22 3d 17 9a 35 a0 53 11 a6 65 31 b8 90 48 71 2c e5 94 1a 4e 96 4a b9 2b 51 52 2b 1b 4c ec 22 77 2a d8 44 99 23 80 05 96 93 95 21 62 35 27 6a 11 3a 0b 95 05 b2 26 a2 Data Ascii: P&Me-vfs%V4Zh0Ua$K2D3Mmg>E6PSEjyZ)48(5M`l]hJji4HJP0@AK}vUl)AZ`Jgj/E,NjJFIPaL4BcierA""=5Se1Hq,NJ+QR+L"w*D#!b5'j:&
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 96 5c 77 72 2d dc f5 31 17 13 75 ea b5 f8 fe d6 7b f6 79 c9 2c e3 5e 9f 3d 2f 5e 9e 5d c0 97 8f ef 73 19 d7 e7 17 4f 84 d7 ba 11 9d 9d 1c b5 d2 e2 75 15 ec dd c3 7e 17 d5 ea f9 8f 4d 8f 56 9c b9 f9 f8 4f 4f 3e 94 ce 7a fc de ed 1a 61 cf ce 49 ea 9c fe 83 8d d4 5a af b9 8f 9f cf 9f 08 04 3d 4c 8f 67 3f af 2f d6 a3 9b e8 3c 7e bc c0 9e 7d 68 9e 5f a8 ae c8 e6 e6 ee aa 33 cd db c6 bc 37 de a5 91 a2 14 9d 7a ad 19 36 de 19 97 98 eb ec d5 f1 99 97 47 4c 0a 3a ca 66 9d fc 53 e5 d1 5d 39 cd a2 fa 39 9d 95 51 b3 32 47 c8 ef f3 b5 ad 9a f6 79 f7 2c db e4 f5 bb ea 74 38 bd 15 5c 5c fb 83 4e 4e 0b bb 1e 7f a5 eb cf b3 a2 e5 1e af c4 f5 39 37 eb 65 ca ac 8c fd 5e cf 3d 15 bf 92 4b 4d 38 fa 7c d9 9c 47 9b 4f 4d f7 a9 0b e3 ce 71 7b f7 53 cb 7e cc 17 48 d6 8d 62 eb 73 Data Ascii: \wr-1u{y,^=/^]sOu~MVOO>zaIZ=Lg?/<~}h_37z6GL:fS]99Q2Gy,t8\\NN97e^=KM8\|GOMq{S~Hbs
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 90 1b 6d 9f 1f 82 a0 10 a7 35 b3 a6 cd 11 8a 9b 20 eb 08 de 2e c6 06 3a d7 9d 1d e8 10 10 1c 25 c0 46 3a d6 c9 8c 9c 08 46 6f 44 36 16 d9 61 b0 34 00 0a c4 a2 80 ca 01 1e 73 5a 21 48 3a 19 ea 33 58 a9 b3 a2 30 92 06 d8 e0 04 17 07 02 0c 28 a4 fc 60 e7 c5 9e 87 66 20 42 c6 30 80 33 64 81 19 d6 80 c2 bb 2a a7 0c 7e 02 6b 0a 8c 1a 18 49 24 f9 c0 bb cd 62 c6 76 50 28 55 3a 08 34 23 1b 11 31 0d 5d ce 0a ac 33 f1 5b 7f 01 df c0 e7 05 76 d9 ac 4e 7e 3b 1c 15 5f 62 bb 0c 30 9c 30 9d 1a cc 73 e2 3a 68 09 3f 01 c1 5c e1 ae 48 15 88 c3 5d f5 f8 ef a3 59 88 15 88 c5 81 c6 7c 0d 8b 5c 8c 30 12 7e 03 9f 8a 76 6b 1d 0a ec 30 57 c1 01 38 20 20 18 a4 05 62 66 c3 5b c1 81 86 2c 0d 82 1d 03 11 c5 84 ec 42 db 30 13 82 16 07 f1 b6 3e 16 07 fb 9a 59 fd d5 31 83 b3 4c e7 f7 54 Data Ascii: m5 .:%F:FoD6a4sZ!H:3X0(`f B03d*~kI$bvP(U:4#1]3[vN~;_b00s:h?\H]Y\|\0~vk0W8 bf[,B0>Y1LT
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 33 9b 38 08 cd eb 09 38 4e 78 cf f4 77 84 1c 18 1b c7 b9 19 b1 9b 18 40 d9 d6 78 c2 30 6f 5b 3a f7 6d 7b e7 b9 cf 63 87 db 34 e7 08 39 e7 34 75 ea 70 1c f1 9a 23 1a 58 d5 63 65 91 35 84 66 bc 1c 07 ca 0d 61 d6 30 d3 5f e8 54 e7 ad 2e 9f 3e f6 69 4e 32 8c 3e d9 ec 70 b1 c2 73 d8 0c 27 3c e0 07 3c e7 9c df 8d 8d f8 fa 6b 47 c6 00 33 4b 81 57 00 18 40 f5 d6 fe 9b 39 b3 80 9d e8 e6 8e ce f3 ce 0d 1c 20 8c 27 0e 78 cf 3a 1f 6d 36 0d ef f9 e7 8c 93 b2 f0 58 e7 fe cb d8 b9 d0 ab 33 4b 0e c6 7b 0c d8 cb 17 a1 ab 2f ee bd 7b 71 dd e7 7e c3 49 07 6f bc 1e 2e 07 46 cc 39 5b f6 d9 6c 75 2b 59 8e d4 5b 19 ec 30 93 87 67 01 c2 b8 41 fa 6c e7 b6 06 39 ed 9e e7 03 1c 0c 75 ef e7 dc 6f d8 68 30 d2 b7 86 de 8e f0 0c f1 9a cf 51 b5 50 72 ff 00 7e bc 28 2d 5b bb 35 cf d9 63 Data Ascii: 388Nxw@x0o[:m{c494up#Xce5fa0_T.>iN2>ps'<<kG3KW@9 'x:m6X3K{/{q~Io.F9[lu+Y[0gAl9uoh0QPr~(-[5c
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: b1 95 79 cb 7b ca aa a9 1f ac d0 90 3e 37 01 a1 5c 48 e4 70 d2 47 1b 34 cd ed f2 b8 c4 8c 06 29 19 65 52 0b c8 5b 03 3e 04 21 ff 00 ec df c7 2e c4 0d 2e 49 04 6b 20 57 04 47 26 8c 84 62 11 ec bf 21 53 ec ab 1f c2 e4 c7 33 2a d0 bb 30 86 b3 c6 0a 06 30 f3 ee 48 57 9d 62 73 f8 3f f6 8a b2 20 f8 06 46 a0 13 11 41 1c 69 b2 f0 0c 3f 8d 9e ce 30 d9 95 70 5e 0b 8d d0 4d ff 00 66 3d 4f 4d 86 7f 67 67 6d d0 b6 d8 f3 c8 f8 b2 c6 01 b2 08 f8 cb 91 5d ce 0a a9 8b 5a 3c 11 a2 8f 18 0e 6b 34 73 ce 6f 3c e1 75 0c 26 d4 8a 85 b3 6a c6 19 d2 62 be fe 90 c5 62 47 09 14 60 18 11 c4 42 43 f1 d6 21 22 20 b4 41 a4 f6 52 f2 ca 9e 8b 23 69 e4 db 09 d2 32 d2 2f c6 20 80 bc b1 d5 09 3c 95 3d d4 aa 32 a0 39 a9 30 49 26 d9 66 91 fd 22 55 8c 09 13 52 33 19 21 50 f2 80 b1 ba 33 fe 44 Data Ascii: y{>7\HpG4)eR[>!..Ik WG&b!S3*00HWbs? FAi?0p^Mf=OMggm]Z<k4so<u&jbbG`BC!" AR#i2/ <=290I&f"UR3!P3D
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: c4 9b af 24 f5 c5 3c 92 6a 0e 79 46 9d d5 e5 5b 95 7a 15 39 13 34 a6 9f 3f f3 29 a9 78 61 e7 c2 d0 9e 47 3e 35 ee f4 47 17 9b 79 1b ba 79 7d b4 e3 c0 e9 5f a1 6e 2e 9f 31 d2 27 0e 9b 00 7e 42 7c f6 78 3c cb 8d 2f 06 a3 99 61 68 96 4e 48 96 af 2a 87 4e 9a cb 4e 8b b2 45 15 78 89 ae 87 bd fd 67 66 ad e6 e4 f3 6b 4d d0 b6 4d 6a 71 5f a6 91 21 16 ed 24 56 3f 5d 9a bc f8 d7 2f c1 35 58 ab 2d 21 cc 1d 4b b1 2f 26 39 7a 6e b7 a6 29 5c 28 e6 88 9e d4 33 c7 ce 86 8c d0 42 37 f4 3e 30 cc e2 40 49 21 54 e0 03 37 fe 0d 92 da 8a 12 9d 20 f3 16 f0 a4 90 85 d8 88 c9 6f 50 09 23 60 0c f6 18 4a e3 24 42 65 2d 9b de 13 81 c1 c0 06 78 db bc 71 e0 0d b4 46 cd 0c f7 00 fd fe 92 a1 64 87 dc 2b a9 64 bd cc 36 d5 d6 73 63 f6 6e 80 86 47 8e 4b 10 dc bb 4a 59 13 b3 d4 8a 5e 5f 42 Data Ascii: $<jyF[z94?)xaG>5Gyy}_n.1'~B\|x</ahNH*NNExgfkMMjq_!$V?]/5X-!K/&9zn)\(3B7>0@I!T7 oP#`J$Be-xqFd+d6scnGKJY^_B
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: ea dd 5e 64 55 ed 49 61 4c 70 46 72 a3 fa c7 c9 89 6e 53 b1 5e 47 b1 72 8b c1 5f f5 c8 e4 7e b7 c5 73 d1 e2 8e ac e2 c4 eb 72 b8 e8 b4 73 c5 72 0b 0b 27 b2 3a 7b 63 a8 56 99 8f b5 2b cf 5e 78 2c fa 55 bd 3c 62 d8 b3 31 7e 8f 27 93 32 53 a0 2b 48 b6 1c 9b 7d 37 9e bf 32 6b 15 df b1 3d 69 5a d5 3e ad 87 e4 f3 a5 92 cd be e4 dc 48 b9 9d de df 4e c4 95 2c 5b 11 d4 a1 1c 57 bb 10 45 46 a5 2e a5 d9 a3 45 e8 0b 15 8f 2e e2 b4 24 db bf d2 33 d7 b7 62 78 63 82 94 79 7a f7 5e 66 7e 2d 59 2b 41 05 42 69 73 ec 48 6d ad 79 fa 53 71 a2 ae 93 35 2b b3 55 fd 80 c3 7e ea 09 b2 9f 25 2d d7 e1 f1 e6 86 fd da 31 7c 97 ad 56 ea 41 15 6e 8d da 3c ae 5c 1e fd 7e b3 d3 87 a4 66 b3 97 ab c5 f2 c1 55 c5 5e 5b cb f9 bd 6b dd 29 07 2e 49 0c 16 6c 75 e5 e6 f3 6b cf 46 3e b7 22 af 46 Data Ascii: ^dUIaLpFrnS^Gr_~srsr':{cV+^x,U<b1~'2S+H}72k=iZ>HN,[WEF.E.$3bxcyz^f~-Y+ABisHmySq5+U~%-1\|VAn<\~fU^[k).IlukF>"F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	62751	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	733	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-10.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:07 GMT Accept-Ranges: bytes Content-Length: 198506 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 2d cb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 30 36 20 32 32 3a 30 37 3a 34 31 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: -ExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:11:06 22:07:410
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: d1 55 82 a6 57 b7 fe b0 df e7 3d 4b 3f 71 47 9f de f6 a5 ec d1 c9 c2 78 3f bc 7c bf 97 1b 37 2d 1c 07 2c 46 6b 18 8c 87 b9 fa 5b 6f fe 37 fd 07 4b ab 64 bb 23 2f 1b a0 60 31 a6 9a da db 32 f7 6e d8 c6 47 e8 aa b5 cc f7 7b fd bf a3 dd fa 55 5b f6 37 53 f4 25 95 b9 c5 ae 6b 9b 8c d1 e9 b5 ef fc eb f6 d4 eb 31 ff 00 97 fa cb 6e fe 5a 31 cf fa c7 d3 2a 7d 38 d8 34 58 6a f7 e4 1a 37 34 fa 8e 0d dc 1c fb 18 ef b4 5e d6 bb f4 cf f5 7d 8a ae 4f d6 3e b3 5b c8 cb 60 6b db 1f a1 0e 97 41 d4 1d 93 bf 6b bf 32 cf 4f 62 c4 c1 3e 7f 95 89 8c 39 7f 72 53 97 14 e4 47 bb 29 9f ef e2 9b d0 e7 c5 f0 fe 72 51 94 b9 a1 8e 38 e3 c1 08 71 8c 1c 23 af a3 2e 37 4b 2f a5 64 9a 5e db ac 7d 81 f5 ed f4 ea 0d 63 c9 0d 77 f3 40 db 7b 2b c8 73 8f a7 5b bd 2f 4f fe 09 72 95 75 6e bd 4e Data Ascii: UW=K?qGx?\|7-,Fk[o7Kd#/`12nG{U[7S%k1nZ1*}84Xj74^}O>[`kAk2Ob>9rSG)rQ8q#.7K/d^}cw@{+s[/OrunN
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: f2 2d 2e bc ba d2 d2 c0 40 73 7d fb 9b ea bf f3 3d 46 33 fe d3 fa 9e a7 f3 55 fa 6a 18 e4 94 25 c7 8c 91 21 67 88 0f df 62 cb 8a 33 87 04 a3 70 34 08 3d 5e b3 0f ad 74 ec c6 39 bb 8d 2f 69 2d 71 74 f1 13 ea 3b f4 6d fb 3e df f8 5f 62 03 b3 73 f1 ee 6e 2d 64 64 13 ee 67 da db e9 bc d4 d3 fa 4b eb ca c7 2f c5 ca a9 8c dd ef fd 15 df f0 77 20 5d d7 b2 7a 5e 49 f5 fa 75 43 27 60 15 8b 1e d0 43 1c 3d f4 64 62 cb 9f b3 6f b3 65 bf f5 cf e7 16 56 15 b4 57 5e 45 ef d8 ca 83 83 99 8e c9 0c 78 73 da 1b 2c 6e f7 7e 8d cd f6 ed 62 b2 7e 29 9f db 23 86 42 80 f6 72 92 38 f2 f1 ed 29 42 1c 51 68 7f a2 b0 7b 9c 56 38 64 7f 59 86 ae 30 30 fd 18 e4 f9 e3 fd 67 7b a9 32 cb 8d 19 f8 ae dd 4b 9a 5c ca 76 6d b9 ec 70 75 56 39 b0 ed 8f ad de 9f f3 9f cf 7a ac f4 d7 3f 5e 3d e3 Data Ascii: -.@s}=F3Uj%!gb3p4=^t9/i-qt;m>_bsn-ddgK/w ]z^IuC'`C=dboeVW^Exs,n~b~)#Br8)BQh{V8dY00g{2K\vmpuV9z?^=
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: ce fe ef f5 be 47 ff d0 35 b4 e2 66 63 b1 cd 65 59 34 b0 36 ba 3d 59 db 59 fa 6c ad f8 d8 9e e7 dd b9 de ca f6 7f c6 fd 35 57 23 1b 3f a9 d0 fd b4 96 e6 b0 fa 4f 7e 43 2b ab 6b 5d ef 77 d9 58 e7 31 af df ed ff 00 b4 fe a2 15 56 f4 9c ab 83 1a eb 71 69 70 d1 cd aa cd e4 34 ee b3 6f a6 cb 3d 16 ef fa 5b ed f7 ff 00 a4 d8 98 bf a7 e4 bd c7 2a 9b ea d8 5a ca 48 79 af 21 f2 0b ec 7d 9e bc b5 b4 fb eb af db 4f fa 4f a1 e9 ad e0 08 d7 5d 3b 8d bc 37 8f f8 5c 2e 0d 4b a8 af cb f7 7f 97 14 1b 9d 2b 0f a5 66 e3 3f 1d f6 dd 75 ec 01 8f 75 6d 60 91 3b 86 c6 b1 86 ba aa 74 fa d6 fe 7a 2d 79 74 e3 56 cc 6b 72 d9 d3 9d 5d 50 69 df 4b 6c a9 d0 6a dd 65 90 cb 2c b2 ca fe 9f a1 fc c7 e9 14 7a ae 2e 0d 55 51 8b d2 2e 6f da 88 da dc 86 b9 f6 02 d6 e9 f4 b1 b7 35 9e a5 a7 f9 Data Ascii: G5fceY46=YYl5W#?O~C+k]wX1Vqip4o=[*ZHy!}OO];7\.K+f?uum`;tz-ytVkr]PiKlje,z.UQ.o5
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 9b b4 71 1e 36 cb 90 d0 48 76 5d bb e3 75 c7 76 b8 6c bc bb db e5 9c 76 59 69 19 80 65 a2 40 d0 53 0d 18 65 47 15 a1 a2 91 b1 a2 bb 89 a7 df cc 08 a8 41 8a 21 2a 9f 63 23 91 bd d8 66 17 a7 9f 36 eb 9d 7e ac 75 73 df ad dd 3c f5 99 e0 8e 9e 08 99 e0 8e 9e 4e 26 64 2b d6 90 ad bb 93 e8 8e 67 44 f0 a2 2d 01 1d 3c 11 d3 01 1d c3 02 74 f3 23 a7 82 bd 68 08 e9 e0 af 4c 85 7a dc 15 eb 70 f1 db f3 fe 83 e6 bd 4f 3d e8 70 34 7d 2e 77 0b 0c ed 94 45 e3 bb 92 bd 6e 6a bd 6e 08 28 cd 96 c2 55 ec fe 4e 9a 73 f9 bc 9b d3 4c 67 ee e5 ea da 36 8a 2e e0 61 f5 1c 4c 74 5d c0 4d 91 66 b9 c5 e5 2a a1 f4 b4 2a ef cf 8b 55 5e 1e a3 ae 22 a6 44 1e 5e 1d 36 07 a1 db cc 87 6b e5 ed 8e 0b c9 7a 0e 3e ac 9b bc 7d 73 c5 61 d2 e7 a2 22 d2 a2 76 31 87 cf ad 4a 1b 66 35 cb 35 ec 79 d1 Data Ascii: q6Hv]uvlvYie@SeGA!c#f6~us<N&d+gD-<t#hLzpO=p4}.wEnjn(UNsLg6.aLt]Mf*U^"D^6kz>}sa"v1Jf55y
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: e6 76 fa 26 cd 90 b7 5d 7d 26 8e a5 6f 2b d7 f4 1e 37 d8 e1 f2 d2 e0 67 3c 63 d3 e4 98 0b ba 17 34 65 49 4d 92 56 66 b4 b3 d9 a1 48 94 65 d6 86 9d f2 7b 78 fd 8e 9f ce 1f ed f3 bd 6a be 7e 9a e7 e8 76 bc 36 8c 1e af 2b 37 93 71 b3 98 9c 2a 68 67 6a 6c 66 bf 6c c5 00 4e a6 44 d9 13 45 6d 4b a4 e2 07 0a 27 4b 2b 42 5a 2f 30 82 6c 5f ce 6b d2 ba 1a f8 2c a6 98 35 9a ce ce d3 c8 b2 09 a7 af 2e a3 c2 46 0f 43 5f 29 b3 62 8d 6c 1e 4c f5 7a 2e 5b 1e c5 b1 d1 23 22 c3 99 20 50 4f 78 63 c0 45 6a 86 e7 42 db 21 57 e3 d5 4c fa 57 ab 02 3a b1 e6 de 4c c9 c8 d2 a0 78 56 74 3d 15 a2 84 de 2d 7a 97 a9 2a fe 0e 9d c9 7a f9 32 c6 b6 4e 76 af d7 21 84 ef 9b df ee f0 74 3b 93 a1 4c bd 8c 5c ae ac b2 c3 1d c1 7b 19 c0 9c cd 3d 86 71 52 67 57 73 29 bd 4b a6 c2 56 0b 2d c5 7d Data Ascii: v&]}&o+7g<c4eIMVfHe{xj~v6+7qhgjlflNDEmK'K+BZ/0l_k,5.FC_)blLz.[#" POxcEjB!WLW:LxVt=-zz2Nv!t;L\{=qRgWs)KV-}
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 98 20 c6 cf 89 0a 2e 3c 80 06 b1 b0 7d 16 32 18 81 ac d8 c7 5e 58 14 00 40 d4 c3 4d 8a 93 0c 8e 60 c6 4a ea e1 2b a2 e3 29 20 0c 20 8f 49 90 91 55 19 4b 31 f2 2b 48 0a 81 a2 75 8e ed 86 29 59 95 38 e6 91 95 e1 65 61 f8 19 bc 76 d2 fe da fd 76 33 5e c4 61 d6 36 80 59 00 65 50 40 e2 a4 ca b9 25 80 03 36 ce f3 79 b3 80 eb 09 f4 d7 a6 f3 98 38 88 32 5a a8 73 c7 32 15 0a e7 dc 9f 65 c2 70 1c 27 63 fe 1b 11 75 87 37 83 79 bd e6 bd 38 8d fb e7 be 00 db d1 c6 20 67 98 62 48 4b 33 03 86 c3 a9 0f b8 cc cc 73 cc 77 e7 e5 9f fe 48 c3 82 33 34 8f 16 d6 44 08 34 33 db 35 ac 85 0e 03 84 60 f4 39 a3 a8 e2 50 42 6f 0a ae 36 f9 28 18 3f 07 f2 75 e9 ff 00 01 41 04 01 9b f7 23 3c 7f b1 2a 4a a8 e2 cb a3 ed fc 09 f6 53 bc b1 21 e4 b0 33 07 2c 8c 25 3a 27 0b 30 af ef 80 68 c4 Data Ascii: .<}2^X@M`J+) IUK1+Hu)Y8eavv3^a6YeP@%6y82Zs2ep'cu7y8 gbHK3swH34D435`9PBo6(?uA#<*JS!3,%:'0h
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 23 58 a4 97 4b ef 9c 4e 04 c0 b8 13 02 7b f0 c0 80 64 a8 c1 aa 2b bb 5b 8c c2 6c 4c 25 0b d8 73 c7 b0 be 05 8c ce 4c b1 34 54 6f 98 4c 36 2b d8 c0 ba 1a cd 66 b3 59 af 4d 66 b3 59 ac d6 6b 35 92 9e 2a db 07 b4 99 52 08 a1 4e ce b4 71 29 ab 72 16 88 7f f8 51 8e 52 3a fd d7 17 6c 0b 45 1d 5e 06 90 aa f6 3d 4f ca 87 a6 96 a2 56 e8 4c 66 b1 fe 1a 3f cb 58 7d b3 8e 71 ce 39 2c 82 25 ec 04 7d 87 5f 34 9a 44 9e 52 d5 98 a4 2b 5e 2c 4a 35 9a 3a d3 57 ab 1c 32 3c ad d8 5d 8a 69 6b ac f2 c7 14 5e 27 96 59 40 b5 5d 54 35 a9 e1 37 2c 73 2e ca f2 c7 34 f5 69 53 af 5a 31 0b 2c 8d 25 aa cd 2c 55 a4 e7 70 22 c9 64 4b 25 f8 60 91 1a 51 1c 51 a7 1e 6c 80 a4 c2 44 7b 91 c3 12 96 9a d0 a3 5e 42 28 43 1b c6 b0 b9 6e 0a aa 0c 58 dc 15 56 48 9b d3 8e 6b 00 cb 12 49 24 bd 4a 08 Data Ascii: #XKN{d+[lL%sL4ToL6+fYMfYk5*RNq)rQR:lE^=OVLf?X}q9,%}_4DR+^,J5:W2<]ik^'Y@]T57,s.4iSZ1,%,Up"dK%`QQlD{^B(CnXVHkI$J
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 59 a3 1d 55 c7 89 8c 0e ea d5 d2 00 b5 7e c9 d5 56 0d f6 8e a9 98 fd 8f a7 dc df 68 a8 8b dc 5a b5 72 e0 24 14 24 b7 d7 bb 74 a5 07 f6 3d 6b 62 da eb c9 1d a5 75 56 b9 46 26 4e ce 95 8a f6 63 b0 d3 24 3e d7 29 3d 98 87 43 3e c2 18 6c 75 ff 00 65 7f 91 fd a5 63 9f d9 d3 38 bd ea 28 ec 67 a5 76 bd 7e bd 64 49 3a b0 f8 b4 00 56 eb 60 23 8c ab 14 dd 9d aa 93 47 f6 bb b1 c4 7e d8 ed 9f f6 a7 00 7d ba 65 cb 57 a1 96 56 8e 29 22 e2 97 72 bd 8e d3 ae 85 3e c5 dc 67 fd 93 b7 24 7d 9f b5 04 7d ab b5 11 7f db 3b 31 20 fb 5f 62 55 be d5 7c b3 7d 96 c6 cf d8 66 d4 7f 6b ec 20 5e a2 54 85 22 ed 09 5b 9d 95 8f 1f f5 7d 63 03 d5 75 f8 b5 b5 8d 05 72 1a 08 4f 64 24 ae 82 f5 9b 77 0d ca 56 21 4a 6d 3d b9 ec f5 4d 09 9e 80 78 a2 eb fa 05 4a af d5 c5 24 ed 4a 49 a6 bc 12 48 Data Ascii: YU~VhZr$$t=kbuVF&Nc$>)=C>luec8(gv~dI:V`#G~}eWV)"r>g$}};1 _bU\|}fk ^T"[}curOd$wV!Jm=MxJ$JIH
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: ee ac d8 82 b7 62 85 97 b0 e1 3c 94 e2 54 17 63 59 ec 76 4a d0 9a 76 a1 8f a4 a5 39 99 ab 75 e2 4a a2 c4 31 74 55 5e 44 ea a8 44 2c 76 35 f9 88 e8 4e c2 af d5 a0 09 5b ae 30 d8 ab 46 34 59 aa 96 69 ac 8a 8b 22 78 cd 8e d5 72 56 ec e6 82 31 d8 c1 9d 75 59 1f 00 00 48 7d ac 4b c1 6c 3c 9d ad e8 fa f8 60 8f cb 3b ca 95 e0 68 4f 57 58 1e b6 8a 47 0d 94 8a 18 5f a8 e9 dc 5a a6 b5 61 ae e8 ca 3c 7e 4f 03 f8 84 40 d4 20 4e aa 26 e2 dc 5b 3c a9 e3 57 49 24 d4 42 06 68 e0 11 49 2a e7 04 46 93 c8 f1 43 1b a4 89 55 6b a8 78 e2 96 49 64 8a 39 64 f1 a5 3a 8f 6a c3 51 eb e3 1f 16 d2 08 5e 3f 1c b3 52 00 da 88 b7 5c b4 ec 02 94 a0 c0 b3 94 9e bc 75 a0 5b 10 e4 c9 2f 57 7a 9d f0 e1 2c 03 8c 82 44 0d b3 63 5a b1 6a 24 93 af b5 15 86 7a 75 ce 5f ee fe 1b ad d4 bd 8d 66 58 Data Ascii: b<TcYvJv9uJ1tU^DD,v5N[0F4Yi"xrV1uYH}Kl<`;hOWXG_Za<~O@ N&[<WI$BhI*FCUkxId9d:jQ^?R\u[/Wz,DcZj$zu_fX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	62752	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:31 UTC	734	OUT	GET /wp-content/uploads/2022/07/photel-mobile-01.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:31 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:13 GMT Accept-Ranges: bytes Content-Length: 262566 Content-Type: image/jpeg
2024-05-28 05:15:31 UTC	7957	IN	Data Raw: ff d8 ff e1 27 e1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 32 3a 31 30 20 31 38 3a 32 32 3a 33 34 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: 'ExifMM*(12i ''Adobe Photoshop 22.4 (Windows)2021:12:10 18:22:340
2024-05-28 05:15:31 UTC	8000	IN	Data Raw: 1c 76 db 53 05 a6 36 6e 79 f4 eb 6f a6 e3 ea 5a ef e7 3f 99 aa d7 ff 00 39 fe 8d 45 23 fa bb 34 2c 0d 3e 61 c5 ff 00 74 b2 64 70 6c 3d 5f 2c 4f 73 e0 e9 d8 3a 7d 9d 27 ec 9d 53 2c e2 33 22 d1 90 6f 1b 33 1d bc b6 2a 6b 2b c7 6b 5f 4e 37 a7 fb f9 1e bf b3 d2 f4 7e 9a e7 e9 7d 82 ab 98 1d 63 ad b1 bb 03 da e7 06 bd 8d 3b ec 2e 90 df d1 7a 6c ff 00 09 fc df f3 8b 53 34 7e cc bf 2f a6 fd 91 af b4 3c 6e aa df 51 c5 86 3f 57 73 0e ea 1e cc 9f 4d ff 00 b9 fc df f8 2f f0 49 fe af 31 8e ba fa 36 9f 56 da dd 45 b6 34 01 e9 d0 f8 6d ef dc 5d b7 7b da ef b2 33 f4 1b 3f 4b f9 e9 ba 63 84 a5 46 87 a8 df fc e9 2d 24 63 c7 29 10 44 63 ea d7 fa bb fc a9 f0 09 ab 10 6f c3 63 cd c4 6c 2e b0 8b 5a 5c d1 a5 6c a8 37 7e 35 8d 67 ab 6d 7f ce 7f 85 fe 6b f4 97 47 d5 b1 f9 6c c3 Data Ascii: vS6nyoZ?9E#4,>atdpl=_,Os:}'S,3"o3*k+k_N7~}c;.zlS4~/<nQ?WsM/I16VE4m]{3?KcF-$c)Dcocl.Z\l7~5gmkGl
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 74 df b9 c5 a7 1f 35 a2 05 9c 6e 8f cc bb f7 bf ae b3 be b3 dd 60 ea 38 d8 98 e0 86 e1 e2 d6 d0 f0 76 86 19 df bd cf da e7 57 b7 65 4f f6 28 c9 fd 66 31 db 8a 67 fc 11 c1 ff 00 a9 1b 23 d7 8b 26 bb 88 c6 ff 00 bc 78 bf ee 1f 64 cb b9 d4 56 0b 1a 5f 61 30 d6 34 12 7c 78 6a e2 3e b0 f5 9a 2d bc 87 54 c6 5b 53 1c 48 10 db 4b c7 d1 dd 5b c3 32 2a ff 00 80 bf fe db 5c b7 5b fa df d5 73 c3 18 fc d7 36 a6 b2 b3 63 85 6d 16 be c6 81 ea fb aa fd 13 29 7b ff 00 31 d6 fb d9 fc e2 cf cb ab a8 74 71 e9 55 90 5b 5d ad aa eb d9 59 2d 21 d6 01 7d 0e c8 87 0d ce 67 fd b7 bd 4b 3c dc 40 46 37 03 2e ff 00 35 47 76 ac 79 33 66 52 90 3c 3b 70 fa be d7 d0 be ae 75 37 e6 e7 d9 63 f4 6e 26 38 a6 db 9e 40 6c b4 bf 26 cb de d0 77 ec af 1e ea d8 cd 8c ff 00 8c 7a dc c2 a9 99 96 b3 Data Ascii: t5n`8vWeO(f1g#&xdV_a04\|xj>-T[SHK[2*\[s6cm){1tqU[]Y-!}gK<@F7.5Gvy3fR<;pu7cn&8@l&wz
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 34 37 34 46 31 45 30 34 41 43 46 45 30 43 37 38 35 46 39 38 43 43 43 43 31 37 31 31 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 36 64 35 61 31 33 66 2d 61 37 35 36 2d 65 38 34 66 2d 62 64 65 64 2d 64 64 31 64 31 37 61 65 64 62 35 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 Data Ascii: /> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>A7474F1E04ACFE0C785F98CCCC1711BB</rdf:li> <rdf:li>xmp.did:26d5a13f-a756-e84f-bded-dd1d17aedb5f</rdf:li> </rdf:Bag> </photoshop:DocumentAncestors> </rdf:Description> </rdf:RDF>
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 02 00 00 00 18 10 cc 64 00 08 44 c0 00 44 d8 10 18 11 0c 00 11 80 07 27 45 26 cd c1 08 0c c0 0d 49 80 48 89 a3 0f 29 fc 7f da 74 3f 3f 7a 3e bc 33 3b 3b de 5d f2 dd d9 4a c1 a2 b4 2c 73 75 69 47 d7 cb 99 ec e2 61 e6 c1 2d 31 d4 f5 d9 de f7 2a af e8 9c 55 4d 24 bb 2c f6 b7 cb b2 c7 2d 18 73 17 49 ce f4 f0 49 4d e5 52 0b 52 b7 55 40 17 aa be 63 d0 71 ac e7 5e 7c 57 d8 e4 cd 74 73 49 9b 48 34 d4 4a c8 2a b7 c7 a7 65 8f 45 07 4f 35 16 98 3c 9d de 5d 2a 6a 50 44 ac e0 74 61 62 b3 f4 6e fe 4e df b7 95 2c 4b 49 61 00 11 01 30 80 c0 80 c0 0c 0c 08 02 58 40 00 01 30 80 00 00 00 00 18 00 5c d0 04 b4 4c 20 30 35 4b 54 40 1a 49 2a 4f cb 5f 25 f6 75 fa e0 b9 d7 45 c9 d1 8d ed e6 bd e3 de 17 4a cb 74 f2 5d 4e f0 6b 9e be 66 74 e9 51 b7 3d 3d e2 f0 fa 1e 1a 6a 32 72 ea Data Ascii: dDD'E&IH)t??z>3;;]J,suiGa-1UM$,-sIIMRRU@cq^\|WtsIH4JeEO5<]jPDtabnN,KIa0X@0\L 05KT@IO_%uEJt]NkftQ==j2r
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 7b 97 af 8c 78 ff 00 45 a9 e8 e2 9d d1 8f 26 f9 df 77 d2 3f 53 f2 d7 8d a9 51 34 41 c1 f3 ed 63 cb e9 ef 7e d7 8f 13 5c a3 5c f2 2e 5e ee a1 b7 1e 40 ca 6c 55 3c b4 e5 75 bc 4e f3 de cb 61 0a c8 69 69 0d 26 86 a9 21 89 14 61 ad 3b 18 a7 66 aa 74 54 b6 fc 3f e2 74 d8 0f 47 13 37 3c e8 ae d9 a7 d1 b3 9c 5e 97 72 4d ee 9a f2 f4 bd 09 e6 71 d2 ed 74 77 78 ba 7b 6e 1e 7c b7 5e cf 69 5d c3 ce e3 c8 79 97 9a e8 ba 0e 93 2b e9 ed ae c7 23 a7 98 9a d3 4c d7 4c ea f4 79 8d 34 b6 cb 3c cf 46 91 5d 6b 79 71 ae 84 31 24 39 d4 21 ae 58 28 13 ea 75 43 e9 d7 67 b4 74 0d 72 d5 e9 9b 44 5a b6 a6 00 6a 6b 39 cf d5 9c 1e e3 5e 6a 59 7a 73 4b 0b 8c c7 4f 1d ae b2 a2 dd e4 eb e6 be 2f d0 47 e9 c0 b1 bc 0f 0f 67 ac 3e 97 e6 ca a1 15 26 06 8e 6d be 55 be 37 a1 d5 7d 4e 6a 1d b1 Data Ascii: {xE&w?SQ4Ac~\\.^@lU<uNaii&!a;ftT?tG7<^rMqtwx{n\|^i]y+#LLy4<F]kyq1$9!X(uCgtrDZjk9^jYzsKO/Gg>&mU7}Nj
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 5b aa d7 67 d3 d7 71 ed 71 8e 74 bb e3 99 d6 aa ba 51 39 91 9b 9b 3a 39 39 e2 7a b2 b5 cd d2 e8 ba 27 89 e8 60 bd af 3b 41 35 b2 f2 79 e8 7d 7e b9 30 b6 3e 77 1b de 9f 7e 98 2f c2 dd a9 95 2e 02 06 c4 b2 a4 d8 47 91 86 e3 89 a6 32 1c c7 c5 e3 c8 fa 5b 25 47 7b f9 0f 0d b8 be 6d f4 1e a2 6b 7a cd b7 af df 9e c6 30 cf 6f d1 71 cf 8c 9c e6 0b ae 8d e1 5d b6 38 64 fd 7d 73 7e ae d8 4e 97 79 8e 71 a2 2e 31 3a 3f 85 c1 79 df 55 5e 9f 5e 3f 9e 1e e5 aa ad d6 6f af 5d b7 06 0f 22 bf ae db e9 d6 18 69 3c ac b2 9e 9e f5 1a dd 8e 1b 65 7a 4e c1 96 1c fe f4 bc f3 f9 ba 57 89 e6 9b d6 17 66 e5 84 72 ef a2 ef a9 d2 ab 29 d9 64 aa 37 73 62 ef f3 76 1c fc b4 3a eb 75 ce ea fa ee 2d e3 d1 7e 7f 3b 1b 9e 65 ed 76 4e 8d 74 59 6b ae e3 e6 e2 1e ac c4 d0 9d 2d d9 97 14 cb 9a Data Ascii: [gqqtQ9:99z'`;A5y}~0>w~/.G2[%G{mkz0oq]8d}s~Nyq.1:?yU^^?o]"i<ezNWfr)d7sbv:u-~;evNtYk-
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: b8 82 ce ef 8f 22 28 88 4e 6f 81 75 7f 91 57 ac df 29 19 89 69 41 93 90 54 a0 15 e6 01 7b 44 a9 8d 73 1d 14 df 1a ad 6c 48 55 f8 0b 9a c7 96 18 2c 4b 61 e4 27 1e b3 7f b5 bd dd 1f b2 2b 38 5e 45 07 7a 20 ee 9c 30 9e ee c1 0e a4 22 dc 26 f6 41 38 77 43 dc 80 56 f2 12 19 59 b9 7b 5c 41 2e 24 a6 48 e6 ac ad c1 c2 a8 3f 19 db e5 14 47 b0 f5 65 1f e2 c7 4c 22 30 09 09 b1 90 0b 70 be 47 04 08 22 4c 00 67 4d 7f 92 2e 57 a4 f0 6c 2c 54 41 13 13 90 d1 85 8c 88 b0 9d 90 1b 69 e0 1b 4e 7a 91 8e 71 20 81 f1 b4 8f c8 26 3c 91 25 87 f9 08 72 59 23 1a 23 c1 53 c0 7c a3 80 bc 56 bd 2b 08 64 be 2d 63 80 36 bc 09 d9 c8 c9 16 11 6a 98 7e 31 b3 bc 7e c8 fa 01 41 cb 2a b9 52 38 61 ee ec 10 e8 0f 42 3a 07 27 7b f5 dc 3f f0 a2 cc bf d0 06 56 e1 ff 00 f3 d5 18 63 3f 28 e1 2b 28 Data Ascii: "(NouW)iAT{DslHU,Ka'+8^Ez 0"&A8wCVY{\A.$H?GeL"0pG"LgM.Wl,TAiNzq &<%rY##S\|V+d-c6j~1~A*R8aB:'{?Vc?(+(
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 01 8e 42 f6 45 12 85 be 2d 32 2f 75 2d e7 b5 f5 ac b6 60 46 57 8a c2 7d 86 b5 3a d3 93 25 73 85 88 84 82 4a 6f 0c a6 cc be 06 87 00 c0 13 67 31 af 9b 28 f8 b8 48 c2 d4 1e ac d5 2f 46 56 b1 f3 38 bd 0a b3 39 41 aa 99 e2 b6 a1 b1 98 99 80 f9 00 4d 93 2e 18 44 76 0c 08 af 1e e4 64 f8 f9 0b 65 c2 2a 53 9c 10 49 7e 72 d0 30 8c 0d 26 38 bc 55 86 b8 81 ad 0f 4d 85 ac 1e 00 38 00 8e 4a 67 bc ad 0d 6f c4 40 fd a6 17 34 33 25 a0 a8 d9 80 e7 00 9e 3f 18 ac b0 90 40 04 2b 13 32 27 44 f0 f6 cb 10 29 a0 b5 de 7e 49 f1 87 0a ee 31 be d5 61 20 a5 f8 4c d1 84 46 7d 58 f5 df 77 81 96 e0 0a 39 25 c3 36 4e 01 d6 3c cc 96 1c c2 e7 39 c5 90 0f 20 e6 62 9c ac 62 93 61 90 67 78 2d bd 23 63 fc 9c 62 7b e2 79 b2 f4 cb 81 4d 6b c9 34 60 49 65 81 45 74 b4 8b 46 42 ca af 91 0d 50 5f Data Ascii: BE-2/u-`FW}:%sJog1(H/FV89AM.Dvde*SI~r0&8UM8Jgo@43%?@+2'D)~I1a LF}Xw9%6N<9 bbagx-#cb{yMk4`IeEtFBP_
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: a3 f0 bc 73 25 67 e1 d2 b7 0e 3f d1 01 d0 7b a6 b3 00 b4 84 5c 50 ee 9d 84 e7 90 9a fc ac ab 07 09 aa 2c f9 7f 6c 2c 26 e1 1c 84 d9 5d 87 48 5c 9c 09 5f db 01 77 40 9c 7c 85 61 4b 17 83 1a 13 d9 de 36 2f 3c 0c 3b 00 14 d7 94 1e ee 99 41 c9 85 39 fd ac 7b a1 e9 c7 4b 2a 20 73 1c 78 71 4e 47 a8 3d 08 ef 11 ed d0 85 ad 6f 7b 0e c4 67 d0 7b 2a 23 11 5a 39 7b 3b 3e d0 c1 01 10 b0 b0 b0 b1 d3 0b c5 78 ac 23 d3 0b 0b 0b 0b 08 00 83 48 01 99 4e 8d 3a 16 01 27 b9 6e 53 40 52 b4 64 b7 b4 ad 00 09 42 9a 3c a0 14 4c 2d 44 2c 2c 94 08 08 c8 02 2c 4c 67 70 48 58 44 a6 b8 ac 04 18 b1 85 e2 13 d8 13 46 48 fc 51 71 72 12 76 ce 11 ee b2 41 f3 71 45 fe 22 39 72 83 b0 7e 5f 35 37 40 56 7d 19 58 4f 19 41 37 dd c9 e9 dd 0a 05 35 dd 18 3a 13 d3 5e dc 32 fb b1 1f 4c f4 77 b4 2d Data Ascii: s%g?{\P,l,&]H\_w@\|aK6/<;A9{K* sxqNG=o{g{*#Z9{;>x#HN:'nS@RdB<L-D,,,LgpHXDFHQqrvAqE"9r~_57@V}XOA75:^2Lw-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	62753	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:32 UTC	740	OUT	GET /wp-content/uploads/2022/07/hotel-mobile-06-copiar.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:32 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 26 Jul 2022 14:38:04 GMT Accept-Ranges: bytes Content-Length: 687611 Content-Type: image/jpeg
2024-05-28 05:15:32 UTC	7957	IN	Data Raw: ff d8 ff e1 28 91 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 00 00 00 01 01 00 03 00 00 00 01 03 a7 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 32 3a 30 37 3a 32 36 20 31 31 3a 32 39 3a 31 35 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: (ExifMM*(1!2i$''Adobe Photoshop 23.4 (Macintosh)2022:07:26 11:29:15
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: da e7 c3 cc 06 b8 39 ee b1 ae 60 7b 7f 3b 77 e7 3d 6b 0a 5a 46 bb 81 ec 21 b1 f3 da ac c3 2e 03 11 ea e9 fd 65 b3 c5 9b 88 d0 3b 9f dd 46 33 18 4c 8c 77 12 7c 48 fe e4 6a b2 1a ef f0 44 4f 89 07 f0 db b5 26 e3 b0 73 27 cc 36 11 a9 a4 40 d2 c8 f2 0d fc a9 c7 36 1e 92 ff 00 a4 b4 61 cd d8 ff 00 cd 70 fa 9f 47 a5 f7 32 f7 37 6b 1f 7c 33 71 24 1a f6 be cb 2b 7e d0 ef e6 9a 3f 77 e8 2c 8f ad 98 58 f5 b9 a2 9b 9a f6 81 ad 62 5c f6 9d b2 ef 51 e1 be 96 ca fd bb 3f eb 8b 6b eb 4b cb 9f 8f 5e 3b 08 b9 9b 83 2d 0e 3b 86 e1 ee 1e dd 9e 9f 1f 49 9e f5 c7 db 4d bc 3d b1 ed da e0 1b a8 69 3c 40 f6 b7 77 bf fe b6 b3 72 cf 19 94 c0 1a 7e f3 31 13 88 8d ee f4 d5 e5 b4 74 3a f2 30 eb ae b2 e6 1c 7b 71 09 0f dd 5c 7a 7e b3 d9 15 7a 76 ef 2d fb 13 eb f5 76 7f db cb 0f 01 df Data Ascii: 9`{;w=kZF!.e;F3Lw\|HjDO&s'6@6apG27k\|3q$+~?w,Xb\Q?kK^;-;IM=i<@wr~1t:0{q\z~zv-v
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: b5 d7 5b 90 6b 8d 48 67 f4 76 69 ef 6b ec 7f a4 c6 33 fe 31 68 fd 51 c4 e9 ed c5 3d 52 ed f8 d9 b6 39 ec b4 06 6d de 04 3b d4 d7 e8 ee ff 00 09 e9 32 bf 52 ca d6 6d f9 58 de 80 a9 85 af c7 17 34 1c 86 9d c4 10 5a da 83 b6 fb ad ad fe af e6 7b fe 87 b1 75 5d 3f a9 5b 6e 33 00 7b 9a d0 3e 99 3a c1 fc e7 41 f7 6e 4c e4 41 32 26 ae bb d7 ab fa ff 00 a4 cf ce 55 44 1d 3b 6f fe 2f a7 85 7b 73 32 aa 60 b0 d6 fa da e3 ed bd f2 2b da 3f 3d cf f7 31 11 bd 41 a5 c5 8f 6f da 67 c4 46 a3 dd 2d fc ef 6a 94 b5 b6 1b eb b5 a6 f6 8f 68 7b 77 30 f7 fd ed 8c 7f f2 f6 a1 0c af 63 ad b1 de 9d a7 57 57 06 1f fb ae 71 fa 6b 50 08 c8 69 0f b2 ee da 04 98 9d 64 8e aa f2 6c c9 7e 45 0f a7 0f 1d be e2 d2 49 0e 3f 4b 75 74 fd 2f e4 ef 53 7e 37 ad 5c de fc 73 66 a6 46 a1 bd ff 00 9c Data Ascii: [kHgvik31hQ=R9m;2RmX4Z{u]?[n3{>:AnLA2&UD;o/{s2`+?=1AogF-jh{w0cWWqkPidl~EI?Kut/S~7\sfF
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 66 39 36 61 61 30 34 2d 34 37 62 65 2d 39 33 34 32 2d 62 31 34 65 2d 62 36 34 35 36 36 32 33 30 39 30 30 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 38 2d 31 32 54 32 30 3a 35 38 3a 35 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 62 63 34 66 30 65 37 64 2d 66 30 39 37 2d 34 39 32 31 2d 62 63 66 38 2d Data Ascii: stEvt:instanceID="xmp.iid:8f96aa04-47be-9342-b14e-b64566230900" stEvt:when="2021-08-12T20:58:55-03:00" stEvt:softwareAgent="Adobe Photoshop 22.0 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:bc4f0e7d-f097-4921-bcf8-
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: b1 a4 a2 c8 fa 18 7c 92 a8 7d 01 4b 56 63 57 76 b0 4a 3b 4d 71 be ff 00 a6 d7 ea b6 3d fe 7a b4 49 c9 26 62 49 88 60 26 26 57 ee 6d f6 5e da fa 1a 2b 56 b5 9c 7a 2e 12 20 55 f3 94 ca 58 cc e0 17 54 49 9d b9 11 31 58 b9 e5 b5 cd ed 51 1a 2d eb 8c eb cb ef e7 2f a4 32 c7 20 bb 82 64 93 3a c3 0d b4 b4 8b 57 a7 ba f5 ed b7 f6 13 cd b9 41 e7 3b af a4 5d e2 3d 9b c8 57 d1 5f 8d 2f 1e 3f bd 67 f7 ad 0f ca 2d 07 1b bd 15 9d 67 8f be f0 60 5d 58 1f 5b 79 d6 a7 41 63 a3 72 57 7e cd a1 b6 a0 34 ce e9 37 f2 c3 d9 7d 8c 45 5b 0a dc 9f a0 6f 5c 38 0c 69 92 0d c8 40 75 45 fc b9 cb 00 da ed 89 7b c9 77 6a 93 d4 e7 2e 5c e8 88 35 ba ad 14 df f2 87 8e b6 5f a4 da 1d c0 27 2d e8 06 50 da 7a f4 2a 68 cc e9 a2 9e 2f a0 de 68 3f 9d fe d0 02 b9 0c cb 93 4a 21 a1 ee 36 92 e4 af Data Ascii: \|}KVcWvJ;Mq=zI&bI`&&Wm^+Vz. UXTI1XQ-/2 d:WA;]=W_/?g-g`]X[yAcrW~47}E[o\8i@uE{wj.\5_'-Pz*h/h?J!6
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: da c8 e4 e7 33 73 61 12 56 15 9f 8b ad f2 71 c4 5a 5e 7b 62 ed 19 61 db 7f 83 94 fa 18 7d 23 b0 50 69 04 89 95 86 b3 73 d3 29 ac 9c b5 6a 83 1b 11 61 27 cf 33 58 a1 62 5f af 75 27 37 1f 6c c6 f4 93 c3 ea 9b 40 4f 89 9d 27 e7 58 a7 10 ed f0 10 ab 0c 47 c0 bd 95 d4 e5 d0 b4 e2 55 2d 01 e2 47 6c d1 7d c8 6f 91 81 39 b6 85 e1 3d 33 80 9e 90 44 c8 94 2a b3 ab d9 e4 82 34 e9 84 39 6d ce 89 5b e8 a9 f3 cf f9 e1 ac 77 bc 48 f5 b2 9b 38 a3 12 5c bc 8b 94 d3 f1 fa 7d 3a 16 1c f8 e0 f7 5c be 4a 6d 9f 99 e8 33 da 1d b6 fa da b1 ca 84 c5 7a f3 ad 86 9c d5 c3 68 cd 78 bb 45 20 f8 c9 96 9e 62 57 4c 3d d9 9a 65 ed 1e 57 10 7c ae 2c e3 e3 94 50 dc 74 50 77 36 ed 3a 53 76 a7 65 25 dc 28 fa 04 2a 43 e5 7b 47 99 fd 62 ae aa 59 ab c1 35 17 5c 46 3b 49 36 5f a9 b7 98 1e ae 85 Data Ascii: 3saVqZ^{ba}#Pis)ja'3Xb_u'7l@O'XGU-Gl}o9=3D49m[wH8\}:\Jm3zhxE bWL=eW\|,PtPw6:Sve%(C{GbY5\F;I6_
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: b8 b4 e3 a0 fd f9 30 4a 8d 65 77 dd fe c5 8e ba 10 26 4f 3c 8f 2b 18 0e ec 27 7a 43 58 6d b5 ef 53 17 0c f9 df e6 a4 f1 ea 7b 09 de e3 b8 ee c9 05 0e 2c 68 af 9a 1d 65 a5 e4 e2 ce 71 73 cb 0a 64 ad e5 98 8c d7 8d ca 93 2b b3 d6 e1 a8 55 78 35 13 69 91 20 b2 80 35 10 88 61 a3 41 24 41 6d 31 b3 bd 22 d7 71 31 2b d7 c8 ee ca 87 53 c2 09 30 84 57 37 1a 0c cd c4 b5 9e 2a f2 92 b9 ce 7f 07 dc 4a cc 59 c3 cf 0e 43 1a 3d 2b 08 ed 86 5c ca 78 e4 b5 0b b5 c1 52 8d 06 a2 37 3c b3 ac 4d 86 19 28 1c 4e e9 f2 6b aa c1 0f a5 ba 31 68 fe 4c a2 aa fd 9a fa 56 ed e9 8b de 9d 13 95 a3 ce 0f 5a 29 60 b4 97 d1 5f 62 b6 55 a6 d3 9a 7d e5 89 df 8c e1 48 5a e6 63 bc dd e8 95 1d ba 8e cb 4c 30 35 2c ca 8e 8b 02 13 f7 1c fa 76 b7 de c6 53 33 65 02 85 18 17 b3 bb ea f2 32 50 7d e8 Data Ascii: 0Jew&O<+'zCXmS{,heqsd+Ux5i 5aA$Am1"q1+S0W7*JYC=+\xR7<M(Nk1hLVZ)`_bU}HZcL05,vS3e2P}
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 42 6e f6 b4 7c ac 00 97 83 a0 97 7e 58 fa c4 e0 72 7a 0d bc 43 ce c4 46 a7 04 eb eb 12 82 d8 4b cb ab 98 1e ad 07 46 3a 3d 61 98 8b 5f c3 e9 35 6a cc 54 c3 f5 4e 7a 66 41 4d 30 fc af 72 ce fe d6 38 75 92 07 fa 39 db 85 28 4e 7b f1 fb e4 f0 34 7c 49 1d a5 9a a8 eb e4 cd 6d 91 c5 0d db 51 19 e6 9e 3e 71 cb 9d 8f f5 69 be 44 8b e6 52 37 c7 c5 72 69 d6 96 fc af 95 f5 7b 9f 29 e7 20 6d 3b e0 fe 97 a5 db 09 01 69 24 a3 64 ba 77 5c ae 29 8a c7 11 58 45 56 9e 9d 07 8f 8c 58 36 42 ae 9b 78 74 7d 3e 28 9a a1 19 25 0c 98 00 b9 26 04 9c 01 ad 8d 2a b7 9a 24 cc d8 0c ca ac 24 d8 b4 48 bd aa b9 48 66 a2 74 95 a9 71 ac ad 63 e4 b7 1a 93 d1 07 df 11 02 e5 84 90 90 a1 a9 7e e2 c0 27 62 02 45 71 1d cc c0 51 e3 03 50 70 8c 0c 3a 89 4b 0f 14 55 6b 96 5b fc b4 49 8a f1 03 46 Data Ascii: Bn\|~XrzCFKF:=a_5jTNzfAM0r8u9(N{4\|ImQ>qiDR7ri{) m;i$dw\)XEVX6Bxt}>(%&*$$HHftqc~'bEqQPp:KUk[IF
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 49 85 81 22 e2 ab f4 d9 44 06 51 19 32 b5 ec 96 b5 64 de b3 a5 24 0a d5 de cf 6c d5 68 29 e2 b7 4d a0 b2 2e 6c 63 a8 56 3a 59 b2 ab 3c 79 f2 94 6b 77 9e e2 ac 47 02 a2 9e 67 72 df 97 0d 21 40 05 e0 8f f2 11 b2 e4 68 a4 ec 00 7b 19 4b 2a 60 5c 44 53 74 d4 af c6 85 7f 24 4a 8e b7 a2 2b bb 5b 59 c4 4e 05 c3 42 b8 90 4e b1 a6 26 41 c4 bd 16 6a 1d e5 5b 60 ca 2b 96 e7 69 32 7b 0b 77 76 bb 8d 8f 0a 32 91 f4 9b 79 de 84 34 e1 5c b6 ae ba 33 b4 5b a6 29 ad 07 20 63 15 84 87 cc 6c 71 0e 09 b5 28 03 c2 80 16 69 51 30 7e 29 f0 ab 02 65 7e b8 9c c6 48 47 36 25 45 37 f1 3b 22 02 42 b8 ef 4d 6d a7 2c c7 75 32 28 31 73 3e b2 65 aa 4b 19 33 5a dc 15 ca 53 15 c0 4a 22 59 9a 4e a6 5a 30 08 85 67 e7 14 8b 8a d6 48 9f c3 57 4e aa 93 78 0b e3 54 62 d4 b0 aa 67 3b 52 dc 45 9f Data Ascii: I"DQ2d$lh)M.lcV:Y<ykwGgr!@h{K*`\DSt$J+[YNBN&Aj[`+i2{wv2y4\3[) clq(iQ0~)e~HG6%E7;"BMm,u2(1s>eK3ZSJ"YNZ0gHWNxTbg;RE
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: cc 2e 5d 57 a4 13 05 5c 1d 41 45 23 a4 9b 9a eb 99 35 1b 0f f1 ed 6c 96 73 94 63 5b aa 22 93 31 f5 32 27 a0 18 7e 4a e9 b8 84 74 b9 5c d6 cd e3 31 59 5f c9 8d 6e 59 2c 96 67 2e 7c 80 d4 72 4a 1a d9 4a 94 6a 84 23 19 86 a6 75 6d 91 5f 28 9b 3a 2e 58 a9 cc a6 ae 35 76 89 c1 03 90 c5 20 f0 09 9c 03 03 8e 1f fa 92 22 d3 89 ac 8c f4 c1 9a 27 35 35 f9 0c ad 76 16 e9 b6 6c e0 0e ea a7 5d 55 c1 a6 4a 56 e0 fe 54 4c 2d d3 31 f1 a9 c4 82 89 84 8a b6 74 9f 8a 0a 94 02 61 f2 28 a5 da 9b 3b 40 ad 51 d4 15 15 56 5d 65 58 2a 89 48 2d ff 00 54 99 79 14 51 f3 35 a1 15 bd 5d 72 dd 6f 54 35 4e 99 0a a1 a4 26 1a b5 4e cb b0 99 9d 33 3b 49 65 08 cc 54 c0 89 e3 1c a0 60 c6 ad d4 1c 6a c5 63 82 b1 c7 0c 3c 4a 60 9b 96 c9 8e 48 90 9c ba 66 07 2a cd 57 2a a4 6c 73 84 0d 4c 14 18 Data Ascii: .]W\AE#5lsc["12'~Jt\1Y_nY,g.\|rJJj#um_(:.X5v "'55vl]UJVTL-1ta(;@QV]eXH-TyQ5]roT5N&N3;IeT`jc<J`HfW*lsL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	62754	50.116.87.228	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 05:15:32 UTC	742	OUT	GET /wp-content/uploads/2021/12/Vista-aerea-02-1536x1151.jpg HTTP/1.1 Host: www.campobahia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.648733769.1716873252; _fbp=fb.1.1716873256113.429051690950261479; ouibounceBannerBottomShownNumberOfTimes-9255=0; pll_language=pt; _ga_J2E85P7SPT=GS1.1.1716873252.1.1.1716873320.60.0.0; cookie_consent_level=%7B%22strictly-necessary%22%3Atrue%2C%22functionality%22%3Afalse%2C%22tracking%22%3Afalse%2C%22targeting%22%3Afalse%7D
2024-05-28 05:15:32 UTC	235	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 05:15:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 10 Dec 2021 20:23:27 GMT Accept-Ranges: bytes Content-Length: 642018 Content-Type: image/jpeg
2024-05-28 05:15:32 UTC	7957	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 83 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 Data Ascii: JFIFHHExifII*,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.1634
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: c9 16 6a 96 f7 d4 c8 8e e4 7e 35 5c 7e 98 d5 88 e7 a7 4c 35 54 b2 2a f6 c4 6b c9 fd 7c 6a a8 00 91 ee d7 5b 99 4f 07 0d 9e e0 0d 06 75 9d 47 5b 1c eb be 15 99 63 27 2a b2 8c 30 1f 96 bb fa 8d fd c3 7f 5e da ab 1a e0 15 32 4b 23 67 f1 48 72 75 d9 61 b8 63 c7 19 3e 34 68 16 c9 9a 70 4e 17 3c 79 3e 75 cf ac 70 06 72 49 e7 51 14 93 19 60 71 8e 3e fa e3 95 00 8f eb ae a3 b9 16 7d 52 31 8e df 9e bd f5 c8 ee d9 ff 00 6d 54 2c 47 ce 35 e6 47 60 39 3e 34 6a 80 d9 73 d7 dc 3f 16 47 7c fc 6b c6 94 00 08 62 da a9 ea 05 fe 6c f3 f3 ae c4 aa 00 00 31 f9 24 eb 8e b2 d2 b6 e8 c6 7b 77 d7 a9 29 e0 30 f3 c6 35 57 d4 dd c6 3e c3 07 5e c6 dc 1e 71 ce 35 da 3a cb 6d 29 c6 4f 03 5e 09 9c 1f 6e 00 f9 d4 0c aa ed c9 60 33 8c 03 c6 bd d8 14 60 12 07 dc e7 5d 67 26 4d bc 80 0e 48 Data Ascii: j~5\~L5Tk\|j[OuG[c'0^2K#gHruac>4hpN<y>uprIQ`q>}R1mT,G5G`9>4js?G\|kbl1${w)05W>^q5:m)O^n`3`]g&MH
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: ea 6b b3 4a b4 d3 7d 21 94 9c ef 07 0a 14 79 23 e7 bf 1a 6f ea a4 fb 47 29 04 a1 ac a5 8e a2 24 8e 87 d0 59 95 53 d4 38 1c e7 dc 7b 6a f5 1c 92 db c4 d3 41 44 ab 86 67 8e 43 21 1b d5 7e c3 82 31 f3 f1 a8 2b ef 36 db 93 fa f2 6f 89 d5 42 a0 62 76 ab 0f 38 fd 73 8d 2b d6 5f a3 e9 8a 8a 88 a5 51 3b 2b a9 da 84 8c 86 04 fa 80 03 80 a4 8c 63 be 8f ca e6 ea 03 a9 9a 45 b6 ff 00 68 2d 04 a2 b6 8c 64 80 c0 f7 1b fb 63 3e 3b e3 44 a9 6a 29 ae 69 e9 6c fa a7 89 9b 2f b7 69 03 c2 9f 8c 67 f5 d6 3f 51 d5 b6 7b bf d0 25 4d b2 67 a8 70 ad 81 32 aa a8 c1 1b 09 1f cb ce 40 ef ab d1 f5 34 54 d2 54 d5 af ef 0d f4 f0 c6 25 8d 64 c8 11 8f 69 03 3c 96 1e 4f 8d 53 e4 92 d3 41 e4 69 b5 96 fb 7d 28 9a 6a f5 89 e3 f4 c4 4d 0b 36 72 54 f0 73 df 3a f6 aa cf 49 2c 0a 8a d0 d3 bc 7b Data Ascii: kJ}!y#oG)$YS8{jADgC!~1+6oBbv8s+_Q;+cEh-dc>;Dj)il/ig?Q{%Mgp2@4TT%di<OSAi}(jM6rTs:I,{
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 93 62 4d 1d 52 a4 a0 ed 00 3b 6e 23 9f f0 08 c6 a1 66 15 79 2e 91 28 e0 b4 60 ee 3c 00 09 24 79 c0 c6 3e e7 49 10 f5 05 58 96 9e a2 86 61 49 55 0b 23 ec 46 c0 45 23 3b 48 ff 00 4f 24 67 45 1e ba 6b f4 28 d1 5d a5 a6 64 c8 74 24 21 1c e7 6e 40 f9 ff 00 3a a4 3c 8a 55 24 75 36 1a 9a be 92 db eb 2d 44 f1 c7 1a 2a ed 8a 0f 71 da 46 41 6f bf fe 35 6a 07 59 29 16 b6 28 23 99 64 c1 49 a3 ca b4 40 77 c8 3f 96 3f 5d 2a d1 59 6e cc 5a b6 3a 99 22 c7 0d 34 81 65 52 73 d8 e3 fd f4 cd 1d d1 ad 91 41 47 5f 3f d4 cd dd 67 11 ed 51 9f 95 1d c7 6e 34 65 e4 c6 11 e4 d6 83 d1 1a 48 60 90 66 38 a0 ab 2a d1 47 13 a1 3e a2 9f c5 9c 79 c7 3f 96 ad c9 69 99 92 79 61 57 8d 67 8c ca d8 fc 31 90 39 50 0f db fa eb b9 2a 1a 68 0c 90 44 b5 8a a7 f1 44 36 98 cf 63 9c f8 39 d5 59 aa ee Data Ascii: bMR;n#fy.(`<$y>IXaIU#FE#;HO$gEk(]dt$!n@:<U$u6-DqFAo5jY)(#dI@w??]YnZ:"4eRsAG_?gQn4eH`f8G>y?iyaWg19PhDD6c9Y
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: d7 29 aa e4 69 9e 43 ee 18 23 3f fc f3 ad c9 b9 53 5d 13 da 3e 97 76 4a e4 90 38 27 51 24 dc 70 78 f3 a9 a9 95 da 90 72 7b 86 6c 11 c8 19 d1 4b 28 b5 53 c5 53 2d d2 92 2a 80 57 10 a3 ee 52 5b 8c ed 23 80 46 7c e9 a7 3e 31 b4 80 bb 22 ac b3 dd a9 69 d6 4a ba 49 95 15 77 ae ef f4 11 9c e3 c8 fb ea d5 86 8e 86 aa 9a 49 5e 8e a2 b6 aa 25 67 31 24 e1 15 97 19 c0 03 24 9c 7c 68 84 fd 6a 2e 71 4f 68 ac 72 29 4e 12 9a 68 c8 dd 16 07 b4 1c 8f 90 01 3c 71 9d 0e a0 af 5b 2d ad 69 20 32 24 ee cd 34 a5 3e 40 c6 33 f0 3b eb 3c 67 91 a6 a6 b6 3e ac 73 b5 f4 b5 b9 ec eb 35 55 35 cf e8 f6 fa fe 8b 0c 3e dc e7 03 9d dc 7e 5a bb 6a a0 e9 e8 28 31 4e 9e ac 12 c8 e5 16 b5 73 ea f1 95 29 db 68 c7 7c f7 3a ce 4f 53 d6 25 54 55 b4 d3 4a d5 a8 30 ac e4 b1 c7 23 fa 7d b4 46 a6 fb Data Ascii: )iC#?S]>vJ8'Q$pxr{lK(SS-*WR[#F\|>1"iJIwI^%g1$$\|hj.qOhr)Nh<q[-i 2$4>@3;<g>s5U5>~Zj(1Ns)h\|:OS%TUJ0#}F
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: c6 9a 6e b3 52 d9 29 a1 b6 a5 3c 35 94 6c 9e a2 19 48 69 14 1e 4a b7 6d 74 92 5a 41 e8 fa c9 77 79 69 9e 67 4c 56 2e 18 b3 8c 39 5e 00 c1 1f ae 80 de 2e f2 5c 6a 36 be 14 ab 9c 1c fb b1 f7 d5 7a 8e a9 a8 55 30 45 85 44 f6 ae de c0 0f 03 4c 34 17 7a 0b ed be 3a 5a fa 68 5d d5 49 59 11 40 90 31 1f 3d f5 15 17 0f b5 1d ca c0 b0 3c 82 2c 65 8e 3c 00 33 a3 1d 1d 75 34 b5 b2 86 58 e5 95 f3 12 12 99 e3 b9 3c f1 f6 d0 ea da 58 22 8d 45 33 c9 20 04 02 c5 86 d2 7e 31 dc 6b 8a 7a 7f a1 9e 66 49 44 8e b2 26 76 f8 52 3b e7 c7 90 74 d2 4a 71 0f b1 f3 f7 9c 69 48 ef 58 a4 d1 39 28 23 64 02 34 3f 9f 70 3f b7 3a 12 6e 96 8a 4a 0f 56 9e d9 71 a5 8a 29 0b a5 44 44 98 95 fe 40 c6 31 f6 27 40 ee 57 3a 50 16 91 a5 0a 88 a7 3b 58 95 61 f6 3d f3 9d 05 8a e3 51 56 eb 4a 2b 25 0b Data Ascii: nR)<5lHiJmtZAwyigLV.9^.\j6zU0EDL4z:Zh]IY@1=<,e<3u4X<X"E3 ~1kzfID&vR;tJqiHX9(#d4?p?:nJVq)DD@1'@W:P;Xa=QVJ+%
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 13 9d ae 48 c7 bb 1e 34 92 c5 4a d1 dc 86 7a 4a 0b 0c cd b2 9c 53 cd bb 22 49 2a 8e e6 6e fc a6 78 1f db 54 59 2a 68 e6 a8 4b cd c1 d6 de 70 90 c9 00 ca b9 39 e0 03 ce 71 a5 fa 30 95 b5 4d 4c cf 8a 99 1f db b0 67 f3 00 ea cd ca fd 59 4b 49 15 a1 e2 11 fa 0e d8 67 5c e7 9e 08 cf 63 f7 fb e8 fc 2f 97 76 33 2d dc 0f fc 31 55 0b 2d 15 42 41 2a ef 49 64 f6 b9 3e 55 bb ff 00 4d 7b 6c 95 e2 b8 3a 7d 4a fa 12 83 2a 52 96 f7 39 e4 e2 36 e4 02 3e 0e 35 4a db 75 7b 95 24 b6 7a d9 73 04 c7 72 bb b7 fd 37 1c 83 93 f7 d4 76 aa 4a b9 ad 82 25 a7 a6 71 14 a6 54 a9 8c 86 92 9d 95 b9 2e 07 3b 0e ba 50 a8 d3 ec 01 28 fa 9e 39 91 73 eb 42 98 c3 3a 8d cc 87 f9 4f e5 f2 35 4e eb 54 93 c5 25 5c 92 19 eb a4 f6 31 3c 70 47 07 23 1c a9 1f df 5e d0 2c b3 dc a7 96 99 54 7a 67 7c 88 Data Ascii: H4JzJS"InxTYhKp9q0MLgYKIg\c/v3-1U-BAId>UM{l:}JR96>5Ju{$zsr7vJ%qT.;P(9sB:O5NT%\1<pG#^,Tzg\|
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 93 73 21 1e d9 31 80 da a4 b2 e4 e0 0c e3 f9 b4 c7 77 84 57 46 97 1a 70 9b 5f 3e ac 0b e1 b1 cb 01 f7 ef 8d 2d 99 15 5f da a4 03 fd b5 b2 04 d8 7f a6 2c b0 5f 65 71 3d 62 52 a4 3c b9 50 59 dd 7f ed 1e 4e 9a ea bf 64 57 4d d1 bd ae b2 2a ca 49 48 f7 4c 3d 09 51 4f 92 1b 8d 28 58 28 25 82 33 79 9e cf 5f 57 6d 8b 2d f5 10 bb 44 a8 e0 f0 db c0 3c 7e 5a 9e 4e a3 a8 ae 9e 59 a5 96 a2 a5 0c a2 46 8e 49 89 3b 47 60 4f 73 f9 ea 53 52 e5 f5 63 29 24 b6 36 5f bf 64 ad 47 02 49 47 5f 14 6d 80 65 5a d6 c6 0f ca ba f0 47 d8 e3 4a 17 de 91 b9 74 e4 49 3d 6c 54 f2 52 3c 9b 12 a2 9e 71 22 31 ef ce 39 19 fb e9 b6 c9 fb 4e 96 96 78 a3 a9 b7 ac d1 cc 02 b3 ac ee cf 8f 9c 1c 83 a3 0f 79 fd 9e dc aa 67 79 ad 93 30 9e 40 f9 54 c0 66 ff 00 57 a7 90 46 3c f8 d4 e3 39 ad 48 66 93 Data Ascii: s!1wWFp_>-_,_eq=bR<PYNdWM*IHL=QO(X(%3y_Wm-D<~ZNYFI;G`OsSRc)$6_dGIG_meZGJtI=lTR<q"19Nxygy0@TfWF<9Hf
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: e3 42 8d 4c 67 97 e8 53 dc 24 aa 18 0f 8e e3 b6 40 04 f9 d2 92 ca 21 72 54 1c 63 c1 c6 9f 5f ac 8d f6 09 ed 97 3a 19 64 13 44 0e d5 7f fa 8c bf 84 b9 1c ed ce 0e 06 91 ee 76 8a db 3b 40 95 a9 83 34 5e b7 b4 64 6d c9 1c f1 c6 b5 f8 f2 75 c7 26 99 3c 91 bd a1 af a6 ef b1 cb 40 d4 99 71 58 ea 41 91 10 70 83 9d c4 fd bc fe 5a 2b 7d be 5b e8 e9 e2 68 6a e1 ae aa 60 1e 47 82 52 9e 8b 63 6e 78 e0 9c 7e 83 48 76 ca c6 b6 c9 eb c6 e0 b1 5d b8 04 e7 9f 1c 77 d4 ae 1a a5 e5 56 46 04 13 b8 e0 ed 5f 24 68 cb 0c 79 7f 03 a9 be 3a 1c ad 5d 6e 5e 45 47 08 90 a9 dd 11 03 dd db 1c 91 c6 7e 0e af 25 5d d6 3a 51 70 a5 8a a2 38 a4 73 ea 44 87 73 02 7c 93 f8 89 f9 27 4a 76 ab 24 d4 51 47 5d 39 98 c8 c3 f8 51 c0 84 ec 6c 02 37 e7 b6 34 e3 6c b8 54 5e ed de ad 39 58 29 a3 0e f5 Data Ascii: BLgS$@!rTc_:dDv;@4^dmu&<@qXApZ+}[hj`GRcnx~Hv]wVF_$hy:]n^EG~%]:Qp8sDs\|'Jv$QG]9Ql74lT^9X)
2024-05-28 05:15:32 UTC	8000	IN	Data Raw: 79 36 cb 5d 4b 11 2b bf bc ea 06 79 ff 00 bb ed fa e8 3d 67 ed 1a 5b 25 ae a1 58 19 ea 83 bc a5 dc 61 84 65 8e 36 af f8 ce bd 47 e4 41 24 c7 4d d1 9d fe d1 3a 06 4e 98 0c d4 f4 ed 32 3e 4e e9 98 48 02 f8 23 b7 23 4a f6 c7 fd d6 51 61 48 83 a6 cc 12 81 9d cb 63 3c fe bc 01 ad 52 9f f6 c2 d5 f3 c1 05 c6 8a 9e 4a 67 c2 8f 6e e2 41 1c 83 9e d9 e0 76 f3 a3 bd 35 d2 dd 2d 5e f5 9f 4d 6a 86 0a 92 85 a0 82 a2 10 24 89 c7 b8 32 83 e0 1c 63 5d f2 c6 7f 57 a1 5a bd 8a 9f 4d 55 d3 d5 35 42 e5 76 8e 6b a3 46 56 2a a1 14 e5 e1 46 1c 81 ed 20 1d 26 d7 f4 85 45 e2 76 ab b8 5f 4c f2 48 01 91 de 8a a0 96 f9 cf b7 5a af 50 5b 6a a4 a5 8a e4 25 9e 58 e5 00 bc ce a3 70 71 c3 ab 01 db 90 71 a1 50 d6 6d 84 27 ae 59 47 1f 9a ff 00 e7 48 a1 1c 6e d2 28 b1 da 31 ae ae 17 1a 4a c8 Data Ascii: y6]K+y=g[%Xae6GA$M:N2>NH##JQaHc<RJgnAv5-^Mj$2c]WZMU5BvkFV*F &Ev_LHZP[j%XpqqPm'YGHn(1J

Target ID:	0
Start time:	01:14:00
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:14:02
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:14:04
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:14:50
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4864 --field-trial-handle=2004,i,12466077518485305161,16769279718016346763,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Windows Analysis Report
http://www.campobahia.com/wp-content/uploads/2023/09/Pop-up-Novembro-Campo-BahiaPrancheta-1-copiar-3.jpg